From 7aa912237697c08537688cc4d13d75bff819f7aa Mon Sep 17 00:00:00 2001
From: Franck Cuny <franck@fcuny.net>
Date: Tue, 2 May 2023 08:03:36 -0700
Subject: profiles/default: more consolidation

---
 profiles/default.nix       | 53 ++++++++++++++++++++++++++++++++++++++++++++++
 profiles/documentation.nix | 15 +++++++++++++
 profiles/server.nix        |  7 ++++++
 profiles/workstation.nix   |  1 +
 4 files changed, 76 insertions(+)
 create mode 100644 profiles/documentation.nix

(limited to 'profiles')

diff --git a/profiles/default.nix b/profiles/default.nix
index f415edf..7421144 100644
--- a/profiles/default.nix
+++ b/profiles/default.nix
@@ -4,4 +4,57 @@
   i18n.defaultLocale = "en_US.UTF-8";
 
   time.timeZone = "America/Los_Angeles";
+
+  security.sudo.wheelNeedsPassword = false;
+  security.polkit.enable = true;
+
+  programs.ssh = {
+    # $ ssh-keyscan example.com
+    knownHosts = {
+      github = {
+        hostNames = [ "github.com" ];
+        publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl";
+      };
+      rsync = {
+        hostNames = [ "de2664.rsync.net" ];
+        publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIObQN4P/deJ/k4P4kXh6a9K4Q89qdyywYetp9h3nwfPo";
+      };
+    };
+  };
+
+  nix = {
+    package = pkgs.nixFlakes;
+    settings = {
+      trusted-users = [ "root" "@wheel" ];
+      auto-optimise-store = true;
+      substituters = [
+        "https://cachix.cachix.org"
+        "https://nix-community.cachix.org"
+      ];
+      trusted-public-keys = [
+        "cachix.cachix.org-1:eWNHQldwUO7G2VkjpnjDbWwy4KQ/HNxht7H4SSoMckM="
+        "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
+      ];
+      experimental-features = [ "nix-command" "flakes" ];
+      # Whether to warn about dirty Git/Mercurial trees - this is not
+      # useful information to me.
+      warn-dirty = false;
+      # The timeout (in seconds) for establishing connections in the binary
+      # cache substituter. It corresponds to curl’s –connect-timeout option.
+      # The default is equivalent to 300 seconds, way too long.
+      connect-timeout = 5;
+      # The number of lines of the tail of the log to show if a build fails.
+      # The default is 10 and it's usually too short.
+      log-lines = 25;
+      # If set to true, Nix will fall back to building from source if
+      # a binary substitute fails. This is equivalent to the –fallback
+      # flag. The default is false.
+      fallback = true;
+    };
+
+    gc = {
+      automatic = true;
+      options = "--delete-older-than 14d";
+    };
+  };
 }
diff --git a/profiles/documentation.nix b/profiles/documentation.nix
new file mode 100644
index 0000000..71ba06b
--- /dev/null
+++ b/profiles/documentation.nix
@@ -0,0 +1,15 @@
+{ config, lib, pkgs, ... }:
+{
+  documentation = {
+    enable = true;
+    dev.enable = true;
+    info.enable = true;
+    man.enable = true;
+    nixos.enable = true;
+  };
+
+  environment.systemPackages = with pkgs; [
+    man-pages
+    man-pages-posix
+  ];
+}
diff --git a/profiles/server.nix b/profiles/server.nix
index 5b96d56..27498d6 100644
--- a/profiles/server.nix
+++ b/profiles/server.nix
@@ -3,4 +3,11 @@
   imports = [
     ./default.nix
   ];
+
+  console = {
+    earlySetup = true;
+    font = "${pkgs.terminus_font}/share/consolefonts/ter-132n.psf.gz";
+    packages = with pkgs; [ terminus_font ];
+    keyMap = "us";
+  };
 }
diff --git a/profiles/workstation.nix b/profiles/workstation.nix
index 2c7ee02..151357c 100644
--- a/profiles/workstation.nix
+++ b/profiles/workstation.nix
@@ -2,6 +2,7 @@
 {
   imports = [
     ./default.nix
+    ./documentation.nix
   ];
 
   virtualisation.docker.enable = false;
-- 
cgit 1.4.1