tvl-depot/users/grfn/system/home/modules/common.nix

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

108 lines
2.2 KiB
Nix
Raw Normal View History

{ config, lib, pkgs, ... }:
# Everything in here needs to work on linux or darwin
{
imports = [
../modules/shell.nix
../modules/development.nix
../modules/emacs.nix
../modules/vim.nix
../modules/tarsnap.nix
2020-06-03 22:29:05 +02:00
../modules/twitter.nix
../modules/lib/cloneRepo.nix
];
nixpkgs.config.allowUnfree = true;
programs.password-store.enable = true;
grfn.impure.clonedRepos.passwordStore = {
github = "glittershark/pass";
path = ".local/share/password-store";
};
home.packages = with pkgs; [
# System utilities
bat
htop
killall
bind
zip unzip
tree
ncat
2020-06-03 22:29:22 +02:00
bc
pv
# Security
gnupg
keybase
openssl
# Nix things
nixfmt
nix-prefetch-github
nix-review
cachix
(writeShellScriptBin "rebuild-mugwump" ''
set -eo pipefail
cd ~/code/depot
nix build -f . users.grfn.system.system.mugwumpSystem -o /tmp/mugwump
nix copy -f . users.grfn.system.system.mugwumpSystem \
--to ssh://mugwump
system=$(readlink -ef /tmp/mugwump)
ssh mugwump sudo nix-env -p /nix/var/nix/profiles/system --set $system
ssh mugwump sudo $system/bin/switch-to-configuration switch
'')
(writeShellScriptBin "rebuild-home" ''
set -eo pipefail
cd ~/code/depot
nix build -f . users.grfn.system.home.$(hostname)Home -o /tmp/home
/tmp/home/activate
'')
];
programs.ssh = {
enable = true;
matchBlocks = {
"home" = {
host = "home.gws.fyi";
forwardAgent = true;
};
"dobharchu" = {
host = "dobharchu";
hostname = "172.16.0.4";
forwardAgent = true;
user = "griffin";
};
"cerberus" = {
host = "cerberus";
hostname = "172.16.0.3";
forwardAgent = true;
user = "griffin";
};
"mugwump" = {
host = "mugwump";
hostname = "172.16.0.5";
forwardAgent = true;
};
"roswell" = {
host = "roswell";
hostname = "18.223.118.13";
forwardAgent = true;
};
};
};
programs.direnv = {
enable = true;
enableBashIntegration = true;
enableZshIntegration = true;
};
}