141 lines
3.3 KiB
Nix
141 lines
3.3 KiB
Nix
{ pkgs, config, lib, ... }: {
|
|
imports = [ ./hardware-configuration.nix ];
|
|
|
|
time.timeZone = "Europe/Amsterdam";
|
|
i18n.defaultLocale = "en_US.UTF-8";
|
|
|
|
services = {
|
|
gnome.gnome-keyring.enable = lib.mkForce false;
|
|
|
|
xserver = {
|
|
enable = true;
|
|
displayManager.gdm = { enable = true; };
|
|
desktopManager.gnome.enable = true;
|
|
excludePackages = with pkgs; [ xterm ];
|
|
};
|
|
|
|
printing = {
|
|
enable = true;
|
|
drivers = [ pkgs.hplip pkgs.gutenprint ];
|
|
};
|
|
};
|
|
|
|
users = {
|
|
users.pim = {
|
|
isNormalUser = true;
|
|
extraGroups = [ "wheel" "docker" "input" "wireshark" "dialout" ];
|
|
};
|
|
};
|
|
|
|
environment = {
|
|
systemPackages = with pkgs; [
|
|
wget
|
|
curl
|
|
git
|
|
btop
|
|
ripgrep
|
|
vim
|
|
dogdns
|
|
tree
|
|
dig
|
|
];
|
|
gnome.excludePackages = with pkgs; with pkgs.gnome; [
|
|
totem
|
|
gnome-tour
|
|
epiphany
|
|
geary
|
|
gnome-console
|
|
gnome-music
|
|
gnome-calendar
|
|
];
|
|
};
|
|
|
|
system = {
|
|
stateVersion = "23.05";
|
|
|
|
activationScripts.diff = ''
|
|
if [[ -e /run/current-system ]]; then
|
|
${pkgs.nix}/bin/nix store diff-closures /run/current-system "$systemConfig"
|
|
fi
|
|
'';
|
|
};
|
|
|
|
programs.ssh.startAgent = true;
|
|
|
|
security.sudo.extraConfig = ''
|
|
Defaults timestamp_timeout=30
|
|
'';
|
|
|
|
nix = {
|
|
package = pkgs.nixFlakes;
|
|
settings.trusted-users = [ "root" "pim" ];
|
|
|
|
extraOptions = ''
|
|
experimental-features = nix-command flakes
|
|
'';
|
|
|
|
gc = {
|
|
automatic = true;
|
|
persistent = true;
|
|
dates = "weekly";
|
|
options = "--delete-older-than 7d";
|
|
};
|
|
};
|
|
|
|
age = {
|
|
identityPaths = [ "/home/pim/.ssh/age_ed25519" ];
|
|
|
|
secrets = {
|
|
wg-quick-home-privkey.file = ../secrets/wg-quick-home-privkey.age;
|
|
wg-quick-home-preshared-key.file =
|
|
../secrets/wg-quick-home-preshared-key.age;
|
|
};
|
|
};
|
|
|
|
networking = {
|
|
hostName = "x260";
|
|
|
|
wg-quick.interfaces = {
|
|
home = {
|
|
privateKeyFile = config.age.secrets.wg-quick-home-privkey.path;
|
|
address = [ "10.225.191.4/24" "fd11:5ee:bad:c0de::4/128" ];
|
|
dns = [ "192.168.30.131" ];
|
|
autostart = false;
|
|
mtu = 1412;
|
|
peers = [{
|
|
presharedKeyFile = config.age.secrets.wg-quick-home-preshared-key.path;
|
|
endpoint = "wg.kun.is:51820";
|
|
publicKey = "fa3mQ7ximJbH7cu2ZbWidto5xBGxEEfWvCCiUDk00Hg=";
|
|
allowedIPs = [ "0.0.0.0/0" "::/0" ];
|
|
}];
|
|
};
|
|
|
|
home-no-pihole = {
|
|
privateKeyFile = config.age.secrets.wg-quick-home-privkey.path;
|
|
address = [ "10.225.191.4/24" "fd11:5ee:bad:c0de::4/128" ];
|
|
dns = [ "192.168.10.1" ];
|
|
autostart = false;
|
|
mtu = 1412;
|
|
peers = [{
|
|
presharedKeyFile = config.age.secrets.wg-quick-home-preshared-key.path;
|
|
endpoint = "wg.kun.is:51820";
|
|
publicKey = "fa3mQ7ximJbH7cu2ZbWidto5xBGxEEfWvCCiUDk00Hg=";
|
|
allowedIPs = [ "0.0.0.0/0" "::/0" ];
|
|
}];
|
|
};
|
|
};
|
|
};
|
|
|
|
virtualisation.docker = {
|
|
enable = true;
|
|
rootless = {
|
|
enable = true;
|
|
setSocketVariable = true;
|
|
};
|
|
};
|
|
|
|
nixpkgs.config = {
|
|
permittedInsecurePackages = [ "electron-25.9.0" ];
|
|
allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) [ "vmware-horizon-client" "libfprint-2-tod1-goodix" ];
|
|
};
|
|
}
|