forked from DGNum/infrastructure
Tom Hubrecht
88d9b8c3e3
Signed-off-by: Tom Hubrecht <tom.hubrecht@dgnum.eu> Acked-by: Ryan Lahfa <ryan.lahfa@dgnum.eu> Acked-by: Maurice Debray <maurice.debray@dgnum.eu> Acked-by: Lubin Bailly <lubin.bailly@dgnum.eu> Acked-by: Jean-Marc Gailis <jean-marc.gailis@dgnum.eu> as the legal authority, at the time of writing, in DGNum. Acked-by: Elias Coppens <elias.coppens@dgnum.eu> as a member, at the time of writing, of the DGNum executive counsel.
42 lines
774 B
Nix
42 lines
774 B
Nix
# SPDX-FileCopyrightText: 2024 Tom Hubrecht <tom.hubrecht@dgnum.eu>
|
|
#
|
|
# SPDX-License-Identifier: EUPL-1.2
|
|
|
|
{ lib, pkgs, ... }:
|
|
|
|
let
|
|
dgn-keys = import ../keys;
|
|
|
|
dgn-members = (import ../meta lib).organization.groups.root;
|
|
in
|
|
|
|
{
|
|
imports = [ ./dgn-install ];
|
|
|
|
boot = {
|
|
blacklistedKernelModules = [ "snd_pcsp" ];
|
|
kernelPackages = pkgs.linuxPackages_latest;
|
|
tmp.cleanOnBoot = true;
|
|
|
|
loader = {
|
|
systemd-boot.enable = true;
|
|
efi.canTouchEfiVariables = true;
|
|
};
|
|
|
|
supportedFilesystems = [
|
|
"exfat"
|
|
"zfs"
|
|
"bcachefs"
|
|
];
|
|
|
|
swraid.enable = lib.mkForce false;
|
|
};
|
|
|
|
console.keyMap = "fr";
|
|
|
|
services = {
|
|
openssh.enable = true;
|
|
};
|
|
|
|
users.users.root.openssh.authorizedKeys.keys = dgn-keys.getKeys dgn-members;
|
|
}
|