base.nix

{ config, pkgs, ... }:

{ boot = {
    cleanTmpDir = true;
    kernelPackages = pkgs.linuxPackages_latest;
    kernel.sysctl = {
        "net.ipv4.ip_forward" = 1;
        "vm.overcommit_memory" = 1;
      };
      kernelParams = [
        "transparent_hugepage=never"
      ];
    };

  documentation.man.enable = true;

  environment.variables = { EDITOR = "editor"; };

  networking = {
    firewall = {
      allowPing = true;
    };
  };

  programs = {
    bash = {
      interactiveShellInit = ''
        HISTCONTROL=ignoreboth:erasedups
        shopt -s histappend
      '';
      promptInit = ''
        PS1="\[\033[1;32m\][\u@\h:\w]\n\$\[\033[0m\] "
      '';
      shellAliases = { ssh = "TERM=xterm-256color ssh"; };
    };
    ssh.startAgent = false;
  };

  services = {
    openssh.enable = true;
    nixosManual.showManual = true;
  };

  security = {
    sudo.wheelNeedsPassword = false;
    pam.loginLimits =
      [ { domain = "*"; item = "nofile"; type = "-"; value = "999999"; }
    ];
  };

  time.timeZone = "America/Los_Angeles";
}