52 lines
1.2 KiB
Nix
52 lines
1.2 KiB
Nix
{
|
|
config,
|
|
lib,
|
|
...
|
|
}:
|
|
let
|
|
inputs = config.dadada.inputs;
|
|
in
|
|
with lib;
|
|
{
|
|
imports = [
|
|
./backup.nix
|
|
./base.nix
|
|
];
|
|
|
|
networking.domain = mkDefault "dadada.li";
|
|
|
|
services.fwupd.enable = mkDefault true;
|
|
programs.ssh.enableAskPassword = true;
|
|
programs.nix-ld.enable = true;
|
|
|
|
nix.nixPath = mapAttrsToList (name: value: "${name}=${value}") inputs;
|
|
nix.registry = mkForce (mapAttrs' (name: value: nameValuePair name { flake = value; }) inputs);
|
|
nix.settings.flake-registry = "${config.dadada.inputs.flake-registry}/flake-registry.json";
|
|
|
|
age.identityPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
|
|
|
|
users.mutableUsers = true;
|
|
|
|
# Use the systemd-boot EFI boot loader.
|
|
boot.loader.systemd-boot.enable = mkDefault true;
|
|
boot.loader.efi.canTouchEfiVariables = mkDefault true;
|
|
|
|
services.fstrim.enable = mkDefault true;
|
|
|
|
services.avahi.enable = mkDefault true;
|
|
|
|
networking.networkmanager.enable = mkDefault true;
|
|
networking.firewall.enable = mkDefault true;
|
|
|
|
xdg.mime.enable = mkDefault true;
|
|
|
|
security.rtkit.enable = true;
|
|
services.pipewire = {
|
|
enable = true;
|
|
alsa.enable = true;
|
|
alsa.support32Bit = true;
|
|
pulse.enable = true;
|
|
};
|
|
services.pulseaudio.enable = false;
|
|
security.sudo.wheelNeedsPassword = true;
|
|
}
|