MichaelFisher1997
b3521d6c02
Rely on cloud-init SSH key injection from secrets for access rotation instead of storing an authorized key in the template config.
58 lines
1.1 KiB
Nix
58 lines
1.1 KiB
Nix
{ lib, pkgs, ... }:
|
|
|
|
{
|
|
imports =
|
|
lib.optional (builtins.pathExists ./hardware-configuration.nix)
|
|
./hardware-configuration.nix;
|
|
|
|
networking.hostName = "nixos-template";
|
|
networking.useDHCP = lib.mkDefault true;
|
|
networking.nameservers = [ "1.1.1.1" "8.8.8.8" ];
|
|
|
|
boot.loader.systemd-boot.enable = lib.mkForce false;
|
|
boot.loader.grub = {
|
|
enable = true;
|
|
device = "/dev/sda";
|
|
};
|
|
|
|
services.qemuGuest.enable = true;
|
|
services.openssh.enable = true;
|
|
services.tailscale.enable = true;
|
|
services.openssh.settings = {
|
|
PasswordAuthentication = false;
|
|
KbdInteractiveAuthentication = false;
|
|
PermitRootLogin = "prohibit-password";
|
|
};
|
|
|
|
programs.fish.enable = true;
|
|
|
|
users.users.micqdf = {
|
|
isNormalUser = true;
|
|
extraGroups = [ "wheel" ];
|
|
shell = pkgs.fish;
|
|
};
|
|
|
|
security.sudo.wheelNeedsPassword = false;
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
btop
|
|
curl
|
|
dig
|
|
eza
|
|
fd
|
|
fzf
|
|
git
|
|
htop
|
|
jq
|
|
ripgrep
|
|
tailscale
|
|
tree
|
|
unzip
|
|
vim
|
|
neovim
|
|
wget
|
|
];
|
|
|
|
system.stateVersion = "25.05";
|
|
}
|