summaryrefslogtreecommitdiff
path: root/system/default.nix
diff options
context:
space:
mode:
Diffstat (limited to 'system/default.nix')
-rw-r--r--system/default.nix43
1 files changed, 40 insertions, 3 deletions
diff --git a/system/default.nix b/system/default.nix
index f6a6fa3..e912856 100644
--- a/system/default.nix
+++ b/system/default.nix
@@ -22,16 +22,41 @@
];
# allow flakes
- nix.settings.experimental-features = ["nix-command" "flakes"];
- nix.settings.use-xdg-base-directories = true;
+ nix = {
+ channel.enable = false;
+ extraOptions = ''
+ warn-dirty = false
+ '';
+ settings = {
+ auto-optimise-store = true;
+ experimental-features = ["nix-command" "flakes"];
+ use-xdg-base-directories = true;
+ trusted-users = ["root" "@wheel"];
+ max-jobs = config.cores / 4;
+ cores = (config.cores - 2) / config.nix.settings.max-jobs;
+ };
+ };
# allow defined unfree packages
nixpkgs.config.allowUnfreePredicate = pkg:
builtins.elem (lib.getName pkg) config.unfreePackages;
+ # load overlays
+ nixpkgs.overlays = [
+ (final: _: import ../pkgs {pkgs = final;})
+ ];
+
# set state version
system.stateVersion = config.stateVersion;
+ # use tmpfs on /tmp
+ boot.tmp = {
+ useTmpfs = true;
+ tmpfsSize = "50%";
+ };
+
+ services.seatd.enable = true;
+
# use system packages in home manager
home-manager.useGlobalPkgs = true;
@@ -83,6 +108,7 @@
wget
];
+ environment.defaultPackages = lib.mkForce [];
environment.systemPackages = config.extraPackages;
# system shell
@@ -93,6 +119,7 @@
};
# use the latest kernel
+
boot.kernelPackages = pkgs.linuxPackages_latest;
# sysrq
@@ -106,8 +133,11 @@
# docs
documentation = {
- info.enable = false;
+ enable = true;
+ doc.enable = false;
+ man.enable = true;
dev.enable = false;
+ info.enable = false;
nixos.enable = false;
};
@@ -125,4 +155,11 @@
# certs
security.pki.certificateFiles = inputs.self.lib.certs;
+
+ # sudo
+ security.sudo.enable = false;
+ security.sudo-rs = {
+ enable = true;
+ execWheelOnly = true;
+ };
}