Infinidoge/universe
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor(core,global): move items from core to global module

Browse source
This commit is contained in:
Infinidoge 2022-04-16 01:29:24 -04:00
parent 68f952beb5
commit 239c037678
1 changed files with 29 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

30
modules/modules/global.nix
View file

@ -14,12 +14,17 @@ with lib.hlissner;
}; };
}; };
# Remove all default packages
environment.defaultPackages = mkForce [ ];
boot = { boot = {
# Make tmp volatile, using tmpfs is speedy on SSD systems # Make tmp volatile, using tmpfs is speedy on SSD systems
tmpOnTmpfs = mkDefault true; tmpOnTmpfs = mkDefault true;
cleanTmpDir = mkDefault (!config.boot.tmpOnTmpfs); cleanTmpDir = mkDefault (!config.boot.tmpOnTmpfs);
};
# Use the latest Linux kernel
kernelPackages = pkgs.linuxPackages_latest;
};
programs = { programs = {
# Allow non-root users to allow other users to access mount point # Allow non-root users to allow other users to access mount point
@ -29,12 +34,35 @@ with lib.hlissner;
dconf.enable = true; dconf.enable = true;
}; };
bud.enable = lib.mkDefault true;
services = { services = {
# Ensure certain necessary directories always exist # Ensure certain necessary directories always exist
ensure.directories = [ "/mnt" ]; ensure.directories = [ "/mnt" ];
# Enable Early Out of Memory service # Enable Early Out of Memory service
earlyoom.enable = true; earlyoom.enable = true;
# For rage encryption, all hosts need a ssh key pair
openssh = {
enable = true;
openFirewall = lib.mkDefault true;
forwardX11 = lib.mkDefault false;
hostKeys = lib.mkDefault [
{
bits = 4096;
openSSHFormat = true;
path = "/etc/ssh/ssh_host_rsa_key";
rounds = 100;
type = "rsa";
}
{
path = "/etc/ssh/ssh_host_ed25519_key";
rounds = 100;
type = "ed25519";
}
];
};
}; };
# FIX: command-not-found database doesn't exist normally # FIX: command-not-found database doesn't exist normally