From 890e44ebcc11c48f7347aa60748a84c48261aa5e Mon Sep 17 00:00:00 2001 From: Ben Sima Date: Thu, 12 Nov 2020 17:13:39 -0800 Subject: Get Biz.Dev setup again Also correctly renamed the files (didn't work the first time thanks to the macOS filesystem) and moved the default build.os settings to a OsBase.nix file to be used via imports. --- Biz/Bild/Rules.nix | 24 +----------------------- 1 file changed, 1 insertion(+), 23 deletions(-) (limited to 'Biz/Bild/Rules.nix') diff --git a/Biz/Bild/Rules.nix b/Biz/Bild/Rules.nix index 9fea5df..e6a6979 100644 --- a/Biz/Bild/Rules.nix +++ b/Biz/Bild/Rules.nix @@ -128,27 +128,5 @@ in { shellHook = ". ${./ShellHook.sh}"; }; - os = cfg: (nixos (args: lib.attrsets.recursiveUpdate cfg { - boot.cleanTmpDir = true; - networking.firewall.allowPing = true; - nix.binaryCaches = [ "https://cache.nixos.org" ]; - nix.gc.automatic = true; - nix.gc.dates = "Sunday 02:15"; - nix.optimise.automatic = true; - nix.optimise.dates = [ "Sunday 02:30" ]; - nixpkgs.overlays = overlays; - programs.mosh.enable = true; - programs.mosh.withUtempter = true; - security.acme.email = "ben@bsima.me"; - security.acme.acceptTerms = true; - security.sudo.wheelNeedsPassword = false; - services.clamav.daemon.enable = true; # security - services.clamav.updater.enable = true; # security - services.fail2ban.enable = true; # security - services.openssh.enable = true; - services.openssh.openFirewall = true; - services.openssh.forwardX11 = true; - services.openssh.passwordAuthentication = false; - system.autoUpgrade.enable = false; # 'true' breaks our nixpkgs pin - })).toplevel; + os = cfg: (nixos (args: cfg)).toplevel; } -- cgit v1.2.3