imports = [
../profiles/dnscrypt-proxy2.nix
../profiles/security.nix
+ ../networking/wireguard/wg-intra.nix
patate/backup.nix
patate/hardware.nix
- patate/wireguard.nix
];
home-manager.users.sevy = {
];
trustedUsers = [ users.sevy.name ];
binaryCaches = [
- "https://nix-localcache.sourcephile.fr"
- #"ssh://nix-ssh@192.168.0.115" # FIXME: use wireguard
+ "http://nix-localcache.losurdo.wg"
+ "ssh://nix-ssh@oignon.wg"
];
binaryCachePublicKeys = [
"losurdo.sourcephile.fr-1:XGeaIE2AA2mZskSZ5bIDrfx53q+TDDWJOUEpZDX7los="
};
services.openssh.passwordAuthentication = false;
-nixpkgs.config = {
- allowUnfree = true;
-};
environment.etc."nixpkgs".source = pkgs.path;
environment.etc."nixpkgs-overlays".source = inputs.self + "/nixpkgs";
+environment.systemPackages = [
+ pkgs.riseup-vpn
+];
documentation.nixos.enable = true;
time.timeZone = "Europe/Paris";