nixos-laptop/configuration.nix

279 lines
6 KiB
Nix
Raw Normal View History

2024-06-09 20:00:47 +00:00
{ pkgs, config, lib, inputs, flake, system, ... }: {
imports = [
inputs.stylix.nixosModules.stylix
inputs.home-manager.nixosModules.home-manager
2024-06-15 14:20:03 +00:00
inputs.sops-nix.nixosModules.sops
2024-06-09 20:00:47 +00:00
"${flake}/modules/nixos/lanzaboote.nix"
];
2023-10-08 14:57:57 +00:00
time.timeZone = "Europe/Amsterdam";
i18n.defaultLocale = "en_US.UTF-8";
2024-06-09 20:00:47 +00:00
programs.ssh.startAgent = true;
2023-10-08 14:57:57 +00:00
2023-10-22 20:30:51 +00:00
services = {
gnome.gnome-keyring.enable = lib.mkForce false;
tailscale = {
enable = true;
useRoutingFeatures = "client";
};
2023-10-22 20:30:51 +00:00
xserver = {
enable = true;
displayManager.gdm = { enable = true; };
2023-10-22 20:30:51 +00:00
desktopManager.gnome.enable = true;
excludePackages = with pkgs; [ xterm ];
2023-10-22 20:30:51 +00:00
};
printing = {
2023-10-08 14:57:57 +00:00
enable = true;
drivers = [ pkgs.hplip pkgs.gutenprint ];
2023-10-08 14:57:57 +00:00
};
pipewire = {
enable = true;
alsa.enable = true;
alsa.support32Bit = true;
pulse.enable = true;
jack.enable = true;
};
2023-10-08 14:57:57 +00:00
};
users = {
users.pim = {
isNormalUser = true;
extraGroups = [ "wheel" "docker" "input" "wireshark" "dialout" ];
};
2023-10-08 14:57:57 +00:00
};
environment = {
# https://nix-community.github.io/home-manager/options.xhtml#opt-programs.zsh.enableCompletion
pathsToLink = [ "/share/zsh" ];
systemPackages = (with pkgs; [
age
borgbackup
btop
btrfs-progs
curl
dig
exfat
f3
fastfetch
file
git
gnome.gnome-shell-extensions
jq
kubectl
nmap
poppler_utils # For pdfunite
ripgrep
sbctl
silicon
sops
tree
units
vim
wget
yq
ncdu
lshw
]) ++ (with pkgs.gnomeExtensions; [
pop-shell
window-is-ready-remover
random-wallpaper
]);
gnome.excludePackages = (with pkgs; [
2024-05-16 16:48:46 +00:00
epiphany
gnome-connections
2023-10-16 09:30:17 +00:00
gnome-console
gnome-tour
]) ++ (with pkgs.gnome; [
geary
2024-05-16 16:48:46 +00:00
gnome-calendar
gnome-clocks
gnome-contacts
gnome-font-viewer
gnome-logs
gnome-maps
gnome-music
seahorse
totem
yelp
gnome-weather
]);
2023-10-08 14:57:57 +00:00
};
system = {
stateVersion = "23.05";
activationScripts.diff = ''
if [[ -e /run/current-system ]]; then
${pkgs.nix}/bin/nix store diff-closures /run/current-system "$systemConfig"
fi
'';
};
2023-10-08 14:57:57 +00:00
security = {
rtkit.enable = true;
sudo.extraConfig = ''
Defaults timestamp_timeout=30
'';
};
2023-10-08 14:57:57 +00:00
nix = {
package = pkgs.nixFlakes;
settings.trusted-users = [ "root" "pim" ];
2023-10-08 14:57:57 +00:00
extraOptions = ''
experimental-features = nix-command flakes
'';
gc = {
automatic = true;
persistent = true;
dates = "weekly";
options = "--delete-older-than 7d";
};
2023-10-08 14:57:57 +00:00
};
2023-10-14 17:08:02 +00:00
2023-10-22 20:30:51 +00:00
networking = {
useDHCP = lib.mkDefault true;
wg-quick.interfaces = {
home = {
2024-06-15 14:20:03 +00:00
privateKeyFile = config.sops.secrets."wireguard/home/privateKey".path;
address = [ "10.225.191.4/24" ];
dns = [ "192.168.30.131" ];
autostart = false;
mtu = 1412;
peers = [{
2024-06-15 14:20:03 +00:00
presharedKeyFile = config.sops.secrets."wireguard/home/presharedKey".path;
2024-01-21 11:11:52 +00:00
endpoint = "wg.kun.is:51820";
publicKey = "fa3mQ7ximJbH7cu2ZbWidto5xBGxEEfWvCCiUDk00Hg=";
allowedIPs = [ "0.0.0.0/0" ];
}];
};
home-no-pihole = {
2024-06-15 14:20:03 +00:00
privateKeyFile = config.sops.secrets."wireguard/home/privateKey".path;
address = [ "10.225.191.4/24" ];
dns = [ "192.168.10.1" ];
autostart = false;
mtu = 1412;
peers = [{
2024-06-15 14:20:03 +00:00
presharedKeyFile = config.sops.secrets."wireguard/home/presharedKey".path;
2024-01-21 11:11:52 +00:00
endpoint = "wg.kun.is:51820";
publicKey = "fa3mQ7ximJbH7cu2ZbWidto5xBGxEEfWvCCiUDk00Hg=";
allowedIPs = [ "0.0.0.0/0" ];
}];
};
2023-10-14 17:08:02 +00:00
};
};
virtualisation.docker = {
enable = true;
rootless = {
enable = true;
setSocketVariable = true;
};
};
nixpkgs = {
hostPlatform = lib.mkDefault "x86_64-linux";
config = {
allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) [
"vmware-horizon-client"
"libfprint-2-tod1-goodix"
"vmware-workstation"
"ipu6-camera-bins-unstable"
"ipu6-camera-bins"
"ivsc-firmware-unstable"
"ivsc-firmware"
];
};
2024-06-09 20:00:47 +00:00
overlays = [
inputs.nur.overlay
(final: _prev: {
unstable = import inputs.nixpkgs-unstable {
inherit system;
config.allowUnfree = true;
};
})
];
};
boot = {
kernelModules = [ "kvm-intel" "cdrom" ];
extraModulePackages = [ ];
initrd = {
availableKernelModules = [ "sd_mod" ];
kernelModules = [ ];
};
kernel.sysctl = {
"net.core.default_qdisc" = "fq";
"net.ipv4.tcp_congestion_control" = "bbr";
};
};
hardware = {
cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
pulseaudio.enable = false;
2024-01-28 13:31:45 +00:00
};
stylix = {
enable = true;
base16Scheme = "${pkgs.base16-schemes}/share/themes/gruvbox-dark-medium.yaml";
image = "${inputs.nixos-artwork}/wallpapers/nix-wallpaper-binary-blue.png";
cursor = {
package = pkgs.bibata-cursors;
2024-06-11 17:59:58 +00:00
name = "Bibata-Modern-Classic";
size = 28;
};
fonts = {
monospace = {
package = pkgs.nerdfonts.override { fonts = [ "JetBrainsMono" ]; };
name = "JetBrainsMono Nerd Font Mono";
};
sansSerif = {
package = pkgs.dejavu_fonts;
name = "DejaVu Sans";
};
serif = {
package = pkgs.dejavu_fonts;
name = "DejaVu Serif";
};
};
};
2024-06-09 20:00:47 +00:00
home-manager = {
useGlobalPkgs = true;
useUserPackages = true;
2024-06-15 16:10:55 +00:00
extraSpecialArgs = { inherit flake inputs; };
2024-06-09 20:00:47 +00:00
users.pim.imports = [
./home.nix
];
};
2024-06-15 14:20:03 +00:00
sops = {
age.keyFile = "/home/pim/.config/sops/age/keys.txt";
defaultSopsFile = ./secrets/secrets.yaml;
2024-06-15 16:10:55 +00:00
secrets = {
"wireguard/home/presharedKey" = { };
"wireguard/home/privateKey" = { };
};
2024-06-15 14:20:03 +00:00
};
2023-10-08 14:57:57 +00:00
}