/* ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣀⣀⣀⣤⠤⠤⢤⣤⣀⣀⣀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣀⡤⠶⠚⠉⠉⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠉⠓⠲⠤⣄⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣠⠴⠛⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠙⠲⣤⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⢀⡴⣏⠁⠀⡀⠀⠀⠀⠀⠀⢀⣀⣠⡤⠤⠤⠤⠤⠤⣤⣀⣀⠀⠀⠀⠀⠀⣠⣄⠀⠙⠷⣄⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⢀⡴⠋⠀⢸⡟⠋⢻⠀⢀⡤⠖⠛⠉⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀⠉⠙⠳⢦⣀⠀⠨⠛⠀⠀⠀⠈⢳⣄⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⣠⠟⠀⠀⠀⠚⠁⢀⡼⢿⣍⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣬⡟⢦⣄⠀⠀⠀⠀⠀⠙⢦⠀⠀⠀⠀ ⠀⠀⠀⣴⠃⠀⠀⠀⠀⢀⡴⠋⠀⠈⣿⣟⣦⣀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣠⢖⣽⣿⠁⠀⠈⢳⡄⠀⠀⠀⠀⠈⢳⡀⠀⠀ ⠀⠀⡼⠁⠀⠀⠀⠀⢠⠞⠁⠀⠀⠀⢹⣷⣿⡾⣷⣦⣀⠀⠀⠀⠀⠀⠀⣠⣴⣿⢟⣿⣿⠇⠀⠀⠀⠀⠙⣆⠀⠀⠀⠀⠀⢳⡀⠀ ⠀⣸⠃⠀⠀⠀⠀⢰⠏⠀⠀⠀⠀⠀⠀⢧⠹⡷⢭⡟⢿⣷⣤⡀⢀⡴⣾⠿⢙⠜⢫⠏⡞⠀⠀⠀⠀⠀⠀⠘⢧⠀⠀⠀⠀⠀⢷⠀ ⠀⡏⠀⠀⠀⠀⢠⡏⠀⠀⠀⠀⠀⠀⠀⠈⣇⠘⣦⠙⢮⣼⡷⣟⢷⣾⣹⠖⠁⣰⠃⣸⠁⠀⠀⠀⠀⠀⠀⠀⠘⣧⠀⠀⠀⠀⠘⡆ ⢸⠀⠀⠀⠀⠀⣾⠀⠀⠀⠀⠀⠀⠀⠀⠀⠸⡄⠘⣧⢶⠻⢄⠉⠉⢛⠟⢦⣴⡃⢠⠇⠀⠀⠀⠀⠀⠀⠀⠀⠀⢸⡄⠀⠀⠀⠀⢇ ⣼⠀⠀⠀⠀⢠⡇⠀⠀⠀⠀⠀⠀⠀⠀⠀⣀⣷⢋⡿⠘⢦⠀⢱⡴⠋⢀⠎⢸⣟⣾⣄⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⡇⠀⠀⠀⠀⢸ ⣿⠀⠀⠀⠀⢸⡇⠀⠀⠀⠀⠀⠀⢀⡴⠊⣁⣼⣿⡅⢸⣄⠑⣄⡇⡔⢁⡴⠀⢹⠧⣌⣑⢦⡀⠀⠀⠀⠀⠀⠀⠀⡇⠀⠀⠀⠀⢸ ⢿⠀⠀⠀⠀⠘⡇⠀⠀⠀⢀⡠⣶⠟⣛⣩⠥⢴⣿⣇⠘⣿⣿⡿⠀⣿⣿⡿⢰⣿⠢⠤⠭⠿⣿⣷⢤⡀⠀⠀⠀⠀⡇⠀⠀⠀⠀⢸ ⢸⠀⠀⡀⡀⠀⢷⠀⣠⣴⣭⣞⣁⣭⡼⠷⠷⠟⠉⢻⣦⠈⢛⠁⠀⡝⠋⡴⡿⠈⠛⠷⠷⠶⡴⣮⡷⣬⣲⣄⠀⢸⠃⣀⣀⠀⠀⡞ ⠈⣇⠈⠛⡏⠀⠸⣟⠛⠛⠓⠒⠒⠒⠒⠒⠒⠒⠒⠚⣿⡗⢺⠒⠒⡗⢺⣷⠓⠒⠒⠒⠒⠒⠒⠒⠒⠚⠛⠚⢛⡟⠀⠙⡿⠀⢠⠇ ⠀⢹⡄⠰⣧⠀⠀⠹⣆⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠹⣷⣌⠀⠀⢣⣾⡏⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⡾⠁⠀⠀⠃⠀⡼⠀ ⠀⠀⢳⡀⠹⠀⠀⠀⠙⣆⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢻⣿⣶⢰⣿⡟⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢠⡞⠁⠀⠀⠀⠀⣼⠃⠀ ⠀⠀⠀⢻⡄⠀⠀⠀⠀⠈⢷⣄⠀⠀⠀⠀⠀⠀⠀⠀⠀⠘⣿⡍⢉⣿⠃⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⡴⠋⠀⠀⠀⠀⢀⡼⠃⠀⠀ ⠀⠀⠀⠀⠹⣆⠀⠀⠀⠀⠀⠙⠳⣄⡀⠀⠀⠀⠀⠀⠀⠀⢹⡷⣾⡏⠀⠀⠀⠀⠀⠀⠀⠀⣀⡴⠋⠁⠀⠀⠀⠀⢠⡞⠁⠀⠀⠀ ⠀⠀⠀⠀⠀⠈⢷⣄⠀⠀⠀⠀⠀⠀⠙⠲⢤⣀⠀⠀⠀⠀⠀⢣⡸⠀⠀⠀⠀⠀⢀⣠⠴⠚⠁⠀⠀⠀⠀⠀⢀⡴⠋⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠉⠳⣄⠀⠀⠀⠀⠀⠀⠀⠈⠉⠓⠒⠶⠤⠼⠧⠤⠶⠖⠒⠋⠉⠀⠀⠀⠀⠀⠀⠀⣀⡴⠋⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠙⠦⣄⡀⠀⠀⠀⠀⠀⠀⠀⠀⢸⣧⣤⣤⠀⠀⠀⠀⠀⠀⠀⠀⠀⣀⡴⠞⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠙⠲⠦⣄⣀⡀⠀⠀⠀⠈⠉⠀⠟⠀⠀⠀⠀⣀⣀⠤⠖⠛⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠉⠉⠙⠓⠒⠒⠒⠒⠒⠛⠉⠉⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀ */ { config, inputs, lib, pkgs, ... }: { imports = [ # Include the results of the hardware scan. ./hardware-configuration.nix ../../../common ../../antivirus.nix ../../../common/comin.nix ../../../modules/home-manager.nix ../../gc.nix ]; sops.secrets."nextcloud_password" = { path = "/etc/nx_pass"; }; nixpkgs.config.allowUnfree = true; boot.binfmt.emulatedSystems = ["aarch64-linux"]; hardware.opengl = { enable = true; driSupport32Bit = true; }; hardware.enableAllFirmware = true; services.fwupd.enable = true; hardware.opengl.extraPackages = with pkgs; [ vaapiVdpau ]; hardware.nvidia = { modesetting.enable = true; open = true; powerManagement.enable = false; powerManagement.finegrained = false; nvidiaSettings = true; package = config.boot.kernelPackages.nvidiaPackages.production; }; # Use the systemd-boot EFI boot loader. boot.loader.systemd-boot.enable = true; boot.loader.efi.canTouchEfiVariables = true; boot.kernelPackages = pkgs.linuxPackages_latest; boot.kernelModules = ["v4l2loopback"]; boot.extraModulePackages = with config.boot.kernelPackages; [v4l2loopback]; boot.extraModprobeConfig = '' options v4l2loopback devices=1 video_nr=1 card_label="OBS Cam" exclusive_caps=1 ''; networking.hostName = "asmodeus"; # Define your hostname. # Pick only one of the below networking options. # networking.wireless.enable = true; # Enables wireless support via wpa_supplicant. networking.networkmanager.enable = true; # Easiest to use and most distros use this by default. # Set your time zone. time.timeZone = "Europe/Berlin"; # Configure network proxy if necessary # networking.proxy.default = "http://user:password@proxy:port/"; # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain"; # Select internationalisation properties. i18n.defaultLocale = "en_US.UTF-8"; # console = { # font = "Lat2-Terminus16"; # keyMap = "us"; # useXkbConfig = true; # use xkb.options in tty. # }; programs.adb.enable = true; # Enable the X11 windowing system. services.xserver.enable = true; # services.xserver.displayManager.gdm.enable = true; services.xserver.displayManager.sddm.enable = true; services.xserver.desktopManager.plasma6.enable = true; # services.xserver.desktopManager.gnome.enable = true; # services.xserver.displayManager.defaultSession = "plasma"; services.xserver.videoDrivers = ["nvidia"]; virtualisation.docker.enable = true; virtualisation.libvirtd.enable = true; programs.virt-manager.enable = true; # Configure keymap in X11 services.xserver.xkb.layout = "us"; services.pcscd.enable = true; # services.xserver.xkb.options = "eurosign:e,caps:escape"; # Enable CUPS to print documents. services.printing.enable = true; # Enable sound. hardware.pulseaudio.enable = false; security.rtkit.enable = true; services.pipewire = { enable = true; audio.enable = true; alsa.enable = true; alsa.support32Bit = true; pulse.enable = true; # If you want to use JACK applications, uncomment this jack.enable = true; extraConfig = { pipewire = { "10-clock-rate" = { "context.properties" = { "default.clock.rate" = 44100; }; }; }; }; }; programs.gamemode.enable = true; hardware.bluetooth = { enable = true; powerOnBoot = true; settings = {General = {Enable = "Source,Sink,Media,Socket";};}; }; services.blueman.enable = true; # Enable touchpad support (enabled default in most desktopManager). services.xserver.libinput.enable = true; # Define a user account. Don't forget to set a password with ‘passwd’. users.users.xqtc = { isNormalUser = true; extraGroups = ["wheel" "sudo" "docker" "adbusers"]; # Enable ‘sudo’ for the user. packages = with pkgs; [wezterm nushell zsh]; shell = pkgs.zsh; }; # List packages installed in system profile. To search, run: # $ nix search wget environment.systemPackages = with pkgs; [ vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default. wget #git firefox neovim gcc13 cargo rustc wl-clipboard xclip jellyfin jellyfin-web jellyfin-ffmpeg v4l-utils ]; #programs.nix-ld.enable = true; programs.dconf.enable = true; security.pam.services.swaylock = {}; # Some programs need SUID wrappers, can be configured further or are # started in user sessions. programs.mtr.enable = true; programs.gnupg.agent = { enable = true; enableSSHSupport = true; }; # List services that you want to enable: services.jellyfin.enable = true; services.jellyfin.user = "xqtc"; # services.ollama.enable = true; # services.ollama.acceleration = "cuda"; #services.calibre-web = { # enable = true; # user = "xqtc"; # listen = { # ip = "localhost"; # port = 8083; # }; # openFirewall = true; # options = { # calibreLibrary = "/mnt/HDD2/BOOKS"; # enableBookUploading = true; # enableBookConversion = true; # }; #}; # Enable the OpenSSH daemon. services.openssh.enable = true; services.mysql = { enable = true; package = pkgs.mariadb; }; services.resolved.enable = true; services.mullvad-vpn = { enable = true; package = pkgs.mullvad-vpn; }; networking.wireguard.enable = true; services.tailscale.enable = true; # Open ports in the firewall. networking.firewall.allowedTCPPorts = [2234 4747 8096 8080 8082]; # networking.firewall.allowedUDPPorts = [ ... ]; # Or disable the firewall altogether. # networking.firewall.enable = false; # Copy the NixOS configuration file and link it from the resulting system # (/run/current-system/configuration.nix). This is useful in case you # accidentally delete configuration.nix. # system.copySystemConfiguration = true; # This option defines the first version of NixOS you have installed on this particular machine, # and is used to maintain compatibility with application data (e.g. databases) created on older NixOS versions. # # Most users should NEVER change this value after the initial install, for any reason, # even if you've upgraded your system to a new NixOS release. # # This value does NOT affect the Nixpkgs version your packages and OS are pulled from, # so changing it will NOT upgrade your system. # # This value being lower than the current NixOS release does NOT mean your system is # out of date, out of support, or vulnerable. # # Do NOT change this value unless you have manually inspected all the changes it would make to your configuration, # and migrated your data accordingly. # # For more information, see `man configuration.nix` or https://nixos.org/manual/nixos/stable/options#opt-system.stateVersion . system.stateVersion = "23.11"; # Did you read the comment? nix.settings.experimental-features = ["nix-command" "flakes"]; }