Skip to content

Instantly share code, notes, and snippets.

@nand0p
Last active July 7, 2017 17:13
Show Gist options
  • Save nand0p/53b3e5b3d64c1d98dbc64ccd57bbbcbb to your computer and use it in GitHub Desktop.
Save nand0p/53b3e5b3d64c1d98dbc64ccd57bbbcbb to your computer and use it in GitHub Desktop.
{ config, pkgs, ... }:
{
imports = [
./hardware-configuration.nix
./hosts.nix
];
system = {
stateVersion = "17.03";
copySystemConfiguration = true;
autoUpgrade = {
channel= "https://nixos.org/channels/nixos-unstable";
enable = false;
};
};
boot = {
loader = {
systemd-boot.enable = true;
efi.canTouchEfiVariables = true;
};
kernel.sysctl = {
"net.ipv4.tcp_keepalive_time" = 60;
"net.core.rmem_max" = 4194304;
"net.core.wmem_max" = 1048576;
};
};
... ...
networking = {
domain = "example.com";
hostName = "workstation";
wireless.enable = false;
useDHCP = false;
firewall = {
enable = true;
allowedTCPPorts = [ 22 80 443 8010 8080 8888 ];
allowPing = true;
};
interfaces.enp2s0 = {
ipAddress = "10.0.0.2";
prefixLength = 24;
};
defaultGateway = "10.0.0.1";
nameservers = [ "8.8.8.8" ];
};
... ...
services = {
openssh.enable = true;
locate.enable = true;
transmission.enable = true;
xserver = {
enable = true;
layout = "us";
#autorun = false;
desktopManager.plasma5.enable = true;
displayManager.sddm.enable = true;
};
};
users.extraUsers = {
root.openssh.authorizedKeys.keys = [ "authkeyhere... "];
};
... ...
systemPackages = with pkgs; [
wget curl bind sysstat vnstat dstat htop screen tmux mosh nmap unzip nload iftop iptraf-ng bmon tcptrack slurm-llnl-full nethogs speedtest-cli vim vimPlugins.vim-nix vimPlugins.vim-go vimPlugins.vim-jsonnet vimPlugins.vim-jinja firefox lsof pciutils tcpdump netcat jwhois strace google-chrome spotify openvpn gimp go docker terraform chefdk vagrant packer jenkins git vlc mplayer ruby python27 python27Packages.virtualenv awscli nginx gnupg parted imagemagick qutebrowser vivaldi dillo arora conkeror transmission transgui virtualbox go-mtpfs xscreensaver xorg.xhost hdparm gparted dmidecode screen qemu smartmontools mkpasswd openssl file telnet electricsheep gcc binutils ansible2 wireshark kdiff3 hologram libreoffice spectacle atari800 stella vpnc openconnect jq traceroute atop
];
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment