freyja-lynx.dev
nix flake for my x280
1{
2 lib,
3 pkgs,
4 ...
5}:
6{
7 imports = [
8 ./services/tailscale.nix
9 ./services/fwupd.nix
10 ./services/kmscon.nix
11 ];
12
13 system.stateVersion = "25.11";
14
15 time.timeZone = lib.mkDefault "America/Los_Angeles";
16
17 i18n.defaultLocale = lib.mkDefault "en_US.UTF-8";
18
19 nixpkgs.config.allowUnfree = lib.mkDefault true;
20
21 environment.systemPackages = with pkgs; [
22 helix
23 zellij
24 git
25 pciutils
26 ];
27
28 nix = {
29 gc = {
30 automatic = lib.mkDefault true;
31 dates = lib.mkDefault "weekly";
32 options = lib.mkDefault "--delete-older-than 1w";
33 };
34
35 settings = {
36 experimental-features = lib.mkDefault [
37 "nix-command"
38 "flakes"
39 ];
40 auto-optimise-store = lib.mkDefault true;
41 };
42 };
43
44 services.openssh = {
45 enable = true;
46 settings = {
47 AllowUsers = [ "freyja" ];
48 PermitRootLogin = "no";
49 PasswordAuthentication = false;
50 };
51 };
52
53 networking.firewall.allowedTCPPorts = [ 22 ];
54
55 virtualisation.docker = {
56 storageDriver = "btrfs";
57 rootless = {
58 enable = true;
59 setSocketVariable = true;
60 };
61 };
62}