blob: b334630b82066e0845b0ffc5eb1b1d0953d17955 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
|
{
config,
username,
pkgs-stable,
...
}:
{
system.stateVersion = "25.05";
imports = [
./hardware-configuration.nix
../../os/default.nix
];
os = {
core = {
allowUnfree.enable = true;
flatpak.enable = true;
audio = {
enable = true;
disable-devices.enable = true;
};
bootloader = {
type = "systemd-boot";
timeout = 0;
};
drivers = {
enable = true;
cpu = "amd";
graphics = {
enable = true;
amdgpu.enable = true;
};
};
fonts.enable = true;
greet.enable = true;
home-manager = {
enable = true;
users.${username}.path = ./home.nix;
};
locale.enable = true;
memory = {
zram.enable = true;
swapfile = {
enable = true;
size = 32;
};
};
network.enable = true;
security = {
enable = true;
sandboxing.enable = true;
antivirus.enable = true;
};
ssh.enable = true;
tailscale.enable = true;
storage.enable = true;
users.enable = true;
};
srv = {
bluetooth.enable = true;
yggdrasil.enable = true;
i2p = {
enable = true;
enableBrowser = true;
};
tor = {
enable = true;
enableBrowser = true;
};
files = {
enable = true;
localsend.enable = true;
krusader.enable = true;
};
gaming = {
enable = true;
steam.enable = true;
vr.enable = true;
};
sunshine.enable = true;
virtualization.kvm.enable = true;
kdeconnect.enable = true;
nix-helper.enable = true;
ollama.enable = true;
monero.enable = true;
sops.enable = true;
syncthing.enable = true;
omnisearch.enable = true;
vpn.enable = true;
};
wm = {
enable = true;
niri.enable = true;
};
};
services.xserver.desktopManager.xfce = {
enable = true;
enableWaylandSession = true;
waylandSessionCompositor = "labwc";
enableScreensaver = false;
};
programs = {
xfconf.enable = true;
thunar.enable = true;
};
boot = {
kernelModules = [
"nct6687"
"binder_linux"
"ashem_linux"
];
extraModulePackages = [
config.boot.kernelPackages.nct6687d
];
};
services.netbox = {
enable = true;
package = pkgs-stable.netbox;
secretKeyFile = "/var/lib/netbox/key";
apiTokenPeppersFile = "/var/lib/netbox/api-pepper";
settings = {
ALLOWED_HOSTS = [
"localhost"
"127.0.0.1"
"[::1]"
];
};
};
networking.firewall.allowedTCPPorts = [ 80 ];
services.nginx = {
enable = true;
user = "netbox";
recommendedProxySettings = true;
virtualHosts.localhost = {
locations = {
"/" = {
proxyPass = "http://[::1]:8001";
};
"/static/" = {
alias = "${config.services.netbox.dataDir}/static/";
};
};
};
};
}
|
