initial commit

modules/features/system/networking-networkmanager.nix

@@ -0,0 +1,16 @@
+{ ... }:
+{
+  config.dendritic.features.networkmanager = {
+    nixosModules = [
+      (
+        { ... }:
+        {
+          networking.networkmanager = {
+            enable = true;
+            wifi.scanRandMacAddress = true;
+          };
+        }
+      )
+    ];
+  };
+}

modules/features/system/ntp-chrony.nix

@@ -0,0 +1,45 @@
+{ ... }:
+{
+  config.dendritic.features.ntp-chrony = {
+    nixosModules = [
+      (
+        { ... }:
+        {
+          services.chrony = {
+            enable = true;
+            enableNTS = true;
+            servers = [
+              "time.cloudflare.com iburst nts"
+              "ntppool1.time.nl iburst nts"
+              "nts.netnod.se iburst nts"
+              "ptbtime1.ptb.de iburst nts"
+              "time.dfm.dk iburst nts"
+              "time.cifelli.xyz iburst nts"
+            ];
+            # havent worked out the kinks yet
+            #  extraConfig = ''
+            #      minsources 3
+            #      authselectmode require
+
+            #      # EF
+            #      dscp 46
+
+            #      driftfile /var/lib/chrony/drift
+            #      dumpdir /var/lib/chrony
+            #      ntsdumpdir /var/lib/chrony
+
+            #      leapseclist /usr/share/zoneinfo/leap-seconds.list
+            #      makestep 1.0 3
+
+            #      rtconutc
+
+            #      cmdport 0
+
+            #      noclientlog
+            #  '';
+          };
+        }
+      )
+    ];
+  };
+}

modules/features/system/system-nix.nix

@@ -0,0 +1,36 @@
+{ ... }:
+{
+  config.dendritic.features.system-nix = {
+    nixosModules = [
+      (
+        { config, ... }:
+
+        let
+          user = config.dendritic.current.primaryUser;
+        in
+        {
+          nixpkgs.config.allowUnfree = true;
+
+          nix.settings = {
+            experimental-features = [
+              "nix-command"
+              "flakes"
+            ];
+
+            auto-optimise-store = true;
+
+            download-buffer-size = 262144000;
+            trusted-users = [ user ];
+            warn-dirty = false;
+
+            accept-flake-config = true;
+          };
+
+          services.fstrim.enable = true;
+
+          time.timeZone = "America/Toronto";
+        }
+      )
+    ];
+  };
+}

modules/features/system/system-services.nix

@@ -0,0 +1,41 @@
+{ ... }:
+{
+  config.dendritic.features.system-services = {
+    nixosModules = [
+      (
+        { ... }:
+        {
+          users.groups.netdev = { };
+
+          services = {
+            dbus.implementation = "broker";
+
+            logrotate = {
+              enable = true;
+              settings = {
+                header = {
+                  dateext = true;
+                };
+
+                "var/log/audit/audit.log" = {
+                  frequency = "daily";
+                  rotate = 3;
+                  size = "100k";
+                };
+              };
+            };
+
+            journald = {
+              storage = "volatile"; # Store logs in memory
+              upload.enable = false; # Disable remote log upload (the default)
+              extraConfig = ''
+                SystemMaxUse=500M
+                SystemMaxFileSize=50M
+              '';
+            };
+          };
+        }
+      )
+    ];
+  };
+}