wip: laptop work

hosts/doloro-laptop/nixos.nix

@@ -2,24 +2,74 @@
 # your system. Help is available in the configuration.nix(5) man page, on
 # https://search.nixos.org/options and in the NixOS manual (`nixos-help`).
 
-{ config, lib, pkgs, ... }:
-
 {
-
+  config,
+  lib,
+  inputs,
+  pkgs,
+  nix-meow,
+  ...
+}:
+let
+  sops = inputs.sops-nix;
+in
+{
+  imports = [
+    inputs.sops-nix.nixosModules.sops
+  ];
+  modules = {
+    fish.enable = true;
+    greetd.enable = true;
+    stylix.enable = true;
+    steam.enable = false;
+    Hyprland.enable = true;
+    wivrn.enable = false;
+  };
   # Use the systemd-boot EFI boot loader.
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;
+  boot.kernelPackages = pkgs.linuxPackages_latest;
 
   networking.hostName = "doloro-nixos-laptop"; # Define your hostname.
+  security.rtkit.enable = true;
 
   # Configure network connections interactively with nmcli or nmtui.
   networking.networkmanager.enable = true;
 
   # Set your time zone.
-  time.timeZone = "Europe/Amsterdam";
-
-nix.settings.experimental-features = [ "nix-command" "flakes" ];
+  time.timeZone = "Europe/London";
 
+  nix.settings = {
+    substituters = [
+      "https://nix-community.cachix.org"
+      "https://cache.nixos.org/"
+      "https://attic.scug.io/pkgs"
+    ];
+    trusted-public-keys = [
+      "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
+      "pkgs:+sRbfiZMMX5R3PuAPtIRz/emowDoGZNpozibrnrAvuc="
+    ];
+    experimental-features = [
+      "flakes"
+      "nix-command"
+    ];
+    trusted-users = [
+      "doloro"
+    ];
+  };
+  hardware.graphics = {
+    enable = true;
+  };
+  services.openssh = {
+    enable = true;
+    settings = {
+      PasswordAuthentication = true;
+      PermitRootLogin = "prohibit-password";
+    };
+  };
+  users.users.root.openssh.authorizedKeys.keys = [
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBaa6Z5qtBSLEz+A4fQGYPfkOISsRQlmKkVbcx2zxML7"
+  ];
   # Configure network proxy if necessary
   # networking.proxy.default = "http://user:password@proxy:port/";
   # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
@@ -35,9 +85,6 @@ nix.settings.experimental-features = [ "nix-command" "flakes" ];
   # Enable the X11 windowing system.
   services.xserver.enable = true;
 
-
-  
-
   # Configure keymap in X11
   # services.xserver.xkb.layout = "us";
   # services.xserver.xkb.options = "eurosign:e,caps:escape";
@@ -48,21 +95,36 @@ nix.settings.experimental-features = [ "nix-command" "flakes" ];
   # Enable sound.
   # services.pulseaudio.enable = true;
   # OR
-  # services.pipewire = {
-  #   enable = true;
-  #   pulse.enable = true;
-  # };
+
+  sops = {
+    defaultSopsFile = builtins.toPath "${nix-meow.flakeRoot}/secrets/users.yaml";
+    secrets = {
+      root-hashed_password = {
+        neededForUsers = true;
+      };
+      doloro-hashed_password = {
+        neededForUsers = true;
+      };
+    };
+  };
+  services.pipewire = {
+    enable = true;
+    pulse.enable = true;
+  };
 
   services.libinput.enable = true;
 
   # Define a user account. Don't forget to set a password with ‘passwd’.
-  # users.users.alice = {
-  #   isNormalUser = true;
-  #   extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.
-  #   packages = with pkgs; [
-  #     tree
-  #   ];
-  # };
+  users.users.doloro = {
+    isNormalUser = true;
+    shell = pkgs.fish;
+    extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.
+    packages = with pkgs; [
+      tree
+    ];
+    # initialPassword = "sex";
+    hashedPasswordFile = config.sops.secrets."doloro-hashed_password".path;
+  };
 
   # programs.firefox.enable = true;
 
@@ -70,6 +132,7 @@ nix.settings.experimental-features = [ "nix-command" "flakes" ];
   # You can use https://search.nixos.org/ to find more packages (and options).
   environment.systemPackages = with pkgs; [
     vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
+    git
     wget
   ];
 
@@ -83,8 +146,6 @@ nix.settings.experimental-features = [ "nix-command" "flakes" ];
 
   # List services that you want to enable:
 
-  services.openssh.enable = true;
-
   # Open ports in the firewall.
   # networking.firewall.allowedTCPPorts = [ ... ];
   # networking.firewall.allowedUDPPorts = [ ... ];
@@ -115,4 +176,3 @@ nix.settings.experimental-features = [ "nix-command" "flakes" ];
   system.stateVersion = "25.11"; # Did you read the comment?
 
 }
-