mirror of
https://github.com/Feliix42/dotfiles.git
synced 2024-11-22 14:06:30 +00:00
371 lines
9.3 KiB
Nix
371 lines
9.3 KiB
Nix
# Edit this configuration file to define what should be installed on
|
||
# your system. Help is available in the configuration.nix(5) man page
|
||
# and in the NixOS manual (accessible by running ‘nixos-help’).
|
||
|
||
{ config, pkgs, unstable, ... }:
|
||
|
||
#let
|
||
# use unstable nixpkgs for some specific packages that are still in-dev:
|
||
# sudo nix-channel --add https://nixos.org/channels/nixos-unstable nixos-unstable
|
||
# sudo nix-channel --update
|
||
#unstable = import <nixos-unstable> { config = config.nixpkgs.config; };
|
||
#in
|
||
{
|
||
imports =
|
||
[
|
||
# Include the results of the hardware scan.
|
||
./hardware-configuration.nix
|
||
|
||
# Hardware support for Moonlander & U2F
|
||
./modules/hardware.nix
|
||
|
||
# Network & VPN configuration
|
||
./modules/networking.nix
|
||
|
||
./modules/audio.nix
|
||
./modules/video.nix
|
||
#./modules/v4l2loopback.nix
|
||
./modules/virtualisation.nix
|
||
|
||
# Desktop configuration
|
||
./modules/sway.nix
|
||
./modules/kde.nix
|
||
# old i3 compositor
|
||
# ./modules/i3.nix
|
||
|
||
./modules/printing.nix
|
||
./modules/backup.nix
|
||
|
||
# include and configure R
|
||
./modules/r.nix
|
||
# python with modules
|
||
./modules/python.nix
|
||
];
|
||
|
||
|
||
# set up LUKS discovery
|
||
boot.initrd.luks.devices.cryptlvm.device = "/dev/disk/by-uuid/f382cd01-9048-4b1b-8a73-48e1f61e6c08";
|
||
|
||
# Use the systemd-boot EFI boot loader.
|
||
boot.loader.systemd-boot.enable = true;
|
||
boot.loader.efi.canTouchEfiVariables = true;
|
||
|
||
boot.plymouth = {
|
||
enable = true;
|
||
theme = "breeze";
|
||
};
|
||
|
||
# ------------ kernel -------------------------------------------------------
|
||
boot.kernelPackages = pkgs.linuxKernel.packages.linux_6_5;
|
||
|
||
services.fwupd.enable = true;
|
||
|
||
# ------------ time, location & input ---------------------------------------
|
||
# Set your time zone.
|
||
time.timeZone = "Europe/Berlin"; # "US/Pacific";
|
||
# geoclue2 does not yield a location at home, so I'll make the manual configuration the default
|
||
# location.provider = "geoclue2";
|
||
location.provider = "manual";
|
||
# using the location of the cafe ascii should be good enough
|
||
location.latitude = 51.0250869;
|
||
location.longitude = 13.7210005;
|
||
|
||
# Select internationalisation properties.
|
||
i18n.defaultLocale = "en_US.UTF-8";
|
||
console = {
|
||
#font = "Lat2-Terminus16";
|
||
font = "${pkgs.terminus_font}/share/consolefonts/ter-u28n.psf.gz";
|
||
keyMap = pkgs.lib.mkForce "uk";
|
||
};
|
||
# use the xkb-config from the X server
|
||
console.useXkbConfig = true;
|
||
|
||
# Configure keymap in X11
|
||
services.xserver.layout = "gb";
|
||
services.xserver.xkbOptions = "eurosign:e,ctrl:nocaps,compose:ralt";
|
||
# enable touchpad support
|
||
services.xserver.libinput.enable = true;
|
||
|
||
# ------------ Nix Config ---------------------------------------------------
|
||
nix = {
|
||
package = pkgs.nixFlakes;
|
||
# the builders-use-substitutes is optional; useful when the builder has a faster internet connection than yours
|
||
extraOptions = ''
|
||
experimental-features = nix-command flakes
|
||
builders-use-substitutes = true
|
||
'';
|
||
buildMachines = [{
|
||
# hostName = "ada";
|
||
hostName = "141.30.52.34";
|
||
sshUser = "builder";
|
||
system = "x86_64-linux";
|
||
# if the builder supports building for multiple architectures,
|
||
# replace the previous line by, e.g.,
|
||
# systems = ["x86_64-linux" "aarch64-linux"];
|
||
maxJobs = 2;
|
||
speedFactor = 2;
|
||
supportedFeatures = [ "big-parallel" "kvm" ];
|
||
mandatoryFeatures = [ ];
|
||
# base64 -w0 /etc/ssh/ssh_host_ed25519_key.pub
|
||
publicHostKey = "c3NoLWVkMjU1MTkgQUFBQUMzTnphQzFsWkRJMU5URTVBQUFBSUlTcFY3cVJUZEdXVlpYNFlITnFYZXBYNjZUK0U1dGdCbnAwTlJOTmtKbzcgcm9vdEBhZGEK";
|
||
sshKey = "/home/felix/.ssh/id_ed25519";
|
||
# }
|
||
# {
|
||
# hostName = "elm";
|
||
# sshUser = "builder";
|
||
# system = "x86_64-linux";
|
||
# # if the builder supports building for multiple architectures,
|
||
# # replace the previous line by, e.g.,
|
||
# # systems = ["x86_64-linux" "aarch64-linux"];
|
||
# maxJobs = 1;
|
||
# speedFactor = 1;
|
||
# supportedFeatures = [ "big-parallel" "kvm" ];
|
||
# mandatoryFeatures = [ ];
|
||
# publicHostKey = "c3NoLWVkMjU1MTkgQUFBQUMzTnphQzFsWkRJMU5URTVBQUFBSUNXTk9oL3ozQjZmSXRGd2lTenlqeDBUTnIveUl6bHNsazdEeEtNcE5sdmwgcm9vdEBlbG0K";
|
||
# sshKey = "/home/felix/.ssh/id_ed25519";
|
||
}] ;
|
||
|
||
distributedBuilds = true;
|
||
settings.trusted-users = [
|
||
"root"
|
||
"@wheel"
|
||
];
|
||
};
|
||
|
||
# ------------ security -----------------------------------------------------
|
||
# Define a user account. Don't forget to set a password with ‘passwd’.
|
||
users.users.felix = {
|
||
createHome = true;
|
||
isNormalUser = true;
|
||
extraGroups = [ "wheel" "video" "audio" "dialout" ]; # wheel: Enable ‘sudo’ for the user.
|
||
group = "users";
|
||
home = "/home/felix";
|
||
shell = pkgs.fish;
|
||
};
|
||
|
||
# allow user felix to run openconnect without password
|
||
security.sudo.extraRules = [
|
||
{
|
||
users = [ "felix" ];
|
||
commands = [
|
||
{ command = "${pkgs.openconnect}/bin/openconnect"; options = [ "NOPASSWD" ]; }
|
||
];
|
||
}
|
||
];
|
||
|
||
security.pam.u2f = {
|
||
enable = true;
|
||
cue = true;
|
||
};
|
||
|
||
programs.gnupg.agent = {
|
||
enable = true;
|
||
enableSSHSupport = true;
|
||
pinentryFlavor = "curses";
|
||
};
|
||
|
||
# ------------ programs -----------------------------------------------------
|
||
programs.fish.enable = true;
|
||
programs.vim.defaultEditor = true;
|
||
|
||
# services.emacs = {
|
||
# install = true;
|
||
# enable = false;
|
||
# };
|
||
|
||
# List of packages installed in system profile.
|
||
environment.systemPackages = with pkgs; [
|
||
## basic command line tooling
|
||
wget
|
||
w3m
|
||
htop
|
||
bat
|
||
lsd
|
||
eza
|
||
ripgrep
|
||
fzf
|
||
tokei
|
||
#sshfs
|
||
ncdu
|
||
tldr
|
||
unzip
|
||
bind
|
||
inetutils
|
||
usbutils
|
||
moreutils
|
||
file
|
||
mosh
|
||
#tmux
|
||
zellij
|
||
libqalculate
|
||
## xdg-open
|
||
xdg-utils
|
||
## shell extras
|
||
nushell
|
||
## password management
|
||
pass
|
||
pinentry-curses
|
||
## admin foo
|
||
ansible
|
||
## mail
|
||
isync
|
||
msmtp
|
||
neomutt urlview
|
||
notmuch
|
||
aspell # spell checking in mail
|
||
# personal mailing
|
||
thunderbirdPackages.thunderbird-115
|
||
## Rust
|
||
rustup
|
||
cargo-flamegraph
|
||
cargo-watch
|
||
|
||
unstable.rust-analyzer
|
||
unstable.helix
|
||
|
||
## other programming languages and compilers
|
||
stack
|
||
unstable.haskell-language-server
|
||
gcc
|
||
binutils-unwrapped
|
||
gnumake
|
||
cmake
|
||
ninja
|
||
gdb
|
||
ccls
|
||
# valgrind
|
||
# heaptrack
|
||
|
||
## nix-community/comma
|
||
comma
|
||
nix-output-monitor
|
||
nix-index
|
||
nil
|
||
|
||
# provided by my own overlay
|
||
mlir
|
||
circt
|
||
llvmPackages_16.clang
|
||
llvmPackages_16.bintools
|
||
lit
|
||
|
||
## I heard you like man pages?
|
||
man-pages
|
||
## git and friends
|
||
#git
|
||
#git-doc
|
||
gitAndTools.gitFull
|
||
gitAndTools.delta
|
||
gitAndTools.gitui
|
||
## terminal, browsers, text editing, note taking
|
||
alacritty
|
||
# doesn't support the MLIR tooling from the marketplace :(
|
||
#unstable.vscodium
|
||
# TODO(feliix42): Fix at some point!
|
||
unstable.vscode.fhs
|
||
neovim
|
||
ghostwriter
|
||
firefox-wayland
|
||
unstable.obsidian
|
||
## time tracking
|
||
# watson
|
||
hledger hledger-ui hledger-web
|
||
## file managers
|
||
ranger
|
||
xfce.thunar
|
||
## file sharing
|
||
nextcloud-client
|
||
## document viewers
|
||
pdfpc
|
||
zathura
|
||
## image manipulation
|
||
gimp
|
||
inkscape
|
||
libheif
|
||
imagemagick
|
||
## LaTeX
|
||
texlive.combined.scheme-full
|
||
## Citation management
|
||
zotero
|
||
## the eternal pain continues
|
||
libreoffice-fresh
|
||
## video and media applications
|
||
unstable.zoom-us
|
||
#unstable.teams
|
||
mpv
|
||
ffmpeg-full
|
||
musikcube
|
||
## messenger
|
||
#unstable.ferdium
|
||
slack
|
||
tdesktop
|
||
signal-desktop
|
||
weechat
|
||
## networking
|
||
openconnect
|
||
];
|
||
|
||
services.dbus.enable = true;
|
||
xdg.portal = {
|
||
enable = true;
|
||
extraPortals = with pkgs; [
|
||
xdg-desktop-portal-wlr
|
||
xdg-desktop-portal-kde
|
||
xdg-desktop-portal-gtk
|
||
];
|
||
wlr = {
|
||
enable = true;
|
||
settings = {
|
||
screencast = {
|
||
output_name = "eDP-1";
|
||
max_fps = 30;
|
||
chooser_type = "simple";
|
||
chooser_cmd = "${pkgs.slurp}/bin/slurp -f %o -or";
|
||
};
|
||
};
|
||
};
|
||
};
|
||
|
||
# install fonts
|
||
fonts.fonts = with pkgs; [
|
||
font-awesome
|
||
fira
|
||
fira-code
|
||
fira-code-symbols
|
||
iosevka
|
||
roboto
|
||
roboto-mono
|
||
roboto-slab
|
||
open-sans
|
||
overpass
|
||
(nerdfonts.override {
|
||
fonts = [ "FiraCode" "DroidSansMono" "Hack" "SourceCodePro" "RobotoMono" "Ubuntu" "UbuntuMono" "Iosevka" "IosevkaTerm"];
|
||
})
|
||
];
|
||
|
||
# periodic automated mail fetching
|
||
systemd.user.services.mailfetch = {
|
||
enable = true;
|
||
description = "Automatically fetches new mails.";
|
||
wantedBy = [ "graphical-session.target" ];
|
||
after = [ "graphical-session.target" ];
|
||
serviceConfig = {
|
||
Restart = "always";
|
||
RestartSec = "60";
|
||
};
|
||
path = with pkgs; [ bash notmuch isync ];
|
||
script = ''
|
||
mbsync -a && /home/felix/.config/neomutt/notmuch-hook.sh
|
||
'';
|
||
};
|
||
|
||
# This value determines the NixOS release from which the default
|
||
# settings for stateful data, like file locations and database versions
|
||
# on your system were taken. It‘s perfectly fine and recommended to leave
|
||
# this value at the release version of the first install of this system.
|
||
# Before changing this value read the documentation for this option
|
||
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
|
||
system.stateVersion = "21.05"; # Did you read the comment?
|
||
|
||
}
|
||
|