update nixpkgs, small changes

mod/home-manager.nix

@@ -8,11 +8,17 @@
 {
   imports = [
     inputs.home-manager.nixosModules.home-manager
+    {
+      home-manager.users."hd" = lib.mkAliasDefinitions options.home;
+      # install to /etc/profiles, not ~/.nix-profile
+      home-manager.useUserPackages = true;
+      # dont use home.nixpkgs
+      home-manager.useGlobalPkgs = true;
+    }
   ];
 
   config = {
     home.home.stateVersion = config.system.stateVersion;
-    home-manager.users."hd" = lib.mkAliasDefinitions options.home;
   };
 
   options = {
@@ -21,5 +27,4 @@
       default = { };
     };
   };
-
 }

mod/nix-configuration.nix

@@ -5,18 +5,14 @@
   ...
 }:
 {
-  config = {
-    nix.settings = {
-      experimental-features = [
-        "nix-command"
-        "flakes"
-      ];
-      trusted-users = [
-        "root"
-      ];
-      auto-optimise-store = true;
-    };
-
-    nixpkgs.config.allowUnfree = false;
+  nix.settings = {
+    experimental-features = [
+      "nix-command"
+      "flakes"
+    ];
+    trusted-users = [ "root" ];
+    auto-optimise-store = true;
   };
+
+  nixpkgs.config.allowUnfree = false;
 }

mod/users.nix

@@ -23,6 +23,12 @@
     };
     users.root = {
       hashedPassword = "!";
+
+      # I don't like the unprivileged users to have unrestricted access to root
+      # but this is required for colmena. Better options are
+      #  - only authorize root's pubkey
+      #  - create password protected key
+      # TODO: do one of the above
       openssh.authorizedKeys.keys = [
         "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEG+dd4m98aKEWfFa/7VZUlJNX0axvIlHVihT8w7RLyY"
         "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIsoj2+esEebRwDV2PuNRt9Vz28oolOy+Hc2THwrWTAB"