sd-image.nix

{ ... }: rec {
  imports = [
    <nixpkgs/nixos/modules/installer/cd-dvd/sd-image-aarch64-new-kernel.nix>
  ];

  networking = {
    hostName = "bohr";
    firewall = {
      enable = true;
      allowedTCPPorts = services.openssh.ports;
    };
  };

  nixpkgs.system = "aarch64-linux";

  security.sudo = {
    enable = true;
    wheelNeedsPassword = false;
  };

  services.openssh = {
    enable = true;
    ports = [ 22 55888 ];
  };

  users.users.bemeurer = {
    createHome = true;
    description = "Bernardo Meurer";
    extraGroups = [ "wheel" ];
    isNormalUser = true;
    openssh.authorizedKeys.keys = [
      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIQgTWfmR/Z4Szahx/uahdPqvEP/e/KQ1dKUYLenLuY2 bemeurer.personal"
    ];
  };
}