nixcfg/shared/default.nix

{ pkgs, config, inputs, modulesPath, machine, ... }:

{
  imports = [
    ./packages.nix
    ./network.nix
    ./users.nix
    ./userenv.nix
    ./ssh.nix
    ./rdma.nix
    ./ssl.nix
    ./slurm.nix
    ./edumpi.nix

    "${modulesPath}/profiles/headless.nix"
    "${modulesPath}/profiles/all-hardware.nix"
  ];

  sops = {
    defaultSopsFile = /${machine.path}/secrets.yaml;
    defaultSopsFormat = "yaml";

    age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
  };

  gather = {
    target = part: "gathered/${config.networking.hostName}/${part}";
    root = ../.;
  };

  time.timeZone = "Europe/Berlin";
  console.keyMap = "de";

  environment.systemPackages = with pkgs; [
    vim
    wget
    curl
    tmux
    fd
    ripgrep
    htop
    iotop
    iftop
    file
  ];

  nix.nixPath = [
    "nixpkgs=${inputs.nixpkgs}"
  ];

  boot.kernelParams = [
    "mitigations=off" # Performance FTW!

    "console=tty0"
    "console=ttyS1,57600n8"
  ];

  services.haveged.enable = true;

  services.prometheus.exporters = {
    node.enable = true;
    ipmi.enable = true;
  };

  system.stateVersion = "22.11";
}