1 files changed, 109 insertions, 0 deletions
diff --git a/hosts/oixos/default.nix b/hosts/oixos/default.nix
new file mode 100644
index 0000000..ba853e2
--- /dev/null
+++ b/hosts/oixos/default.nix
@@ -0,0 +1,109 @@
+{
+  systemState,
+  user,
+  hostname,
+}:
+{
+  pkgs,
+  config,
+  inputs,
+  lib,
+  ...
+}:
+{
+  imports = [
+    inputs.disko.nixosModules.disko
+    ./disko.nix
+    ./hardware-configuration.nix
+    ./cgit.nix
+  ];
+
+  nix.settings = {
+    trusted-users = [ "@wheel" ];
+    experimental-features = [
+      "nix-command"
+      "flakes"
+    ];
+    auto-optimise-store = true;
+  };
+
+  services.chrony.enable = true;
+
+  time.timeZone = "UTC";
+  i18n.defaultLocale = "en_US.UTF-8";
+
+  boot.loader.systemd-boot = {
+    enable = true;
+    editor = false;
+  };
+  boot.loader.timeout = 0;
+  boot.loader.efi.canTouchEfiVariables = false;
+
+  # boot.loader.grub = {
+  #   efiSupport = true;
+  #   efiInstallAsRemovable = true;
+  # };
+
+  networking.hostName = hostname;
+  networking.firewall.enable = true;
+  networking.firewall.allowedTCPPorts = [
+    80
+    443
+  ];
+  networking.firewall.allowedUDPPorts = [ ];
+
+  networking.useDHCP = true;
+
+  services.openssh = {
+    enable = true;
+    settings = {
+      PermitRootLogin = "prohibit-password";
+      PasswordAuthentication = false;
+    };
+  };
+
+  users.users.beeb5k = {
+    isNormalUser = true;
+    extraGroups = [ "wheel" ];
+
+    openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGTMc0gNGM6vI8s9CrW+fYlW4ppRTKRCELOve3Izj1VD beeb5k"
+    ];
+  };
+
+  services.cloud-init.enable = true;
+
+  users.users.root.openssh.authorizedKeys.keys = [
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGTMc0gNGM6vI8s9CrW+fYlW4ppRTKRCELOve3Izj1VD beeb5k"
+  ];
+
+  environment.systemPackages = with pkgs; [
+    git
+    fastfetch
+  ];
+
+  # security.sudo.wheelNeedsPassword = false;
+
+  programs.bash.promptInit = ''
+    if [ "$TERM" != "dumb" ] || [ -n "$INSIDE_EMACS" ]; then
+     # Removed the '1;' prefix to disable bold
+     PROMPT_COLOR="31m"
+     ((UID)) && PROMPT_COLOR="32m"
+
+     if [ -n "$INSIDE_EMACS" ]; then
+       PS1="\[\033[$PROMPT_COLOR\]\u@\h:\w\\$\[\033[0m\] "
+     else
+       PS1="\[\e[94m\]\u@\h \[\e[32m\]\w \[\e[39m\]\$ \[\e[0m\]"
+     fi
+
+     if test "$TERM" = "xterm"; then
+       PS1="\[\033]2;\h:\u:\w\007\]$PS1"
+     fi
+    fi
+  '';
+
+  nixpkgs.hostPlatform = "aarch64-linux";
+
+  system.stateVersion = systemState;
+
+}