nixcfg/systems/x86_64-linux/sgx/default.nix
Harald Hoyer 66022d19c2 chore(nix): enable libvirtd and update user groups
- Enabled `libvirtd` in virtualization settings to allow libvirt usage.
- Added `libvirtd` to `user.extraGroups` for better permissions and management.
2025-11-27 10:37:46 +01:00

69 lines
1.4 KiB
Nix

{ pkgs, ... }:
{
imports = [
./hardware-configuration.nix
./fileserver.nix
./backup.nix
./network.nix
./openwebui.nix
./acme.nix
./nginx.nix
./mail.nix
];
services.tailscale.enable = true;
boot.tmp.useTmpfs = false;
sops.secrets.pccs.sopsFile = ../../../.secrets/sgx/pccs.yaml;
sops.secrets.backup-pw.sopsFile = ../../../.secrets/sgx/backup-s3.yaml;
environment.systemPackages = with pkgs; [
claude-code
];
metacfg = {
emailOnFailure.enable = true;
base.enable = true;
gui.enable = true;
nix-ld.enable = true;
nix.enable = true;
podman.enable = true;
secureboot.enable = true;
user.extraGroups = [
"docker"
"libvirtd"
];
tools = {
direnv.enable = true;
};
};
virtualisation = {
docker.enable = false;
libvirtd.enable = true;
podman.dockerCompat = true;
};
#systemd.services.libvirt-guests.after = [ "network-online.target" ];
services.cratedocs-mcp = {
enable = true;
openFirewall = true;
};
system.autoUpgrade = {
enable = true;
operation = "switch";
allowReboot = true;
};
systemd.targets.sleep.enable = false;
systemd.targets.suspend.enable = false;
systemd.targets.hibernate.enable = false;
systemd.targets.hybrid-sleep.enable = false;
services.xserver.displayManager.gdm.autoSuspend = false;
services.logind.lidSwitch = "ignore";
system.stateVersion = "23.11";
}