50 lines
1.7 KiB
Nix
50 lines
1.7 KiB
Nix
{ pkgs, config, modulesPath, ... }:
|
|
|
|
{
|
|
imports = [
|
|
(modulesPath + "/profiles/qemu-guest.nix")
|
|
];
|
|
|
|
networking.hostName = "hexname-ns1";
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
hexname-backend
|
|
];
|
|
|
|
users.users = {
|
|
luka = {
|
|
isNormalUser = true;
|
|
linger = true; # Keep user services running
|
|
extraGroups = [ "networkmanager" "wheel" "podman" ];
|
|
hashedPassword = "$y$j9T$6bEHYFO.AGCC2bnKxC3xB/$6/1zmuzaSvDSHID6ZTgnrHiWRS8ayEXhNBp48ugR4z7";
|
|
openssh.authorizedKeys.keys = [
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM/4F45h/xkq+MIRDzhHqDm5uWM4KTpYi3Tv/DtSo28t luka@gram"
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF7OvW6MffYFshZyarEaWvWjEmhodn/P+NLcnqbbMpma luka@conway"
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIT+vMzh2ngUeqnVJS8Zl1m1HQMBkDOqoGdoARPyJgDM u0_a380@localhost" # s
|
|
];
|
|
};
|
|
root = {
|
|
isSystemUser = true;
|
|
hashedPassword = "$y$j9T$6bEHYFO.AGCC2bnKxC3xB/$6/1zmuzaSvDSHID6ZTgnrHiWRS8ayEXhNBp48ugR4z7";
|
|
openssh.authorizedKeys.keys = [
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM/4F45h/xkq+MIRDzhHqDm5uWM4KTpYi3Tv/DtSo28t luka@gram"
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF7OvW6MffYFshZyarEaWvWjEmhodn/P+NLcnqbbMpma luka@conway"
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIT+vMzh2ngUeqnVJS8Zl1m1HQMBkDOqoGdoARPyJgDM u0_a380@localhost" # s
|
|
];
|
|
};
|
|
};
|
|
|
|
nix.settings.trusted-users = [ "luka" ]; # TODO: remove this line
|
|
|
|
boot.loader.grub = {
|
|
enable = true;
|
|
efiSupport = true;
|
|
efiInstallAsRemovable = true;
|
|
device = "nodev";
|
|
};
|
|
boot.supportedFilesystems = [ "zfs" ];
|
|
networking.hostId = "11111111"; # $ head -c 8 /etc/machine-id
|
|
|
|
system.stateVersion = "25.11";
|
|
}
|
|
|