diff options
| author | Ben Sima <ben@bsima.me> | 2020-11-12 17:13:39 -0800 |
|---|---|---|
| committer | Ben Sima <ben@bsima.me> | 2020-11-12 17:21:13 -0800 |
| commit | 890e44ebcc11c48f7347aa60748a84c48261aa5e (patch) | |
| tree | 894e30ce7a0c81ef3968c04f82d068a65c15b0f5 /Biz/OsBase.nix | |
| parent | 19f5402bec9f6346463b83536cc22d7f4525bc18 (diff) | |
Get Biz.Dev setup again
Also correctly renamed the files (didn't work the first time thanks to
the macOS filesystem) and moved the default build.os settings to a
OsBase.nix file to be used via imports.
Diffstat (limited to 'Biz/OsBase.nix')
| -rw-r--r-- | Biz/OsBase.nix | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/Biz/OsBase.nix b/Biz/OsBase.nix new file mode 100644 index 0000000..0ba3fca --- /dev/null +++ b/Biz/OsBase.nix @@ -0,0 +1,24 @@ +{...}: +{ + boot.cleanTmpDir = true; + networking.firewall.allowPing = true; + nix.binaryCaches = [ "https://cache.nixos.org" ]; + nix.gc.automatic = true; + nix.gc.dates = "Sunday 02:15"; + nix.optimise.automatic = true; + nix.optimise.dates = [ "Sunday 02:30" ]; + #nixpkgs.overlays = overlays; + programs.mosh.enable = true; + programs.mosh.withUtempter = true; + security.acme.email = "ben@bsima.me"; + security.acme.acceptTerms = true; + security.sudo.wheelNeedsPassword = false; + services.clamav.daemon.enable = true; # security + services.clamav.updater.enable = true; # security + services.fail2ban.enable = true; # security + services.openssh.enable = true; + services.openssh.openFirewall = true; + services.openssh.forwardX11 = true; + services.openssh.passwordAuthentication = false; + system.autoUpgrade.enable = false; # 'true' breaks our nixpkgs pin +} |