first commit

modules/core/default.nix

@@ -0,0 +1,10 @@
+{
+  ...
+}:
+{
+  imports = [
+    ./grub.nix
+    ./packages.nix
+    ./users.nix
+  ];
+}

modules/core/grub.nix

@@ -0,0 +1,18 @@
+{
+  ...
+}:
+{
+  ## Configure boot loader
+  boot.loader = {
+    # Use grub without NVRAM
+    grub = {
+      enable = true;
+      efiSupport = true;
+      device = "nodev";
+      efiInstallAsRemovable = true;
+      useOSProber = true;
+    };
+    # Do not edit NVRAM
+    efi.canTouchEfiVariables = false;
+  };
+}

modules/core/packages.nix

@@ -0,0 +1,19 @@
+{
+  pkgs,
+  ...
+}:
+{
+  environment.systemPackages = [
+    pkgs.curl
+    pkgs.pciutils
+    # pkgs.clinfo <- IDC info, move to GPU
+    pkgs.git
+    pkgs.htop
+    pkgs.killall
+    pkgs.bind
+    pkgs.git
+    pkgs.neovim
+    pkgs.unzip
+
+  ];
+}

modules/core/users.nix

@@ -0,0 +1,27 @@
+{
+  config,
+  username,
+  ...
+}:
+{
+  users = {
+    users = {
+      ${username} = {
+        isNormalUser = true;
+        createHome = true;
+        hashedPasswordFile = config.sops.secrets."users_password/beastie".path;
+        description = "Admin account";
+        extraGroups = [
+          "wheel"
+        ];
+        openssh.authorizedKeys.keys = [
+          "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAKMJ3TkEmRQcX7RQijNa2km6a2xXJk6M6FERh7C9nTJ"
+        ];
+      };
+      root = {
+        password = null;
+      };
+    };
+    mutableUsers = false;
+  };
+}