network/nix/nixos-module/server/defaults.nix

{ pkgs, ... }:
{
  boot.kernelModules = [ "kvm-intel" "pppoe" ];
  boot.kernelParams = [ "nomodeset" ];

  hardware.cpu.intel.updateMicrocode = true;

  time.timeZone = "Europe/Berlin";

  environment.systemPackages = with pkgs; [
    git
    ipmitool
    screen
    vim
    wget
  ];

  services.openssh = {
    enable = true;
    permitRootLogin = "prohibit-password";
  };

  # additional config for bare metal
  services.collectd.plugins.ipmi = "";
}