initialized flake
This commit is contained in:
commit
8ef437334f
9 changed files with 512 additions and 0 deletions
291
hosts/horizon/configuration.nix
Normal file
291
hosts/horizon/configuration.nix
Normal file
|
|
@ -0,0 +1,291 @@
|
|||
# leyla laptop
|
||||
{ config, pkgs, inputs, ... }:
|
||||
|
||||
{
|
||||
imports =
|
||||
[ # Include the results of the hardware scan.
|
||||
./hardware-configuration.nix
|
||||
inputs.home-manager.nixosModules.default
|
||||
inputs.sops-nix.nixosModules.sops
|
||||
];
|
||||
|
||||
sops.defaultSopsFile = ../../secrets/secrets.yaml;
|
||||
sops.defaultSopsFormat = "yaml";
|
||||
|
||||
sops.age.keyFile = "/home/leyla/.config/sops/age/keys.txt";
|
||||
|
||||
# Bootloader.
|
||||
boot.loader.systemd-boot.enable = true;
|
||||
boot.loader.efi.canTouchEfiVariables = true;
|
||||
|
||||
boot.kernelModules = [ "sg" ];
|
||||
|
||||
nix.settings.experimental-features = [ "nix-command" "flakes" ];
|
||||
|
||||
networking.hostName = "leyla-laptop"; # Define your hostname.
|
||||
# networking.wireless.enable = true; # Enables wireless support via wpa_supplicant.
|
||||
|
||||
# Configure network proxy if necessary
|
||||
# networking.proxy.default = "http://user:password@proxy:port/";
|
||||
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
|
||||
|
||||
# Enable networking
|
||||
networking.networkmanager.enable = true;
|
||||
|
||||
# Set your time zone.
|
||||
time.timeZone = "America/Chicago";
|
||||
|
||||
# Select internationalisation properties.
|
||||
i18n.defaultLocale = "en_US.UTF-8";
|
||||
|
||||
i18n.extraLocaleSettings = {
|
||||
LC_ADDRESS = "en_US.UTF-8";
|
||||
LC_IDENTIFICATION = "en_US.UTF-8";
|
||||
LC_MEASUREMENT = "en_US.UTF-8";
|
||||
LC_MONETARY = "en_US.UTF-8";
|
||||
LC_NAME = "en_US.UTF-8";
|
||||
LC_NUMERIC = "en_US.UTF-8";
|
||||
LC_PAPER = "en_US.UTF-8";
|
||||
LC_TELEPHONE = "en_US.UTF-8";
|
||||
LC_TIME = "en_US.UTF-8";
|
||||
};
|
||||
|
||||
# Enable the X11 windowing system.
|
||||
services.xserver.enable = true;
|
||||
|
||||
# Enable the GNOME Desktop Environment.
|
||||
services.xserver.displayManager.gdm.enable = true;
|
||||
services.xserver.desktopManager.gnome.enable = true;
|
||||
services.xserver.desktopManager.xterm.enable = false;
|
||||
|
||||
# Get rid of xTerm
|
||||
services.xserver.excludePackages = [ pkgs.xterm ];
|
||||
|
||||
# Configure keymap in X11
|
||||
services.xserver = {
|
||||
layout = "us";
|
||||
xkbVariant = "";
|
||||
};
|
||||
|
||||
# Enable CUPS to print documents.
|
||||
services.printing.enable = true;
|
||||
|
||||
# Enable sound with pipewire.
|
||||
sound.enable = true;
|
||||
hardware.pulseaudio.enable = false;
|
||||
security.rtkit.enable = true;
|
||||
services.pipewire = {
|
||||
enable = true;
|
||||
alsa.enable = true;
|
||||
alsa.support32Bit = true;
|
||||
pulse.enable = true;
|
||||
# If you want to use JACK applications, uncomment this
|
||||
#jack.enable = true;
|
||||
|
||||
# use the example session manager (no others are packaged yet so this is enabled by default,
|
||||
# no need to redefine it in your config for now)
|
||||
#media-session.enable = true;
|
||||
};
|
||||
|
||||
# enabled virtualisation for docker
|
||||
virtualisation.docker.enable = true;
|
||||
|
||||
# Enable touchpad support (enabled default in most desktopManager).
|
||||
# services.xserver.libinput.enable = true;
|
||||
|
||||
# Disables creating or editing users though methods not defined in this file
|
||||
users.mutableUsers = false;
|
||||
|
||||
nixpkgs.config.permittedInsecurePackages = [
|
||||
"electron-25.9.0"
|
||||
];
|
||||
|
||||
nixpkgs.overlays = [
|
||||
(self: super: {
|
||||
# idea is too out of date for android gradle things
|
||||
jetbrains = {
|
||||
jdk = super.jdk17;
|
||||
idea-community = super.jetbrains.idea-community.overrideAttrs (oldAttrs: rec {
|
||||
version = "2023.3.3";
|
||||
name = "idea-community-${version}";
|
||||
src = super.fetchurl {
|
||||
sha256 = "sha256-3BI97Tx+3onnzT1NXkb62pa4dj9kjNDNvFt9biYgP9I=";
|
||||
url = "https://download.jetbrains.com/idea/ideaIC-${version}.tar.gz";
|
||||
};
|
||||
});
|
||||
};
|
||||
# ui is broken on 1.84
|
||||
vscodium = super.vscodium.overrideAttrs (oldAttrs: rec {
|
||||
version = "1.85.2.24019";
|
||||
src = super.fetchurl {
|
||||
sha256 = "sha256-OBGFXOSN+Oq9uj/5O6tF0Kp7rxTY1AzNbhLK8G+EqVk=";
|
||||
url = "https://github.com/VSCodium/vscodium/releases/download/${version}/VSCodium-linux-x64-${version}.tar.gz";
|
||||
};
|
||||
});
|
||||
})
|
||||
];
|
||||
|
||||
sops.secrets."passwords/leyla".neededForUsers = true;
|
||||
sops.secrets."passwords/ester".neededForUsers = true;
|
||||
sops.secrets."passwords/eve".neededForUsers = true;
|
||||
|
||||
# Define user accounts
|
||||
users.users = {
|
||||
leyla = {
|
||||
isNormalUser = true;
|
||||
uid = 1000;
|
||||
description = "Leyla";
|
||||
extraGroups = [ "networkmanager" "wheel" "docker" ];
|
||||
|
||||
hashedPasswordFile = config.sops.secrets."passwords/leyla".path;
|
||||
|
||||
packages = with pkgs; [
|
||||
iputils
|
||||
dnsutils
|
||||
git
|
||||
firefox
|
||||
signal-desktop
|
||||
obsidian
|
||||
bitwarden
|
||||
# vscode
|
||||
vscodium
|
||||
nextcloud-client
|
||||
inkscape
|
||||
steam
|
||||
discord
|
||||
rhythmbox
|
||||
makemkv
|
||||
protonvpn-gui
|
||||
transmission-gtk
|
||||
freecad
|
||||
mupen64plus
|
||||
dbeaver
|
||||
easytag
|
||||
cura
|
||||
kicad-small
|
||||
# jdk
|
||||
# android-tools
|
||||
# android-studio
|
||||
androidStudioPackages.canary
|
||||
jetbrains.idea-community
|
||||
ungoogled-chromium
|
||||
nodejs
|
||||
exiftool
|
||||
libreoffice
|
||||
# N64 Emulator
|
||||
mupen64plus
|
||||
# GameCube Emulator and Wii Emulator
|
||||
dolphin-emu
|
||||
# Switch Emulator
|
||||
yuzu-mainline
|
||||
# Atari 2600 Emulator
|
||||
stella
|
||||
# mame Emulator
|
||||
mame
|
||||
# Game Boy Advanced Emulator
|
||||
vbam
|
||||
# NES Emulator
|
||||
fceux
|
||||
# SNES Emulator
|
||||
zsnes
|
||||
# DS Emulator
|
||||
desmume
|
||||
];
|
||||
};
|
||||
|
||||
eve = {
|
||||
isNormalUser = true;
|
||||
uid = 1001;
|
||||
description = "Eve";
|
||||
extraGroups = [ "networkmanager" ];
|
||||
|
||||
hashedPasswordFile = config.sops.secrets."passwords/eve".path;
|
||||
|
||||
packages = with pkgs; [
|
||||
firefox
|
||||
bitwarden
|
||||
discord
|
||||
makemkv
|
||||
signal-desktop
|
||||
];
|
||||
};
|
||||
|
||||
ester = {
|
||||
isNormalUser = true;
|
||||
uid = 1002;
|
||||
description = "Ester";
|
||||
extraGroups = [ "networkmanager" ];
|
||||
|
||||
hashedPasswordFile = config.sops.secrets."passwords/ester".path;
|
||||
|
||||
packages = with pkgs; [
|
||||
firefox
|
||||
bitwarden
|
||||
discord
|
||||
];
|
||||
};
|
||||
};
|
||||
|
||||
# Allow unfree packages
|
||||
nixpkgs.config.allowUnfree = true;
|
||||
|
||||
# List packages installed in system profile. To search, run:
|
||||
# $ nix search wget
|
||||
environment.systemPackages = with pkgs; [
|
||||
# vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
|
||||
wget
|
||||
# resilio-sync
|
||||
yt-dlp
|
||||
spotdl
|
||||
ffmpeg
|
||||
chromaprint
|
||||
docker
|
||||
aileron
|
||||
# sox
|
||||
# songrec
|
||||
# csvkit
|
||||
# losslessaudiochecker
|
||||
];
|
||||
|
||||
# Some programs need SUID wrappers, can be configured further or are
|
||||
# started in user sessions.
|
||||
# programs.mtr.enable = true;
|
||||
# programs.gnupg.agent = {
|
||||
# enable = true;
|
||||
# enableSSHSupport = true;
|
||||
# };
|
||||
|
||||
# # List services that you want to enable:
|
||||
# systemd.services = {
|
||||
# # Start resilio sync on boot
|
||||
# resilio-sync = {
|
||||
# description = "Resilio Sync service";
|
||||
|
||||
# serviceConfig = {
|
||||
# Type = "forking";
|
||||
# Restart = "on-failure";
|
||||
# ExecStart = "${pkgs.resilio-sync}/bin/rslsync";
|
||||
# };
|
||||
|
||||
# after = [ "network.target" "network-online.target" ];
|
||||
# wantedBy = [ "multi-user.target" ];
|
||||
# };
|
||||
# };
|
||||
|
||||
# Enable the OpenSSH daemon.
|
||||
# services.openssh.enable = true;
|
||||
|
||||
# Open ports in the firewall.
|
||||
# networking.firewall.allowedTCPPorts = [ ... ];
|
||||
# networking.firewall.allowedUDPPorts = [ ... ];
|
||||
# Or disable the firewall altogether.
|
||||
# networking.firewall.enable = false;
|
||||
|
||||
# This value determines the NixOS release from which the default
|
||||
# settings for stateful data, like file locations and database versions
|
||||
# on your system were taken. It‘s perfectly fine and recommended to leave
|
||||
# this value at the release version of the first install of this system.
|
||||
# Before changing this value read the documentation for this option
|
||||
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
|
||||
system.stateVersion = "23.05"; # Did you read the comment?
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue