blob: 90f65d8cf13bcd9e404b7fb08f0064edddf535f9 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
|
{
pkgs,
inputs,
...
}:
{
imports = [
./desktop
./virt.nix
./gpg.nix
./btrfs.nix
./vpn.nix
./remote-builder.nix
./nh.nix
];
nixpkgs.overlays = [
(import ../overlays/stable_overrides.nix {
nixpkgs-stable = inputs.nixpkgs-stable;
inherit pkgs;
})
];
nix.settings.experimental-features = [
"nix-command"
"flakes"
];
nixpkgs = {
config = {
permittedInsecurePackages = [
"olm-3.2.16"
];
allowUnfree = true;
};
};
time.timeZone = "Europe/Amsterdam"; # Set timezone
sops.defaultSopsFile = ./secrets/secrets.yaml;
sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
sops.age.keyFile = "/var/lib/sops-nix/key.txt";
sops.age.generateKey = true;
systemd.oomd = {
enable = true;
enableUserSlices = true;
enableSystemSlice = true;
enableRootSlice = true;
settings.OOM = {
SwapUsedLimit = "50%";
DefaultMemoryPressureLimit = "50%";
DefaultMemoryPressureDurationSec = 20;
};
};
# Because NH is enabled, this needs to be disabled.
# nix.gc = {
# automatic = true;
# dates = "weekly";
# options = "--delete-older-than 30d";
# };
zramSwap = {
enable = true;
algorithm = "lz4";
memoryPercent = 50;
};
systemd.services.nix-daemon.serviceConfig = {
MemoryAccounting = true;
MemoryMax = "90%";
OOMScoreAdjust = 500;
};
environment.systemPackages = with pkgs; [
htop
btop
nmap
dig
ripgrep
unzip
sshfs
ranger
file
lm_sensors
# Needed for getting credentials
age
sops
bashInteractive
coreutils
util-linux
iproute2
iputils
pciutils
usbutils
vim
tmux
];
networking.hosts = {
"0.0.0.0" = [ "apresolve.spotify.com" ];
};
# This option defines the first version of NixOS you have installed on this particular machine,
# DO NOT CHANGE UNLESS USING NIXOS-INSTALL
system.stateVersion = "24.11"; # Did you read the comment?
}
|
