32 lines
820 B
Nix
32 lines
820 B
Nix
{ lib, config, pkgs, ... }:
|
|
|
|
{
|
|
services = {
|
|
tor.enable = true;
|
|
logmein-hamachi.enable = true;
|
|
openssh = {
|
|
enable = true;
|
|
permitRootLogin = "yes";
|
|
};
|
|
btrfs.autoScrub.enable = true;
|
|
udev.extraRules = ''
|
|
ACTION=="add|change", KERNEL=="sda", ATTR{queue/rotational}=="0", ATTR{queue/scheduler}="bfq"
|
|
'';
|
|
};
|
|
systemd.enableUnifiedCgroupHierarchy = false;
|
|
systemd.services = {
|
|
tor.wantedBy = lib.mkForce [ ];
|
|
logmein-hamachi.wantedBy = lib.mkForce [ ];
|
|
openssh.wantedBy = lib.mkForce [ ];
|
|
#printing.wantedBy = lib.mkForce [];
|
|
#vault.wantedBy = lib.mkForce [];
|
|
};
|
|
security.pki.certificateFiles = [ ../../cert.pem ];
|
|
virtualisation.libvirtd = {
|
|
enable = true;
|
|
onBoot = "ignore";
|
|
onShutdown = "shutdown";
|
|
qemu.runAsRoot = true;
|
|
};
|
|
}
|