configuration.nix

{ config, pkgs, ... }:
{
  imports = [
    ./hardware-configuration.nix
    ./hosts.nix
  ];
  system = {
    stateVersion = "17.03";
    copySystemConfiguration = true;
    autoUpgrade = {
      channel= "https://nixos.org/channels/nixos-unstable";
      enable = false;
    };
  };
  boot = {
    loader = {
      systemd-boot.enable = true;
      efi.canTouchEfiVariables = true;
    };
    kernel.sysctl = {
      "net.ipv4.tcp_keepalive_time" = 60;
      "net.core.rmem_max" = 4194304;
      "net.core.wmem_max" = 1048576;
    };
  };
... ...
  networking = {
    domain = "example.com";
    hostName = "workstation";
    wireless.enable = false;
    useDHCP  = false;
    firewall = {
      enable = true;
      allowedTCPPorts = [ 22 80 443 8010 8080 8888 ];
      allowPing = true;
    };
    interfaces.enp2s0 = {
      ipAddress = "10.0.0.2";
      prefixLength = 24;
    };
    defaultGateway = "10.0.0.1";
    nameservers = [ "8.8.8.8" ];
  };
... ...
  services = {
    openssh.enable = true;
    locate.enable = true;
    transmission.enable = true;
    xserver = {
      enable = true;
      layout = "us";
      #autorun = false;
      desktopManager.plasma5.enable = true;
      displayManager.sddm.enable = true;
    };
  };
  users.extraUsers = {
    root.openssh.authorizedKeys.keys = [ "authkeyhere... "];
  };
... ...
    systemPackages = with pkgs; [
      wget curl bind sysstat vnstat dstat htop screen tmux mosh nmap unzip nload iftop iptraf-ng bmon tcptrack slurm-llnl-full nethogs speedtest-cli vim vimPlugins.vim-nix vimPlugins.vim-go vimPlugins.vim-jsonnet vimPlugins.vim-jinja firefox lsof pciutils tcpdump netcat jwhois strace google-chrome spotify openvpn gimp go docker terraform chefdk vagrant packer jenkins git vlc mplayer ruby python27 python27Packages.virtualenv awscli nginx gnupg parted imagemagick qutebrowser vivaldi dillo arora conkeror transmission transgui virtualbox go-mtpfs xscreensaver xorg.xhost hdparm gparted dmidecode screen qemu smartmontools mkpasswd openssl file telnet electricsheep gcc binutils ansible2 wireshark kdiff3 hologram libreoffice spectacle atari800 stella vpnc openconnect jq traceroute atop
    ];