{ inputs, config, lib, pkgs, outputs,... }: { imports = [ # Disk configuration inputs.disko.nixosModules.disko (import ../common/disks/std-disk-config.nix { device = "/dev/vda"; }) ../common/optional/btrfs-impermanence.nix inputs.impermanence.nixosModules.impermanence # Import core options ./hardware-configuration.nix ../common/core # Create users for this host ../common/users/media ]; nixpkgs = { overlays = [ outputs.overlays.additions outputs.overlays.modifications outputs.overlays.unstable-packages ]; config = { allowUnfree = true; }; }; environment.etc = { "xdg/user-dirs.defaults".text = '' DESKTOP=/home/media/Desktop ''; }; fileSystems."/persist".neededForBoot = true; environment.persistence."/persist" = { hideMounts = true; directories = [ "/etc/nixos" "/var/log" "/var/lib/nixos" "/var/lib/systemd/coredump" "/etc/NetworkManager/system-connections" ]; users.media = { directories = [ "sync" "keep" ".ssh" ]; }; }; boot = { loader = { systemd-boot.enable = true; efi.canTouchEfiVariables = true; timeout = 3; }; }; networking = { hostName = "sparky"; networkmanager.enable = true; enableIPv6 = false; }; services = { qemuGuest.enable = true; openssh = { enable = true; ports = [22]; # FIXME: Make this use configVars.networking settings.PermitRootLogin = "yes"; authorizedKeysFiles = lib.mkForce ["/etc/ssh/authorized_keys.d/%u"]; }; }; services.libinput.enable = true; services.displayManager.defaultSession = "cinnamon"; services.xserver = { enable = true; displayManager.lightdm.enable = true; desktopManager = { cinnamon.enable = true; }; }; security.pam = { sshAgentAuth.enable = true; services = { sudo.u2fAuth = true; }; }; nix.settings.experimental-features = [ "nix-command" "flakes" ]; system.stateVersion = "23.11"; }