refactor

profiles/nixos.nix

@@ -0,0 +1,58 @@
+{
+	pkgs,
+	user,
+	constants,
+	...
+}: {
+	security.sudo.enable = true;
+
+	system.stateVersion = constants.stateVersions.nixos;
+	time.timeZone = "UTC";
+
+	nix = {
+		settings.trusted-users = ["${user}"];
+		gc.dates = "weekly";
+		nixPath = ["nixos-config=/home/${user}/.local/share/src/nixos-config:/etc/nixos"];
+	};
+
+	boot = {
+		loader = {
+			systemd-boot = {
+				enable = true;
+				configurationLimit = 42;
+			};
+			efi.canTouchEfiVariables = true;
+		};
+		initrd.availableKernelModules = [
+			"xhci_pci"
+			"ahci"
+			"nvme"
+			"usbhid"
+			"usb_storage"
+			"sd_mod"
+		];
+		kernelPackages = pkgs.linuxPackages_latest;
+	};
+
+	users.users = {
+		${user} = {
+			isNormalUser = true;
+			home = "/home/${user}";
+			extraGroups = [
+				"wheel"
+				"sudo"
+				"network"
+				"systemd-journal"
+				"docker"
+			];
+			shell = pkgs.fish;
+			openssh.authorizedKeys.keys = constants.sshKeys;
+		};
+
+		root = {
+			openssh.authorizedKeys.keys = constants.sshKeys;
+		};
+	};
+
+	home-manager.useGlobalPkgs = true;
+}