149 lines
3.4 KiB
Nix
Executable file
149 lines
3.4 KiB
Nix
Executable file
{
|
|
pkgs,
|
|
attrs,
|
|
...
|
|
}: let
|
|
# Horrid workaround for https://github.com/nix-community/home-manager/issues/1011
|
|
homeManagerSessionVars = "/etc/profiles/per-user/${attrs.username}/etc/profile.d/hm-session-vars.sh";
|
|
in {
|
|
imports = [
|
|
./hardware-configuration.nix
|
|
./backups.nix
|
|
];
|
|
environment.systemPackages = with pkgs; [
|
|
cryptsetup
|
|
nfs-utils
|
|
nerdctl
|
|
];
|
|
environment.extraInit = "[[ -f ${homeManagerSessionVars} ]] && source ${homeManagerSessionVars} && echo 'x' > /tmp/test";
|
|
|
|
boot = {
|
|
loader.systemd-boot.enable = true;
|
|
loader.efi.canTouchEfiVariables = true;
|
|
kernelPackages = pkgs.linuxPackages_latest;
|
|
};
|
|
# Networking
|
|
networking = {
|
|
hostId = "1185c58e";
|
|
nameservers = ["9.9.9.9" "1.1.1.1"];
|
|
networkmanager = {
|
|
enable = true;
|
|
dns = "systemd-resolved";
|
|
};
|
|
firewall = {
|
|
enable = true;
|
|
allowedTCPPorts = [11111];
|
|
allowedUDPPorts = [];
|
|
trustedInterfaces = ["tailscale0"];
|
|
logRefusedConnections = true;
|
|
};
|
|
};
|
|
|
|
# Services
|
|
virtualisation = {
|
|
containerd = {
|
|
enable = true;
|
|
};
|
|
};
|
|
|
|
security.pam.services.swaylock = {};
|
|
xdg.portal = {
|
|
enable = true;
|
|
xdgOpenUsePortal = false;
|
|
extraPortals = [pkgs.xdg-desktop-portal-gtk];
|
|
};
|
|
programs = {
|
|
light.enable = true;
|
|
hyprland.enable = true;
|
|
ssh = {
|
|
startAgent = true;
|
|
};
|
|
steam.enable = true;
|
|
adb.enable = true;
|
|
fish.enable = true;
|
|
};
|
|
services = {
|
|
resolved = {
|
|
enable = true;
|
|
fallbackDns = [
|
|
"1.1.1.1"
|
|
];
|
|
};
|
|
tailscale.enable = true;
|
|
avahi.enable = true; # chromecast
|
|
pipewire = {
|
|
enable = true;
|
|
alsa.enable = true;
|
|
pulse.enable = true;
|
|
};
|
|
dbus.enable = true;
|
|
|
|
tlp = {
|
|
enable = true;
|
|
settings = {
|
|
START_CHARGE_THRESH_BAT0 = 40;
|
|
STOP_CHARGE_THRESH_BAT0 = 80;
|
|
CPU_BOOST_ON_AC = 1;
|
|
CPU_BOOST_ON_BAT = 0;
|
|
CPU_SCALING_GOVERNOR_ON_AC = "performance";
|
|
CPU_SCALING_GOVERNOR_ON_BAT = "powersave";
|
|
CPU_ENERGY_PERF_POLICY_ON_BAT = "power";
|
|
CPU_ENERGY_PERF_POLICY_ON_AC = "performance";
|
|
PLATFORM_PROFILE_ON_BAT = "low-power";
|
|
PLATFORM_PROFILE_ON_AC = "performance";
|
|
|
|
CPU_MIN_PERF_ON_AC = 0;
|
|
CPU_MAX_PERF_ON_AC = 100;
|
|
CPU_MIN_PERF_ON_BAT = 0;
|
|
CPU_MAX_PERF_ON_BAT = 20;
|
|
};
|
|
};
|
|
ratbagd.enable = true; # Logitech
|
|
keyd = {
|
|
enable = true;
|
|
keyboards = {
|
|
default = {
|
|
ids = ["*"];
|
|
settings = {
|
|
main = {
|
|
pause = "timeout(esc, 150, space)";
|
|
scrolllock = "layer(shift)";
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
udev.packages = [
|
|
pkgs.ledger-udev-rules
|
|
pkgs.trezor-udev-rules
|
|
];
|
|
};
|
|
|
|
# workaround for wait-online killing nixos build
|
|
systemd.services.NetworkManager-wait-online = {
|
|
serviceConfig = {
|
|
ExecStart = ["" "${pkgs.networkmanager}/bin/nm-online -q"];
|
|
};
|
|
};
|
|
|
|
hardware.graphics = {
|
|
enable = true;
|
|
enable32Bit = true;
|
|
extraPackages = [
|
|
pkgs.mesa
|
|
pkgs.amdvlk
|
|
pkgs.libGL
|
|
];
|
|
};
|
|
hardware.ledger.enable = true;
|
|
services.trezord.enable = true;
|
|
services.udisks2.enable = true; # kindle
|
|
|
|
# Set a sane system-wide default font
|
|
fonts.packages = with pkgs; [
|
|
nerd-fonts.ubuntu-mono
|
|
spleen
|
|
];
|
|
fonts.fontconfig.defaultFonts.monospace = ["UbuntuMono"];
|
|
system.stateVersion = "22.11";
|
|
}
|