111 lines
3.6 KiB
Nix
111 lines
3.6 KiB
Nix
{
|
|
description = "Live Disk Flake";
|
|
|
|
inputs = {
|
|
nixpkgs.url = "nixpkgs/nixos-21.05";
|
|
|
|
fudo-home = {
|
|
url = "git+https://git.fudo.org/fudo-nix/home.git";
|
|
inputs.nixpkgs.follows = "nixpkgs";
|
|
};
|
|
|
|
# This MUST be a clean git repo, because we use the timestamp.
|
|
fudo-entities = {
|
|
url = "git+https://git.fudo.org/fudo-nix/entities.git";
|
|
inputs.nixpkgs.follows = "nixpkgs";
|
|
};
|
|
|
|
fudo-lib = {
|
|
url = "git+https://git.fudo.org/fudo-nix/lib.git";
|
|
inputs.nixpkgs.follows = "nixpkgs";
|
|
};
|
|
|
|
fudo-pkgs.url = "git+https://git.fudo.org/fudo-nix/pkgs.git";
|
|
};
|
|
|
|
outputs = { self, nixpkgs, fudo-home, fudo-entities, fudo-lib, fudo-pkgs, ...
|
|
}@inputs: {
|
|
nixosConfigurations.live-disk-x86_64-linux = let
|
|
system = "x86_64-linux";
|
|
pkgs = import nixpkgs {
|
|
inherit system;
|
|
config.allowUnfree = true;
|
|
overlays = [ fudo-pkgs.overlay ];
|
|
};
|
|
in {
|
|
inherit system;
|
|
modules = [
|
|
({ config, ... }: {
|
|
imports = [
|
|
fudo-home.nixosModule
|
|
"${nixpkgs}/nixos/modules/installer/cd-dvd/installation-cd-minimal.nix"
|
|
"${nixpkgs}/nixos/modules/installer/cd-dvd/channel.nix"
|
|
];
|
|
config = with pkgs.lib; {
|
|
environment.etc.nixos-live.source = ./.;
|
|
hardware.enableAllFirmware = true;
|
|
environment.systemPackages = with pkgs; [
|
|
btrfs-progs
|
|
emacs
|
|
git
|
|
parted
|
|
gparted
|
|
nix-prefetch-scripts
|
|
wget
|
|
];
|
|
|
|
services.openssh = {
|
|
enable = true;
|
|
startWhenNeeded = true;
|
|
permitRootLogin = mkDefault "prohibit-password";
|
|
};
|
|
|
|
i18n.defaultLocale = "en_US.UTF-8";
|
|
console.useXkbConfig = true;
|
|
|
|
services.xserver = {
|
|
layout = "us";
|
|
xkbVariant = "dvp";
|
|
xkbOptions = "ctrl:nocaps";
|
|
};
|
|
|
|
nix = {
|
|
package = pkgs.nixFlakes;
|
|
extraOptions = "experimental-features = nix-command flakes";
|
|
};
|
|
|
|
programs = {
|
|
ssh = {
|
|
startAgent = true;
|
|
|
|
package = pkgs.openssh_gssapi;
|
|
|
|
extraConfig = ''
|
|
GSSAPIAuthentication yes
|
|
GSSAPIDelegateCredentials yes
|
|
'';
|
|
};
|
|
};
|
|
|
|
krb5.libdefaults.default_realm = "FUDO.ORG";
|
|
|
|
users.users = {
|
|
niten = {
|
|
isNormalUser = true;
|
|
createHome = true;
|
|
hashedPassword =
|
|
"$6$a1q2Duoe35hd5$IaZGXPfqyGv9uq5DQm7DZq0vIHsUs39sLktBiBBqMiwl/f/Z4jSvNZLJp9DZJYe5u2qGBYh1ca.jsXvQA8FPZ/";
|
|
extraGroups = [ "wheel" ];
|
|
};
|
|
|
|
root.openssh.authorizedKeys.keys = [
|
|
"ssh-rsa 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"
|
|
];
|
|
};
|
|
};
|
|
})
|
|
];
|
|
};
|
|
};
|
|
}
|