blob: f9d3f6c7f7dd1e38c0dbc6852bee6d91c9efc127 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
|
{
inputs,
username,
...
}:
{
system.stateVersion = "25.05";
imports = [
inputs.nixos-hardware.nixosModules.lenovo-thinkpad-t480s
inputs.disko.nixosModules.disko
./disko.nix
../../os/default.nix
];
hardware.facter.reportPath = /etc/nixos/hosts/thinkpad/facter.json;
os = {
core = {
allowUnfree.enable = true;
flatpak.enable = true;
audio.enable = true;
bootloader = {
type = "grub";
efi = false;
timeout = 0;
luks.enable = true;
};
drivers = {
enable = true;
cpu = "intel";
graphics.enable = true;
kernel = "stable";
};
fonts.enable = true;
greet.enable = true;
home-manager = {
enable = true;
users.${username}.path = ./home.nix;
};
locale.enable = true;
memory = {
zram.enable = true;
swapfile.enable = true;
};
network.enable = true;
power = {
enable = true;
mode = "intel";
};
security.enable = true;
ssh.enable = true;
storage.enable = true;
users.enable = true;
};
srv = {
bluetooth.enable = true;
i2p.enable = true;
files = {
enable = true;
localsend.enable = true;
};
gaming = {
enable = true;
steam.enable = true;
};
virtualization = {
kvm.enable = true;
waydroid.enable = true;
};
kdeconnect.enable = true;
nix-helper.enable = true;
monero.enable = true;
sops.enable = true;
syncthing.enable = true;
vpn.enable = true;
};
wm = {
enable = true;
niri.enable = true;
};
};
boot = {
kernelParams = [ "iomem=relaxed" ];
initrd = {
secrets = {
"/etc/cryptsetup-keys.d/root.key" = "/etc/cryptsetup-keys.d/root.key";
};
luks.devices."crypted" = {
device = "/dev/nvme0n1p2";
keyFile = "/etc/cryptsetup-keys.d/root.key";
allowDiscards = true;
};
};
};
services.thinkfan.enable = true;
}
|
