dotfiles: nix/hosts/thought/configuration.nix (116df19)

1

{ pkgs, ... }: {

2

  imports = [

3

    ./disko-config.nix

4

    ./hardware-configuration.nix

5

];

6

7

  system.stateVersion = "26.05";

8

9

  boot.loader.grub = {

10

    efiSupport = true;

11

    efiInstallAsRemovable = true;

12

    # No device install: Azure VHD boots via the EFI-removable path (BOOTX64.EFI).

13

    device = "nodev";

14

};

15

16

  swapDevices = [ {

17

    device = "/swapfile";

18

    size = 2048; # MB

19

  } ];

20

21

  time.timeZone = "Europe/Kyiv";

22

  i18n.defaultLocale = "en_US.UTF-8";

23

  networking = {

24

    hostName = "thought";

25

    firewall = {

26

      enable = true;

27

      allowedTCPPorts = [ 80 443 2222 ];

28

};

29

};

30

31

  services = {

32

    caddy.enable = true;

33

    openssh = {

34

      enable = true;

35

      ports = [ 22 ];

36

      settings = {

37

        PasswordAuthentication = false;

38

        PermitRootLogin = "no";

39

};

40

};

41

};

42

43

  environment.systemPackages = with pkgs; [

44

git

45

    htop

46

    neovim

47

];

48

1	{ pkgs, ... }: {
2	imports = [
3	./disko-config.nix
4	./hardware-configuration.nix
5	];
6
7	system.stateVersion = "26.05";
8
9	boot.loader.grub = {
10	efiSupport = true;
11	efiInstallAsRemovable = true;
12	# No device install: Azure VHD boots via the EFI-removable path (BOOTX64.EFI).
13	device = "nodev";
14	};
15
16	swapDevices = [ {
17	device = "/swapfile";
18	size = 2048; # MB
19	} ];
20
21	time.timeZone = "Europe/Kyiv";
22	i18n.defaultLocale = "en_US.UTF-8";
23	networking = {
24	hostName = "thought";
25	firewall = {
26	enable = true;
27	allowedTCPPorts = [ 80 443 2222 ];
28	};
29	};
30
31	services = {
32	caddy.enable = true;
33	openssh = {
34	enable = true;
35	ports = [ 22 ];
36	settings = {
37	PasswordAuthentication = false;
38	PermitRootLogin = "no";
39	};
40	};
41	};
42
43	environment.systemPackages = with pkgs; [
44	git
45	htop
46	neovim
47	];
48	}