From a131b3051428d3abe220d172f93d09880b96222f Mon Sep 17 00:00:00 2001 From: Vincent Ambo Date: Tue, 2 Jul 2019 12:48:05 +0100 Subject: refactor(infra): Move infrastructure into monorepo structure --- infra/nixos/configuration.nix | 53 +++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 53 insertions(+) create mode 100644 infra/nixos/configuration.nix (limited to 'infra/nixos/configuration.nix') diff --git a/infra/nixos/configuration.nix b/infra/nixos/configuration.nix new file mode 100644 index 000000000000..1de11a16f9b6 --- /dev/null +++ b/infra/nixos/configuration.nix @@ -0,0 +1,53 @@ +# This file contains basic configuration for all *.tazj.in Nix machines. + +{ config, pkgs, ... }: + +{ + boot.loader.grub.enable = true; + boot.loader.grub.version = 2; + boot.loader.grub.device = "/dev/sda"; + + boot.initrd.availableKernelModules = [ + "ata_piix" + "mptspi" + "sd_mod" + "sr_mod" + ]; + + # Configure root disk + fileSystems."/" = { + device = "/dev/disk/by-label/nixos"; + fsType = "ext4"; + }; + + services.vmwareGuest.enable = true; + services.vmwareGuest.headless = true; + + time.timeZone = "Europe/Oslo"; + + environment.systemPackages = with pkgs; [ + curl emacs htop + ]; + + services.openssh.enable = true; + + networking.firewall.enable = true; + networking.firewall.allowedTCPPorts = [ 22 80 443 ]; + + users.extraUsers.vincent = { + isNormalUser = true; + uid = 1000; + extraGroups = [ "wheel" ]; + }; + + security.sudo = { + enable = true; + extraConfig = "%wheel ALL=(ALL) NOPASSWD: ALL"; + }; + + # This value determines the NixOS release with which your system is to be + # compatible, in order to avoid breaking some software such as database + # servers. You should change this only after NixOS release notes say you + # should. + system.stateVersion = "17.09"; # Did you read the comment? +} -- cgit 1.4.1