all repos — nixfiles @ 9ceb482b714b5a2d39f0898323ffc33ea2eae1ca

System and user configuration, managed by nix and home-manager

system/roles/base.nix (view raw)

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
{
  config,
  lib,
  ...
}:
{
  imports = [
    ./nix-build-client.nix
    ../settings/configuration/user.nix

    ../settings/programs/neovim.nix
    ../settings/programs/shell.nix
    ../settings/programs/base.nix
  ];

  systemd.settings.Manager = {
    StatusUnitFormat = "name";
  };
  boot.initrd.systemd.settings.Manager = {
    StatusUnitFormat = "name";
  };

  networking = {
    nftables.enable = lib.mkDefault true;
    firewall = {
      pingLimit =
        if config.networking.nftables.enable then
          "60/minute burst 30 packets"
        else
          "--limit 60/minute --limit-burst 30";
      logRefusedConnections = false;
    };
  };
}