mirror of
https://github.com/oqyude/nixos.git
synced 2026-08-09 08:03:16 +03:00
126 lines
3.9 KiB
Nix
126 lines
3.9 KiB
Nix
{
|
|
config,
|
|
lib,
|
|
pkgs,
|
|
...
|
|
}:
|
|
{
|
|
# new things https://git.voronind.com/voronind/nix/src/commit/c4a70068a474e9f30b8e367b69520c563e02fbd9/system/nix.nix
|
|
system.nixos.label = "default";
|
|
|
|
nix = {
|
|
# package = pkgs.lixPackageSets.stable.lix; # maybe unstable
|
|
channel.enable = false;
|
|
nixPath = [ "nixpkgs=flake:nixpkgs" ];
|
|
settings = {
|
|
require-sigs = false;
|
|
substituters = [
|
|
"http://100.64.0.0:5000"
|
|
"https://cache.nixos.org"
|
|
"https://nix-community.cachix.org"
|
|
"https://mirror.yandex.ru/nixos"
|
|
"https://cache.nixos.kz"
|
|
# "https://cache.xd0.zip"
|
|
"https://nixos-cache-proxy.cofob.dev"
|
|
# "https://nixos-cache-proxy.sweetdogs.ru"
|
|
# "https://nixos-cache-proxy.elxreno.com"
|
|
# "https://nixos.snix.store" # https://nixos.snix.store/
|
|
];
|
|
trusted-public-keys = [
|
|
"nix-cache.home.arpa:be5jFLkiwNyOep/McxSafB3jguBmztxx+oJ46ySyc/s="
|
|
"nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
|
|
];
|
|
stalled-download-timeout = 8;
|
|
connect-timeout = 8;
|
|
auto-optimise-store = true;
|
|
fallback = true;
|
|
allow-import-from-derivation = true;
|
|
keep-derivations = false;
|
|
keep-outputs = false;
|
|
experimental-features = [
|
|
"flakes"
|
|
"nix-command"
|
|
];
|
|
};
|
|
};
|
|
|
|
nixpkgs = {
|
|
flake = {
|
|
setFlakeRegistry = false;
|
|
setNixPath = false;
|
|
};
|
|
config.allowUnfree = true;
|
|
};
|
|
|
|
security = {
|
|
sudo.wheelNeedsPassword = false;
|
|
polkit = {
|
|
enable = true;
|
|
extraConfig = ''
|
|
polkit.addRule(function(action, subject) {
|
|
if (subject.isInGroup("wheel")){ // for sudo
|
|
return polkit.Result.YES;
|
|
}
|
|
});
|
|
'';
|
|
};
|
|
pki.certificates = [
|
|
''
|
|
-----BEGIN CERTIFICATE-----
|
|
MIIBlDCCATmgAwIBAgIQUR+DM/LKIbokKxYPGZbCCjAKBggqhkjOPQQDAjAoMQ4w
|
|
DAYDVQQKEwVaZXJvUTEWMBQGA1UEAxMNWmVyb1EgUm9vdCBDQTAeFw0yNjA2MTMy
|
|
MjU2MDZaFw0zNjA2MTAyMjU2MDZaMCgxDjAMBgNVBAoTBVplcm9RMRYwFAYDVQQD
|
|
Ew1aZXJvUSBSb290IENBMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEgbhGtnlm
|
|
qd2Uv1B1VBSeg6NlXFMj4BG/k5gVu9bVFBK4cw9HVx21aHw9HhFW94P2KaySR6bu
|
|
K8tLDtzvs0xkyqNFMEMwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYBAf8C
|
|
AQEwHQYDVR0OBBYEFH07/1blaqp0MVuSZIUHS9W3SjIrMAoGCCqGSM49BAMCA0kA
|
|
MEYCIQD1coTa7hqU1PAdnamAIgq1ApadDWpWfNaXPGiLCrkxTwIhAJhj/YSzqTJR
|
|
HvurdJ9m2glxV3rQHIUiVqKbQRcibObd
|
|
-----END CERTIFICATE-----
|
|
-----BEGIN CERTIFICATE-----
|
|
MIIBvjCCAWOgAwIBAgIRAMiJigRk8xbvHhCWN6a7D68wCgYIKoZIzj0EAwIwKDEO
|
|
MAwGA1UEChMFWmVyb1ExFjAUBgNVBAMTDVplcm9RIFJvb3QgQ0EwHhcNMjYwNjEz
|
|
MjI1NjA3WhcNMzYwNjEwMjI1NjA3WjAwMQ4wDAYDVQQKEwVaZXJvUTEeMBwGA1UE
|
|
AxMVWmVyb1EgSW50ZXJtZWRpYXRlIENBMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcD
|
|
QgAE2gUlKZ/z9kt5RrdYZHnGE1TVVegn+aDmGpZk5uvF04O9k/sfjD6QE7VtjwNH
|
|
ervZKu3iBXGRg92ba0k369VJpKNmMGQwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB
|
|
/wQIMAYBAf8CAQAwHQYDVR0OBBYEFCtYg4LEAHPIMrDPO7lrxKuFvw4PMB8GA1Ud
|
|
IwQYMBaAFH07/1blaqp0MVuSZIUHS9W3SjIrMAoGCCqGSM49BAMCA0kAMEYCIQD2
|
|
nNNHqs9/mIstOxetObgg8eqbrPWHXEVQ9CDucNFmQAIhANXAz2z1Rc7hxc6er23W
|
|
I8TU6UQc8dledPvalDJLyGym
|
|
-----END CERTIFICATE-----
|
|
|
|
''
|
|
];
|
|
};
|
|
systemd.network.wait-online.enable = false;
|
|
|
|
time.timeZone = "Europe/Moscow";
|
|
i18n = {
|
|
defaultLocale = "en_US.UTF-8";
|
|
supportedLocales = [
|
|
"en_US.UTF-8/UTF-8"
|
|
"ru_RU.UTF-8/UTF-8"
|
|
];
|
|
};
|
|
|
|
# sops.secrets = {
|
|
# intermediate-ca = {
|
|
# format = "yaml";
|
|
# key = "intermediate-ca";
|
|
# sopsFile = ./secrets/settings.yaml;
|
|
# # owner = "nobody";
|
|
# # group = "nogroup";
|
|
# mode = "0700";
|
|
# };
|
|
# root-ca = {
|
|
# format = "yaml";
|
|
# key = "root-ca";
|
|
# sopsFile = ./secrets/settings.yaml;
|
|
# # owner = "nobody";
|
|
# # group = "nogroup";
|
|
# mode = "0700";
|
|
# };
|
|
# };
|
|
}
|