mirror of
https://git.gay/xqtc/nixos-config
synced 2024-11-24 08:33:55 +01:00
288 lines
10 KiB
Nix
288 lines
10 KiB
Nix
/*
|
||
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣀⣀⣀⣤⠤⠤⢤⣤⣀⣀⣀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
|
||
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣀⡤⠶⠚⠉⠉⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠉⠓⠲⠤⣄⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
|
||
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣠⠴⠛⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠙⠲⣤⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀
|
||
⠀⠀⠀⠀⠀⠀⠀⢀⡴⣏⠁⠀⡀⠀⠀⠀⠀⠀⢀⣀⣠⡤⠤⠤⠤⠤⠤⣤⣀⣀⠀⠀⠀⠀⠀⣠⣄⠀⠙⠷⣄⠀⠀⠀⠀⠀⠀⠀
|
||
⠀⠀⠀⠀⠀⢀⡴⠋⠀⢸⡟⠋⢻⠀⢀⡤⠖⠛⠉⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀⠉⠙⠳⢦⣀⠀⠨⠛⠀⠀⠀⠈⢳⣄⠀⠀⠀⠀⠀
|
||
⠀⠀⠀⠀⣠⠟⠀⠀⠀⠚⠁⢀⡼⢿⣍⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣬⡟⢦⣄⠀⠀⠀⠀⠀⠙⢦⠀⠀⠀⠀
|
||
⠀⠀⠀⣴⠃⠀⠀⠀⠀⢀⡴⠋⠀⠈⣿⣟⣦⣀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣠⢖⣽⣿⠁⠀⠈⢳⡄⠀⠀⠀⠀⠈⢳⡀⠀⠀
|
||
⠀⠀⡼⠁⠀⠀⠀⠀⢠⠞⠁⠀⠀⠀⢹⣷⣿⡾⣷⣦⣀⠀⠀⠀⠀⠀⠀⣠⣴⣿⢟⣿⣿⠇⠀⠀⠀⠀⠙⣆⠀⠀⠀⠀⠀⢳⡀⠀
|
||
⠀⣸⠃⠀⠀⠀⠀⢰⠏⠀⠀⠀⠀⠀⠀⢧⠹⡷⢭⡟⢿⣷⣤⡀⢀⡴⣾⠿⢙⠜⢫⠏⡞⠀⠀⠀⠀⠀⠀⠘⢧⠀⠀⠀⠀⠀⢷⠀
|
||
⠀⡏⠀⠀⠀⠀⢠⡏⠀⠀⠀⠀⠀⠀⠀⠈⣇⠘⣦⠙⢮⣼⡷⣟⢷⣾⣹⠖⠁⣰⠃⣸⠁⠀⠀⠀⠀⠀⠀⠀⠘⣧⠀⠀⠀⠀⠘⡆
|
||
⢸⠀⠀⠀⠀⠀⣾⠀⠀⠀⠀⠀⠀⠀⠀⠀⠸⡄⠘⣧⢶⠻⢄⠉⠉⢛⠟⢦⣴⡃⢠⠇⠀⠀⠀⠀⠀⠀⠀⠀⠀⢸⡄⠀⠀⠀⠀⢇
|
||
⣼⠀⠀⠀⠀⢠⡇⠀⠀⠀⠀⠀⠀⠀⠀⠀⣀⣷⢋⡿⠘⢦⠀⢱⡴⠋⢀⠎⢸⣟⣾⣄⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⡇⠀⠀⠀⠀⢸
|
||
⣿⠀⠀⠀⠀⢸⡇⠀⠀⠀⠀⠀⠀⢀⡴⠊⣁⣼⣿⡅⢸⣄⠑⣄⡇⡔⢁⡴⠀⢹⠧⣌⣑⢦⡀⠀⠀⠀⠀⠀⠀⠀⡇⠀⠀⠀⠀⢸
|
||
⢿⠀⠀⠀⠀⠘⡇⠀⠀⠀⢀⡠⣶⠟⣛⣩⠥⢴⣿⣇⠘⣿⣿⡿⠀⣿⣿⡿⢰⣿⠢⠤⠭⠿⣿⣷⢤⡀⠀⠀⠀⠀⡇⠀⠀⠀⠀⢸
|
||
⢸⠀⠀⡀⡀⠀⢷⠀⣠⣴⣭⣞⣁⣭⡼⠷⠷⠟⠉⢻⣦⠈⢛⠁⠀⡝⠋⡴⡿⠈⠛⠷⠷⠶⡴⣮⡷⣬⣲⣄⠀⢸⠃⣀⣀⠀⠀⡞
|
||
⠈⣇⠈⠛⡏⠀⠸⣟⠛⠛⠓⠒⠒⠒⠒⠒⠒⠒⠒⠚⣿⡗⢺⠒⠒⡗⢺⣷⠓⠒⠒⠒⠒⠒⠒⠒⠒⠚⠛⠚⢛⡟⠀⠙⡿⠀⢠⠇
|
||
⠀⢹⡄⠰⣧⠀⠀⠹⣆⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠹⣷⣌⠀⠀⢣⣾⡏⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⡾⠁⠀⠀⠃⠀⡼⠀
|
||
⠀⠀⢳⡀⠹⠀⠀⠀⠙⣆⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢻⣿⣶⢰⣿⡟⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢠⡞⠁⠀⠀⠀⠀⣼⠃⠀
|
||
⠀⠀⠀⢻⡄⠀⠀⠀⠀⠈⢷⣄⠀⠀⠀⠀⠀⠀⠀⠀⠀⠘⣿⡍⢉⣿⠃⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⡴⠋⠀⠀⠀⠀⢀⡼⠃⠀⠀
|
||
⠀⠀⠀⠀⠹⣆⠀⠀⠀⠀⠀⠙⠳⣄⡀⠀⠀⠀⠀⠀⠀⠀⢹⡷⣾⡏⠀⠀⠀⠀⠀⠀⠀⠀⣀⡴⠋⠁⠀⠀⠀⠀⢠⡞⠁⠀⠀⠀
|
||
⠀⠀⠀⠀⠀⠈⢷⣄⠀⠀⠀⠀⠀⠀⠙⠲⢤⣀⠀⠀⠀⠀⠀⢣⡸⠀⠀⠀⠀⠀⢀⣠⠴⠚⠁⠀⠀⠀⠀⠀⢀⡴⠋⠀⠀⠀⠀⠀
|
||
⠀⠀⠀⠀⠀⠀⠀⠉⠳⣄⠀⠀⠀⠀⠀⠀⠀⠈⠉⠓⠒⠶⠤⠼⠧⠤⠶⠖⠒⠋⠉⠀⠀⠀⠀⠀⠀⠀⣀⡴⠋⠀⠀⠀⠀⠀⠀⠀
|
||
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠙⠦⣄⡀⠀⠀⠀⠀⠀⠀⠀⠀⢸⣧⣤⣤⠀⠀⠀⠀⠀⠀⠀⠀⠀⣀⡴⠞⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀
|
||
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠙⠲⠦⣄⣀⡀⠀⠀⠀⠈⠉⠀⠟⠀⠀⠀⠀⣀⣀⠤⠖⠛⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
|
||
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠉⠉⠙⠓⠒⠒⠒⠒⠒⠛⠉⠉⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
|
||
*/
|
||
{
|
||
config,
|
||
inputs,
|
||
lib,
|
||
pkgs,
|
||
...
|
||
}: {
|
||
imports = [
|
||
# Include the results of the hardware scan.
|
||
./hardware-configuration.nix
|
||
../../../common
|
||
../../antivirus.nix
|
||
../../../common/comin.nix
|
||
../../../modules/home-manager.nix
|
||
../../gc.nix
|
||
];
|
||
|
||
sops.secrets."nextcloud_password" = {
|
||
path = "/etc/nx_pass";
|
||
};
|
||
nixpkgs.config.allowUnfree = true;
|
||
|
||
boot.binfmt.emulatedSystems = ["aarch64-linux"];
|
||
|
||
hardware.graphics = {
|
||
enable = true;
|
||
enable32Bit = true;
|
||
};
|
||
|
||
hardware.cpu.amd.updateMicrocode = true;
|
||
|
||
hardware.enableAllFirmware = true;
|
||
services.fwupd.enable = true;
|
||
|
||
hardware.opengl.extraPackages = with pkgs; [
|
||
vaapiVdpau
|
||
];
|
||
|
||
hardware.nvidia = {
|
||
modesetting.enable = true;
|
||
|
||
open = true;
|
||
|
||
powerManagement.enable = false;
|
||
powerManagement.finegrained = false;
|
||
|
||
nvidiaSettings = true;
|
||
|
||
package = config.boot.kernelPackages.nvidiaPackages.production;
|
||
};
|
||
|
||
# Use the systemd-boot EFI boot loader.
|
||
boot.loader.systemd-boot.enable = true;
|
||
boot.loader.efi.canTouchEfiVariables = true;
|
||
|
||
boot.kernelPackages = pkgs.linuxPackages_latest;
|
||
boot.kernelModules = ["v4l2loopback"];
|
||
boot.extraModulePackages = with config.boot.kernelPackages; [v4l2loopback];
|
||
boot.extraModprobeConfig = ''
|
||
options v4l2loopback devices=1 video_nr=1 card_label="OBS Cam" exclusive_caps=1
|
||
'';
|
||
|
||
networking.hostName = "asmodeus"; # Define your hostname.
|
||
# Pick only one of the below networking options.
|
||
# networking.wireless.enable = true; # Enables wireless support via wpa_supplicant.
|
||
networking.networkmanager.enable =
|
||
true; # Easiest to use and most distros use this by default.
|
||
|
||
# Set your time zone.
|
||
time.timeZone = "Europe/Berlin";
|
||
|
||
# Configure network proxy if necessary
|
||
# networking.proxy.default = "http://user:password@proxy:port/";
|
||
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
|
||
|
||
# Select internationalisation properties.
|
||
i18n.defaultLocale = "en_US.UTF-8";
|
||
# console = {
|
||
# font = "Lat2-Terminus16";
|
||
# keyMap = "us";
|
||
# useXkbConfig = true; # use xkb.options in tty.
|
||
# };
|
||
programs.adb.enable = true;
|
||
# Enable the X11 windowing system.
|
||
services.xserver.enable = true;
|
||
# services.xserver.displayManager.gdm.enable = true;
|
||
services.xserver.displayManager.sddm.enable = true;
|
||
services.desktopManager.plasma6.enable = true;
|
||
# services.xserver.desktopManager.gnome.enable = true;
|
||
# services.xserver.displayManager.defaultSession = "plasma";
|
||
services.xserver.videoDrivers = ["nvidia"];
|
||
|
||
virtualisation.docker.enable = true;
|
||
virtualisation.libvirtd.enable = true;
|
||
programs.virt-manager.enable = true;
|
||
|
||
# Configure keymap in X11
|
||
services.xserver.xkb.layout = "us";
|
||
|
||
services.pcscd.enable = true;
|
||
# services.xserver.xkb.options = "eurosign:e,caps:escape";
|
||
|
||
# Enable CUPS to print documents.
|
||
services.printing.enable = true;
|
||
|
||
# Enable sound.
|
||
hardware.pulseaudio.enable = false;
|
||
|
||
security.rtkit.enable = true;
|
||
services.pipewire = {
|
||
enable = true;
|
||
audio.enable = true;
|
||
alsa.enable = true;
|
||
alsa.support32Bit = true;
|
||
pulse.enable = true;
|
||
# If you want to use JACK applications, uncomment this
|
||
jack.enable = true;
|
||
extraConfig = {
|
||
pipewire = {
|
||
"10-clock-rate" = {
|
||
"context.properties" = {
|
||
"default.clock.rate" = 44100;
|
||
};
|
||
};
|
||
};
|
||
};
|
||
};
|
||
|
||
programs.gamemode.enable = true;
|
||
|
||
hardware.bluetooth = {
|
||
enable = true;
|
||
powerOnBoot = true;
|
||
settings = {General = {Enable = "Source,Sink,Media,Socket";};};
|
||
};
|
||
|
||
services.blueman.enable = true;
|
||
|
||
# Enable touchpad support (enabled default in most desktopManager).
|
||
services.libinput.enable = true;
|
||
|
||
# Define a user account. Don't forget to set a password with ‘passwd’.
|
||
users.users.xqtc = {
|
||
isNormalUser = true;
|
||
extraGroups = ["wheel" "sudo" "docker" "adbusers"]; # Enable ‘sudo’ for the user.
|
||
packages = with pkgs; [wezterm nushell zsh];
|
||
shell = pkgs.zsh;
|
||
};
|
||
|
||
# List packages installed in system profile. To search, run:
|
||
# $ nix search wget
|
||
environment.systemPackages = with pkgs; [
|
||
vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
|
||
wget
|
||
#git
|
||
|
||
firefox
|
||
|
||
neovim
|
||
|
||
gcc13
|
||
|
||
cargo
|
||
rustc
|
||
|
||
wl-clipboard
|
||
xclip
|
||
|
||
jellyfin
|
||
jellyfin-web
|
||
jellyfin-ffmpeg
|
||
|
||
v4l-utils
|
||
];
|
||
|
||
#programs.nix-ld.enable = true;
|
||
programs.dconf.enable = true;
|
||
|
||
security.pam.services.swaylock = {};
|
||
|
||
# Some programs need SUID wrappers, can be configured further or are
|
||
# started in user sessions.
|
||
programs.mtr.enable = true;
|
||
programs.gnupg.agent = {
|
||
enable = true;
|
||
enableSSHSupport = true;
|
||
};
|
||
|
||
# List services that you want to enable:
|
||
|
||
services.jellyfin.enable = true;
|
||
services.jellyfin.user = "xqtc";
|
||
|
||
# services.ollama.enable = true;
|
||
# services.ollama.acceleration = "cuda";
|
||
|
||
#services.calibre-web = {
|
||
# enable = true;
|
||
# user = "xqtc";
|
||
# listen = {
|
||
# ip = "localhost";
|
||
# port = 8083;
|
||
# };
|
||
# openFirewall = true;
|
||
# options = {
|
||
# calibreLibrary = "/mnt/HDD2/BOOKS";
|
||
# enableBookUploading = true;
|
||
# enableBookConversion = true;
|
||
# };
|
||
#};
|
||
|
||
# Enable the OpenSSH daemon.
|
||
services.openssh.enable = true;
|
||
|
||
services.mysql = {
|
||
enable = true;
|
||
package = pkgs.mariadb;
|
||
};
|
||
|
||
services.resolved.enable = true;
|
||
|
||
services.mullvad-vpn = {
|
||
enable = true;
|
||
package = pkgs.mullvad-vpn;
|
||
};
|
||
|
||
networking.wireguard.enable = true;
|
||
|
||
services.tailscale.enable = true;
|
||
# Open ports in the firewall.
|
||
networking.firewall.allowedTCPPorts = [2234 4747 8096 8080 8082];
|
||
# networking.firewall.allowedUDPPorts = [ ... ];
|
||
# Or disable the firewall altogether.
|
||
# networking.firewall.enable = false;
|
||
|
||
# Copy the NixOS configuration file and link it from the resulting system
|
||
# (/run/current-system/configuration.nix). This is useful in case you
|
||
# accidentally delete configuration.nix.
|
||
# system.copySystemConfiguration = true;
|
||
|
||
# This option defines the first version of NixOS you have installed on this particular machine,
|
||
# and is used to maintain compatibility with application data (e.g. databases) created on older NixOS versions.
|
||
#
|
||
# Most users should NEVER change this value after the initial install, for any reason,
|
||
# even if you've upgraded your system to a new NixOS release.
|
||
#
|
||
# This value does NOT affect the Nixpkgs version your packages and OS are pulled from,
|
||
# so changing it will NOT upgrade your system.
|
||
#
|
||
# This value being lower than the current NixOS release does NOT mean your system is
|
||
# out of date, out of support, or vulnerable.
|
||
#
|
||
# Do NOT change this value unless you have manually inspected all the changes it would make to your configuration,
|
||
# and migrated your data accordingly.
|
||
#
|
||
# For more information, see `man configuration.nix` or https://nixos.org/manual/nixos/stable/options#opt-system.stateVersion .
|
||
system.stateVersion = "23.11"; # Did you read the comment?
|
||
|
||
nix.settings.experimental-features = ["nix-command" "flakes"];
|
||
}
|