···

       
5
       
 
       
    ./hardware-configuration.nix

     

       
6
       
 
       
  ];

     

       
7
       
 
       


     

       
8
       
-
       
  nixpkgs.hostPlatform.system = "x86_64-linux";

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
9
       
 
       
  nix.settings.experimental-features = [ "nix-command" "flakes" ];

     

       
10
       
-
       
  system.stateVersion = "22.11";

     

       
11
       
-
       


     

       
12
       
-
       
  services.openssh = {

     

       
13
       
-
       
    enable = true;

     

       
14
       
-
       
    settings.passwordAuthentication = false;

     

       
15
       
-
       
  };

     

       
16
       
 
       


     

       
17
       
 
       
  environment.systemPackages = with pkgs; [

     

       
18
       
 
       
    git # for nix flakes

     

       
19
       
 
       
    vim # for editing config files

     

       
0
       
 
       

     

       
20
       
 
       
  ];

     

       
21
       
 
       


     

       
22
       
-
       
  users.users.root = {

     

       
23
       
-
       
    initialHashedPassword = "";

     

       
24
       
-
       
    users.users.root.openssh.authorizedKeys.keys = [

     

       
25
       
-
       
      # "ssh-ed25519 <key> <name>"

     

       
26
       
-
       
    ];

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
27
       
 
       
  };

     

       
28
       
 
       


     

       
29
       
 
       
  # TODO replace this with domain

     

       
30
       
 
       
  networking.domain = "example.org";

     

       
31
       
 
       
  security.acme.acceptTerms = true;

     

       
32
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
33
       
 
       
  eilean = {

     

       
34
       
 
       
    # TODO replace these values

     

       
35
       
 
       
    username = "user";

     
···

       
38
       
 
       
    serverIpv6 = "2001:DB8::/64";

     

       
39
       
 
       
    publicInterface = "eth0";

     

       
40
       
 
       


     

       
0
       
 
       

     

       
41
       
 
       
    # mailserver.enable = true;

     

       
42
       
 
       
    # matrix.enable = true;

     

       
43
       
 
       
    # turn.enable = true;

     
···

       
45
       
 
       
    # gitea.enable = true;

     

       
46
       
 
       
    # dns.enable = true;

     

       
47
       
 
       
  };

     

       
48
       
-
       
}

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

···

       
5
       
 
       
    ./hardware-configuration.nix

     

       
6
       
 
       
  ];

     

       
7
       
 
       


     

       
8
       
+
       
  boot.loader = {

     

       
9
       
+
       
    systemd-boot.enable = true;

     

       
10
       
+
       
    efi.canTouchEfiVariables = true;

     

       
11
       
+
       
  };

     

       
12
       
+
       


     

       
13
       
 
       
  nix.settings.experimental-features = [ "nix-command" "flakes" ];

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
14
       
 
       


     

       
15
       
 
       
  environment.systemPackages = with pkgs; [

     

       
16
       
 
       
    git # for nix flakes

     

       
17
       
 
       
    vim # for editing config files

     

       
18
       
+
       
    # TODO add any other programs you want to install here

     

       
19
       
 
       
  ];

     

       
20
       
 
       


     

       
21
       
+
       
  # very simple prompt

     

       
22
       
+
       
  programs.bash.promptInit = ''

     

       
23
       
+
       
    PS1='\u@\h:\w \$ '

     

       
24
       
+
       
  '';

     

       
25
       
+
       


     

       
26
       
+
       
  users.users = rec {

     

       
27
       
+
       
    # TODO set hashed password from `nix run nixpkgs#mkpasswd`

     

       
28
       
+
       
    root.initialHashedPassword = "";

     

       
29
       
+
       
    # TODO change username, if desired

     

       
30
       
+
       
    eilean = {

     

       
31
       
+
       
      isNormalUser = true;

     

       
32
       
+
       
      extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.

     

       
33
       
+
       
      initialHashedPassword = root.initialHashedPassword;

     

       
34
       
+
       
      # TODO define SSH keys if accessing remotely

     

       
35
       
+
       
      openssh.authorizedKeys.keys = [

     

       
36
       
+
       
        # "ssh-ed25519 <key> <name>"

     

       
37
       
+
       
      ];

     

       
38
       
+
       
    };

     

       
39
       
+
       
  };

     

       
40
       
+
       


     

       
41
       
+
       
  services.openssh = {

     

       
42
       
+
       
    enable = true;

     

       
43
       
+
       
    settings.passwordAuthentication = false;

     

       
44
       
 
       
  };

     

       
45
       
 
       


     

       
46
       
 
       
  # TODO replace this with domain

     

       
47
       
 
       
  networking.domain = "example.org";

     

       
48
       
 
       
  security.acme.acceptTerms = true;

     

       
49
       
 
       


     

       
50
       
+
       
  # TODO select internationalisation properties

     

       
51
       
+
       
  i18n.defaultLocale = "en_GB.UTF-8";

     

       
52
       
+
       
  time.timeZone = "Europe/London";

     

       
53
       
+
       
  console.keyMap = "uk";

     

       
54
       
+
       


     

       
55
       
 
       
  eilean = {

     

       
56
       
 
       
    # TODO replace these values

     

       
57
       
 
       
    username = "user";

     
···

       
60
       
 
       
    serverIpv6 = "2001:DB8::/64";

     

       
61
       
 
       
    publicInterface = "eth0";

     

       
62
       
 
       


     

       
63
       
+
       
    # TODO enable desired services

     

       
64
       
 
       
    # mailserver.enable = true;

     

       
65
       
 
       
    # matrix.enable = true;

     

       
66
       
 
       
    # turn.enable = true;

     
···

       
68
       
 
       
    # gitea.enable = true;

     

       
69
       
 
       
    # dns.enable = true;

     

       
70
       
 
       
  };

     

       
71
       
+
       


     

       
72
       
+
       
  # This value determines the NixOS release from which the default

     

       
73
       
+
       
  # settings for stateful data, like file locations and database versions

     

       
74
       
+
       
  # on your system were taken. It's perfectly fine and recommended to leave

     

       
75
       
+
       
  # this value at the release version of the first install of this system.

     

       
76
       
+
       
  # Before changing this value read the documentation for this option

     

       
77
       
+
       
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).

     

       
78
       
+
       
  system.stateVersion = "23.05"; # Did you read the comment?

     

       
79
       
+
       
}