os/modules/core/default.nix

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

36 lines
780 B
Nix
Raw Normal View History

2023-01-28 20:49:10 +00:00
{ config, lib, ... }:
let
2023-01-28 20:49:10 +00:00
cfg = config.pub-solar.core;
psCfg = config.pub-solar;
2023-01-28 20:49:10 +00:00
in
{
imports = [
./boot.nix
2022-08-14 18:09:38 +00:00
./hibernation.nix
./i18n.nix
./networking.nix
./packages.nix
];
# Service that makes Out of Memory Killer more effective
services.earlyoom.enable = true;
services.logind.lidSwitch = "hibernate";
services.tor.settings = {
UseBridges = true;
};
# The options below are directly taken from or inspired by
# https://xeiaso.net/blog/paranoid-nixos-2021-07-18
# Limit the use of sudo to the group wheel
security.sudo.execWheelOnly = true;
# Remove the complete default environment of packages like
# nano, perl and rsync
environment.defaultPackages = lib.mkForce [ ];
# fileSystems."/".options = [ "noexec" ];
}