1 { config, pkgs, lib, inputs, ... }:
4 ../nixos/profiles/server.nix
5 #../nixos/profiles/debug.nix
6 ../nixos/profiles/lang-fr.nix
7 #../nixos/profiles/tor.nix
9 aubergine/networking.nix
15 # Lower kernel's security for better performances
16 boot.kernelParams = [ "mitigations=off" ];
18 home-manager.users.julm = {
19 imports = [ ../homes/julm.nix ];
21 systemd.services.home-manager-julm.postStart = ''
22 ${pkgs.nix}/bin/nix-env --delete-generations +1 --profile /nix/var/nix/profiles/per-user/julm/home-manager
28 # Put the hashedPassword in /nix/store, but it will also be in /etc/passwd
29 # which is already world readable.
30 # printf %s $(mkpasswd -m yescrypt)
31 hashedPassword = lib.readFile aubergine/users/julm/login/hashedPassword.clear;
39 # If created, zfs-mount.service would require:
40 # zfs set overlay=yes ${hostName}/home
42 openssh.authorizedKeys.keys = map lib.readFile [
43 ../users/root/ssh/losurdo.pub
44 ../users/julm/ssh/losurdo.pub
45 ../users/julm/ssh/oignon.pub
46 ../users/julm/ssh/redmi.pub
51 openssh.authorizedKeys.keys =
52 config.users.users.julm.openssh.authorizedKeys.keys;
60 # If created, zfs-mount.service would require:
61 # zfs set overlay=yes ${hostName}/home
63 openssh.authorizedKeys.keys = map lib.readFile [
64 ../users/sevy/ssh/patate.pub
69 #systemd.services.nix-daemon.serviceConfig.LoadCredentialEncrypted =
70 # "secret-key-files:" + aubergine/nix/secret-key-files;
73 #secret-key-files = /run/credentials/nix-daemon.service/secret-key-files.pem
77 #"http://nix-localcache.losurdo.wg"
78 #"ssh://nix-ssh@losurdo.wg?priority=30"
79 #"ssh://nix-ssh@oignon.wg?priority=30"
81 trusted-public-keys = map lib.readFile [
82 ../users/root/nix/oignon.pub
85 nixPath = lib.mkForce [ "nixpkgs=${inputs.nixpkgs}" ];
87 #environment.etc."nixpkgs".source = pkgs.path;
88 #environment.etc."nixpkgs-overlays".source = inputs.self + "/nixpkgs";
90 nix.settings.allowed-users = [ config.users.users."nix-ssh".name ];
93 keys = map lib.readFile [
94 ../users/julm/ssh/losurdo.pub
95 ../users/sevy/ssh/patate.pub
96 ../users/julm/ssh/oignon.pub
100 environment.systemPackages = [
103 boot.extraModulePackages = [
104 #config.boot.kernelPackages.v4l2loopback
107 # This value determines the NixOS release with which your system is to be
108 # compatible, in order to avoid breaking some software such as database
109 # servers. You should change this only after NixOS release notes say you should.
110 system.stateVersion = "22.11"; # Did you read the comment?