]> Git — Sourcephile - julm/julm-nix.git/blob - nixos/profiles/system.nix
wireguard: use LoadCrendentialEncrypted=
[julm/julm-nix.git] / nixos / profiles / system.nix
1 { config, pkgs, lib, ... }:
2 {
3 imports = [
4 ./bash.nix
5 ];
6 documentation = {
7 enable = lib.mkDefault true;
8 dev.enable = lib.mkDefault false;
9 doc.enable = lib.mkDefault true;
10 info.enable = lib.mkDefault false;
11 man.enable = lib.mkDefault true;
12 nixos.enable = lib.mkDefault false;
13 };
14 environment.variables = {
15 EDITOR = "vim";
16 PAGER = "less -R";
17 SYSTEMD_LESS = "FKMRX";
18 };
19 nix = {
20 settings.auto-optimise-store = lib.mkDefault true;
21 gc.automatic = lib.mkDefault true;
22 gc.dates = lib.mkDefault "weekly";
23 gc.options = lib.mkDefault "--delete-older-than 7d";
24 nixPath = lib.mkForce [ ];
25 };
26 security.lockKernelModules = false;
27 services.journald = {
28 extraConfig = ''
29 Compress=true
30 MaxRetentionSec=1month
31 Storage=persistent
32 SystemMaxUse=100M
33 '';
34 };
35 users.mutableUsers = false;
36 }