initial commit

template/system/configuration.nix

@@ -0,0 +1,49 @@
+{
+  pkgs,
+  lib,
+  ...
+}: {
+  networking.hostName = "example";
+  networking.firewall.enable = true;
+  networking.firewall.allowPing = false;
+
+  environment.systemPackages = with pkgs; [
+    git
+  ];
+
+  nix.settings = {
+    experimental-features = lib.mkDefault "nix-command flakes";
+    auto-optimise-store = true;
+    trusted-users = ["root" "@wheel"];
+  };
+
+  security.sudo = {
+    enable = true;
+    execWheelOnly = true;
+    wheelNeedsPassword = false; # So we don't have to set a password for our user
+  };
+
+  users = {
+    mutableUsers = false; # Disallow creation of new users and groups
+
+    users."admin" = {
+      isNormalUser = true;
+      extraGroups = ["wheel"];
+    };
+  };
+
+  time.timeZone = "Europe/Vienna";
+
+  i18n.defaultLocale = "en_US.UTF-8";
+  i18n.extraLocaleSettings = {
+    LC_ADDRESS = "de_AT.UTF-8";
+    LC_IDENTIFICATION = "de_AT.UTF-8";
+    LC_MEASUREMENT = "de_AT.UTF-8";
+    LC_MONETARY = "de_AT.UTF-8";
+    LC_NAME = "de_AT.UTF-8";
+    LC_NUMERIC = "de_AT.UTF-8";
+    LC_PAPER = "de_AT.UTF-8";
+    LC_TELEPHONE = "de_AT.UTF-8";
+    LC_TIME = "de_AT.UTF-8";
+  };
+}

template/system/default.nix

@@ -0,0 +1,8 @@
+{...}: {
+  imports = [
+    ./disko.nix
+    ./impermanence.nix
+
+    ./configurations.nix
+  ];
+}

template/system/disko.nix

@@ -0,0 +1,6 @@
+{libs ? import ../libs, ...}:
+libs.diskSetup {
+  device = "/dev/sda";
+  ssd = true;
+  swapCapacity = "2G";
+}