My Nix Configuration
1{
2 pkgs,
3 ...
4}:
5{
6 imports = [
7 # Machine-specific configurations.
8 ./bootloader.nix
9 ./firewall.nix
10 ./networking.nix
11 ./hardware.nix
12 ./packages.nix
13
14 # DN42 Services
15 ./dn42/default.nix
16
17 # Running Services
18 ./services/acme.nix
19 ./services/caddy.nix
20 ./services/fail2ban.nix
21 ./services/prometheus.nix
22 ./services/secrets.nix
23 ./services/tailscale.nix
24 ];
25 fileSystems = {
26 "/" = {
27 fsType = "btrfs";
28 device = "/dev/disk/by-path/pci-0000:00:10.0-part3";
29 };
30 };
31
32 nix.settings.max-jobs = 2;
33 nix.settings.cores = 2;
34
35 programs.fish.enable = true;
36 programs.fish.interactiveShellInit = ''
37 ${pkgs.direnv}/bin/direnv hook fish | source
38 '';
39 py = {
40 profiles.server.enable = true;
41 users.default.enable = true;
42 programs = {
43 fish.enable = true;
44 neovim.enable = true;
45 };
46 services.scrutiny.collector.enable = false;
47 };
48 security.tpm2.enable = false;
49 security.tpm2.abrmd.enable = false;
50 services.journald.extraConfig = ''
51 SystemMaxUse=500M
52 '';
53}