init

modules/basic/default.nix

@@ -0,0 +1,18 @@
+{ config, pkgs, ... }:
+
+{
+  imports = [
+    ./locales.nix
+    ./nix.nix
+    ./security.nix
+  ];
+
+  services = {
+    fwupd.enable = true;
+
+    # override nixos-hardware profile
+    throttled.enable = false;
+    thermald.enable = true;
+  };
+}
+

modules/basic/locales.nix

@@ -0,0 +1,24 @@
+{ config, pkgs, ... }:
+
+{
+  console = {
+    font = "lat9w-16";
+    keyMap = "dk-latin1";
+  };
+
+  i18n.defaultLocale = "en_DK.UTF-8";
+
+  time.timeZone = "Europe/Copenhagen";
+
+  i18n.extraLocaleSettings = {
+    LC_ADDRESS = "da_DK.UTF-8";
+    LC_IDENTIFICATION = "da_DK.UTF-8";
+    LC_MEASUREMENT = "da_DK.UTF-8";
+    LC_MONETARY = "da_DK.UTF-8";
+    LC_NAME = "da_DK.UTF-8";
+    LC_NUMERIC = "da_DK.UTF-8";
+    LC_PAPER = "da_DK.UTF-8";
+    LC_TELEPHONE = "da_DK.UTF-8";
+    LC_TIME = "da_DK.UTF-8";
+  };
+}

modules/basic/network.nix

@@ -0,0 +1,5 @@
+{ config, pkgs, ... }:
+
+{
+  networking.networkmanager.enable = true;
+}

modules/basic/nix.nix

@@ -0,0 +1,16 @@
+{ config, pkgs, ... }:
+
+{
+  nixpkgs.config.allowUnfree = true;
+  nix = {
+    package = pkgs.nixUnstable;
+    settings = {
+      sandbox = true;
+      cores = 0;
+      trusted-users = [ "@wheel" ];
+      substituters = [ "https://cache.nixos.org/" ];
+      builders-use-substitutes = true;
+      experimental-features = [ "nix-command" "flakes" ];
+    };
+  };
+}

modules/basic/security.nix

@@ -0,0 +1,18 @@
+{ config, pkgs, ... }:
+
+{
+  # enable smart card reader driver
+  services.pcscd.enable = true;
+
+  # yubikey stuff
+  services.udev.packages = [ pkgs.yubikey-personalization ];
+  environment.systemPackages = [
+    pkgs.yubikey-personalization
+    pkgs.yubikey-personalization-gui
+    pkgs.yubikey-manager
+    pkgs.yubikey-manager-qt
+    pkgs.yubioath-flutter
+    pkgs.gnupg
+    pkgs.pinentry-gnome
+  ];
+}