leon/nix-config
leon/nix-config
1
0
Fork 0
forked from c3d2/nix-config
Code Pull Requests Activity

Reorder

Browse Source
This commit is contained in:
Sandro - 2023-01-06 19:06:14 +01:00
parent c880195be2
commit 18a2bef4fc
Signed by: sandro
GPG Key ID: 3AF5A43A3EECC2E5
1 changed files with 15 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
config/default.nix
View File

@ -7,6 +7,9 @@ lib.mkMerge [
{ {
boot = { boot = {
cleanTmpDir = true; cleanTmpDir = true;
kernel.sysctl = {
"net.ipv4.tcp_congestion_control" = "bbr";
};
# recommend to turn off, only on by default for backwards compatibility # recommend to turn off, only on by default for backwards compatibility
zfs.forceImportRoot = false; zfs.forceImportRoot = false;
}; };
@ -77,20 +80,6 @@ lib.mkMerge [
# trust sandro to set good defaults in nixos-modules # trust sandro to set good defaults in nixos-modules
opinionatedDefaults = true; opinionatedDefaults = true;
services = {
gnome.gnome-initial-setup.enable = false;
openssh = {
# Required for deployment and sops
enable = true;
permitRootLogin = "prohibit-password";
};
portunus = with zentralwerk.lib.config.site.net.serv; {
domain = "auth.c3d2.de";
externalIp4 = hosts4.auth;
externalIp6 = hosts6.up4.auth;
};
};
programs = { programs = {
fzf.keybindings = true; fzf.keybindings = true;
tmux = { tmux = {
@ -120,8 +109,18 @@ lib.mkMerge [
vim.defaultEditor = true; vim.defaultEditor = true;
}; };
boot.kernel.sysctl = { services = {
"net.ipv4.tcp_congestion_control" = "bbr"; gnome.gnome-initial-setup.enable = false;
openssh = {
# Required for deployment and sops
enable = true;
permitRootLogin = "prohibit-password";
};
portunus = with zentralwerk.lib.config.site.net.serv; {
domain = "auth.c3d2.de";
externalIp4 = hosts4.auth;
externalIp6 = hosts6.up4.auth;
};
}; };
security.acme = { security.acme = {