33c7f0b6fd
- Add users.luochen570 user config - Add nix substituters (Tsinghua mirror) - Add nix experimental-features (nix-command, flakes) - Set system.stateVersion to 25.05
53 lines
1.1 KiB
Nix
53 lines
1.1 KiB
Nix
{ modulesPath, ... }:
|
|
{
|
|
imports = [
|
|
(modulesPath + "/virtualisation/proxmox-lxc.nix")
|
|
];
|
|
|
|
# 修复 LXC 挂载报错
|
|
systemd.mounts = [
|
|
{ where = "/sys/kernel/debug"; enable = false; }
|
|
{ where = "/sys/fs/fuse/connections"; enable = false; }
|
|
];
|
|
systemd.services."sys-kernel-debug.mount".enable = false;
|
|
|
|
# 容器运行时设置
|
|
nix.settings.sandbox = false;
|
|
proxmoxLXC = {
|
|
manageNetwork = false;
|
|
privileged = true;
|
|
};
|
|
|
|
# 由宿主机处理 fstrim
|
|
services.fstrim.enable = false;
|
|
|
|
services.openssh = {
|
|
enable = true;
|
|
openFirewall = true;
|
|
settings = {
|
|
PermitRootLogin = "yes";
|
|
PasswordAuthentication = true;
|
|
};
|
|
};
|
|
|
|
# 用户账户配置
|
|
users.users.luochen570 = {
|
|
isNormalUser = true;
|
|
extraGroups = [ "wheel" "networkmanager" ];
|
|
};
|
|
|
|
security.sudo.wheelNeedsPassword = false;
|
|
|
|
services.resolved = {
|
|
extraConfig = ''
|
|
Cache=true
|
|
CacheFromLocalhost=true
|
|
'';
|
|
};
|
|
|
|
nix.settings.substituters = [ "https://mirrors.tuna.tsinghua.edu.cn/nix-channels/store" ];
|
|
nix.settings.experimental-features = [ "nix-command" "flakes" ];
|
|
|
|
system.stateVersion = "25.05";
|
|
}
|