Miguel Palhas
817c2f4f5e
- nix: keep-outputs + keep-derivations (preserve devshells across GC) - zramSwap + fstrim - systemd-boot configurationLimit = 20 - expand .gitignore (editor/AI/stray dotfiles); track statix.toml - gitea Actions CI: blocking flake-check eval + informational statix/deadnix/nixfmt Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
39 lines
1002 B
Nix
39 lines
1002 B
Nix
{ pkgs, ... }:
|
|
{
|
|
programs.zsh.enable = true;
|
|
|
|
users.users.naps62 = {
|
|
isNormalUser = true;
|
|
description = "Miguel Palhas";
|
|
extraGroups = [
|
|
"networkmanager"
|
|
"input"
|
|
"wheel"
|
|
"docker"
|
|
"dialout"
|
|
"adbusers"
|
|
"kvm"
|
|
];
|
|
shell = pkgs.zsh;
|
|
initialHashedPassword = "$y$j9T$uRTzF/sBdrqVGZTRhPuR00$wgLgEGlq.lEmlCPiy69jkbtfC9HKpyaVPDHDdBGtE5D";
|
|
openssh.authorizedKeys.keys =
|
|
let
|
|
authorizedKeys = pkgs.fetchurl {
|
|
url = "https://github.com/naps62.keys";
|
|
sha256 = "sha256-KNei7flY0a+dIHdJjeU1+MQGAZRoz8RJnNS75svDIBY=";
|
|
};
|
|
in
|
|
pkgs.lib.splitString "\n" (builtins.readFile authorizedKeys);
|
|
};
|
|
|
|
boot.loader = {
|
|
systemd-boot.enable = true;
|
|
# Cap boot menu entries so old generations don't accumulate forever
|
|
# (GC prunes the store; this prunes the boot entries).
|
|
systemd-boot.configurationLimit = 20;
|
|
efi.canTouchEfiVariables = true;
|
|
};
|
|
|
|
system.stateVersion = "24.05";
|
|
}
|