314 lines
9.3 KiB
Nix
314 lines
9.3 KiB
Nix
# Edit this configuration file to define what should be installed on
|
||
# your system. Help is available in the configuration.nix(5) man page, on
|
||
# https://search.nixos.org/options and in the NixOS manual (`nixos-help`).
|
||
|
||
{
|
||
config,
|
||
inputs,
|
||
lib,
|
||
pkgs,
|
||
nix-meow,
|
||
...
|
||
}:
|
||
let
|
||
sops = inputs.sops-nix;
|
||
in
|
||
{
|
||
imports = [
|
||
inputs.sops-nix.nixosModules.sops
|
||
];
|
||
modules = {
|
||
fish.enable = true;
|
||
greetd.enable = true;
|
||
stylix.enable = true;
|
||
steam.enable = true;
|
||
Hyprland.enable = true;
|
||
wivrn.enable = true;
|
||
remoteBuild.become-remote-builder = true;
|
||
fonts.enable = true;
|
||
};
|
||
|
||
# Use the systemd-boot EFI boot loader.
|
||
boot.loader.grub.enable = true;
|
||
boot.loader.grub.device = "nodev";
|
||
boot.loader.grub.devices = [
|
||
"/dev/disk/by-id/nvme-CT1000P2SSD8_2221E632CD1F"
|
||
"nodev"
|
||
];
|
||
#boot.loader.efi.canTouchEfiVariables = true;
|
||
boot.loader.grub.efiSupport = true;
|
||
boot.loader.grub.efiInstallAsRemovable = true;
|
||
|
||
nix.settings = {
|
||
substituters = [
|
||
"https://nix-community.cachix.org"
|
||
"https://cache.nixos.org/"
|
||
"https://attic.scug.io/pkgs"
|
||
"https://cache.nixos-cuda.org"
|
||
];
|
||
trusted-public-keys = [
|
||
"nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
|
||
"pkgs:+sRbfiZMMX5R3PuAPtIRz/emowDoGZNpozibrnrAvuc="
|
||
"cache.nixos-cuda.org:74DUi4Ye579gUqzH4ziL9IyiJBlDpMRn9MBN8oNan9M="
|
||
];
|
||
experimental-features = [
|
||
"flakes"
|
||
"nix-command"
|
||
];
|
||
trusted-users = [
|
||
"doloro"
|
||
];
|
||
};
|
||
|
||
networking.hostName = "doloroo-main"; # Define your hostname.
|
||
boot.kernelPackages = pkgs.linuxPackages_latest;
|
||
# Enable "Silent boot"
|
||
boot.consoleLogLevel = 3;
|
||
boot.initrd.verbose = false;
|
||
boot.kernelParams = [
|
||
"quiet"
|
||
"splash"
|
||
"boot.shell_on_fail"
|
||
"udev.log_priority=3"
|
||
"rd.systemd.show_status=auto"
|
||
];
|
||
# Hide the OS choice for bootloaders.
|
||
# It's still possible to open the bootloader list by pressing any key
|
||
# It will just not appear on screen unless a key is pressed
|
||
boot.loader.timeout = 0;
|
||
|
||
nixpkgs.config.allowUnfree = true;
|
||
|
||
# Configure network connections interactively with nmcli or nmtui.
|
||
networking.networkmanager.enable = true;
|
||
networking.firewall.enable = false;
|
||
|
||
security.rtkit.enable = true;
|
||
|
||
sops = {
|
||
# age.keyFile = "/etc/ssh/ssh_host_ed25519_key";
|
||
defaultSopsFile = builtins.toPath "${nix-meow.flakeRoot}/secrets/users.yaml";
|
||
secrets = {
|
||
root-hashed_password = {
|
||
neededForUsers = true;
|
||
};
|
||
doloro-hashed_password = {
|
||
neededForUsers = true;
|
||
};
|
||
};
|
||
};
|
||
|
||
# Set your time zone.
|
||
time.timeZone = "Europe/London";
|
||
|
||
# Configure network proxy if necessary
|
||
# networking.proxy.default = "http://user:password@proxy:port/";
|
||
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
|
||
|
||
# Select internationalisation properties.
|
||
# i18n.defaultLocale = "en_US.UTF-8";
|
||
# console = {
|
||
# font = "Lat2-Terminus16";
|
||
# keyMap = "us";
|
||
# useXkbConfig = true; # use xkb.options in tty.
|
||
# };
|
||
|
||
# Enable the X11 windowing system.
|
||
# services.xserver.enable = true;
|
||
|
||
# Enable OpenGL
|
||
hardware.graphics = {
|
||
enable = true;
|
||
};
|
||
|
||
# Load nvidia driver for Xorg and Wayland
|
||
services.xserver.videoDrivers = [ "nvidia" ];
|
||
|
||
fileSystems."/mnt/2tb" = {
|
||
device = "/dev/disk/by-uuid/0f49aec7-4af2-4f4f-b475-3f4fad2b59c2";
|
||
fsType = "ext4";
|
||
options = [
|
||
# If you don't have this options attribute, it'll default to "defaults"
|
||
# boot options for fstab. Search up fstab mount options you can use
|
||
"defaults"
|
||
"users" # Allows any user to mount and unmount
|
||
"nofail" # Prevent system from failing if this drive doesn't mount
|
||
"exec"
|
||
];
|
||
};
|
||
boot.plymouth = {
|
||
enable = true;
|
||
theme = "rings";
|
||
themePackages = with pkgs; [
|
||
# By default we would install all themes
|
||
(adi1090x-plymouth-themes.override {
|
||
selected_themes = [ "rings" ];
|
||
})
|
||
];
|
||
};
|
||
|
||
hardware.nvidia = {
|
||
|
||
# Modesetting is required.
|
||
modesetting.enable = true;
|
||
|
||
# Nvidia power management. Experimental, and can cause sleep/suspend to fail.
|
||
# Enable this if you have graphical corruption issues or application crashes after waking
|
||
# up from sleep. This fixes it by saving the entire VRAM memory to /tmp/ instead
|
||
# of just the bare essentials.
|
||
powerManagement.enable = true;
|
||
|
||
# Fine-grained power management. Turns off GPU when not in use.
|
||
# Experimental and only works on modern Nvidia GPUs (Turing or newer).
|
||
powerManagement.finegrained = false;
|
||
# prime.offload.enable = true;
|
||
|
||
# Use the NVidia open source kernel module (not to be confused with the
|
||
# independent third-party "nouveau" open source driver).
|
||
# Support is limited to the Turing and later architectures. Full list of
|
||
# supported GPUs is at:
|
||
# https://github.com/NVIDIA/open-gpu-kernel-modules#compatible-gpus
|
||
# Only available from driver 515.43.04+
|
||
open = false;
|
||
|
||
# Enable the Nvidia settings menu,
|
||
# accessible via `nvidia-settings`.
|
||
nvidiaSettings = true;
|
||
|
||
# Optionally, you may need to select the appropriate driver version for your specific GPU.
|
||
package = config.boot.kernelPackages.nvidiaPackages.latest;
|
||
};
|
||
|
||
# fonts = {
|
||
# enableDefaultPackages = true;
|
||
# packages =
|
||
# with pkgs;
|
||
# [
|
||
# nerd-fonts.jetbrains-mono
|
||
# material-design-icons
|
||
# material-symbols
|
||
# googlesans-code
|
||
# nerd-fonts.caskaydia-cove
|
||
# nerd-fonts.noto
|
||
# noto-fonts-cjk-sans
|
||
# noto-fonts-cjk-serif
|
||
# ]
|
||
# ++ [
|
||
# (inputs.font-patcher.lib.patchFont {
|
||
# font = "${pkgs.googlesans-code}/share/fonts/googlesans-code/GoogleSansCode[wght].ttf";
|
||
# name = "Google Sans Code Nerd Font";
|
||
# inherit system;
|
||
# })
|
||
# ];
|
||
# fontDir.enable = true;
|
||
# };
|
||
boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
|
||
programs.nix-ld.enable = true;
|
||
programs.nix-ld.libraries = with pkgs; [
|
||
fuse
|
||
libusb1
|
||
libGL
|
||
harfbuzz
|
||
];
|
||
|
||
# Configure keymap in X11
|
||
# services.xserver.xkb.layout = "us";
|
||
# services.xserver.xkb.options = "eurosign:e,caps:escape";
|
||
|
||
# Enable CUPS to print documents.
|
||
# services.printing.enable = true;
|
||
|
||
# Enable sound.
|
||
# services.pulseaudio.enable = true;
|
||
# OR
|
||
services.pipewire = {
|
||
enable = true;
|
||
pulse.enable = true;
|
||
};
|
||
|
||
programs = {
|
||
ssh = {
|
||
# enable = true;
|
||
extraConfig = "AddKeysToAgent yes";
|
||
startAgent = true;
|
||
};
|
||
fish.enable = true;
|
||
};
|
||
# Enable touchpad support (enabled default in most desktopManager).
|
||
# services.libinput.enable = true;
|
||
services.openssh = {
|
||
enable = true;
|
||
settings = {
|
||
PasswordAuthentication = true;
|
||
};
|
||
};
|
||
users.users.doloro = {
|
||
isNormalUser = true;
|
||
shell = pkgs.fish;
|
||
extraGroups = [
|
||
"wheel"
|
||
"dialout"
|
||
]; # Enable ‘sudo’ for the user.
|
||
packages = with pkgs; [
|
||
tree
|
||
];
|
||
};
|
||
users.mutableUsers = false;
|
||
users.users.doloro.hashedPasswordFile = config.sops.secrets."doloro-hashed_password".path;
|
||
# users.users.root.hashedPasswordFile = config.sops.secrets."root-hashed_password".path;
|
||
users.users.root.initialPassword = "root";
|
||
# programs.firefox.enable = true;
|
||
|
||
# List packages installed in system profile.
|
||
# You can use https://search.nixos.org/ to find more packages (and options).
|
||
environment.systemPackages = with pkgs; [
|
||
vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
|
||
wget
|
||
killall
|
||
sops
|
||
];
|
||
|
||
# Some programs need SUID wrappers, can be configured further or are
|
||
# started in user sessions.
|
||
# programs.mtr.enable = true;
|
||
# programs.gnupg.agent = {
|
||
# enable = true;
|
||
# enableSSHSupport = true;
|
||
# };
|
||
|
||
# List services that you want to enable:
|
||
|
||
# Enable the OpenSSH daemon.
|
||
# services.openssh.enable = true;
|
||
|
||
# Open ports in the firewall.
|
||
# networking.firewall.allowedTCPPorts = [ ... ];
|
||
# networking.firewall.allowedUDPPorts = [ ... ];
|
||
# Or disable the firewall altogether.
|
||
# networking.firewall.enable = false;
|
||
|
||
# Copy the NixOS configuration file and link it from the resulting system
|
||
# (/run/current-system/configuration.nix). This is useful in case you
|
||
# accidentally delete configuration.nix.
|
||
# system.copySystemConfiguration = true;
|
||
|
||
# This option defines the first version of NixOS you have installed on this particular machine,
|
||
# and is used to maintain compatibility with application data (e.g. databases) created on older NixOS versions.
|
||
#
|
||
# Most users should NEVER change this value after the initial install, for any reason,
|
||
# even if you've upgraded your system to a new NixOS release.
|
||
#
|
||
# This value does NOT affect the Nixpkgs version your packages and OS are pulled from,
|
||
# so changing it will NOT upgrade your system - see https://nixos.org/manual/nixos/stable/#sec-upgrading for how
|
||
# to actually do that.
|
||
#
|
||
# This value being lower than the current NixOS release does NOT mean your system is
|
||
# out of date, out of support, or vulnerable.
|
||
#
|
||
# Do NOT change this value unless you have manually inspected all the changes it would make to your configuration,
|
||
# and migrated your data accordingly.
|
||
#
|
||
# For more information, see `man configuration.nix` or https://nixos.org/manual/nixos/stable/options#opt-system.stateVersion .
|
||
system.stateVersion = "25.11"; # Did you read the comment?
|
||
}
|