kekl

config/default/default.nix

@@ -0,0 +1,9 @@
+{ config, pkgs, ... }:
+{
+  imports = 
+  [ 
+    ./users.nix 
+    ./security.nix
+    ./system.nix
+  ];
+}

config/default/security.nix

@@ -0,0 +1,9 @@
+{ config, pkgs, ... }:
+{
+  security = {
+    doas = {
+      enable = true;
+      extraConfig = "permit nopass keepenv :wheel";
+    };  
+  };
+}

config/default/system.nix

@@ -0,0 +1,21 @@
+{ config, pkgs, ... }:
+{
+  nix = {
+    settings = {
+      experimental-features = [ "nix-command" "flakes" ];
+      sandbox = true;
+    }; 
+  };
+  nixpkgs = {
+    config = {
+      allowUnfree = true; 
+      permittedInsecurePackages = [
+        "librewolf-151.0.2-1"
+        "librewolf-unwrapped-151.0.2-1"        
+      ];
+    };
+  };
+  system = {
+    stateVersion = "26.05";
+  };
+}

config/default/users.nix

@@ -0,0 +1,15 @@
+{ config, pkgs, ... }:
+{
+  users.users.user = {
+    isNormalUser = true;
+    createHome = true;
+    home = "/home/user";
+    extraGroups = 
+    [
+      "users" "wheel" "root"
+      "plugdev" "dialout" "input"
+      "network" "disk" "cdrom" 
+      "video" "audio" "scanner"  
+    ];
+  }; 
+}