WIP

hosts/common/core/default.nix

@@ -3,8 +3,10 @@
   imports = [
     ./disko.nix
     ./locale.nix
+    ./netbird.nix
     ./nix.nix
     ./packages.nix
     ./sops.nix
+    ./zsh.nix
   ];
 }

hosts/common/core/disko.nix

@@ -2,7 +2,6 @@
   config,
   disko,
   lib,
-  inputs,
   ...
 }:
 with lib;
@@ -11,7 +10,7 @@ let
 in
 {
   imports = [
-    inputs.disko.nixosModules.disko
+    disko.nixosModules.disko
   ];
 
   options.disko.cfg = {

hosts/common/core/netbird.nix

@@ -0,0 +1,4 @@
+{ config, ... }:
+{
+  services.netbird.enable = true;
+}

hosts/common/core/packages.nix

@@ -1,8 +1,13 @@
 { congif, pkgs, ... }:
 {
   environment.systemPackages = with pkgs; [
+    age
+    bind
+    btop
     git
-    neovim
+    jq
+    openssl
     tmux
+    tree
   ];
 }

hosts/common/core/sops.nix

@@ -10,7 +10,7 @@
     validateSopsFiles = false;
     secrets = {
       benq-password = {
-          neededForUsers = true;
+        neededForUsers = true;
       };
     };
   };

hosts/common/core/zsh.nix

@@ -0,0 +1,5 @@
+{ config, ... }:
+{
+  # programs.zsh.enable = true;
+  programs.nix-ld.enable = true;
+}

hosts/common/optional/docker.nix

@@ -1,18 +0,0 @@
-{ config, pkgs, ... }:
-{
-  virtualisation.docker = {
-    enable = true;
-    rootless = {
-      enable = true;
-      setSocketVariable = true;
-    };
-  };
-  security.wrappers = {
-    docker-rootlesskit = {
-      owner = "root";
-      group = "root";
-      capabilities = "cap_net_bind_service+ep";
-      source = "${pkgs.rootlesskit}/bin/rootlesskit";
-    };
-  };
-}

hosts/common/users/benq.nix

@@ -1,7 +1,7 @@
 {
   config,
   lib,
-  inputs,
+  pkgs,
   ...
 }:
 with lib;
@@ -9,11 +9,16 @@ with lib;
   users = {
     mutableUsers = false;
     users.benq = {
+      shell = pkgs.zsh;
       isNormalUser = true;
+      ignoreShellProgramCheck = true;
       hashedPasswordFile = config.sops.secrets.benq-password.path;
       openssh.authorizedKeys.keys = [
         "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAeIuJzR68xA4ugJjtWbwvaWEU852Hg9FAAhXNw8ou43 benq"
       ];
+      linger = true;
+      subUidRanges = [ { startUid = 100000; count = 65536; } ];
+      subGidRanges = [ { startGid = 100000; count = 65536; } ];
       extraGroups =
         let
         ifTheyExist = groups: filter (group: hasAttr group config.users.groups) groups;
@@ -21,7 +26,6 @@ with lib;
         flatten [
         "wheel"
           (ifTheyExist [
-           "docker"
            "git"
            "networkmanager"
            "video"