From bd2e6a1bd3426427d57894656b9bda0fd0ec6005 Mon Sep 17 00:00:00 2001
From: zimbatm <zimbatm@zimbatm.com>
Date: Mon, 12 Aug 2019 11:33:34 +0200
Subject: [PATCH] misc changes
---
profiles/common.nix | 19 ++++++++++++++++---
1 file changed, 16 insertions(+), 3 deletions(-)
diff --git a/profiles/common.nix b/profiles/common.nix
index e9eb80d..37acf5a 100644
--- a/profiles/common.nix
+++ b/profiles/common.nix
@@ -4,6 +4,13 @@
imports = [ ./security.nix ];
+ environment.systemPackages = [
+ # for quick activity overview
+ pkgs.htop
+ # for users with TERM=xterm-termite
+ pkgs.termite.terminfo
+ ];
+
# Nicer interactive shell
programs.fish.enable = true;
# And for the zsh peeps
@@ -19,19 +26,22 @@
# auto-free the /nix/store
min-free = ${asGB 10}
max-free = ${asGB 200}
+
+ # avoid copying unecessary stuff over SSH
+ builders-use-substitutes = true
'';
# Hard-link duplicated files
autoOptimiseStore = true;
};
- # No mutable users
- users.mutableUsers = false;
-
services.openssh.enable = true;
networking.firewall.allowedTCPPorts = [
22
];
+ # enable "sar" system activity collection
+ services.sysstat.enable = true;
+
# Make debugging failed units easier
systemd.extraConfig = ''
DefaultStandardOutput=journal
@@ -41,6 +51,9 @@
# The nix-community is global :)
time.timeZone = "UTC";
+ # No mutable users
+ users.mutableUsers = false;
+
# Assign keys from all users in wheel group
# This is only done because nixops cant be deployed from any other account
users.extraUsers.root.openssh.authorizedKeys.keys = lib.unique (lib.flatten (