commit cc67b096fc7ac47a44b8d017285e30b28315d8e9 Author: DictXiong Date: Mon May 27 17:28:36 2024 +0800 feat: add init configuration.nix Signed-off-by: DictXiong diff --git a/configuration.nix b/configuration.nix new file mode 100644 index 0000000..a2e414e --- /dev/null +++ b/configuration.nix @@ -0,0 +1,55 @@ +{ config, lib, pkgs, ... }: + +{ + nix.settings.experimental-features = [ "nix-command" "flakes" ]; + nix.settings.substituters = [ "https://mirrors.tuna.tsinghua.edu.cn/nix-channels/store" ]; + imports = + [ + ./hardware-configuration.nix + ]; + + boot.loader.systemd-boot.enable = true; + boot.loader.efi.canTouchEfiVariables = true; + + networking.hostName = "nasp"; + networking.networkmanager.enable = true; + + time.timeZone = lib.mkDefault "Asia/Shanghai"; + + nixpkgs.config.allowUnfree = true; + services.openssh.enable = true; + services.openssh.settings.PermitRootLogin = "prohibit-password"; + services.openssh.authorizedKeysFiles = [ ".ssh/authorized_keys2" ]; + services.openssh.ports = [ 12022 ]; + systemd.targets.sleep.enable = false; + systemd.targets.suspend.enable = false; + systemd.targets.hibernate.enable = false; + systemd.targets.hybrid-sleep.enable = false; + + # Enable the X11 windowing system. + #services.xserver.enable = true; + + # Enable the GNOME Desktop Environment. + #services.xserver.displayManager.gdm.enable = true; + #services.xserver.desktopManager.gnome.enable = true; + + users.users.root.openssh.authorizedKeys.keys = [ + "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCUN7IXF4nlFcVfgHesgik3LIAiXlVMYJPm3yD13EVarQx5jqdBgk8Dwgkgf4rPO6MFpvIpinOyEO8zOS6HHQrCLZUv5yTFaDkUuB7eQ0EmpicGbmk9bHqj1HkOZxaobkpEfQUmFKYvkp4EexVw66sO0qfXvjHZ4H6yCAJLK5aUnKfgrE8tODzP82sU/mpJjW+Pq3uanNq754gaHwhxCIXG143/zp8qzBAeKe38xVqqDq9fTkG4hvzFvkRdS88i6l1z++0P3n0HGdOjtSg7P7fO7+7ZyPYr0gO5vB720Om/zxqPrGd9cicWi4P+aVKa+0ujWH/pqufWG6uCjKWHnBs7 sk0/piv/9a" + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHLYgVj+NPino6sOmahULN7SbAMaVAgzqPfDjz2S8zDv pc1/windows" + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKhS4voo3K/Dvzqckr0bouO1WkCI5XxswstHWnuuyKBz ltp1-bd" + ]; + users.users.nasp = { + isNormalUser = true; + extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user. + packages = with pkgs; [ + firefox + ]; + hashedPassword = "$y$j9T$Ei67I7VhQD6gF20/lNBUx0$jnrLqLNSJVCS959deKCamoOi4Q76nNeQ7/kDQCCABl1"; + }; + + environment.systemPackages = with pkgs; [ + vim zsh tmux git curl wget + ]; + + system.stateVersion = "23.11"; # Did you read the comment? +}