teutat3s/os
2
0
Fork 0
forked from pub-solar/os
Code Pull requests Activity

profiles/core: add comments for each option

Browse source
This commit is contained in:
Parthiv Seetharaman 2021-12-29 14:42:51 -08:00 committed by teutat3s
parent d8c8fc35ad
commit ea8937cd51
Signed by: teutat3s
GPG key ID: 4FA1D3FA524F22C1
1 changed files with 6 additions and 12 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
profiles/core/default.nix
View file

@ -2,6 +2,7 @@
let inherit (lib) fileContents; let inherit (lib) fileContents;
in in
{ {
# Sets nrdxp.cachix.org binary cache which just speeds up some builds
imports = [ ../cachix ]; imports = [ ../cachix ];
config = { config = {
@ -86,18 +87,18 @@ in
nix = { nix = {
package = pkgs.nix-dram; package = pkgs.nix-dram;
# Improve nix store disk usage
autoOptimiseStore = true; autoOptimiseStore = true;
gc.automatic = true; gc.automatic = true;
optimise.automatic = true; optimise.automatic = true;
# Prevents impurities in builds
useSandbox = true; useSandbox = true;
allowedUsers = [ "@wheel" ]; # give root and @wheel special privileges with nix
trustedUsers = [ "root" "@wheel" ]; trustedUsers = [ "root" "@wheel" ];
# Generally useful nix option defaults
extraOptions = '' extraOptions = ''
min-free = 536870912 min-free = 536870912
keep-outputs = true keep-outputs = true
@ -108,14 +109,7 @@ in
''; '';
}; };
system.autoUpgrade.enable = true; # Service that makes Out of Memory Killer more effective
# For rage encryption, all hosts need a ssh key pair
services.openssh = {
enable = true;
openFirewall = lib.mkDefault false;
};
services.earlyoom.enable = true; services.earlyoom.enable = true;
boot.supportedFilesystems = [ "ntfs" ]; boot.supportedFilesystems = [ "ntfs" ];