102 lines
2.4 KiB
Nix
102 lines
2.4 KiB
Nix
{
|
|
self,
|
|
pkgs,
|
|
lib,
|
|
inputs,
|
|
config,
|
|
...
|
|
}: {
|
|
options = {
|
|
pim.cosmic.enable = lib.mkEnableOption "cosmic";
|
|
};
|
|
|
|
config = {
|
|
pim = {
|
|
lanzaboote.enable = false;
|
|
tidal.enable = false;
|
|
gnome.enable = true;
|
|
stylix.enable = true;
|
|
wireguard.enable = true;
|
|
sops-nix.usersWithSopsKeys = ["pkunis"];
|
|
};
|
|
|
|
users.users.pkunis = {
|
|
isNormalUser = true;
|
|
extraGroups = ["wheel" "docker" "input" "wireshark" "dialout"];
|
|
};
|
|
|
|
deployment = {
|
|
allowLocalDeployment = true;
|
|
targetHost = null;
|
|
tags = ["desktop"];
|
|
};
|
|
|
|
facter.reportPath = ./facter.json;
|
|
home-manager.users.pkunis.imports = [./pkunis.home.nix];
|
|
nix.settings.trusted-users = ["pkunis"];
|
|
system.stateVersion = "23.05";
|
|
sops.defaultSopsFile = "${self}/secrets/blocktech/nixos.yaml";
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
borgbackup
|
|
kubectl
|
|
nmap
|
|
poppler_utils # For pdfunite
|
|
silicon
|
|
units
|
|
];
|
|
|
|
virtualisation = {
|
|
libvirtd.enable = true;
|
|
|
|
docker = {
|
|
enable = true;
|
|
|
|
rootless = {
|
|
enable = true;
|
|
setSocketVariable = true;
|
|
};
|
|
};
|
|
};
|
|
|
|
swapDevices = [
|
|
{device = "/dev/disk/by-uuid/949815d4-cfc4-4cf3-bbbe-22516f91119c";}
|
|
];
|
|
|
|
fileSystems."/" = {
|
|
device = "/dev/disk/by-uuid/06710546-327b-402a-b221-8d88b75301d2";
|
|
fsType = "ext4";
|
|
};
|
|
fileSystems."/boot" = {
|
|
device = "/dev/disk/by-uuid/E547-7E6C";
|
|
fsType = "vfat";
|
|
options = ["fmask=0077" "dmask=0077"];
|
|
};
|
|
|
|
boot = {
|
|
initrd.luks.devices."luks-4cc1ad7c-a794-4c54-adc8-c9f666c9b781".device = "/dev/disk/by-uuid/4cc1ad7c-a794-4c54-adc8-c9f666c9b781";
|
|
initrd.luks.devices."luks-161f5109-c2d7-4307-91f6-27c655d6ab3e".device = "/dev/disk/by-uuid/161f5109-c2d7-4307-91f6-27c655d6ab3e";
|
|
|
|
loader.systemd-boot.enable = true;
|
|
loader.efi.canTouchEfiVariables = true;
|
|
};
|
|
|
|
nix.settings = {
|
|
substituters = ["https://cosmic.cachix.org/"];
|
|
trusted-public-keys = ["cosmic.cachix.org-1:Dya9IyXD4xdBehWjrkPv6rtxpmMdRel02smYzA85dPE="];
|
|
};
|
|
|
|
specialisation.cosmic = lib.mkIf config.pim.cosmic.enable {
|
|
configuration = {
|
|
imports = [
|
|
inputs.nixos-cosmic.nixosModules.default
|
|
];
|
|
|
|
services = {
|
|
desktopManager.cosmic.enable = true;
|
|
displayManager.cosmic-greeter.enable = true;
|
|
};
|
|
};
|
|
};
|
|
};
|
|
}
|