Wateir/NixServerConfig
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore: Refractor

Browse source
This commit is contained in:
Wateir 2025-12-21 15:33:03 +01:00
parent 271115fc3a
commit 9453773af6
1 changed files with 85 additions and 97 deletions
Download patch file Download diff file Expand all files Collapse all files

90
configuration.nix
View file

@ -1,10 +1,8 @@
# Edit this configuration file to define what should be installed on
# your system. Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’).
{ config,pkgs,lib, ... }:
{
system.stateVersion = "25.11";
imports =
[
./hardware-configuration.nix
@ -20,26 +18,30 @@
nix.settings.experimental-features = [ "nix-command" "flakes" ];
boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true;
# Use latest kernel.
boot.kernelPackages = pkgs.linuxPackages_latest;
boot = {
loader = {
systemd-boot.enable = true;
efi.canTouchEfiVariables = true;
};
kernelPackages = pkgs.linuxPackages_latest; # Use latest kernel.
};
networking.hostName = "ThinkCentre-Server-004"; # Define your hostname.
# networking.wireless.enable = true; # Enables wireless support via wpa_supplicant.
# Configure network proxy if necessary
# networking.proxy.default = "http://user:password@proxy:port/";
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
networking.networkmanager.enable = true;
networking = {
hostName = "ThinkCentre-Server-004"; # Define your hostname.
#wireless.enable = true; # Enables wireless support via wpa_supplicant.
#proxy.default = "http://user:password@proxy:port/";
#proxy.noProxy = "127.0.0.1,localhost,internal.domain";
networkmanager.enable = true;
firewall.enable = true;
};
console.keyMap = "fr";
time.timeZone = "Europe/Paris";
i18n.defaultLocale = "en_US.UTF-8";
i18n.extraLocaleSettings = {
i18n = {
defaultLocale = "en_US.UTF-8";
extraLocaleSettings = {
LC_ADDRESS = "fr_FR.UTF-8";
LC_IDENTIFICATION = "fr_FR.UTF-8";
LC_MEASUREMENT = "fr_FR.UTF-8";
@ -50,13 +52,14 @@
LC_TELEPHONE = "fr_FR.UTF-8";
LC_TIME = "fr_FR.UTF-8";
};
};
services.xserver.xkb = {
layout = "fr";
variant = "azerty";
};
console.keyMap = "fr";
programs.zsh.enable = true;
users.users.manager = {
@ -67,9 +70,10 @@
shell = pkgs.zsh;
};
security.sudo.enable = true;
security.sudo.extraRules = [
security = {
sudo = {
enable = true;
extraRules = [
{
groups = [ "wheel" ];
commands = [
@ -84,12 +88,12 @@
];
}
];
};
security.polkit.extraConfig = ''
polkit.extraConfig = ''
polkit.addRule(function (action, subject) {
if (
subject.isInGroup("wheel") &&
subject.isInGroup("wheel") &&networking.firewall.
[
"org.freedesktop.login1.reboot",
"org.freedesktop.login1.reboot-multiple-sessions",
@ -101,41 +105,27 @@
}
});
'';
services.tailscale = {
enable = true;
extraDaemonFlags = [
"--no-logs-no-support"
];
extraSetFlags = [
"--ssh=false"
];
useRoutingFeatures = "server"; # or "client" / "both"
};
networking.firewall = {
enable = true;
allowedTCPPorts = [ 443 ];
allowedUDPPorts = [ 41641 3478 ];
};
programs = {
zsh.enable = true;
# Some programs need SUID wrappers, can be configured further or are
# started in user sessions.
# programs.mtr.enable = true;
# programs.gnupg.agent = {
#mtr.enable = true;
#gnupg.agent = {
# enable = true;
# enableSSHSupport = true;
# };
};
environment.variables = {
TERM = "xterm-256color";
};
services.openssh.enable = true;
services.openssh.settings.Macs = [
services.openssh = {
enable = true;
settings.Macs = [
# Current defaults:
"hmac-sha2-512-etm@openssh.com"
"hmac-sha2-256-etm@openssh.com"
@ -143,7 +133,5 @@
# Cloudfare:
"hmac-sha2-256"
];
system.stateVersion = "25.11";
};
}