nixcfg/shared/default.nix

{ pkgs, config, inputs, modulesPath, machine, ... }:

{
  imports = [
    ./network.nix
    ./users.nix
    ./ssh.nix
    ./rdma.nix
    ./ssl.nix

    "${modulesPath}/profiles/headless.nix"
    "${modulesPath}/profiles/all-hardware.nix"
  ];

  sops = {
    defaultSopsFile = /${machine.path}/secrets.yaml;
    defaultSopsFormat = "yaml";

    age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
  };

  gather = {
    target = part: "gathered/${config.networking.hostName}/${part}";
    root = ../.;
  };

  time.timeZone = "Europe/Berlin";
  console.keyMap = "de";

  environment.systemPackages = with pkgs; [
    openmpi
    vim
    wget
    curl
    tmux
    fd
    ripgrep
    zlib
    htop
    iotop
    iftop
    git
  ];

  nix.nixPath = [
    "nixpkgs=${inputs.nixpkgs}"
  ];

  # Performance FTW!
  boot.kernelParams = [
    "mitigations=off"
  ];

  services.haveged.enable = true;

  system.stateVersion = "22.11";
}