blob: 2e70b15a135546446c1fd6970ab43e96dfff69f2 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
|
{ pkgs, lib, ... }:
{
nix.settings.experimental-features = [ "nix-command" "flakes" ];
nix.gc = {
automatic = true;
dates = "weekly";
options = "--delete-older-than 30d";
};
# Per-host configuration.nix can override either of these without
# conflicting, since they're set with mkDefault here.
time.timeZone = lib.mkDefault "Etc/UTC";
i18n.defaultLocale = lib.mkDefault "en_US.UTF-8";
users.users.tom = {
isNormalUser = true;
extraGroups = [ "wheel" ];
shell = pkgs.bash;
};
services.openssh = {
enable = true;
settings = {
PasswordAuthentication = false;
PermitRootLogin = "no";
};
};
networking.firewall = {
enable = true;
allowedTCPPorts = [ 22 ];
};
}
|
