treewide: initial commit

2026-04-18 16:28:25 -04:00
commit 75532a931c
18 changed files with 1237 additions and 0 deletions
@@ -0,0 +1,120 @@
+{
+  inputs',
+  inputs,
+  lib,
+  pkgs,
+  self,
+  ...
+}:
+let
+  inherit (lib)
+    mkDefault
+    mkIf
+    ;
+in
+{
+  imports = with inputs; [
+    agenix.nixosModules.default
+    impermanence.nixosModules.default
+    nix-index-database.nixosModules.nix-index
+
+    ./hardware.nix
+    ./impermanence.nix
+    ./modules
+    ./programs.nix
+    ./users.nix
+  ];
+
+  nix = {
+    package = inputs'.nix-super.packages.default;
+
+    settings = {
+      auto-optimise-store = true;
+      experimental-features = [
+        "ca-derivations"
+        "flakes"
+        "nix-command"
+      ];
+      log-lines = 500;
+      show-trace = true;
+      trusted-users = [
+        "@wheel"
+      ];
+
+      min-free = 10 * 1024 * 1024 * 1024;
+      max-free = 50 * 1024 * 1024 * 1024;
+    };
+
+    registry =
+      let
+        mappedRegistry = lib.mapAttrs' (name: flake: lib.nameValuePair name { inherit flake; }) inputs;
+      in
+      mappedRegistry // { default = mappedRegistry.nixpkgs; };
+
+    gc = {
+      automatic = true;
+      dates = "weekly";
+      options = "--delete-older-than 90d";
+    };
+  };
+
+  boot = {
+    loader = {
+      grub = {
+        enable = mkDefault true;
+        efiSupport = true;
+        efiInstallAsRemovable = true;
+        device = "nodev";
+        splashImage = null;
+        configurationLimit = 100;
+      };
+      timeout = 5;
+    };
+
+    kernelParams = [
+      "boot.shell_on_fail"
+      "zswap.enabled=0"
+    ];
+
+    binfmt = {
+      emulatedSystems = mkIf pkgs.stdenv.hostPlatform.isx86 [ "aarch64-linux" ];
+      preferStaticEmulators = true;
+    };
+
+    supportedFilesystems = [ "nfs" ];
+  };
+
+  networking = {
+    networkmanager.enable = true;
+
+    firewall = {
+      enable = true;
+
+      allowedTCPPorts = [
+        22
+      ];
+    };
+  };
+
+  services = {
+    openssh.enable = true;
+  };
+
+  virtualisation.podman.enable = true;
+
+  zramSwap = {
+    enable = true;
+
+    algorithm = mkDefault "lzo-rle";
+    memoryPercent = 100;
+  };
+
+  nixpkgs.config.allowUnfree = true;
+
+  environment.etc."nixos/current".source = lib.cleanSource ./..;
+
+  system = {
+    configurationRevision = self.rev or self.dirtyRev;
+    stateVersion = "25.11";
+  };
+}