aboutsummaryrefslogtreecommitdiff
path: root/modules/common/default.nix
diff options
context:
space:
mode:
authorMax Audron <audron@cocaine.farm>2023-08-11 16:51:35 +0200
committerMax Audron <audron@cocaine.farm>2023-08-11 16:51:35 +0200
commit40790797e111cec5ff682806998d50c38ed7bca9 (patch)
tree6db95b93f0797a62637845ea4bda5a3eedbc9306 /modules/common/default.nix
parentmove nixinate to own flake (diff)
cleanup modules
Diffstat (limited to 'modules/common/default.nix')
-rw-r--r--modules/common/default.nix37
1 files changed, 37 insertions, 0 deletions
diff --git a/modules/common/default.nix b/modules/common/default.nix
new file mode 100644
index 0000000..f338823
--- /dev/null
+++ b/modules/common/default.nix
@@ -0,0 +1,37 @@
+{ config, lib, pkgs, ... }:
+
+{
+ imports = [ ./nix-settings.nix ./networking.nix ];
+
+ # Time and Locale
+ time.timeZone = "UTC";
+ i18n.defaultLocale = "en_US.UTF-8";
+ console = {
+ font = "Lat2-Terminus16";
+ keyMap = "us";
+ };
+
+ # Default Packages Set
+ environment.systemPackages = with pkgs; [ vim htop wget nftables wireguard-tools ];
+
+ # Security
+ networking.firewall.enable = false;
+ security.sudo.wheelNeedsPassword = false;
+ services.openssh = {
+ enable = true;
+ settings = {
+ PasswordAuthentication = false;
+ PermitRootLogin = "no";
+ };
+ };
+
+ # CPU
+ powerManagement.cpuFreqGovernor = lib.mkDefault "ondemand";
+ hardware.cpu.amd.updateMicrocode =
+ lib.mkDefault config.hardware.enableRedistributableFirmware;
+ hardware.cpu.intel.updateMicrocode =
+ lib.mkDefault config.hardware.enableRedistributableFirmware;
+
+ # System state version
+ system.stateVersion = lib.mkDefault "23.05";
+}