240 lines
6.6 KiB
Nix
240 lines
6.6 KiB
Nix
# sudo nix-channel --add https://github.com/NixOS/nixos-hardware/archive/master.tar.gz nixos-hardware
|
||
# sudo nix-channel --add https://github.com/nix-community/home-manager/archive/master.tar.gz home-manager
|
||
|
||
let systemInformation = import ./system/system-information.nix; in
|
||
{ config, pkgs, lib, ... }@nixpkgs:
|
||
{
|
||
networking.hostName = systemInformation.hostname;
|
||
|
||
imports =
|
||
[
|
||
./configs/filesystems.nix
|
||
./system/hardware-requirements.nix
|
||
./modules/machine-info.nix
|
||
<home-manager/nixos>
|
||
];
|
||
|
||
# Bootloader
|
||
boot.loader.systemd-boot.enable = true;
|
||
boot.loader.efi.canTouchEfiVariables = true;
|
||
boot.loader.efi.efiSysMountPoint = "/boot/efi";
|
||
|
||
boot.kernelParams = [
|
||
# Power efficiency
|
||
# https://wiki.archlinux.org/title/Power_management#Kernel_parameters
|
||
"nmi_watchdog=0"
|
||
|
||
# https://bbs.archlinux.org/viewtopic.php?id=282614 ?
|
||
"amd_iommu=off"
|
||
];
|
||
|
||
boot.kernel.sysctl = {
|
||
# Set IO batching to 2 minutes for power reasons
|
||
"vm.dirty_writeback_centisecs" = 12000;
|
||
};
|
||
boot.initrd.supportedFilesystems = [ "btrfs" ];
|
||
|
||
# Setup keyfile
|
||
boot.initrd.secrets = {
|
||
"/crypto_keyfile.bin" = null;
|
||
};
|
||
|
||
# Enable networking
|
||
networking.networkmanager.enable = true;
|
||
|
||
powerManagement.cpuFreqGovernor = "powersave";
|
||
|
||
# Set your time zone.
|
||
time.timeZone = "America/New_York";
|
||
|
||
# Select internationalisation properties.
|
||
i18n.defaultLocale = "en_US.UTF-8";
|
||
|
||
i18n.extraLocaleSettings = {
|
||
LC_ADDRESS = "en_US.UTF-8";
|
||
LC_IDENTIFICATION = "en_US.UTF-8";
|
||
LC_MEASUREMENT = "en_US.UTF-8";
|
||
LC_MONETARY = "en_US.UTF-8";
|
||
LC_NAME = "en_US.UTF-8";
|
||
LC_NUMERIC = "en_US.UTF-8";
|
||
LC_PAPER = "en_US.UTF-8";
|
||
LC_TELEPHONE = "en_US.UTF-8";
|
||
LC_TIME = "en_US.UTF-8";
|
||
};
|
||
|
||
# Enable the X11 windowing system.
|
||
services.xserver.enable = true;
|
||
services.logind.lidSwitch = "ignore";
|
||
|
||
# Enable the GNOME Desktop Environment.
|
||
services.xserver.displayManager.gdm.enable = true;
|
||
services.xserver.desktopManager.gnome.enable = true;
|
||
|
||
# Configure keymap in X11
|
||
services.xserver = {
|
||
layout = "us";
|
||
xkbVariant = "3l";
|
||
};
|
||
|
||
# Enable CUPS to print documents.
|
||
services.printing.enable = true;
|
||
|
||
# Enable sound with pipewire.
|
||
sound.enable = true;
|
||
hardware.pulseaudio.enable = false;
|
||
security.rtkit.enable = true;
|
||
services.pipewire = {
|
||
enable = true;
|
||
alsa.enable = true;
|
||
alsa.support32Bit = true;
|
||
pulse.enable = true;
|
||
# If you want to use JACK applications, uncomment this
|
||
jack.enable = true;
|
||
|
||
# use the example session manager (no others are packaged yet so this is enabled by default,
|
||
# no need to redefine it in your config for now)
|
||
#media-session.enable = true;
|
||
};
|
||
|
||
# Define a user account. Don't forget to set a password with ‘passwd’.
|
||
users.users.ember = {
|
||
uid = 1312;
|
||
isNormalUser = true;
|
||
description = "Ember";
|
||
extraGroups = [ "networkmanager" "wheel" "dialout"];
|
||
shell = pkgs.fish;
|
||
openssh.authorizedKeys.keys = import ./configs/programs/ssh/authorizedKeys.nix;
|
||
};
|
||
home-manager.users.ember = import ./configs/home.full.nix;
|
||
programs.fish.enable = true;
|
||
|
||
# Allow unfree packages
|
||
nixpkgs.config.allowUnfree = true;
|
||
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
|
||
|
||
# List packages installed in system profile. To search, run:
|
||
environment.systemPackages = with pkgs; [
|
||
wget
|
||
gnumake
|
||
htop
|
||
wl-clipboard
|
||
unzip
|
||
appimage-run
|
||
vlc
|
||
file
|
||
pavucontrol
|
||
nix-index
|
||
nix-output-monitor
|
||
gst_all_1.gstreamer gst_all_1.gst-plugins-base gst_all_1.gst-libav gst_all_1.gst-vaapi gst_all_1.gst-plugins-bad gst_all_1.gst-plugins-good gst_all_1.gst-plugins-ugly
|
||
];
|
||
environment.gnome.excludePackages = with pkgs.gnome; [
|
||
pkgs.gnome-console
|
||
pkgs.gnome-text-editor
|
||
gnome-software
|
||
gnome-music
|
||
gedit
|
||
totem
|
||
];
|
||
fonts = {
|
||
packages = with pkgs; with import packages/all-packages.nix nixpkgs; [
|
||
justseeds
|
||
anarchists-stencil
|
||
manrope
|
||
google-fonts
|
||
comic-mono
|
||
atkinson-hyperlegible
|
||
openmoji-color
|
||
];
|
||
fontDir.enable = true;
|
||
enableDefaultPackages = true;
|
||
fontconfig.defaultFonts = {
|
||
sansSerif = ["Atkinson Hyperlegible"];
|
||
monospace = ["Comic Mono:style=Normal"];
|
||
};
|
||
};
|
||
|
||
# List services that you want to enable:
|
||
|
||
services = {
|
||
gnome.tracker.enable = false;
|
||
gnome.tracker-miners.enable = false;
|
||
flatpak = {
|
||
enable = true;
|
||
};
|
||
fwupd.enable = true;
|
||
syncthing = {
|
||
enable = true;
|
||
dataDir = "/home/ember";
|
||
configDir = "/home/ember/.config/syncthing";
|
||
user = "ember";
|
||
settings.devices = {
|
||
redwood.name = "🍂 Redwood";
|
||
redwood.id =
|
||
"WY2GFMX-CQ52VBK-M3Y4JJH-4FIA6F2-NGB3S2I-SJ42D45-7FT77KH-2OGO2AZ";
|
||
|
||
mugwort.name = "🌿 Mugwort";
|
||
mugwort.id =
|
||
"GVJZF4E-5BYFG7U-P6KZPLL-CSM3O3H-JOJUZIX-YGZ3QXM-CHWTA4J-AG6KFQK";
|
||
|
||
kudzu.name = "🥦 Kudzu";
|
||
kudzu.id =
|
||
"RQUVE3L-D345NMM-4KUE7D6-PCJ3HIO-VFZNYJ6-BNF2YH3-6UBCXF7-NS5YKQR";
|
||
};
|
||
overrideDevices = true;
|
||
};
|
||
openssh = {
|
||
# Disable by default
|
||
banner = "Welcome to ${systemInformation.prettyHostname}!\n";
|
||
settings.PasswordAuthentication = false;
|
||
};
|
||
};
|
||
|
||
environment.machineInfo.prettyHostname = systemInformation.prettyHostname;
|
||
|
||
# Enable the OpenSSH daemon.
|
||
# services.openssh.enable = true;
|
||
|
||
# Open ports in the firewall.
|
||
# networking.firewall.allowedTCPPorts = [ ... ];
|
||
# networking.firewall.allowedUDPPorts = [ ... ];
|
||
# Or disable the firewall altogether.
|
||
networking.firewall.enable = false;
|
||
networking.hosts = {
|
||
"162.255.119.254" = ["www.librepunk.club"];
|
||
"129.21.49.69" = ["www.librepunk.club"];
|
||
};
|
||
|
||
# This value determines the NixOS release from which the default
|
||
# settings for stateful data, like file locations and database versions
|
||
# on your system were taken. It‘s perfectly fine and recommended to leave
|
||
# this value at the release version of the first install of this system.
|
||
# Before changing this value read the documentation for this option
|
||
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
|
||
system.stateVersion = "22.11"; # Did you read the comment?
|
||
|
||
# Set up hardware acceleration
|
||
# https://nixos.wiki/wiki/Accelerated_Video_Playback
|
||
hardware.opengl = {
|
||
enable = true;
|
||
extraPackages = with pkgs; [
|
||
intel-compute-runtime
|
||
intel-media-driver # LIBVA_DRIVER_NAME=iHD
|
||
vaapiIntel # LIBVA_DRIVER_NAME=i965 (older but works better for Firefox/Chromium)
|
||
vaapiVdpau
|
||
libvdpau-va-gl
|
||
];
|
||
};
|
||
hardware.enableAllFirmware = true;
|
||
hardware.cpu.intel.updateMicrocode = systemInformation.isIntel;
|
||
hardware.cpu.amd.updateMicrocode = systemInformation.isAmd;
|
||
|
||
nix.settings.auto-optimise-store = true;
|
||
nix.settings.experimental-features = ["nix-command" "flakes"];
|
||
|
||
# Needed for Gnome Boxes
|
||
virtualisation.libvirtd.enable = true;
|
||
virtualisation.spiceUSBRedirection.enable = true;
|
||
|
||
# Needed for Anbox
|
||
virtualisation.waydroid.enable = true;
|
||
} |