sercanto/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

misc changes

Browse source
This commit is contained in:
zimbatm 2019-08-12 11:33:34 +02:00
parent cb9c48d58b
commit bd2e6a1bd3
No known key found for this signature in database
GPG key ID: 71BAF6D40C1D63D7
1 changed files with 16 additions and 3 deletions

19
profiles/common.nix
View file

@ -4,6 +4,13 @@
imports = [ ./security.nix ]; imports = [ ./security.nix ];
environment.systemPackages = [
# for quick activity overview
pkgs.htop
# for users with TERM=xterm-termite
pkgs.termite.terminfo
];
# Nicer interactive shell # Nicer interactive shell
programs.fish.enable = true; programs.fish.enable = true;
# And for the zsh peeps # And for the zsh peeps
@ -19,19 +26,22 @@
# auto-free the /nix/store # auto-free the /nix/store
min-free = ${asGB 10} min-free = ${asGB 10}
max-free = ${asGB 200} max-free = ${asGB 200}
# avoid copying unecessary stuff over SSH
builders-use-substitutes = true
''; '';
# Hard-link duplicated files # Hard-link duplicated files
autoOptimiseStore = true; autoOptimiseStore = true;
}; };
# No mutable users
users.mutableUsers = false;
services.openssh.enable = true; services.openssh.enable = true;
networking.firewall.allowedTCPPorts = [ networking.firewall.allowedTCPPorts = [
22 22
]; ];
# enable "sar" system activity collection
services.sysstat.enable = true;
# Make debugging failed units easier # Make debugging failed units easier
systemd.extraConfig = '' systemd.extraConfig = ''
DefaultStandardOutput=journal DefaultStandardOutput=journal
@ -41,6 +51,9 @@
# The nix-community is global :) # The nix-community is global :)
time.timeZone = "UTC"; time.timeZone = "UTC";
# No mutable users
users.mutableUsers = false;
# Assign keys from all users in wheel group # Assign keys from all users in wheel group
# This is only done because nixops cant be deployed from any other account # This is only done because nixops cant be deployed from any other account
users.extraUsers.root.openssh.authorizedKeys.keys = lib.unique (lib.flatten ( users.extraUsers.root.openssh.authorizedKeys.keys = lib.unique (lib.flatten (