50 lines
1.1 KiB
Nix
50 lines
1.1 KiB
Nix
{pkgs, ... }:
|
|
{
|
|
system.stateVersion = "23.05";
|
|
|
|
# Enables flakes and the updated `nix` command
|
|
nix.settings.experimental-features = [ "nix-command" "flakes" ];
|
|
|
|
# Enables opengl support
|
|
hardware.opengl.enable = true;
|
|
|
|
sound.enable = true;
|
|
services.jack.jackd.enable = true;
|
|
services.jack.alsa.enable = true;
|
|
|
|
# Includes packages needed for startx
|
|
services.xserver = {
|
|
enable = true;
|
|
displayManager.autoLogin.user = "appuser";
|
|
windowManager.fluxbox.enable = true;
|
|
};
|
|
|
|
users = {
|
|
# No need to edit users on a single-purpose system.
|
|
mutableUsers = false;
|
|
users = {
|
|
# My authorized keys are used for remote access
|
|
# CHANGE THIS if forking
|
|
root.openssh.authorizedKeys.keyFiles = [
|
|
./authorized_keys
|
|
];
|
|
# Unprivledged user for running the application.
|
|
appuser = {
|
|
isNormalUser = true;
|
|
extraGroups = [ "jackaudio" ];
|
|
password = "";
|
|
packages = with pkgs; [
|
|
graphfix puredata
|
|
];
|
|
};
|
|
};
|
|
};
|
|
|
|
# Allow SSH with authorized keys only!
|
|
services.openssh = {
|
|
enable = true;
|
|
settings.PasswordAuthentication = false;
|
|
};
|
|
}
|
|
|