]> Git — Sourcephile - julm/julm-nix.git/blob - hosts/patate.nix
julm: oignon: marble: install
[julm/julm-nix.git] / hosts / patate.nix
1 { config, pkgs, lib, ... }:
2 {
3 imports = [
4 ../nixos/profiles/graphical.nix
5 ../nixos/profiles/lang-fr.nix
6 ../nixos/profiles/printing.nix
7 patate/backup.nix
8 patate/hardware.nix
9 patate/networking.nix
10 ];
11
12 # Lower kernel's security for better performances
13 boot.kernelParams = [ "mitigations=off" ];
14
15 home-manager.users.sevy = {
16 imports = [ ../homes/sevy.nix ];
17 };
18 users.users.sevy = {
19 isNormalUser = true;
20 uid = 1000;
21 # Put the hashedPassword in /nix/store, but it will also be in /etc/passwd
22 # which is already world readable.
23 hashedPassword = lib.readFile patate/users/sevy/login/hashedPassword.clear;
24 extraGroups = [
25 "adbusers"
26 config.services.davfs2.davGroup
27 "lp"
28 "networkmanager"
29 "scanner"
30 "systemd-journal"
31 "tor"
32 "vboxusers"
33 "video"
34 "wheel"
35 ];
36 };
37
38 nix = {
39 settings = {
40 substituters = [
41 #"ssh://nix-ssh@losurdo.wg?priority=30"
42 #"ssh://nix-ssh@oignon.wg?priority=10"
43 ];
44 trusted-public-keys = map lib.readFile [
45 ../users/root/nix/losurdo.pub
46 ../users/root/nix/oignon.pub
47 ];
48 };
49 };
50
51 environment.systemPackages = [
52 pkgs.riseup-vpn # Can't be installed by home-manager because it needs to install policy-kit rules
53 ];
54
55 services.xserver = {
56 desktopManager = {
57 mate.enable = true;
58 xfce.enable = true;
59 xterm.enable = false;
60 };
61 displayManager = {
62 defaultSession = "mate";
63 autoLogin = {
64 user = config.users.users.sevy.name;
65 };
66 };
67 };
68
69 virtualisation.virtualbox.host.enable = true;
70
71 # This value determines the NixOS release with which your system is to be
72 # compatible, in order to avoid breaking some software such as database
73 # servers. You should change this only after NixOS release notes say you should.
74 system.stateVersion = "20.03"; # Did you read the comment?
75 }