Initial flake commit

This commit is contained in:
2021-08-04 12:37:55 -07:00
parent 3b11040922
commit a5a6a02929
10 changed files with 122 additions and 46 deletions
+10 -10
View File
@@ -33,17 +33,17 @@ in {
secret-paths = [ "/state/secrets" ];
};
systemd.tmpfiles.rules = [
"L /root/.gnupg - - - - ${state-dir}/user/root/gnupg"
# "L /root/.emacs.d - - - - ${state-dir}/user/root/emacs.d"
"L /root/.ssh/id_rsa - - - - ${state-dir}/user/root/ssh/id_rsa"
"L /root/.ssh/id_rsa.pub - - - - ${state-dir}/user/root/ssh/id_rsa.pub"
"L /root/.ssh/known_hosts - - - - ${state-dir}/user/root/ssh/known_hosts"
fudo.games.valheim = {
enable = true;
state-directory = "/state/games/valheim";
password = "silkymilky";
};
# "L /etc/ssh/ssh_host_rsa_key - - - - ${state-dir}/ssh/ssh_host_rsa_key"
# "L /etc/ssh/ssh_host_rsa_key.pub - - - - ${state-dir}/ssh/ssh_host_rsa_key.pub"
# "L /etc/ssh/ssh_host_ed25519_key - - - - ${state-dir}/ssh/ssh_host_ed25519_key"
# "L /etc/ssh/ssh_host_ed25519_key.pub - - - - ${state-dir}/ssh/ssh_host_ed25519_key.pub"
systemd.tmpfiles.rules = [
"L /root/.gnupg - - - - ${state-dir}/user/root/gnupg"
"L /root/.ssh/id_rsa - - - - ${state-dir}/user/root/ssh/id_rsa"
"L /root/.ssh/id_rsa.pub - - - - ${state-dir}/user/root/ssh/id_rsa.pub"
"L /root/.ssh/known_hosts - - - - ${state-dir}/user/root/ssh/known_hosts"
];
services.openssh.hostKeys = [
+3 -1
View File
@@ -2,7 +2,7 @@
{
system.stateVersion = "20.09";
# TODO: remove?
nixpkgs.config.permittedInsecurePackages = [
"openssh-with-gssapi-8.4p1" # CVE-2021-28041
@@ -10,6 +10,8 @@
fudo.slynk.enable = true;
environment.systemPackages = with pkgs; [ opencv-java worther ];
networking = {
interfaces = {
eno1.useDHCP = false;
-7
View File
@@ -43,13 +43,6 @@ in {
# };
};
emacs = {
enable = true;
install = true;
package = pkgs.emacs;
defaultEditor = true;
};
trezord.enable = true;
};
+1 -10
View File
@@ -52,16 +52,7 @@ in {
networking.networkmanager.enable = mkForce false;
services = {
xserver.enable = false;
emacs = {
enable = true;
install = true;
package = pkgs.emacs;
defaultEditor = true;
};
};
services = { xserver.enable = false; };
sound.enable = false;
hardware.pulseaudio.enable = false;