a2bd672cf7
- sudo (wheelNeedsPassword) → modules/core/core.nix (全局) - LXC SSH override (PermitRootLogin, PasswordAuth) → profiles/lxc.nix - modules/server/ssh.nix: use mkDefault so profiles can override - Delete modules/optional/lxc.nix - Clean up hosts/nixos-lxc/configuration.nix: remove redundant SSH/sudo/users (now handled by core + server + profile chain) - Update modules/optional/README.md
31 lines
736 B
Nix
31 lines
736 B
Nix
{ lib, ... }:
|
|
{
|
|
nix.settings = {
|
|
experimental-features = [ "nix-command" "flakes" ];
|
|
auto-optimise-store = true;
|
|
substituters = [
|
|
"https://cache.nixos.org"
|
|
"https://mirrors.tuna.tsinghua.edu.cn/nix-channels/store"
|
|
"https://mirror.sjtu.edu.cn/nix-channels/store"
|
|
];
|
|
trusted-public-keys = [
|
|
"cache.nixos.org-1:6NCHdD59X431o0gWypbtr1HEhF2M7wP6+jJj6Jm23UM="
|
|
];
|
|
};
|
|
|
|
nix.gc = {
|
|
automatic = true;
|
|
dates = "weekly";
|
|
options = "--delete-older-than 14d";
|
|
};
|
|
|
|
nixpkgs.config.allowUnfree = true;
|
|
|
|
time.timeZone = lib.mkDefault "Asia/Shanghai";
|
|
i18n.defaultLocale = lib.mkDefault "zh_CN.UTF-8";
|
|
|
|
# 允许 wheel 组免密 sudo
|
|
security.sudo.wheelNeedsPassword = false;
|
|
|
|
}
|