This repository has been archived on 2024-03-28. You can view files and clone it, but cannot push or open issues or pull requests.
dotfiles/os/linux/nix/machines/thinker.nix

360 lines
8.5 KiB
Nix
Raw Normal View History

2023-08-02 13:34:14 -05:00
# Edit this configuration file to define what should be installed on
# your system. Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running `nixos-help`).
{ pkgs, inputs, ... }:
2023-08-02 13:34:14 -05:00
2023-08-02 14:10:42 -05:00
let
2023-08-10 20:25:07 -05:00
# this is unused because it's referenced by my sway config
2023-08-02 14:10:42 -05:00
dbus-sway-environment = pkgs.writeTextFile {
name = "dbus-sway-environment";
destination = "/bin/dbus-sway-environment";
executable = true;
text = ''
dbus-update-activation-environment --systemd WAYLAND_DISPLAY XDG_CURRENT_DESKTOP=sway
systemctl --user stop wireplumber xdg-desktop-portal xdg-desktop-portal-wlr
systemctl --user start wireplumber xdg-desktop-portal xdg-desktop-portal-wlr
'';
};
2023-08-10 20:25:07 -05:00
# this is unused because it's referenced by my sway config
2023-08-02 14:10:42 -05:00
configure-gtk = pkgs.writeTextFile {
name = "configure-gtk";
destination = "/bin/configure-gtk";
executable = true;
2023-08-02 22:39:03 -05:00
text =
let
schema = pkgs.gsettings-desktop-schemas;
datadir = "${schema}/share/gsettings-schemas/${schema.name}";
in
''
export XDG_DATA_DIRS="${datadir}:$XDG_DATA_DIRS
gnome_schema = org.gnome.desktop.interface
gsettings set $gnome_schema gtk-theme 'Catppuccin-Mocha'
'';
2023-08-02 14:10:42 -05:00
};
2023-08-02 22:39:03 -05:00
in
{
2023-08-02 13:34:14 -05:00
imports =
2023-08-02 22:39:03 -05:00
[
# Include the results of the hardware scan.
2023-08-02 13:34:14 -05:00
./thinker-hardware.nix
];
2023-08-10 20:25:07 -05:00
# TODO: hibernation? I've been using [deep] in /sys/power/mem_sleep alright
# with this machine so it may not be necessary?
# need to measure percentage lost per day, but I think it's around 10%/day
# TODO: fonts? right now, I'm just installing to ~/.local/share/fonts
2023-08-02 15:06:18 -05:00
nix.settings.experimental-features = [ "nix-command" "flakes" ];
2023-08-02 13:34:14 -05:00
# Use the systemd-boot EFI boot loader.
boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true;
2023-08-02 22:39:03 -05:00
nixpkgs.config = {
allowUnfree = true;
packageOverrides = pkgs: {
vaapiIntel = pkgs.vaapiIntel.override { enableHybridCodec = true; };
};
};
2023-08-24 21:46:44 -05:00
hardware.bluetooth.enable = true;
2023-08-02 14:10:42 -05:00
hardware.opengl = {
enable = true;
2023-08-02 23:28:25 -05:00
driSupport32Bit = true;
2023-08-02 14:10:42 -05:00
driSupport = true;
2023-08-02 22:39:03 -05:00
extraPackages = with pkgs; [
intel-media-driver # LIBVA_DRIVER_NAME=iHD
vaapiIntel # LIBVA_DRIVER_NAME=i965 (older but works better for Firefox/Chromium)
vaapiVdpau
libvdpau-va-gl
];
2023-08-02 14:10:42 -05:00
};
xdg.portal = {
enable = true;
wlr.enable = true;
2023-08-29 22:01:34 -05:00
extraPortals = with pkgs; [
xdg-desktop-portal-wlr
xdg-desktop-portal-gtk
];
2023-08-02 14:10:42 -05:00
};
programs.sway = {
enable = true;
wrapperFeatures.gtk = true;
};
2023-08-02 13:34:14 -05:00
networking.hostName = "thinker"; # Define your hostname.
# Pick only one of the below networking options.
# networking.wireless.enable = true; # Enables wireless support via wpa_supplicant.
networking.networkmanager.enable = true;
2023-08-02 13:53:09 -05:00
security.polkit.enable = true;
security.rtkit.enable = true;
programs.fish.enable = true;
users.defaultUserShell = pkgs.fish;
services.pipewire = {
enable = true;
2023-08-02 23:28:25 -05:00
wireplumber.enable = true;
2023-08-02 13:53:09 -05:00
alsa.enable = true;
alsa.support32Bit = true;
pulse.enable = true;
2023-08-02 23:28:25 -05:00
# pulse.support32Bit = true;
2023-08-02 13:53:09 -05:00
jack.enable = true;
};
2023-08-02 13:34:14 -05:00
# Set your time zone.
time.timeZone = "America/Chicago";
# Configure network proxy if necessary
# networking.proxy.default = "http://user:password@proxy:port/";
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
# Select internationalisation properties.
2023-08-02 13:53:09 -05:00
i18n.defaultLocale = "en_US.UTF-8";
console = {
font = "Lat2-Terminus16";
useXkbConfig = true;
};
2023-08-02 13:34:14 -05:00
# Enable the X11 windowing system.
# services.xserver.enable = true;
# Configure keymap in X11
services.xserver.layout = "us";
2023-08-02 13:53:09 -05:00
services.xserver.xkbOptions = "ctrl:nocaps";
2023-08-02 13:34:14 -05:00
# Enable CUPS to print documents.
# services.printing.enable = true;
# Enable sound.
# sound.enable = true;
2023-08-02 23:28:25 -05:00
# hardware.pulseaudio.support32Bit = true;
hardware.pulseaudio.support32Bit = true;
2023-08-02 13:34:14 -05:00
# Enable touchpad support (enabled default in most desktopManager).
# services.xserver.libinput.enable = true;
# Define a user account. Don't forget to set a password with passwd.
users.users.daniel = {
isNormalUser = true;
home = "/home/daniel/.home";
2023-08-02 14:28:31 -05:00
openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAPLXOjupz3ScYjgrF+ehrbp9OvGAWQLI6fplX6w9Ijb daniel@lyte.dev"
];
extraGroups = [ "wheel" "video" ];
2023-08-02 22:39:03 -05:00
packages = [ ];
2023-08-02 13:34:14 -05:00
};
2023-08-02 14:10:42 -05:00
services.dbus.enable = true;
2023-08-02 13:34:14 -05:00
# List packages installed in system profile. To search, run:
# $ nix search wget
2023-08-02 14:10:42 -05:00
2023-08-02 13:34:14 -05:00
environment.systemPackages = with pkgs; [
2023-08-02 14:10:42 -05:00
age
bat
bind
bottom
brightnessctl
broot
2023-08-04 16:07:28 -05:00
clang
2023-08-02 13:34:14 -05:00
curl
2023-08-02 14:10:42 -05:00
delta
dog
2023-08-02 13:34:14 -05:00
dtach
2023-08-02 14:10:42 -05:00
dua
2023-08-02 13:34:14 -05:00
exa
fd
2023-08-02 14:10:42 -05:00
feh
2023-08-04 16:07:28 -05:00
file
2023-08-02 13:34:14 -05:00
fwupd
2023-08-04 16:07:28 -05:00
gcc
2023-08-02 14:10:42 -05:00
gimp
2023-08-02 13:34:14 -05:00
git
2023-08-02 14:10:42 -05:00
git-lfs
grim
inputs.helix.packages."x86_64-linux".helix
2023-08-02 13:34:14 -05:00
hexyl
2023-08-02 14:10:42 -05:00
htop
inkscape
2023-08-06 09:39:34 -05:00
inotify-tools
2023-08-02 13:34:14 -05:00
iputils
2023-08-02 15:06:18 -05:00
killall
2023-08-02 14:10:42 -05:00
kitty
krita
2023-08-02 13:34:14 -05:00
libinput
2023-08-02 13:53:09 -05:00
libinput-gestures
2023-08-02 23:28:25 -05:00
libnotify
2023-08-02 22:39:03 -05:00
lutris
2023-08-04 16:07:28 -05:00
gnumake
2023-08-02 14:10:42 -05:00
mako
mosh
nmap
nnn
2023-08-02 21:36:47 -05:00
nil
nixpkgs-fmt
2023-08-02 13:34:14 -05:00
noto-fonts
2023-08-24 21:46:44 -05:00
openssl
2023-08-02 13:34:14 -05:00
pamixer
2023-08-02 15:06:18 -05:00
(pass.withExtensions (exts: [ exts.pass-otp ]))
2023-08-02 14:10:42 -05:00
pavucontrol
2023-08-02 23:28:25 -05:00
pciutils
2023-08-06 09:39:34 -05:00
pgcli
2023-08-02 13:34:14 -05:00
playerctl
2023-08-24 21:46:44 -05:00
podman-compose
2023-08-02 22:39:03 -05:00
pulseaudio
2023-08-02 14:10:42 -05:00
pulsemixer
rclone
restic
ripgrep
rsync
sd
slurp
sops
2023-08-02 22:39:03 -05:00
steam
2023-08-02 13:34:14 -05:00
swaybg
swayidle
2023-08-02 14:10:42 -05:00
swaylock
traceroute
unzip
vlc
2023-08-02 23:28:25 -05:00
vulkan-tools
2023-08-02 13:34:14 -05:00
watchexec
2023-08-02 14:10:42 -05:00
waybar
2023-08-02 13:34:14 -05:00
wget
2023-08-02 14:10:42 -05:00
wireplumber
2023-08-02 22:39:03 -05:00
wine
2023-08-02 14:10:42 -05:00
wl-clipboard
wofi
xh
zathura
2023-08-02 15:06:18 -05:00
zstd
2023-08-02 13:34:14 -05:00
];
2023-08-02 15:06:18 -05:00
services.pcscd.enable = true;
2023-08-10 20:22:42 -05:00
services.flatpak.enable = true;
2023-08-02 15:06:18 -05:00
services.gnome.gnome-keyring.enable = true;
programs.gnupg.agent = {
2023-08-02 22:39:03 -05:00
enable = true;
pinentryFlavor = "gnome3";
enableSSHSupport = true;
2023-08-02 15:06:18 -05:00
};
2023-08-02 13:53:09 -05:00
programs.thunar.enable = true;
2023-08-02 13:34:14 -05:00
services.tailscale = {
enable = true;
};
2023-08-02 13:53:09 -05:00
environment.variables = {
EDITOR = "hx";
};
2023-08-02 13:34:14 -05:00
# Some programs need SUID wrappers, can be configured further or are
# started in user sessions.
# programs.mtr.enable = true;
# programs.gnupg.agent = {
# enable = true;
# enableSSHSupport = true;
# };
# List services that you want to enable:
2023-08-02 14:10:42 -05:00
services.openssh = {
enable = true;
settings = {
PasswordAuthentication = false;
};
listenAddresses = [
{ addr = "0.0.0.0"; port = 22; }
];
};
2023-08-02 13:34:14 -05:00
2023-08-04 16:07:28 -05:00
services.postgresql = {
enable = true;
ensureDatabases = [ "daniel" ];
ensureUsers = [
{
name = "daniel";
ensurePermissions = {
"DATABASE daniel" = "ALL PRIVILEGES";
};
}
];
enableTCPIP = true;
package = pkgs.postgresql_15;
authentication = pkgs.lib.mkOverride 10 ''
#type database DBuser auth-method
2023-08-06 09:39:34 -05:00
local all postgres peer map=superuser_map
local all daniel peer map=superuser_map
local sameuser all peer map=superuser_map
2023-08-04 16:07:28 -05:00
# lan ipv4
host all all 10.0.0.0/24 trust
2023-08-06 09:39:34 -05:00
host all all 127.0.0.1/32 trust
2023-08-04 16:07:28 -05:00
# tailnet ipv4
host all all 100.64.0.0/10 trust
'';
identMap = ''
# ArbitraryMapName systemUser DBUser
superuser_map root postgres
superuser_map postgres postgres
superuser_map daniel postgres
# Let other names login as themselves
superuser_map /^(.*)$ \1
'';
};
2023-08-24 21:46:44 -05:00
virtualisation = {
podman = {
enable = true;
# Create a `docker` alias for podman, to use it as a drop-in replacement
dockerCompat = true;
# Required for containers under podman-compose to be able to talk to each other.
defaultNetwork.settings.dns_enabled = true;
};
oci-containers = {
backend = "podman";
};
};
2023-08-02 13:34:14 -05:00
# Open ports in the firewall.
2023-08-29 22:01:34 -05:00
# networking.firewall.allowedTCPPorts = [ 22 ];
# networking.firewall.allowedUDPPorts = [ ];
2023-08-02 13:34:14 -05:00
# Or disable the firewall altogether.
2023-08-29 22:37:42 -05:00
networking.firewall = {
enable = false;
allowPing = true;
checkReversePath = "loose"; # needed for tailscale?
};
boot.kernel.sysctl."net.ipv4.ip_forward" = 1;
2023-08-02 13:34:14 -05:00
# This value determines the NixOS release from which the default
# settings for stateful data, like file locations and database versions
# on your system were taken. It's perfectly fine and recommended to leave
# this value at the release version of the first install of this system.
# Before changing this value read the documentation for this option
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
system.stateVersion = "23.05"; # Did you read the comment?
}