Clean branch

linux/singularity/configuration.nix

@@ -0,0 +1,37 @@
+{ config, pkgs, ... }:
+
+{
+
+  boot = {
+    tmp.cleanOnBoot = true;
+    loader.grub.device = "/dev/sda";
+  };
+
+  constants.sopsFile = ../../common/auths.yaml;
+
+  environment.systemPackages = with pkgs; [
+    bat
+    bottom
+    helix
+  ];
+
+  programs = {
+    fish.enable = true;
+    git.enable = true;
+  };
+
+  sops.secrets."users/root/password".neededForUsers = true;
+
+  system.stateVersion = "23.11";
+
+  users = {
+    mutableUsers = false;
+    users.root = {
+      openssh.authorizedKeys.keys = config.constants.publicKeys;
+      hashedPasswordFile = config.sops.secrets."users/root/password".path;
+      shell = pkgs.fish;
+    };
+  };
+
+  zramSwap.enable = true;
+}