config/modules/base/default.nix

205 lines
3.8 KiB
Nix
Raw Normal View History

2023-04-14 14:12:45 +03:00
{
config,
lib,
pkgs,
2023-09-12 15:46:44 +03:00
myData,
2023-04-14 14:12:45 +03:00
...
2024-03-04 14:53:50 +02:00
}: let
cfg = config.mj;
in {
2023-04-14 14:12:45 +03:00
imports = [
2023-07-22 16:05:44 +03:00
./boot
./fileSystems
2023-07-18 12:31:48 +03:00
./snapshot
2023-07-20 06:58:47 +03:00
./sshd
./unitstatus
2023-07-20 15:02:38 +03:00
./users
./zfs
2023-07-19 14:16:56 +03:00
./zfsborg
2023-04-14 14:12:45 +03:00
];
2023-07-20 15:02:38 +03:00
options.mj = with lib.types; {
2023-04-14 14:12:45 +03:00
stateVersion = lib.mkOption {
2023-07-20 15:02:38 +03:00
type = str;
2023-04-14 14:12:45 +03:00
example = "22.11";
description = "The NixOS state version to use for this system";
};
2023-07-20 15:02:38 +03:00
2023-04-14 14:12:45 +03:00
timeZone = lib.mkOption {
2023-07-20 15:02:38 +03:00
type = str;
2023-04-14 14:12:45 +03:00
example = "Europe/Vilnius";
description = "Time zone for this system";
};
2024-03-04 14:53:50 +02:00
username = lib.mkOption {type = str;};
2023-04-14 14:12:45 +03:00
};
config = {
2024-03-06 12:48:27 +02:00
boot = {
# https://github.com/NixOS/nixpkgs/issues/83694#issuecomment-605657381
kernel.sysctl."kernel.sysrq" = "438";
kernelPackages = lib.mkDefault pkgs.zfs.latestCompatibleLinuxPackages;
};
2024-01-13 23:39:49 +02:00
2024-03-06 12:48:27 +02:00
nixpkgs.config.allowUnfree = true;
2024-03-06 10:37:59 +02:00
hardware.enableRedistributableFirmware = true;
2023-09-14 10:53:01 +03:00
2024-03-04 14:53:50 +02:00
time.timeZone = cfg.timeZone;
2023-04-14 14:12:45 +03:00
2023-09-12 15:46:44 +03:00
mj.services.friendlyport.ports = [
{
2023-09-12 16:08:08 +03:00
subnets = [myData.subnets.tailscale.cidr];
2023-09-12 15:46:44 +03:00
tcp = [config.services.iperf3.port];
2023-10-24 14:46:06 +03:00
udp = [config.services.iperf3.port];
2023-09-12 15:46:44 +03:00
}
];
2023-04-14 14:12:45 +03:00
i18n = {
defaultLocale = "en_US.UTF-8";
2024-02-02 15:49:38 +02:00
supportedLocales = ["all"];
2023-04-14 14:12:45 +03:00
};
2023-07-20 11:56:08 +03:00
nix = {
gc = {
automatic = true;
2023-10-02 00:20:40 +03:00
dates = "weekly";
options = "--delete-older-than 14d";
2023-07-20 11:56:08 +03:00
};
settings = {
experimental-features = ["nix-command" "flakes"];
2024-03-04 14:53:50 +02:00
trusted-users = [cfg.username];
2023-07-20 11:56:08 +03:00
};
};
2023-04-14 14:12:45 +03:00
2024-03-04 14:53:50 +02:00
system.stateVersion = cfg.stateVersion;
2023-04-14 14:12:45 +03:00
security = {
sudo = {
wheelNeedsPassword = false;
execWheelOnly = true;
};
};
environment = {
systemPackages = with pkgs; [
jc # parse different formats and command outputs to json
jq # parse, format and query json documents
pv # pipe viewer for progressbars in pipes
bat # "bat - cat with wings", cat|less with language highlight
duf # nice disk usage output
2023-07-20 11:56:08 +03:00
git
htop
2023-04-14 14:12:45 +03:00
file # file duh
host # look up host info
tree # tree duh
lsof # lsof yay
rage # encrypt-decrypt
2023-07-20 11:56:08 +03:00
ncdu # disk usage navigator
2023-09-12 11:17:50 +03:00
lshw
2023-10-01 22:57:18 +03:00
entr
2023-10-01 23:16:42 +03:00
cloc
2023-12-20 20:21:42 +02:00
poop # hopefully poof some day
2023-10-01 23:16:42 +03:00
tokei
2024-03-03 15:36:19 +02:00
sshfs
2023-04-14 14:12:45 +03:00
pwgen
2023-07-20 11:56:08 +03:00
parted
2024-02-07 11:24:04 +02:00
bloaty
2023-04-14 14:12:45 +03:00
sqlite
2023-10-08 16:12:59 +03:00
dhcpcd
2023-10-04 07:15:00 +03:00
hdparm
sdparm
2023-07-26 11:06:28 +03:00
procps
2023-04-14 14:12:45 +03:00
vimv-rs
2023-07-26 11:09:52 +03:00
sysstat
2024-01-26 09:20:44 +02:00
ripgrep
2024-01-14 18:25:55 +02:00
ethtool
2024-02-27 10:55:09 +02:00
gettext
2024-03-06 13:25:18 +02:00
keyutils
2023-10-03 21:53:21 +03:00
usbutils
2023-09-16 08:53:23 +03:00
pciutils
2023-07-20 11:56:08 +03:00
bsdgames
2023-09-15 12:51:10 +03:00
parallel
2024-02-07 13:53:02 +02:00
yamllint
2023-04-14 14:12:45 +03:00
binutils
2023-09-17 06:46:34 +03:00
hyperfine
2023-12-19 14:54:36 +02:00
stress-ng
2023-09-17 06:46:34 +03:00
dmidecode
2023-04-14 14:12:45 +03:00
moreutils
2024-03-06 14:29:00 +02:00
cryptsetup
2023-12-19 14:55:29 +02:00
lm_sensors
2023-09-13 13:29:06 +03:00
smartmontools
2023-04-14 14:12:45 +03:00
unixtools.xxd
2024-03-06 12:56:27 +02:00
bcachefs-tools
2023-04-14 14:12:45 +03:00
# networking
2024-03-03 15:00:52 +02:00
wol
2023-04-14 14:12:45 +03:00
dig
nmap
2024-01-17 09:54:01 +02:00
# broken on aarch64-linux
#wrk2
2023-04-14 14:12:45 +03:00
wget
curl
btop
2024-01-17 00:47:57 +02:00
ngrep
iftop
2023-04-14 14:12:45 +03:00
whois
ipset
2023-09-11 21:43:34 +03:00
iperf3
jnettop
2023-07-20 11:56:08 +03:00
openssl
tcpdump
2023-04-14 14:12:45 +03:00
testssl
dnsutils
2024-01-26 09:20:44 +02:00
bandwhich
2023-04-14 14:12:45 +03:00
speedtest-cli
2024-02-14 15:54:42 +02:00
nix-output-monitor
2023-12-04 16:39:55 +02:00
config.boot.kernelPackages.perf
2023-04-14 14:12:45 +03:00
# compression/decompression
xz
pigz
zstd
p7zip
zopfli
2024-01-26 09:20:44 +02:00
brotli
2023-04-14 14:12:45 +03:00
];
};
programs = {
mtr.enable = true;
2023-11-22 18:09:15 +02:00
bcc.enable = true;
2023-08-15 07:09:11 +03:00
2023-08-18 23:45:13 +03:00
tmux = {
enable = true;
keyMode = "vi";
2023-10-09 09:42:11 +03:00
historyLimit = 1000000;
2023-08-18 23:45:13 +03:00
};
2023-08-18 23:33:56 +03:00
neovim = {
enable = true;
vimAlias = true;
defaultEditor = true;
};
2023-04-14 14:12:45 +03:00
};
2023-07-26 14:10:22 +03:00
2023-08-24 23:49:21 +03:00
networking.firewall.logRefusedConnections = false;
2023-07-26 14:10:22 +03:00
services = {
2023-10-24 14:30:48 +03:00
iperf3.enable = true;
2023-08-24 17:14:57 +03:00
chrony = {
enable = true;
servers = ["time.cloudflare.com"];
};
2023-07-26 14:10:22 +03:00
locate = {
enable = true;
2023-11-27 17:54:44 +02:00
package = pkgs.plocate;
2023-07-26 14:10:22 +03:00
localuser = null;
};
};
2023-04-14 14:12:45 +03:00
};
}