Nix-Config/system/kernighan/kernighan.nix

{ config, pkgs, inputs, ... }:

{
  imports =
    [
      ../shared/shared-configuration.nix
      ./kernighan-hardware.nix
      ../shared/services/syncthing.nix
      ../shared/services/gitweb.nix
      ../shared/services/miniflux.nix
      ../shared/services/nginx.nix
      ../shared/services/radicale.nix
    ];

  networking = {
    hostName = "kernighan";
    firewall = {
      enable = false;
    };
  };

  boot = {
    loader.systemd-boot.enable = true;
    loader.efi.canTouchEfiVariables = true;
    initrd.kernelModules = [ "virtio_gpu" ];
    kernelParams = [ "console=tty" ];
  };

  environment.systemPackages = with pkgs; [
    apacheHttpd # Because we need htpasswd for Radicale, annoyingly
    cifs-utils # To mount Storage Box
    git
    git-crypt
    gnupg
    vim
  ];

  virtualisation.docker = {
    enable = true;
    storageDriver = "btrfs";
    logDriver = "json-file";
  };

  users.users.kamal = {
    isNormalUser = true;
    extraGroups = [
      "docker"
    ];
    openssh.authorizedKeys.keyFiles = [
      ../../users/tsv/authorized_keys
    ];
  };
}