summaryrefslogtreecommitdiff
path: root/hosts/thinkpad/configuration.nix
blob: 9f27ac0930f2e0da194335e96f7e40c677d0493e (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
{ inputs, username, ... }:
{
  system.stateVersion = "25.05";

  imports = [
    inputs.nixos-hardware.nixosModules.lenovo-thinkpad-t480s
    inputs.disko.nixosModules.disko
    ./disko.nix

    ../../os/default.nix
  ];

  hardware.facter.reportPath = ./facter.json;

  os = {
    core = {
      allowUnfree.enable = true;
      flatpak.enable = true;

      audio.enable = true;
      bootloader = {
        type = "grub";
        efi = false;
        timeout = 0;
        luks.enable = true;
      };
      drivers = {
        enable = true;
        cpu = "intel";
        graphics.enable = true;
      };
      fonts.enable = true;
      greet.enable = true;
      home-manager = {
        enable = true;
        users.${username}.path = ./home.nix;
      };
      locale.enable = true;
      memory = {
        zram.enable = true;
        swapfile.enable = true;
      };
      network.enable = true;
      security = {
        enable = true;
        sandboxing.enable = true;
      };
      storage.enable = true;
      users.enable = true;
    };
    srv = {
      bluetooth.enable = true;
      tailscale.enable = true;
      ssh.enable = true;
      firewall.enable = true;
      omnisearch.enable = true;
      i2p.enable = true;
      tor = {
        enable = true;
        enableBrowser = true;
      };
      yggdrasil.enable = true;
      files = {
        enable = true;
        localsend.enable = true;
      };
      gaming = {
        enable = true;
        games.enable = true;
        steam = {
          enable = true;
          enableSls = true;
        };
      };
      moonlight.enable = true;
      virtualization.kvm.enable = true;
      kdeconnect.enable = true;
      nix-helper.enable = true;
      monero.wallet.enable = true;
      sops.enable = true;
      syncthing.enable = true;
    };
    wm = {
      enable = true;
      niri.enable = true;
    };
  };
  # boot.kernelParams = [ "iomem=relaxed" ];
}