| 1 | { pkgs, ... }: |
| 2 | |
| 3 | { |
| 4 | imports = [ |
| 5 | ../../modules/nftables.nix |
| 6 | ../../modules/prometheus |
| 7 | ]; |
| 8 | |
| 9 | boot.initrd.systemd.enable = true; |
| 10 | boot.zfs.forceImportRoot = false; |
| 11 | |
| 12 | time.timeZone = "UTC"; |
| 13 | |
| 14 | systemd.services.openssh.enable = true; |
| 15 | users.users.root.openssh.authorizedKeys.keys = (import ../../keys.nix).ssh.groups.infra; |
| 16 | |
| 17 | environment.systemPackages = with pkgs; [ neovim ]; |
| 18 | |
| 19 | security.acme.acceptTerms = true; |
| 20 | security.acme.defaults.email = "infra@nixos.org"; |
| 21 | } |