blob: d14cc88b21a2ba3b4235cefd8888942bec299448 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
|
{ config, username, ... }:
{
system.stateVersion = "25.05";
imports = [
./hardware-configuration.nix
../../os/default.nix
];
os = {
core = {
allowUnfree.enable = true;
flatpak.enable = true;
audio = {
enable = true;
disable-devices.enable = true;
};
bootloader = {
type = "systemd-boot";
timeout = 0;
};
drivers = {
enable = true;
kernel = "zen";
cpu = "amd";
graphics = {
enable = true;
amdgpu.enable = true;
};
};
fonts.enable = true;
greet.enable = true;
home-manager = {
enable = true;
users.${username}.path = ./home.nix;
};
locale.enable = true;
memory = {
zram.enable = true;
swapfile = {
enable = true;
size = 16;
};
};
network.enable = true;
security = {
enable = true;
sandboxing.enable = true;
};
storage.enable = true;
users.enable = true;
};
srv = {
bluetooth.enable = true;
tailscale.enable = true;
ssh = {
server.enable = true;
client = {
enable = true;
createAliases = true;
};
enableSigning = true;
};
firewall.enable = true;
yggdrasil.enable = true;
i2p.enable = true;
tor = {
enable = true;
enableBrowser = true;
};
files = {
enable = true;
localsend.enable = true;
krusader.enable = true;
};
gaming = {
enable = true;
steam = {
enable = true;
enableSls = true;
};
vr.enable = true;
};
sunshine.enable = true;
virtualization.kvm.enable = true;
nix-helper.enable = true;
monero.wallet.enable = true;
sops.enable = true;
syncthing = {
enable = true;
activeFolders = [
"openmw-config"
"openmw-mods"
"game-saves"
"keepass"
"sync"
"music"
];
};
omnisearch.enable = true;
};
wm = {
enable = true;
niri.enable = true;
};
};
boot = {
kernelModules = [
"nct6687"
"binder_linux"
"ashem_linux"
];
extraModulePackages = [
config.boot.kernelPackages.nct6687d
];
};
nixpkgs.config.permittedInsecurePackages = [
"librewolf-151.0.2-1"
"librewolf-unwrapped-151.0.2-1"
];
}
|