misc: initial commit
This commit is contained in:
commit
964b99b28d
32 changed files with 1675 additions and 0 deletions
21
dev-shell/default.nix
Normal file
21
dev-shell/default.nix
Normal file
|
|
@ -0,0 +1,21 @@
|
||||||
|
{...}: {
|
||||||
|
perSystem = {
|
||||||
|
pkgs,
|
||||||
|
inputs',
|
||||||
|
...
|
||||||
|
}: {
|
||||||
|
devShells.default = pkgs.mkShell {
|
||||||
|
packages = with pkgs; [
|
||||||
|
just
|
||||||
|
alejandra
|
||||||
|
nixpkgs-fmt
|
||||||
|
nix-tree
|
||||||
|
nix-diff
|
||||||
|
nvd
|
||||||
|
nix-inspect
|
||||||
|
nix-du
|
||||||
|
nix-output-monitor
|
||||||
|
];
|
||||||
|
};
|
||||||
|
};
|
||||||
|
}
|
||||||
64
flake.lock
generated
Normal file
64
flake.lock
generated
Normal file
|
|
@ -0,0 +1,64 @@
|
||||||
|
{
|
||||||
|
"nodes": {
|
||||||
|
"disko": {
|
||||||
|
"inputs": {
|
||||||
|
"nixpkgs": [
|
||||||
|
"nixpkgs"
|
||||||
|
]
|
||||||
|
},
|
||||||
|
"locked": {
|
||||||
|
"lastModified": 1735048446,
|
||||||
|
"narHash": "sha256-Tc35Y8H+krA6rZeOIczsaGAtobSSBPqR32AfNTeHDRc=",
|
||||||
|
"owner": "nix-community",
|
||||||
|
"repo": "disko",
|
||||||
|
"rev": "3a4de9fa3a78ba7b7170dda6bd8b4cdab87c0b21",
|
||||||
|
"type": "github"
|
||||||
|
},
|
||||||
|
"original": {
|
||||||
|
"owner": "nix-community",
|
||||||
|
"repo": "disko",
|
||||||
|
"type": "github"
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"nixos-facter-modules": {
|
||||||
|
"locked": {
|
||||||
|
"lastModified": 1734596637,
|
||||||
|
"narHash": "sha256-MRqwVAe3gsb88u4ME1UidmZFVCx+FEnoob0zkpO9DMY=",
|
||||||
|
"owner": "numtide",
|
||||||
|
"repo": "nixos-facter-modules",
|
||||||
|
"rev": "536472754982bf03079b4b4e0261838a760587c0",
|
||||||
|
"type": "github"
|
||||||
|
},
|
||||||
|
"original": {
|
||||||
|
"owner": "numtide",
|
||||||
|
"repo": "nixos-facter-modules",
|
||||||
|
"type": "github"
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"nixpkgs": {
|
||||||
|
"locked": {
|
||||||
|
"lastModified": 1735268880,
|
||||||
|
"narHash": "sha256-7QEFnKkzD13SPxs+UFR5bUFN2fRw+GlL0am72ZjNre4=",
|
||||||
|
"owner": "NixOS",
|
||||||
|
"repo": "nixpkgs",
|
||||||
|
"rev": "7cc0bff31a3a705d3ac4fdceb030a17239412210",
|
||||||
|
"type": "github"
|
||||||
|
},
|
||||||
|
"original": {
|
||||||
|
"owner": "NixOS",
|
||||||
|
"ref": "nixpkgs-unstable",
|
||||||
|
"repo": "nixpkgs",
|
||||||
|
"type": "github"
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"root": {
|
||||||
|
"inputs": {
|
||||||
|
"disko": "disko",
|
||||||
|
"nixos-facter-modules": "nixos-facter-modules",
|
||||||
|
"nixpkgs": "nixpkgs"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"root": "root",
|
||||||
|
"version": 7
|
||||||
|
}
|
||||||
33
flake.nix
Normal file
33
flake.nix
Normal file
|
|
@ -0,0 +1,33 @@
|
||||||
|
{
|
||||||
|
inputs = {
|
||||||
|
nixpkgs.url = "github:NixOS/nixpkgs/nixpkgs-unstable";
|
||||||
|
flake-parts.url = "github:hercules-ci/flake-parts";
|
||||||
|
|
||||||
|
nixos-hardware.url = "github:NixOS/nixos-hardware";
|
||||||
|
disko.url = "github:nix-community/disko";
|
||||||
|
disko.inputs.nixpkgs.follows = "nixpkgs";
|
||||||
|
nixos-facter-modules.url = "github:numtide/nixos-facter-modules";
|
||||||
|
|
||||||
|
home-manager.url = "github:nix-community/home-manager";
|
||||||
|
impermanence.url = "github:nix-community/impermanence";
|
||||||
|
nix-index-database = {
|
||||||
|
url = "github:nix-community/nix-index-database";
|
||||||
|
inputs.nixpkgs.follows = "nixpkgs";
|
||||||
|
};
|
||||||
|
ags.url = "github:Aylur/ags";
|
||||||
|
anyrun.url = "github:Kirottu/anyrun";
|
||||||
|
muse-sounds-manager = {
|
||||||
|
url = "github:thilobillerbeck/muse-sounds-manager-nix/06b0da28c54331d5af73efd2ebf264ce914e5936";
|
||||||
|
inputs.nixpkgs.follows = "nixpkgs";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
outputs = inputs @ {flake-parts, ...}:
|
||||||
|
flake-parts.lib.mkFlake {inherit inputs;} {
|
||||||
|
systems = ["x86_64-linux"];
|
||||||
|
imports = [
|
||||||
|
./systems
|
||||||
|
./dev-shell
|
||||||
|
];
|
||||||
|
};
|
||||||
|
}
|
||||||
26
hardware-configuration.nix
Normal file
26
hardware-configuration.nix
Normal file
|
|
@ -0,0 +1,26 @@
|
||||||
|
# Do not modify this file! It was generated by ‘nixos-generate-config’
|
||||||
|
# and may be overwritten by future invocations. Please make changes
|
||||||
|
# to /etc/nixos/configuration.nix instead.
|
||||||
|
{ config, lib, pkgs, modulesPath, ... }:
|
||||||
|
|
||||||
|
{
|
||||||
|
imports =
|
||||||
|
[ (modulesPath + "/installer/scan/not-detected.nix")
|
||||||
|
];
|
||||||
|
|
||||||
|
boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "thunderbolt" "usbhid" "usb_storage" "sd_mod" ];
|
||||||
|
boot.initrd.kernelModules = [ ];
|
||||||
|
boot.kernelModules = [ "kvm-amd" ];
|
||||||
|
boot.extraModulePackages = [ ];
|
||||||
|
|
||||||
|
# Enables DHCP on each ethernet and wireless interface. In case of scripted networking
|
||||||
|
# (the default) this is the recommended approach. When using systemd-networkd it's
|
||||||
|
# still possible to use this option, but it's recommended to use it in conjunction
|
||||||
|
# with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
|
||||||
|
networking.useDHCP = lib.mkDefault true;
|
||||||
|
# networking.interfaces.enp196s0f3u2u3.useDHCP = lib.mkDefault true;
|
||||||
|
# networking.interfaces.wlp4s0.useDHCP = lib.mkDefault true;
|
||||||
|
|
||||||
|
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
|
||||||
|
hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
|
||||||
|
}
|
||||||
125
home/apps.nix
Normal file
125
home/apps.nix
Normal file
|
|
@ -0,0 +1,125 @@
|
||||||
|
{
|
||||||
|
pkgs,
|
||||||
|
inputs,
|
||||||
|
...
|
||||||
|
}: {
|
||||||
|
imports = [
|
||||||
|
./apps/firefox.nix
|
||||||
|
./apps/syncthing.nix
|
||||||
|
];
|
||||||
|
|
||||||
|
home.packages = [
|
||||||
|
pkgs.pavucontrol
|
||||||
|
pkgs.signal-desktop
|
||||||
|
pkgs.webcord # pkgs.webcord-vencord
|
||||||
|
pkgs.telegram-desktop
|
||||||
|
#pkgs.kdePackages.neochat
|
||||||
|
pkgs.keepassxc
|
||||||
|
#pkgs.blender-hip
|
||||||
|
pkgs.buku
|
||||||
|
pkgs.libreoffice
|
||||||
|
pkgs.darktable
|
||||||
|
pkgs.gimp
|
||||||
|
pkgs.inkscape
|
||||||
|
pkgs.krita
|
||||||
|
pkgs.okular
|
||||||
|
pkgs.localsend
|
||||||
|
|
||||||
|
pkgs.ffmpeg # Generally useful
|
||||||
|
|
||||||
|
# Music
|
||||||
|
#pkgs.feishin # sonixd replacement
|
||||||
|
pkgs.supersonic # Music player by Navidrome author
|
||||||
|
pkgs.sonixd # Music player; desktop app for Navidrome. Replace w/ Feishin when that supports Subsonic API.
|
||||||
|
pkgs.spotube # Use Spotify metadata & user to play from YouTube
|
||||||
|
pkgs.spotify # Proprietary
|
||||||
|
pkgs.strawberry-qt6 # Fork of Clementine
|
||||||
|
pkgs.clementine
|
||||||
|
pkgs.lollypop
|
||||||
|
# muffon https://muffon.netlify.app/
|
||||||
|
pkgs.picard # Edit audio metadata, w/ MusicBrainz integration
|
||||||
|
pkgs.puddletag # Edit audio metadata
|
||||||
|
pkgs.deadbeef-with-plugins
|
||||||
|
# pkgs.tauon
|
||||||
|
pkgs.audacious
|
||||||
|
# pkgs.asunder # Ripping
|
||||||
|
pkgs.cyanrip # Ripping
|
||||||
|
# pkgs.whipper # Ripping
|
||||||
|
|
||||||
|
#pkgs.anki # Dep python3.12-pyqt-6.7.0 doesn't build
|
||||||
|
pkgs.memento # Japanese
|
||||||
|
|
||||||
|
# Documents
|
||||||
|
pkgs.typst # TeX alternative
|
||||||
|
pkgs.tinymist # LSP for Typst
|
||||||
|
|
||||||
|
# Dev
|
||||||
|
pkgs.vscodium # Consider vscodium-fhs
|
||||||
|
#pkgs.jetbrains.rider
|
||||||
|
#pkgs.jetbrains.rust-rover
|
||||||
|
pkgs.helix
|
||||||
|
pkgs.zed-editor
|
||||||
|
|
||||||
|
# Internet
|
||||||
|
pkgs.fragments
|
||||||
|
pkgs.uget # Download manager
|
||||||
|
# From master because PR #290892 is merged but at the time of writing hasn't made it to unstable yet
|
||||||
|
# Need it to solve issue #263764
|
||||||
|
# https://github.com/NixOS/nixpkgs/issues/263764
|
||||||
|
# https://github.com/NixOS/nixpkgs/pull/290892
|
||||||
|
# https://github.com/NixOS/nixpkgs/commit/999e0cf59288584616a241c0d8bb7c3c3f1fb417
|
||||||
|
pkgs.obsidian
|
||||||
|
pkgs.obs-studio
|
||||||
|
pkgs.kdePackages.plasmatube
|
||||||
|
#pkgs.nyxt
|
||||||
|
|
||||||
|
pkgs.mpvScripts.uosc
|
||||||
|
pkgs.mpvScripts.sponsorblock
|
||||||
|
|
||||||
|
pkgs.musescore
|
||||||
|
# inputs.muse-sounds-manager.packages.${pkgs.system}.muse-sounds-manager
|
||||||
|
pkgs.helio-workstation # music editor
|
||||||
|
pkgs.lmms # DAW
|
||||||
|
pkgs.carla # VST host
|
||||||
|
pkgs.yabridge # Windows VST host
|
||||||
|
pkgs.yabridgectl
|
||||||
|
pkgs.surge-XT # VST
|
||||||
|
];
|
||||||
|
|
||||||
|
programs.imv.enable = true;
|
||||||
|
|
||||||
|
programs.mangohud = {
|
||||||
|
enable = true;
|
||||||
|
};
|
||||||
|
|
||||||
|
programs.mpv.enable = true;
|
||||||
|
|
||||||
|
programs.thunderbird = {
|
||||||
|
enable = true;
|
||||||
|
profiles.default = {
|
||||||
|
isDefault = true;
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
programs.vscode = {
|
||||||
|
enable = true;
|
||||||
|
package = pkgs.vscodium;
|
||||||
|
enableUpdateCheck = false;
|
||||||
|
userSettings = {
|
||||||
|
"window.menuBarVisibility" = "toggle";
|
||||||
|
"rust-analyzer.server.path" = "rust-analyzer"; # look in env
|
||||||
|
|
||||||
|
# Library sources for rust-analyzer shall be read-only
|
||||||
|
"files.readonlyInclude" = {
|
||||||
|
"**/.cargo/registry/src/**/*.rs" = true;
|
||||||
|
"**/lib/rustlib/src/rust/library/**/*.rs" = true;
|
||||||
|
};
|
||||||
|
};
|
||||||
|
extensions = with pkgs.vscode-extensions; [
|
||||||
|
mkhl.direnv
|
||||||
|
jnoortheen.nix-ide
|
||||||
|
];
|
||||||
|
};
|
||||||
|
|
||||||
|
programs.zathura.enable = true;
|
||||||
|
}
|
||||||
83
home/apps/firefox.nix
Normal file
83
home/apps/firefox.nix
Normal file
|
|
@ -0,0 +1,83 @@
|
||||||
|
{
|
||||||
|
lib,
|
||||||
|
pkgs,
|
||||||
|
osConfig,
|
||||||
|
...
|
||||||
|
}: let
|
||||||
|
enablePlasma = osConfig.services.desktopManager.plasma6.enable;
|
||||||
|
|
||||||
|
extension = shortId: uuid: {
|
||||||
|
name = uuid;
|
||||||
|
value = {
|
||||||
|
install_url = "https://addons.mozilla.org/en-US/firefox/downloads/latest/${shortId}/latest.xpi";
|
||||||
|
installation_mode = "force_installed";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
oldExtensions = builtins.listToAttrs;
|
||||||
|
|
||||||
|
ext = shortId: {
|
||||||
|
install_url = "https://addons.mozilla.org/en-US/firefox/downloads/latest/${shortId}/latest.xpi";
|
||||||
|
installation_mode = "force_installed";
|
||||||
|
};
|
||||||
|
exts = builtins.mapAttrs (_: ext);
|
||||||
|
in {
|
||||||
|
programs.firefox = {
|
||||||
|
enable = true;
|
||||||
|
nativeMessagingHosts = [
|
||||||
|
pkgs.tridactyl-native
|
||||||
|
];
|
||||||
|
|
||||||
|
policies.ExtensionSettings = lib.mkMerge [
|
||||||
|
(oldExtensions [
|
||||||
|
# languagetool?
|
||||||
|
#(extension "tree-style-tab" "treestyletab@piro.sakura.ne.jp")
|
||||||
|
(extension "sidebery" "{3c078156-979c-498b-8990-85f7987dd929}") # has no email id
|
||||||
|
(extension "kagi-search-for-firefox" "search@kagi.com")
|
||||||
|
(extension "ublock-origin" "uBlock0@raymondhill.net")
|
||||||
|
#(extension "umatrix" "uMatrix@raymondhill.net")
|
||||||
|
(extension "privacy-badger17" "jid1-MnnxcxisBPnSXQ@jetpack")
|
||||||
|
(extension "i-dont-care-about-cookies" "jid1-KKzOGWgsW3Ao4Q@jetpack")
|
||||||
|
# (extension "clearurls" "{74145f27-f039-47ce-a470-a662b129930a}") # has no email id
|
||||||
|
(extension "keepassxc-browser" "keepassxc-browser@keepassxc.org")
|
||||||
|
#(extension "bitwarden-password-manager" "{446900e4-71c2-419f-a6a7-df9c091e268b}")
|
||||||
|
#(extension "tabliss" "extension@tabliss.io")
|
||||||
|
|
||||||
|
# (extension "bukubrow" "bukubrow@samhh.com")
|
||||||
|
# (extension "multi-account-containers" "@testpilot-containers")
|
||||||
|
# (extension "rust-search-extension" "{04188724-64d3-497b-a4fd-7caffe6eab29}") # has no email id
|
||||||
|
# (extension "tridactyl-vim" "tridactyl.vim@cmcaine.co.uk")
|
||||||
|
# site-specific
|
||||||
|
# (extension "libredirect" "7esoorv3@alefvanoon.anonaddy.me")
|
||||||
|
(extension "toolkit-for-ynab" "{4F1FB113-D7D8-40AE-A5BA-9300EAEA0F51}") # has no email id
|
||||||
|
(extension "sponsorblock" "sponsorBlocker@ajay.app")
|
||||||
|
# (extension "steam-database" "firefox-extension@steamdb.info")
|
||||||
|
])
|
||||||
|
# TODO: Can we get this from nixpkgs instead?
|
||||||
|
(lib.mkIf enablePlasma (exts {
|
||||||
|
"plasma-browser-integration@kde.org" = "plasma-integration";
|
||||||
|
}))
|
||||||
|
];
|
||||||
|
# To add additional extensions, find it on addons.mozilla.org, find
|
||||||
|
# the short ID in the url (like https://addons.mozilla.org/en-US/firefox/addon/!SHORT_ID!/)
|
||||||
|
# Then, download the XPI by filling it in to the install_url template, unzip it,
|
||||||
|
# run `jq .browser_specific_settings.gecko.id manifest.json` or
|
||||||
|
# `jq .applications.gecko.id manifest.json` to get the UUID
|
||||||
|
# You don’t need to get the UUID from the xpi. You can install it then find the UUID in about:debugging#/runtime/this-firefox.
|
||||||
|
|
||||||
|
profiles.default = {
|
||||||
|
settings = {
|
||||||
|
"app.normandy.first_run" = false;
|
||||||
|
"app.shield.optoutstudies.enabled" = false;
|
||||||
|
"app.update.channel" = "default";
|
||||||
|
# "browser.link.open_newwindow" = true;
|
||||||
|
"browser.shell.checkDefaultBrowser" = true;
|
||||||
|
"browser.urlbar.showSearchSuggestionsFirst" = false;
|
||||||
|
"browser.vpn_promo.enabled" = false;
|
||||||
|
# "extensions.activeThemeID" = "firefox-alpenglow@mozilla.org";
|
||||||
|
# "extensions.extensions.activeThemeID" = "firefox-alpenglow@mozilla.org";
|
||||||
|
"extensions.pocket.enabled" = false;
|
||||||
|
"media.ffmpeg.vaapi.enabled" = true;
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
}
|
||||||
18
home/apps/syncthing.nix
Normal file
18
home/apps/syncthing.nix
Normal file
|
|
@ -0,0 +1,18 @@
|
||||||
|
{
|
||||||
|
lib,
|
||||||
|
pkgs,
|
||||||
|
osConfig,
|
||||||
|
...
|
||||||
|
}: let
|
||||||
|
enablePlasma = osConfig.services.desktopManager.plasma6.enable;
|
||||||
|
enableGnome = osConfig.services.xserver.desktopManager.gnome.enable;
|
||||||
|
in {
|
||||||
|
services.syncthing = {
|
||||||
|
enable = true;
|
||||||
|
};
|
||||||
|
|
||||||
|
home.packages = lib.mkMerge [
|
||||||
|
(lib.mkIf enablePlasma [pkgs.syncthingtray-qt6])
|
||||||
|
(lib.mkIf enableGnome [pkgs.gnomeExtensions.syncthing-indicator])
|
||||||
|
];
|
||||||
|
}
|
||||||
103
home/default.nix
Normal file
103
home/default.nix
Normal file
|
|
@ -0,0 +1,103 @@
|
||||||
|
{
|
||||||
|
config,
|
||||||
|
pkgs,
|
||||||
|
inputs,
|
||||||
|
osConfig,
|
||||||
|
...
|
||||||
|
}: let
|
||||||
|
variables = {
|
||||||
|
# VISUAL = "emacs";
|
||||||
|
EDITOR = "nvim";
|
||||||
|
|
||||||
|
SSH_ASKPASS_REQUIRE = "prefer";
|
||||||
|
SSH_ASKPASS = "${pkgs.ksshaskpass}/bin/ksshaskpass";
|
||||||
|
};
|
||||||
|
in {
|
||||||
|
imports = [
|
||||||
|
./xdg.nix
|
||||||
|
./terminal.nix
|
||||||
|
./desktop.nix
|
||||||
|
# ./emacs.nix
|
||||||
|
./apps.nix
|
||||||
|
];
|
||||||
|
|
||||||
|
home.sessionVariables = variables;
|
||||||
|
systemd.user.sessionVariables = variables;
|
||||||
|
|
||||||
|
fonts.fontconfig.enable = true;
|
||||||
|
|
||||||
|
xdg.enable = true;
|
||||||
|
|
||||||
|
home.packages = with pkgs; [
|
||||||
|
noto-fonts-cjk-sans
|
||||||
|
noto-fonts-cjk-serif
|
||||||
|
noto-fonts-color-emoji
|
||||||
|
];
|
||||||
|
|
||||||
|
programs.git = {
|
||||||
|
enable = true;
|
||||||
|
delta = {
|
||||||
|
enable = true;
|
||||||
|
options = {
|
||||||
|
side-by-side = true;
|
||||||
|
};
|
||||||
|
};
|
||||||
|
# WISH: Figure out difftastic
|
||||||
|
# difftastic.enable = true;
|
||||||
|
# https://difftastic.wilfred.me.uk/git.html
|
||||||
|
# https://tsdh.org/posts/2022-08-01-difftastic-diffing-with-magit.html
|
||||||
|
userEmail = "git@evar.dev";
|
||||||
|
userName = "Evar";
|
||||||
|
extraConfig = {
|
||||||
|
init.defaultBranch = "main";
|
||||||
|
|
||||||
|
# Consider https://jvns.ca/blog/2024/02/16/popular-git-config-options/#pull-ff-only-or-pull-rebase-true
|
||||||
|
|
||||||
|
# Make merge conflicts more readable
|
||||||
|
merge.conflictstyle = "zdiff3";
|
||||||
|
|
||||||
|
rebase.autosquash = true;
|
||||||
|
rebase.autostash = true;
|
||||||
|
|
||||||
|
# Consider https://jvns.ca/blog/2024/02/16/popular-git-config-options/#push-default-simple-push-default-current-push-autosetupremote-true
|
||||||
|
|
||||||
|
# Add whole commit diff in text editor when writing commit message
|
||||||
|
#commit.verbose = true;
|
||||||
|
|
||||||
|
# Remember how merge conflicts were resolved to restore later
|
||||||
|
rerere.enabled = true;
|
||||||
|
|
||||||
|
# Better diffs
|
||||||
|
diff.algorithm = "histogram";
|
||||||
|
|
||||||
|
status.submoduleSummary = true;
|
||||||
|
diff.submodule = "log";
|
||||||
|
submodule.recurse = true;
|
||||||
|
|
||||||
|
merge.keepbackup = false;
|
||||||
|
#merge.tool = "${pkgs.meld}/bin/meld";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
# programs.ssh
|
||||||
|
programs.ssh = {
|
||||||
|
enable = true;
|
||||||
|
addKeysToAgent = "1h";
|
||||||
|
};
|
||||||
|
services.ssh-agent.enable = true;
|
||||||
|
|
||||||
|
programs.yt-dlp.enable = true;
|
||||||
|
|
||||||
|
# This value determines the Home Manager release that your
|
||||||
|
# configuration is compatible with. This helps avoid breakage
|
||||||
|
# when a new Home Manager release introduces backwards
|
||||||
|
# incompatible changes.
|
||||||
|
#
|
||||||
|
# You can update Home Manager without changing this value. See
|
||||||
|
# the Home Manager release notes for a list of state version
|
||||||
|
# changes in each release.
|
||||||
|
home.stateVersion = "23.11";
|
||||||
|
|
||||||
|
# Let Home Manager install and manage itself.
|
||||||
|
#programs.home-manager.enable = true;
|
||||||
|
}
|
||||||
30
home/desktop.nix
Normal file
30
home/desktop.nix
Normal file
|
|
@ -0,0 +1,30 @@
|
||||||
|
{
|
||||||
|
config,
|
||||||
|
options,
|
||||||
|
lib,
|
||||||
|
pkgs,
|
||||||
|
inputs,
|
||||||
|
osConfig,
|
||||||
|
...
|
||||||
|
}: {
|
||||||
|
imports = [
|
||||||
|
./desktop/shared/wayland.nix
|
||||||
|
./desktop/hyprland.nix
|
||||||
|
./desktop/plasma.nix
|
||||||
|
];
|
||||||
|
|
||||||
|
# my.desktop.hyprland.enable = true;
|
||||||
|
my.desktop.plasma.enable = true;
|
||||||
|
|
||||||
|
programs.foot = {
|
||||||
|
enable = true;
|
||||||
|
settings.main = {
|
||||||
|
shell = "fish";
|
||||||
|
font = "monospace:size=10";
|
||||||
|
app-id = "foot";
|
||||||
|
pad = "10x8 center";
|
||||||
|
};
|
||||||
|
settings.url.osc8-underline = "always";
|
||||||
|
settings.cursor.style = "beam";
|
||||||
|
};
|
||||||
|
}
|
||||||
172
home/desktop/hyprland.nix
Normal file
172
home/desktop/hyprland.nix
Normal file
|
|
@ -0,0 +1,172 @@
|
||||||
|
{
|
||||||
|
config,
|
||||||
|
lib,
|
||||||
|
pkgs,
|
||||||
|
options,
|
||||||
|
inputs,
|
||||||
|
osConfig,
|
||||||
|
...
|
||||||
|
}: {
|
||||||
|
imports = [
|
||||||
|
inputs.ags.homeManagerModules.default
|
||||||
|
inputs.anyrun.homeManagerModules.default
|
||||||
|
];
|
||||||
|
|
||||||
|
options.my.desktop.hyprland.enable = lib.mkEnableOption "my Hyprland based desktop environment";
|
||||||
|
|
||||||
|
config = lib.mkIf config.my.desktop.hyprland.enable {
|
||||||
|
my.desktop.wayland = true;
|
||||||
|
|
||||||
|
wayland.windowManager.hyprland = {
|
||||||
|
enable = true;
|
||||||
|
package = osConfig.programs.hyprland.package;
|
||||||
|
extraConfig = ''
|
||||||
|
source=${./hyprland}/hyprland.conf
|
||||||
|
'';
|
||||||
|
systemd.variables = options.wayland.windowManager.hyprland.systemd.variables.default ++ ["XDG_SESSION_TYPE"];
|
||||||
|
};
|
||||||
|
|
||||||
|
services.cliphist = {
|
||||||
|
enable = true;
|
||||||
|
systemdTarget = "hyprland-session.target"; # defaults to graphical-session.target
|
||||||
|
};
|
||||||
|
|
||||||
|
systemd.user.targets.hyprland-session.Unit.Wants = ["plasma-polkit-agent.service"];
|
||||||
|
|
||||||
|
programs.ags = {
|
||||||
|
enable = true;
|
||||||
|
configDir = ./ags;
|
||||||
|
};
|
||||||
|
systemd.user.services.ags = {
|
||||||
|
Unit.Description = "Aylur's Gtk Shell";
|
||||||
|
Unit.PartOf = ["hyprland-session.target"];
|
||||||
|
Install.WantedBy = ["hyprland-session.target"];
|
||||||
|
Service = let
|
||||||
|
app = pkgs.writeShellApplication {
|
||||||
|
name = "ags-wrapped";
|
||||||
|
runtimeInputs = [config.programs.ags.package pkgs.coreutils];
|
||||||
|
text = ''ags "$@"'';
|
||||||
|
};
|
||||||
|
in {
|
||||||
|
# Service = {
|
||||||
|
BusName = "com.github.Aylur.ags.ags";
|
||||||
|
# ExecStart = "${config.programs.ags.package}/bin/ags --config ${config.programs.ags.configDir}/config.js";
|
||||||
|
ExecStart = "${app}/bin/ags-wrapped --config ${config.programs.ags.configDir}/config.js";
|
||||||
|
OOMScoreAdjust = -500;
|
||||||
|
};
|
||||||
|
# TODO: reloadTriggers?
|
||||||
|
# restartTriggers = [ config.programs.ags.configDir ];
|
||||||
|
};
|
||||||
|
|
||||||
|
programs.anyrun = {
|
||||||
|
enable = true;
|
||||||
|
config.plugins = with inputs.anyrun.packages.${pkgs.stdenv.hostPlatform.system}; [
|
||||||
|
applications
|
||||||
|
dictionary
|
||||||
|
# kidex
|
||||||
|
randr
|
||||||
|
rink
|
||||||
|
shell
|
||||||
|
# stdin
|
||||||
|
symbols
|
||||||
|
# translate
|
||||||
|
# websearch
|
||||||
|
];
|
||||||
|
};
|
||||||
|
|
||||||
|
programs.swaylock = {
|
||||||
|
enable = true;
|
||||||
|
settings = {
|
||||||
|
color = "808080";
|
||||||
|
font-size = 24;
|
||||||
|
indicator-idle-visible = false;
|
||||||
|
indicator-radius = 100;
|
||||||
|
line-color = "ffffff";
|
||||||
|
show-failed-attempts = true;
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
services.swayidle = let
|
||||||
|
swaylock = "${config.programs.swaylock.package}/bin/swaylock";
|
||||||
|
hyprctl = "${config.wayland.windowManager.hyprland.package}/bin/hyprctl";
|
||||||
|
in {
|
||||||
|
enable = true;
|
||||||
|
systemdTarget = "hyprland-session.target"; # defaults to graphical-session.target
|
||||||
|
extraArgs = [
|
||||||
|
"-w" # Wait for command to finish executing before continuing
|
||||||
|
"idlehint"
|
||||||
|
"300"
|
||||||
|
];
|
||||||
|
events = [
|
||||||
|
{
|
||||||
|
event = "before-sleep";
|
||||||
|
command = "${swaylock} -f";
|
||||||
|
}
|
||||||
|
# after-resume
|
||||||
|
{
|
||||||
|
event = "lock";
|
||||||
|
command = "${swaylock} -f";
|
||||||
|
}
|
||||||
|
{
|
||||||
|
event = "unlock";
|
||||||
|
command = "kill -s USR1 swaylock";
|
||||||
|
}
|
||||||
|
];
|
||||||
|
timeouts = [
|
||||||
|
{
|
||||||
|
timeout = 300;
|
||||||
|
command = "${swaylock} -f";
|
||||||
|
} # 300
|
||||||
|
{
|
||||||
|
timeout = 600;
|
||||||
|
command = "${hyprctl} dispatch dpms off";
|
||||||
|
resumeCommand = "${hyprctl} dispatch dpms on";
|
||||||
|
}
|
||||||
|
# { timeout = 900; command = "${pkgs.systemd}/bin/systemctl suspend"; }
|
||||||
|
];
|
||||||
|
};
|
||||||
|
# TDOD: replace with ags
|
||||||
|
services.swayosd.enable = true;
|
||||||
|
|
||||||
|
services.udiskie.enable = osConfig.services.udisks2.enable;
|
||||||
|
|
||||||
|
systemd.user.services.swww = {
|
||||||
|
Unit.Description = "Animated wallpaper daemon for wayland";
|
||||||
|
Unit.Documentation = ["man:swww(1)"];
|
||||||
|
Unit.PartOf = ["hyprland-session.target"];
|
||||||
|
Install.WantedBy = ["hyprland-session.target"];
|
||||||
|
# Service.ExecStart = "${pkgs.swww}/bin/swww init --no-daemon";
|
||||||
|
Service.ExecStart = let
|
||||||
|
app = pkgs.writeShellApplication {
|
||||||
|
name = "swww-wrapped";
|
||||||
|
runtimeInputs = [pkgs.swww];
|
||||||
|
text = ''
|
||||||
|
swww init --no-daemon
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
in "${app}/bin/swww-wrapped";
|
||||||
|
};
|
||||||
|
|
||||||
|
systemd.user.services.wayvnc = {
|
||||||
|
Unit.Description = "Wayland VNC server";
|
||||||
|
Unit.PartOf = ["graphical-session.target"];
|
||||||
|
Service.ExecStart = "${pkgs.wayvnc}/bin/wayvnc";
|
||||||
|
};
|
||||||
|
|
||||||
|
# Not sure if this should be per desktop
|
||||||
|
services.mpris-proxy.enable = true;
|
||||||
|
|
||||||
|
programs.foot.settings.colors.alpha = 0.6;
|
||||||
|
|
||||||
|
home.packages = [
|
||||||
|
pkgs.swww
|
||||||
|
pkgs.wofi
|
||||||
|
pkgs.polkit-kde-agent
|
||||||
|
pkgs.libsForQt5.qtwayland
|
||||||
|
pkgs.qt6Packages.qtwayland
|
||||||
|
pkgs.grimblast # screenshots on hyprland
|
||||||
|
pkgs.gnome.gnome-system-monitor
|
||||||
|
pkgs.gnome.nautilus
|
||||||
|
];
|
||||||
|
};
|
||||||
|
}
|
||||||
28
home/desktop/plasma.nix
Normal file
28
home/desktop/plasma.nix
Normal file
|
|
@ -0,0 +1,28 @@
|
||||||
|
{
|
||||||
|
config,
|
||||||
|
lib,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}: let
|
||||||
|
polonium = pkgs.callPackage ../../pkgs/polonium.nix {};
|
||||||
|
in {
|
||||||
|
options.my.desktop.plasma.enable = lib.mkEnableOption "my Plasma based desktop environment";
|
||||||
|
|
||||||
|
config = lib.mkIf config.my.desktop.plasma.enable {
|
||||||
|
my.desktop.wayland = true;
|
||||||
|
|
||||||
|
home.packages = [
|
||||||
|
polonium
|
||||||
|
];
|
||||||
|
|
||||||
|
programs.firefox.policies.ExtensionSettings = let
|
||||||
|
extension = shortId: {
|
||||||
|
install_url = "https://addons.mozilla.org/en-US/firefox/downloads/latest/${shortId}/latest.xpi";
|
||||||
|
installation_mode = "force_installed";
|
||||||
|
};
|
||||||
|
in
|
||||||
|
builtins.mapAttrs (_: extension) {
|
||||||
|
"plasma-browser-integration@kde.org" = "plasma-integration";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
}
|
||||||
18
home/desktop/shared/wayland.nix
Normal file
18
home/desktop/shared/wayland.nix
Normal file
|
|
@ -0,0 +1,18 @@
|
||||||
|
{
|
||||||
|
config,
|
||||||
|
lib,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}: let
|
||||||
|
variables = {
|
||||||
|
NIXOS_OZONE_WL = "1";
|
||||||
|
STEAM_FORCE_DESKTOPUI_SCALING = "1.5";
|
||||||
|
};
|
||||||
|
in {
|
||||||
|
options.my.desktop.wayland = lib.mkEnableOption "my Wayland options";
|
||||||
|
|
||||||
|
config = lib.mkIf config.my.desktop.wayland {
|
||||||
|
home.sessionVariables = variables;
|
||||||
|
systemd.user.sessionVariables = variables;
|
||||||
|
};
|
||||||
|
}
|
||||||
119
home/terminal.nix
Normal file
119
home/terminal.nix
Normal file
|
|
@ -0,0 +1,119 @@
|
||||||
|
{
|
||||||
|
config,
|
||||||
|
lib,
|
||||||
|
pkgs,
|
||||||
|
inputs,
|
||||||
|
...
|
||||||
|
}: {
|
||||||
|
imports = [
|
||||||
|
inputs.nix-index-database.hmModules.nix-index
|
||||||
|
];
|
||||||
|
|
||||||
|
home.packages = [
|
||||||
|
pkgs.file
|
||||||
|
pkgs.pciutils # lspci
|
||||||
|
pkgs.usbutils # lsusb
|
||||||
|
|
||||||
|
pkgs.bottom
|
||||||
|
pkgs.htop
|
||||||
|
pkgs.lsof
|
||||||
|
pkgs.lm_sensors
|
||||||
|
pkgs.amdgpu_top
|
||||||
|
#pkgs.rocmPackages.rocm-smi
|
||||||
|
pkgs.ryzenadj
|
||||||
|
pkgs.powertop
|
||||||
|
pkgs.procs
|
||||||
|
|
||||||
|
pkgs.sshfs
|
||||||
|
|
||||||
|
pkgs.fd
|
||||||
|
pkgs.libqalculate
|
||||||
|
# pkgs.havn # port scanner
|
||||||
|
pkgs.gdu # count code
|
||||||
|
pkgs.tokei # count code
|
||||||
|
pkgs.ov # pager
|
||||||
|
pkgs.zoxide # cd
|
||||||
|
pkgs.dua
|
||||||
|
|
||||||
|
pkgs.unzip
|
||||||
|
pkgs.unrar-wrapper
|
||||||
|
pkgs.p7zip
|
||||||
|
pkgs.atool
|
||||||
|
|
||||||
|
pkgs.fastfetch
|
||||||
|
pkgs.hyfetch
|
||||||
|
|
||||||
|
pkgs.helix # `hx` editor
|
||||||
|
pkgs.jujutsu # `jj` vcs
|
||||||
|
];
|
||||||
|
|
||||||
|
programs.atuin = {
|
||||||
|
enable = true;
|
||||||
|
settings.update_check = false;
|
||||||
|
settings.enter_accept = true;
|
||||||
|
};
|
||||||
|
|
||||||
|
programs.autojump.enable = true;
|
||||||
|
|
||||||
|
programs.bat.enable = true;
|
||||||
|
|
||||||
|
# maybe move boxxy here?
|
||||||
|
|
||||||
|
programs.broot.enable = true;
|
||||||
|
|
||||||
|
programs.direnv = {
|
||||||
|
enable = true;
|
||||||
|
nix-direnv.enable = true;
|
||||||
|
# Externally located cache
|
||||||
|
stdlib = ''
|
||||||
|
declare -A direnv_layout_dirs
|
||||||
|
direnv_layout_dir() {
|
||||||
|
local hash path
|
||||||
|
echo "''${direnv_layout_dirs[$PWD]:=$(
|
||||||
|
hash="$(sha1sum - <<< "$PWD" | head -c40)"
|
||||||
|
path="''${PWD//[^a-zA-Z0-9]/-}"
|
||||||
|
echo "${config.xdg.cacheHome}/direnv/layouts/''${hash}''${path}"
|
||||||
|
)}"
|
||||||
|
}
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
|
||||||
|
programs.eza = {
|
||||||
|
enable = true;
|
||||||
|
git = true;
|
||||||
|
icons = "auto";
|
||||||
|
};
|
||||||
|
|
||||||
|
programs.fish = {
|
||||||
|
enable = true;
|
||||||
|
functions = {
|
||||||
|
#__fish_command_not_found_handler = {
|
||||||
|
# body = "__fish_default_command_not_found_handler $argv[1]";
|
||||||
|
# onEvent = "fish_command_not_found";
|
||||||
|
#};
|
||||||
|
};
|
||||||
|
shellInit = "set fish_greeting";
|
||||||
|
};
|
||||||
|
|
||||||
|
# maybe move git here?
|
||||||
|
|
||||||
|
programs.jq.enable = true;
|
||||||
|
|
||||||
|
programs.nix-index.enable = true;
|
||||||
|
programs.nix-index-database.comma.enable = true;
|
||||||
|
|
||||||
|
programs.ripgrep.enable = true;
|
||||||
|
|
||||||
|
programs.skim.enable = true;
|
||||||
|
|
||||||
|
programs.starship = {
|
||||||
|
enable = true;
|
||||||
|
enableTransience = true;
|
||||||
|
settings.nix_shell.format = "❄️️";
|
||||||
|
};
|
||||||
|
|
||||||
|
# programs.yazi = {
|
||||||
|
# enable = true;
|
||||||
|
# settings.preview.cache_dir = "${config.xdg.cacheHome}/thumbnails/yazi";
|
||||||
|
# };
|
||||||
|
}
|
||||||
31
home/xdg.nix
Normal file
31
home/xdg.nix
Normal file
|
|
@ -0,0 +1,31 @@
|
||||||
|
{
|
||||||
|
config,
|
||||||
|
lib,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}: let
|
||||||
|
inherit (config.xdg) stateHome dataHome configHome cacheHome;
|
||||||
|
variables = {
|
||||||
|
# Bash (.bash_history)
|
||||||
|
HISTFILE = "${stateHome}/bash/history";
|
||||||
|
|
||||||
|
# Rust (.cargo)
|
||||||
|
CARGO_HOME = "${dataHome}/cargo";
|
||||||
|
RUSTUP_HOME = "${dataHome}/rustup";
|
||||||
|
|
||||||
|
# GTK2 (.gtkrc-2.0)
|
||||||
|
GTK2_RC_FILES = "${configHome}/gtk-2.0/gtkrc";
|
||||||
|
|
||||||
|
# XCompose (.compose-cache)
|
||||||
|
XCOMPOSECACHE = "${cacheHome}/X11/xcompose";
|
||||||
|
|
||||||
|
# NuGet (.nuget/packages)
|
||||||
|
NUGET_PACKAGES = "${dataHome}/NuGetPackages";
|
||||||
|
};
|
||||||
|
in {
|
||||||
|
home.sessionVariables = variables;
|
||||||
|
systemd.user.sessionVariables = variables;
|
||||||
|
|
||||||
|
# Run `xdg-ninja` to check fixable dotfiles
|
||||||
|
home.packages = [pkgs.xdg-ninja];
|
||||||
|
}
|
||||||
37
nixos/audio/pipewire-low-latency.nix
Normal file
37
nixos/audio/pipewire-low-latency.nix
Normal file
|
|
@ -0,0 +1,37 @@
|
||||||
|
{config, ...}: {
|
||||||
|
assertions = [
|
||||||
|
{
|
||||||
|
assertion = config.services.pipewire.enable;
|
||||||
|
message = "PipeWire must be enabled for low-latency PipeWire";
|
||||||
|
}
|
||||||
|
];
|
||||||
|
|
||||||
|
services.pipewire.extraConfig = {
|
||||||
|
pipewire."92-low-latency" = {
|
||||||
|
context.properties = {
|
||||||
|
default.clock.rate = 48000;
|
||||||
|
default.clock.quantum = 32;
|
||||||
|
default.clock.min-quantum = 32;
|
||||||
|
default.clock.max-quantum = 32;
|
||||||
|
};
|
||||||
|
};
|
||||||
|
pipewire-pulse."92-low-latency" = {
|
||||||
|
context.modules = [
|
||||||
|
{
|
||||||
|
name = "libpipewire-module-protocol-pulse";
|
||||||
|
args = {
|
||||||
|
pulse.min.req = "32/48000";
|
||||||
|
pulse.default.req = "32/48000";
|
||||||
|
pulse.max.req = "32/48000";
|
||||||
|
pulse.min.quantum = "32/48000";
|
||||||
|
pulse.max.quantum = "32/48000";
|
||||||
|
};
|
||||||
|
}
|
||||||
|
];
|
||||||
|
stream.properties = {
|
||||||
|
node.latency = "32/48000";
|
||||||
|
resample.quality = 1;
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
}
|
||||||
17
nixos/audio/pipewire.nix
Normal file
17
nixos/audio/pipewire.nix
Normal file
|
|
@ -0,0 +1,17 @@
|
||||||
|
{
|
||||||
|
config,
|
||||||
|
lib,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}: {
|
||||||
|
security.rtkit.enable = true;
|
||||||
|
services.pipewire = {
|
||||||
|
enable = true;
|
||||||
|
alsa = {
|
||||||
|
enable = true;
|
||||||
|
support32Bit = true;
|
||||||
|
};
|
||||||
|
pulse.enable = true;
|
||||||
|
jack.enable = true;
|
||||||
|
};
|
||||||
|
}
|
||||||
52
nixos/common/flake-support.nix
Normal file
52
nixos/common/flake-support.nix
Normal file
|
|
@ -0,0 +1,52 @@
|
||||||
|
# Configuration for any flake-based NixOS system
|
||||||
|
# Try our darndest to get nixpkgs into path & registry properly
|
||||||
|
#
|
||||||
|
# Maybe write a blog post about it?
|
||||||
|
#
|
||||||
|
# In theory NixOS 24.05 does this for us?
|
||||||
|
# > On flake-based NixOS configurations using nixpkgs.lib.nixosSystem, NixOS will automatically set NIX_PATH and the system-wide flake registry (/etc/nix/registry.json) to point <nixpkgs> and the unqualified flake path nixpkgs to the version of nixpkgs used to build the system.
|
||||||
|
# > This makes nix run nixpkgs#hello and nix-build '<nixpkgs>' -A hello work out of the box with no added configuration, reusing dependencies already on the system.
|
||||||
|
# > This may be undesirable if nix commands are not going to be run on the built system since it adds nixpkgs to the system closure. For such closure-size-constrained non-interactive systems, this setting should be disabled.
|
||||||
|
# > To disable this, set nixpkgs.flake.setNixPath and nixpkgs.flake.setFlakeRegistry to false.
|
||||||
|
# https://nixos.org/manual/nixos/unstable/release-notes#sec-release-24.05-highlights
|
||||||
|
#
|
||||||
|
# Some reading:
|
||||||
|
# https://nixos-and-flakes.thiscute.world/best-practices/nix-path-and-flake-registry#custom-nix-path-and-flake-registry-1
|
||||||
|
# https://github.com/NixOS/nix/issues/9574
|
||||||
|
#
|
||||||
|
# https://discourse.nixos.org/t/questions-on-using-nixos-desktop-with-flakes/16285/5
|
||||||
|
#
|
||||||
|
# I think there are two separate problems.
|
||||||
|
#
|
||||||
|
# # Getting lookup paths (like <nixpkgs>) to resolve
|
||||||
|
#
|
||||||
|
# This comment mentions how they work:
|
||||||
|
# https://discourse.nixos.org/t/nix-path-is-not-recognized/38404/6
|
||||||
|
#
|
||||||
|
# # Getting `indirect` flake refs (like "nixpkgs") to resolve
|
||||||
|
# · indirect: Indirections through the flake registry. These have the form
|
||||||
|
#
|
||||||
|
# | [flake:]<flake-id>(/<rev-or-ref>(/rev)?)?
|
||||||
|
#
|
||||||
|
# These perform a lookup of <flake-id> in the flake registry. For example, nixpkgs and nixpkgs/release-20.09 are indirect flake references. The specified rev and/or ref are merged with the entry in
|
||||||
|
# the registry; see nix registry for details.
|
||||||
|
{
|
||||||
|
inputs,
|
||||||
|
lib,
|
||||||
|
...
|
||||||
|
}: let
|
||||||
|
inherit (inputs) nixpkgs;
|
||||||
|
in {
|
||||||
|
# Enable flake features
|
||||||
|
nix.settings.experimental-features = ["nix-command" "flakes"];
|
||||||
|
nix.channel.enable = false; # remove nix-channel related tools & configs, we use flakes instead.
|
||||||
|
|
||||||
|
programs.command-not-found.enable = false; # Doesn't work well past channels
|
||||||
|
|
||||||
|
nix.registry.nixpkgs.flake = nixpkgs;
|
||||||
|
# but NIX_PATH is still used by many useful tools, so we set it to the same value as the one used by this flake.
|
||||||
|
# Make `nix repl '<nixpkgs>'` use the same nixpkgs as the one used by this flake.
|
||||||
|
environment.etc."nix/inputs/nixpkgs".source = "${nixpkgs}";
|
||||||
|
# https://github.com/NixOS/nix/issues/9574
|
||||||
|
nix.settings.nix-path = lib.mkForce "nixpkgs=/etc/nix/inputs/nixpkgs";
|
||||||
|
}
|
||||||
167
nixos/default.nix
Normal file
167
nixos/default.nix
Normal file
|
|
@ -0,0 +1,167 @@
|
||||||
|
{
|
||||||
|
config,
|
||||||
|
options,
|
||||||
|
lib,
|
||||||
|
pkgs,
|
||||||
|
inputs,
|
||||||
|
...
|
||||||
|
}:
|
||||||
|
{
|
||||||
|
imports = [
|
||||||
|
inputs.disko.nixosModules.disko
|
||||||
|
|
||||||
|
./device.nix
|
||||||
|
./disk-config.nix
|
||||||
|
./hardware-configuration.nix
|
||||||
|
./audio/pipewire.nix
|
||||||
|
./impermanence.nix
|
||||||
|
./nix-maintenance.nix
|
||||||
|
# ./hardening.nix
|
||||||
|
|
||||||
|
./desktop/plasma
|
||||||
|
./tailscale.nix
|
||||||
|
|
||||||
|
./users.nix
|
||||||
|
./user-system-config.nix
|
||||||
|
];
|
||||||
|
|
||||||
|
# Allows referring to this flake by the shorthand `nixos-config`, which lets you do e.g.
|
||||||
|
# nix repl nixos-config
|
||||||
|
nix.registry.nixos-config.to = {
|
||||||
|
type = "git";
|
||||||
|
url = "file://${config.users.users.evar.home}/dev/nix/config";
|
||||||
|
};
|
||||||
|
|
||||||
|
# In order to catch all logs, we need to mount this early enough in the boot process.
|
||||||
|
fileSystems."/var/log".neededForBoot = true;
|
||||||
|
|
||||||
|
zramSwap = {
|
||||||
|
enable = true;
|
||||||
|
memoryPercent = 25;
|
||||||
|
};
|
||||||
|
|
||||||
|
# This is not ideal for a laptop.
|
||||||
|
# For solution watch https://github.com/nix-community/impermanence/issues/153
|
||||||
|
time.timeZone = "America/New_York";
|
||||||
|
|
||||||
|
nix.settings = {
|
||||||
|
# unclutters home folder
|
||||||
|
use-xdg-base-directories = true;
|
||||||
|
|
||||||
|
# adding a community binary cache
|
||||||
|
substituters = [
|
||||||
|
"https://nix-community.cachix.org"
|
||||||
|
];
|
||||||
|
trusted-public-keys = [
|
||||||
|
"nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
|
||||||
|
];
|
||||||
|
};
|
||||||
|
|
||||||
|
nixpkgs.config.allowUnfreePredicate = pkg:
|
||||||
|
builtins.elem (lib.getName pkg)
|
||||||
|
[
|
||||||
|
"steam"
|
||||||
|
# "steam-original"
|
||||||
|
# "steam-run"
|
||||||
|
"steam-unwrapped"
|
||||||
|
"obsidian"
|
||||||
|
"rider"
|
||||||
|
"rust-rover"
|
||||||
|
"spotify"
|
||||||
|
];
|
||||||
|
|
||||||
|
# basically agrees to some license stuff
|
||||||
|
hardware.enableRedistributableFirmware = true;
|
||||||
|
|
||||||
|
### Boot
|
||||||
|
|
||||||
|
boot.loader.systemd-boot.enable = true;
|
||||||
|
boot.loader.efi.canTouchEfiVariables = true;
|
||||||
|
|
||||||
|
boot.initrd.systemd.enable = true;
|
||||||
|
|
||||||
|
### Session management
|
||||||
|
|
||||||
|
services.displayManager.autoLogin = {
|
||||||
|
# only if there's any encripted disks
|
||||||
|
enable = config.boot.initrd.luks.devices != {};
|
||||||
|
user = "evar";
|
||||||
|
};
|
||||||
|
|
||||||
|
### Networking
|
||||||
|
|
||||||
|
networking.networkmanager = {
|
||||||
|
enable = true;
|
||||||
|
# Per https://kokada.dev/blog/an-unordered-list-of-hidden-gems-inside-nixos/
|
||||||
|
# May improve reliability
|
||||||
|
wifi.backend = "iwd";
|
||||||
|
};
|
||||||
|
services.openssh.enable = true;
|
||||||
|
|
||||||
|
### System software
|
||||||
|
|
||||||
|
environment.systemPackages = [
|
||||||
|
pkgs.git
|
||||||
|
pkgs.gdu
|
||||||
|
|
||||||
|
pkgs.exfatprogs # for mkfs.exfat
|
||||||
|
pkgs.parted # for partprobe
|
||||||
|
|
||||||
|
pkgs.gparted
|
||||||
|
|
||||||
|
# For thinkorswim
|
||||||
|
# TODO: Should be elsewhere
|
||||||
|
pkgs.distrobox
|
||||||
|
];
|
||||||
|
|
||||||
|
virtualisation.podman = {
|
||||||
|
enable = true;
|
||||||
|
dockerCompat = true;
|
||||||
|
};
|
||||||
|
|
||||||
|
programs.adb.enable = true;
|
||||||
|
|
||||||
|
# Miscellaneous
|
||||||
|
|
||||||
|
# helps some things access battery info
|
||||||
|
services.upower.enable = true;
|
||||||
|
# dynamic mounting of connected devices
|
||||||
|
services.udisks2.enable = true;
|
||||||
|
services.printing.enable = true;
|
||||||
|
# service discovery, hostname lookups, etc.
|
||||||
|
services.avahi = {
|
||||||
|
enable = true;
|
||||||
|
nssmdns4 = true;
|
||||||
|
openFirewall = true;
|
||||||
|
};
|
||||||
|
# For the music server
|
||||||
|
networking.firewall.allowedUDPPorts = [
|
||||||
|
# DLNA discovery (SSDP)
|
||||||
|
1900
|
||||||
|
];
|
||||||
|
|
||||||
|
hardware.bluetooth = {
|
||||||
|
powerOnBoot = true;
|
||||||
|
settings.General.Experimental = "true";
|
||||||
|
};
|
||||||
|
# allows connecting to virtualized directories
|
||||||
|
services.gvfs.enable = true;
|
||||||
|
|
||||||
|
# This option defines the first version of NixOS you have installed on this particular machine,
|
||||||
|
# and is used to maintain compatibility with application data (e.g. databases) created on older NixOS versions.
|
||||||
|
#
|
||||||
|
# Most users should NEVER change this value after the initial install, for any reason,
|
||||||
|
# even if you've upgraded your system to a new NixOS release.
|
||||||
|
#
|
||||||
|
# This value does NOT affect the Nixpkgs version your packages and OS are pulled from,
|
||||||
|
# so changing it will NOT upgrade your system.
|
||||||
|
#
|
||||||
|
# This value being lower than the current NixOS release does NOT mean your system is
|
||||||
|
# out of date, out of support, or vulnerable.
|
||||||
|
#
|
||||||
|
# Do NOT change this value unless you have manually inspected all the changes it would make to your configuration,
|
||||||
|
# and migrated your data accordingly.
|
||||||
|
#
|
||||||
|
# For more information, see `man configuration.nix` or https://nixos.org/manual/nixos/stable/options#opt-system.stateVersion .
|
||||||
|
system.stateVersion = "23.11"; # Did you read the comment?
|
||||||
|
}
|
||||||
45
nixos/desktop/gnome/default.nix
Normal file
45
nixos/desktop/gnome/default.nix
Normal file
|
|
@ -0,0 +1,45 @@
|
||||||
|
{
|
||||||
|
config,
|
||||||
|
lib,
|
||||||
|
pkgs,
|
||||||
|
inputs,
|
||||||
|
...
|
||||||
|
}: {
|
||||||
|
services.xserver.enable = true;
|
||||||
|
# services.xserver.displayManager.defaultSession = "gnome";
|
||||||
|
# https://github.com/NixOS/nixpkgs/issues/103746#issuecomment-945091229
|
||||||
|
systemd.services."getty@tty1".enable = false;
|
||||||
|
systemd.services."autovt@tty1".enable = false;
|
||||||
|
services.xserver.displayManager.gdm.enable = true;
|
||||||
|
services.xserver.desktopManager.gnome.enable = true;
|
||||||
|
hardware.pulseaudio.enable = false;
|
||||||
|
# xdg.portal.extraPortals = [ pkgs.xdg-desktop-portal-gtk ];
|
||||||
|
environment.systemPackages = [
|
||||||
|
pkgs.gnomeExtensions.appindicator
|
||||||
|
pkgs.gnomeExtensions.dash-to-dock
|
||||||
|
pkgs.gnomeExtensions.dash-to-panel
|
||||||
|
pkgs.mission-center
|
||||||
|
pkgs.gnome.nautilus
|
||||||
|
];
|
||||||
|
environment.gnome.excludePackages = [
|
||||||
|
pkgs.gnome-tour
|
||||||
|
pkgs.gnome.cheese # Camera
|
||||||
|
pkgs.gnome.gnome-system-monitor
|
||||||
|
#pkgs.gnome.gnome-music
|
||||||
|
pkgs.gnome.gnome-terminal # Console
|
||||||
|
pkgs.gnome.gnome-contacts
|
||||||
|
pkgs.gedit # Text Editor
|
||||||
|
pkgs.gnome.epiphany # Web
|
||||||
|
pkgs.gnome.geary
|
||||||
|
pkgs.gnome.totem # Videos
|
||||||
|
];
|
||||||
|
services.udev.packages = [
|
||||||
|
pkgs.gnome.gnome-settings-daemon
|
||||||
|
];
|
||||||
|
|
||||||
|
services.xserver.desktopManager.gnome.extraGSettingsOverrides = ''
|
||||||
|
[org.gnome.mutter]
|
||||||
|
experimental-features=['scale-monitor-framebuffer']
|
||||||
|
'';
|
||||||
|
services.xserver.desktopManager.gnome.extraGSettingsOverridePackages = [pkgs.gnome.mutter];
|
||||||
|
}
|
||||||
35
nixos/desktop/hypr/default.nix
Normal file
35
nixos/desktop/hypr/default.nix
Normal file
|
|
@ -0,0 +1,35 @@
|
||||||
|
{
|
||||||
|
config,
|
||||||
|
lib,
|
||||||
|
pkgs,
|
||||||
|
inputs,
|
||||||
|
...
|
||||||
|
}: {
|
||||||
|
nix.settings = {
|
||||||
|
builders-use-substitutes = true; # unknown, suggested by anyrun
|
||||||
|
substituters = [
|
||||||
|
"https://hyprland.cachix.org"
|
||||||
|
"https://anyrun.cachix.org"
|
||||||
|
];
|
||||||
|
trusted-public-keys = [
|
||||||
|
"hyprland.cachix.org-1:a7pgxzMz7+chwVL3/pzj6jIBMioiJM7ypFP8PwtkuGc="
|
||||||
|
"anyrun.cachix.org-1:pqBobmOjI7nKlsUMV25u9QHa9btJK65/C8vnO3p346s="
|
||||||
|
];
|
||||||
|
};
|
||||||
|
|
||||||
|
services.xserver.enable = true;
|
||||||
|
services.xserver.displayManager.defaultSession = "hyprland";
|
||||||
|
# https://github.com/NixOS/nixpkgs/issues/103746#issuecomment-945091229
|
||||||
|
systemd.services."getty@tty1".enable = false;
|
||||||
|
systemd.services."autovt@tty1".enable = false;
|
||||||
|
services.xserver.displayManager.gdm.enable = true;
|
||||||
|
security.pam.services.swaylock = {};
|
||||||
|
|
||||||
|
programs.hyprland = {
|
||||||
|
enable = true;
|
||||||
|
};
|
||||||
|
|
||||||
|
xdg.portal.extraPortals = [pkgs.xdg-desktop-portal-gtk];
|
||||||
|
|
||||||
|
services.blueman.enable = true;
|
||||||
|
}
|
||||||
20
nixos/desktop/plasma/default.nix
Normal file
20
nixos/desktop/plasma/default.nix
Normal file
|
|
@ -0,0 +1,20 @@
|
||||||
|
{config, lib, pkgs, ...}:
|
||||||
|
let
|
||||||
|
autologin = config.services.displayManager.autoLogin.enable;
|
||||||
|
in
|
||||||
|
{
|
||||||
|
services.displayManager.sddm.enable = true;
|
||||||
|
services.displayManager.sddm.wayland.enable = true;
|
||||||
|
services.desktopManager.plasma6.enable = true;
|
||||||
|
|
||||||
|
programs.dconf.enable = true;
|
||||||
|
|
||||||
|
# The user is expected to have Emacs instead
|
||||||
|
environment.plasma6.excludePackages = with pkgs.kdePackages; [
|
||||||
|
elisa
|
||||||
|
];
|
||||||
|
|
||||||
|
# https://github.com/NixOS/nixpkgs/issues/103746#issuecomment-2495681146
|
||||||
|
systemd.services."getty@tty1".enable = lib.mkIf autologin false;
|
||||||
|
systemd.services."autovt@tty1".enable = lib.mkIf autologin false;
|
||||||
|
}
|
||||||
62
nixos/device.nix
Normal file
62
nixos/device.nix
Normal file
|
|
@ -0,0 +1,62 @@
|
||||||
|
{
|
||||||
|
config,
|
||||||
|
lib,
|
||||||
|
pkgs,
|
||||||
|
inputs,
|
||||||
|
...
|
||||||
|
}: {
|
||||||
|
imports = [
|
||||||
|
inputs.nixos-hardware.nixosModules.framework-16-7040-amd
|
||||||
|
];
|
||||||
|
|
||||||
|
# Set the Wireless Regulatory Domain
|
||||||
|
# https://github.com/NixOS/nixpkgs/issues/25378
|
||||||
|
boot.extraModprobeConfig = ''
|
||||||
|
options cfg80211 ieee80211_regdom="US"
|
||||||
|
'';
|
||||||
|
|
||||||
|
services.fwupd.enable = true;
|
||||||
|
|
||||||
|
hardware.bluetooth.enable = true;
|
||||||
|
|
||||||
|
boot.kernelPackages =
|
||||||
|
lib.mkIf
|
||||||
|
(lib.versionOlder pkgs.linux.version "6.9")
|
||||||
|
pkgs.linuxPackages_latest;
|
||||||
|
|
||||||
|
# Not needed on NixOS 24.05+
|
||||||
|
# Disable pcr for linux kernel testing 6.9-rc4+
|
||||||
|
# Per https://community.frame.work/t/tracking-framework-16-linux-6-9-0-rc4-rc5-extreme-screen-flickering-anyone-else/49467/44
|
||||||
|
boot.kernelParams = let
|
||||||
|
affectedVersions = ["6.9-rc4" "6.9-rc5" "6.9-rc6"];
|
||||||
|
version = config.boot.kernelPackages.kernel.version;
|
||||||
|
affected = builtins.elem version affectedVersions;
|
||||||
|
in
|
||||||
|
lib.mkIf affected ["amdgpu.dcdebugmask=0x400"];
|
||||||
|
|
||||||
|
environment.systemPackages = lib.mkMerge [
|
||||||
|
(with pkgs; [
|
||||||
|
fw-ectool
|
||||||
|
framework-tool
|
||||||
|
])
|
||||||
|
# Show EasyEffects status in GNOME
|
||||||
|
(lib.mkIf config.services.xserver.desktopManager.gnome.enable [
|
||||||
|
pkgs.gnomeExtensions.easyeffects-preset-selector
|
||||||
|
])
|
||||||
|
];
|
||||||
|
|
||||||
|
# The FWL benefits from modifying its speakers
|
||||||
|
home-manager.sharedModules = [
|
||||||
|
{
|
||||||
|
services.easyeffects.enable = true;
|
||||||
|
}
|
||||||
|
];
|
||||||
|
# EasyEffects needs this
|
||||||
|
programs.dconf.enable = true;
|
||||||
|
|
||||||
|
# RGB LED Matrix
|
||||||
|
services.hardware.openrgb = {
|
||||||
|
enable = true;
|
||||||
|
package = pkgs.openrgb-with-all-plugins;
|
||||||
|
};
|
||||||
|
}
|
||||||
69
nixos/disk-config.nix
Normal file
69
nixos/disk-config.nix
Normal file
|
|
@ -0,0 +1,69 @@
|
||||||
|
{
|
||||||
|
# checkout the example folder for how to configure different disko layouts
|
||||||
|
disko.devices = {
|
||||||
|
disk.fw16-2280 = {
|
||||||
|
device = "/dev/disk/by-path/pci-0000:05:00.0-nvme-1";
|
||||||
|
content = {
|
||||||
|
type = "gpt";
|
||||||
|
partitions = {
|
||||||
|
esp = {
|
||||||
|
size = "2G";
|
||||||
|
type = "EF00";
|
||||||
|
content = {
|
||||||
|
type = "filesystem";
|
||||||
|
format = "vfat";
|
||||||
|
mountpoint = "/boot";
|
||||||
|
mountOptions = ["noatime" "fmask=0077" "dmask=0077"];
|
||||||
|
};
|
||||||
|
};
|
||||||
|
cryptall = {
|
||||||
|
size = "100%";
|
||||||
|
content = {
|
||||||
|
type = "luks";
|
||||||
|
name = "all";
|
||||||
|
settings = {
|
||||||
|
# allowDiscards = true;
|
||||||
|
# keyFile = "/tmp/secret.key";
|
||||||
|
};
|
||||||
|
content = {
|
||||||
|
type = "btrfs";
|
||||||
|
extraArgs = ["-f"];
|
||||||
|
subvolumes = {
|
||||||
|
# System state which should be persistent across reboots and possibly backed up.
|
||||||
|
"/@nixos-persist" = {
|
||||||
|
mountpoint = "/persist";
|
||||||
|
mountOptions = ["noatime" "compress=zstd"];
|
||||||
|
};
|
||||||
|
# I’m not so interested in backing up logs but I want them to be preserved across reboots,
|
||||||
|
# so I’m dedicating a subvolume to logs rather than using the persist subvolume.
|
||||||
|
"/@nixos-varlog" = {
|
||||||
|
mountpoint = "/var/log";
|
||||||
|
mountOptions = ["noatime" "compress=zstd"];
|
||||||
|
};
|
||||||
|
# Needs to be persistent but is not worth backing up, as it’s trivial to reconstruct.
|
||||||
|
"/@nixos-nix" = {
|
||||||
|
mountpoint = "/nix";
|
||||||
|
mountOptions = ["noatime" "compress=zstd"];
|
||||||
|
};
|
||||||
|
|
||||||
|
"/@data" = {
|
||||||
|
mountpoint = "/data";
|
||||||
|
mountOptions = ["noatime" "compress=zstd"];
|
||||||
|
};
|
||||||
|
"/@home-evar" = {
|
||||||
|
mountpoint = "/home/evar";
|
||||||
|
mountOptions = ["noatime" "compress=zstd"];
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
nodev."/" = {
|
||||||
|
fsType = "tmpfs";
|
||||||
|
mountOptions = ["size=25%" "mode=755"];
|
||||||
|
};
|
||||||
|
};
|
||||||
|
}
|
||||||
23
nixos/hardening.nix
Normal file
23
nixos/hardening.nix
Normal file
|
|
@ -0,0 +1,23 @@
|
||||||
|
{
|
||||||
|
config,
|
||||||
|
lib,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}: {
|
||||||
|
nix.settings.allowed-users = ["@wheel"];
|
||||||
|
security.sudo.execWheelOnly = true;
|
||||||
|
services.openssh = {
|
||||||
|
allowSFTP = false;
|
||||||
|
settings = {
|
||||||
|
ChallengeResponseAuthentication = false;
|
||||||
|
PasswordAuthentication = false;
|
||||||
|
};
|
||||||
|
extraConfig = ''
|
||||||
|
AllowTcpForwarding yes
|
||||||
|
X11Forwarding no
|
||||||
|
AllowAgentForwarding no
|
||||||
|
AllowStreamLocalForwarding no
|
||||||
|
AuthenticationMethods publickey
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
}
|
||||||
26
nixos/hardware-configuration.nix
Normal file
26
nixos/hardware-configuration.nix
Normal file
|
|
@ -0,0 +1,26 @@
|
||||||
|
# Do not modify this file! It was generated by ‘nixos-generate-config’
|
||||||
|
# and may be overwritten by future invocations. Please make changes
|
||||||
|
# to /etc/nixos/configuration.nix instead.
|
||||||
|
{ config, lib, pkgs, modulesPath, ... }:
|
||||||
|
|
||||||
|
{
|
||||||
|
imports =
|
||||||
|
[ (modulesPath + "/installer/scan/not-detected.nix")
|
||||||
|
];
|
||||||
|
|
||||||
|
boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "thunderbolt" "usbhid" "usb_storage" "sd_mod" ];
|
||||||
|
boot.initrd.kernelModules = [ ];
|
||||||
|
boot.kernelModules = [ "kvm-amd" ];
|
||||||
|
boot.extraModulePackages = [ ];
|
||||||
|
|
||||||
|
# Enables DHCP on each ethernet and wireless interface. In case of scripted networking
|
||||||
|
# (the default) this is the recommended approach. When using systemd-networkd it's
|
||||||
|
# still possible to use this option, but it's recommended to use it in conjunction
|
||||||
|
# with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
|
||||||
|
networking.useDHCP = lib.mkDefault true;
|
||||||
|
# networking.interfaces.enp196s0f3u2u3.useDHCP = lib.mkDefault true;
|
||||||
|
# networking.interfaces.wlp4s0.useDHCP = lib.mkDefault true;
|
||||||
|
|
||||||
|
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
|
||||||
|
hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
|
||||||
|
}
|
||||||
52
nixos/impermanence.nix
Normal file
52
nixos/impermanence.nix
Normal file
|
|
@ -0,0 +1,52 @@
|
||||||
|
{
|
||||||
|
inputs,
|
||||||
|
options,
|
||||||
|
...
|
||||||
|
}: {
|
||||||
|
imports = [inputs.impermanence.nixosModules.impermanence];
|
||||||
|
|
||||||
|
# There are bind mounts into here that are important for boot.
|
||||||
|
fileSystems."/persist".neededForBoot = true;
|
||||||
|
|
||||||
|
environment.persistence."/persist" = {
|
||||||
|
hideMounts = true;
|
||||||
|
directories = [
|
||||||
|
"/var/lib/nixos"
|
||||||
|
"/var/lib/bluetooth"
|
||||||
|
"/var/lib/fprint"
|
||||||
|
"/var/lib/upower"
|
||||||
|
"/var/lib/tailscale"
|
||||||
|
"/var/lib/systemd/coredump"
|
||||||
|
"/etc/NetworkManager/system-connections"
|
||||||
|
"/var/lib/iwd" # Known networks and keys
|
||||||
|
{
|
||||||
|
directory = "/var/lib/colord";
|
||||||
|
user = "colord";
|
||||||
|
group = "colord";
|
||||||
|
mode = "u=rwx,g=rx,o=";
|
||||||
|
}
|
||||||
|
# TODO: cups?
|
||||||
|
];
|
||||||
|
files = [
|
||||||
|
"/etc/machine-id"
|
||||||
|
#{ file = "/var/keys/secret_file"; parentDirectory = { mode = "u=rwx,g=,o="; }; }
|
||||||
|
"/var/lib/NetworkManager/secret_key"
|
||||||
|
"/var/lib/NetworkManager/seen-bssids"
|
||||||
|
"/var/lib/NetworkManager/timestamps"
|
||||||
|
];
|
||||||
|
};
|
||||||
|
|
||||||
|
# /etc/{passwd,shadow} are not persisted
|
||||||
|
users.mutableUsers = false;
|
||||||
|
|
||||||
|
# Some report issues with impermanence file config for host keys, so just change their location
|
||||||
|
services.openssh.hostKeys =
|
||||||
|
builtins.map
|
||||||
|
(x: x // {path = "/persist" + x.path;})
|
||||||
|
options.services.openssh.hostKeys.default;
|
||||||
|
|
||||||
|
# sudo lecture db is not persisted, turn it off
|
||||||
|
security.sudo.extraConfig = ''
|
||||||
|
Defaults lecture = never
|
||||||
|
'';
|
||||||
|
}
|
||||||
14
nixos/nix-maintenance.nix
Normal file
14
nixos/nix-maintenance.nix
Normal file
|
|
@ -0,0 +1,14 @@
|
||||||
|
{
|
||||||
|
nix = {
|
||||||
|
settings.auto-optimise-store = true;
|
||||||
|
optimise = {
|
||||||
|
automatic = true;
|
||||||
|
dates = ["weekly"];
|
||||||
|
};
|
||||||
|
gc = {
|
||||||
|
automatic = true;
|
||||||
|
dates = "weekly";
|
||||||
|
options = "--delete-older-than 14d";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
}
|
||||||
14
nixos/tailscale.nix
Normal file
14
nixos/tailscale.nix
Normal file
|
|
@ -0,0 +1,14 @@
|
||||||
|
{
|
||||||
|
config,
|
||||||
|
lib,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}: {
|
||||||
|
services.tailscale = {
|
||||||
|
enable = true;
|
||||||
|
openFirewall = true;
|
||||||
|
};
|
||||||
|
|
||||||
|
# Implicitly trust packets routed over Tailscale
|
||||||
|
networking.firewall.trustedInterfaces = [config.services.tailscale.interfaceName];
|
||||||
|
}
|
||||||
54
nixos/user-system-config.nix
Normal file
54
nixos/user-system-config.nix
Normal file
|
|
@ -0,0 +1,54 @@
|
||||||
|
# Configuration that really wants to be per-user,
|
||||||
|
# but can't be defined from Home Manager.
|
||||||
|
{
|
||||||
|
config,
|
||||||
|
lib,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}: {
|
||||||
|
networking.firewall = lib.mkMerge [
|
||||||
|
# User-mode Syncthing
|
||||||
|
{
|
||||||
|
allowedTCPPorts = [22000];
|
||||||
|
allowedUDPPorts = [21027 22000];
|
||||||
|
}
|
||||||
|
|
||||||
|
# LocalSend
|
||||||
|
{allowedTCPPorts = [53317];}
|
||||||
|
];
|
||||||
|
|
||||||
|
environment.systemPackages = lib.mkMerge [
|
||||||
|
[pkgs.ryujinx]
|
||||||
|
[
|
||||||
|
(pkgs.lutris.override {
|
||||||
|
extraLibraries = pkgs: [
|
||||||
|
pkgs.libvdpau
|
||||||
|
pkgs.openal
|
||||||
|
pkgs.speex
|
||||||
|
pkgs.libgudev
|
||||||
|
];
|
||||||
|
})
|
||||||
|
pkgs.wineWowPackages.waylandFull
|
||||||
|
]
|
||||||
|
# For gamemode status in GNOME
|
||||||
|
(lib.mkIf (config.services.xserver.desktopManager.gnome.enable) [
|
||||||
|
pkgs.gnomeExtensions.gamemode-indicator-in-system-settings
|
||||||
|
])
|
||||||
|
];
|
||||||
|
|
||||||
|
programs.steam = {
|
||||||
|
enable = true;
|
||||||
|
remotePlay.openFirewall = true;
|
||||||
|
gamescopeSession.enable = true;
|
||||||
|
};
|
||||||
|
programs.gamemode = {
|
||||||
|
enable = true;
|
||||||
|
enableRenice = true;
|
||||||
|
settings = {
|
||||||
|
general = {
|
||||||
|
softrealtime = "auto";
|
||||||
|
renice = 10;
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
}
|
||||||
44
nixos/users.nix
Normal file
44
nixos/users.nix
Normal file
|
|
@ -0,0 +1,44 @@
|
||||||
|
{
|
||||||
|
inputs,
|
||||||
|
config,
|
||||||
|
lib,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}: {
|
||||||
|
imports = [inputs.home-manager.nixosModules.home-manager];
|
||||||
|
|
||||||
|
home-manager = {
|
||||||
|
useGlobalPkgs = true;
|
||||||
|
useUserPackages = true;
|
||||||
|
extraSpecialArgs = {inherit inputs;};
|
||||||
|
};
|
||||||
|
|
||||||
|
# TODO: Remove
|
||||||
|
# Allow root login with same password as primary user
|
||||||
|
users.users.root.hashedPasswordFile = let
|
||||||
|
primaryUser = "evar";
|
||||||
|
in
|
||||||
|
config.users.users.${primaryUser}.hashedPasswordFile;
|
||||||
|
|
||||||
|
users.users.evar = {
|
||||||
|
hashedPassword = "$y$j9T$4TYc8brm3.oJUbkktbbEq/$cTlZRmAVxb2GtttEXSoSGw9y.qm.vUs/yXgwLjlTk46";
|
||||||
|
uid = 1000;
|
||||||
|
isNormalUser = true;
|
||||||
|
extraGroups = [
|
||||||
|
"wheel"
|
||||||
|
"networkmanager"
|
||||||
|
"video"
|
||||||
|
"input"
|
||||||
|
"audio"
|
||||||
|
"adbusers"
|
||||||
|
"uucp"
|
||||||
|
"dialout"
|
||||||
|
];
|
||||||
|
# openssh.authorizedKeys.keys = [
|
||||||
|
# "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINhBR2Kg0VR1+p9jNYmuaaGXTMjHwQSbvmzIjwhOOmNG emily@intras 2022-10-26"
|
||||||
|
# ];
|
||||||
|
};
|
||||||
|
home-manager.users.evar = {
|
||||||
|
imports = [../home];
|
||||||
|
};
|
||||||
|
}
|
||||||
60
pkgs/polonium.nix
Normal file
60
pkgs/polonium.nix
Normal file
|
|
@ -0,0 +1,60 @@
|
||||||
|
# TODO: replace with nixpkgs version when it has one
|
||||||
|
{
|
||||||
|
lib,
|
||||||
|
fetchFromGitHub,
|
||||||
|
buildNpmPackage,
|
||||||
|
plasma5Packages ? null,
|
||||||
|
kdePackages ? null,
|
||||||
|
}:
|
||||||
|
# how to update:
|
||||||
|
# 1. check out the tag for the version in question
|
||||||
|
# 2. run `prefetch-npm-deps package-lock.json`
|
||||||
|
# 3. update npmDepsHash with the output of the previous step
|
||||||
|
let
|
||||||
|
inherit (kdePackages) qtbase;
|
||||||
|
in
|
||||||
|
buildNpmPackage {
|
||||||
|
name = "polonium-git";
|
||||||
|
pname = "polonium";
|
||||||
|
|
||||||
|
src = fetchFromGitHub {
|
||||||
|
owner = "zeroxoneafour";
|
||||||
|
repo = "polonium";
|
||||||
|
rev = "83084c9f2bf44a22966c0534726498975183830e";
|
||||||
|
hash = "sha256-kZMq4m4nACRelqgKsZVkmV9qqFw7dcMZHQF9dhdxCbQ=";
|
||||||
|
};
|
||||||
|
|
||||||
|
npmDepsHash = "sha256-kaT3Uyq+/JkmebakG9xQuR4Kjo7vk6BzI1/LffOj/eo=";
|
||||||
|
|
||||||
|
# the installer does a bunch of stuff that fails in our sandbox, so just build here and then we
|
||||||
|
# manually do the install
|
||||||
|
postPatch = ''
|
||||||
|
substituteInPlace Makefile \
|
||||||
|
--replace-fail "build install cleanall" "res src"
|
||||||
|
'';
|
||||||
|
|
||||||
|
nativeBuildInputs = [
|
||||||
|
kdePackages.kpackage
|
||||||
|
];
|
||||||
|
|
||||||
|
dontNpmBuild = true;
|
||||||
|
|
||||||
|
dontWrapQtApps = true;
|
||||||
|
|
||||||
|
installPhase = ''
|
||||||
|
runHook preInstall
|
||||||
|
|
||||||
|
kpackagetool6 --install pkg --packageroot $out/share/kwin/scripts
|
||||||
|
|
||||||
|
runHook postInstall
|
||||||
|
'';
|
||||||
|
|
||||||
|
env.LANG = "C.UTF-8";
|
||||||
|
|
||||||
|
meta = with lib; {
|
||||||
|
description = "Auto-tiler that uses KWin 6+ tiling functionality";
|
||||||
|
license = licenses.mit;
|
||||||
|
maintainers = with maintainers; [peterhoeg];
|
||||||
|
inherit (kdePackages.kpackage.meta) platforms;
|
||||||
|
};
|
||||||
|
}
|
||||||
13
systems/default.nix
Normal file
13
systems/default.nix
Normal file
|
|
@ -0,0 +1,13 @@
|
||||||
|
{inputs, ...}: let
|
||||||
|
inherit (inputs) nixpkgs;
|
||||||
|
inherit (nixpkgs.lib) nixosSystem;
|
||||||
|
in {
|
||||||
|
flake.nixosConfigurations.atreus = nixosSystem {
|
||||||
|
specialArgs = {inherit inputs;};
|
||||||
|
modules = [
|
||||||
|
{networking.hostName = "atreus";}
|
||||||
|
../nixos/common/flake-support.nix
|
||||||
|
../nixos
|
||||||
|
];
|
||||||
|
};
|
||||||
|
}
|
||||||
Loading…
Add table
Add a link
Reference in a new issue