diff --git a/install_template.nix b/install_template.nix new file mode 100644 index 0000000..f6608ff --- /dev/null +++ b/install_template.nix @@ -0,0 +1,49 @@ +{ config, pkgs, ... }: + +let + pubKeys = [ + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDM2k2C6Ufx5RNf4qWA9BdQHJfAkskOaqEWf8yjpySwH Nix Manager" + "sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIB1cBO17AFcS2NtIT+rIxR2Fhdu3HD4de4+IsFyKKuGQAAAACnNzaDpsZXNzZXI=" + "sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIDEKElNAm/BhLnk4Tlo00eHN5bO131daqt2DIeikw0b2AAAABHNzaDo=" + "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBBB/V8N5fqlSGgRCtLJMLDJ8Hd3JcJcY8skI0l+byLNRgQLZfTQRxlZ1yymRs36rXj+ASTnyw5ZDv+q2aXP7Lj0=" + "sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIHrYWbbgBkGcOntDqdMaWVZ9xn+dHM+Ap6s1HSAalL28AAAACHNzaDptYWlu" + ]; +in { + imports = [ ./hardware-configuration.nix ]; + + boot.loader.systemd-boot.enable = true; + boot.loader.efi.canTouchEfiVariables = true; + boot.loader.efi.efiSysMountPoint = "/boot/efi"; + + networking.hostName = "changeme"; + + networking.networkmanager.enable = true; + + time.timeZone = "America/Denver"; + + i18n.defaultLocale = "en_US.utf8"; + + services.xserver = { + layout = "us"; + xkbVariant = "colemak"; + }; + console = { keyMap = "colemak"; }; + + users.users.qbit = { + isNormalUser = true; + description = "Aaron Bieber"; + extraGroups = [ "networkmanager" "wheel" ]; + packages = with pkgs; [ ]; + }; + + environment.systemPackages = with pkgs; [ neovim nixfmt ]; + + services.openssh = { + enable = true; + permitRootLogin = "prohibit-password"; + }; + + users.users.root = { openssh.authorizedKeys.keys = pubKeys; }; + + system.stateVersion = "22.05"; # Did you read the comment? +} diff --git a/installer.nix b/installer.nix index 4b33c46..96da7f1 100644 --- a/installer.nix +++ b/installer.nix @@ -119,6 +119,11 @@ in { openssh.authorizedKeys.keys = config.myconf.hwPubKeys; }; + environment.etc."configuration-template.nix" = { + source = ./install_template.nix; + mode = "0644"; + }; + services = { openntpd.enable = true; pcscd.enable = true;