diff --git a/common/common-packages.nix b/common/common-packages.nix new file mode 100644 index 0000000..2568b65 --- /dev/null +++ b/common/common-packages.nix @@ -0,0 +1,71 @@ +{ pkgs, lib, config, ... }: { + + + environment.systemPackages = with pkgs; [ + vim + wget + git + git-lfs + gnumake + zip + fish + trash-cli + tmux + zoxide + htop + unzip + tlrc + wakeonlan + neovim + pkgs-unstable.ani-cli + btop + pciutils + nodePackages.npm + nodejs + cloc + neofetch + cbonsai + cowsay + fortune + lolcat + cmatrix + inxi + age + sops + jq + onefetch + just + gh + starship + tree + ffmpeg + ]; + + programs.steam = { + enable = true; + # Open ports in the firewall for Steam Remote Play + remotePlay.openFirewall = true; + # Open ports in the firewall for Source Dedicated Server + dedicatedServer.openFirewall = true; + # Open ports in the firewall for Steam Local Network Game Transfers + localNetworkGameTransfers.openFirewall = true; + }; + + programs.gnupg.agent = { + enable = true; + enableSSHSupport = true; + }; + + programs.direnv = { + enable = true; + package = pkgs.direnv; + silent = false; + loadInNixShell = true; + direnvrcExtra = ""; + nix-direnv = { + enable = true; + package = pkgs.nix-direnv; + }; + }; + +} diff --git a/common/firefox.nix b/common/firefox.nix new file mode 100644 index 0000000..b6b90ce --- /dev/null +++ b/common/firefox.nix @@ -0,0 +1,37 @@ +{ pkgs, lib, config, ... }: { + + # Install firefox. + programs.firefox = { + enable = true; + languagePacks = [ "ja" "tr" "en-US" ]; + + # profiles.osbm = { + + + # Check about:policies#documentation for options. + policies = { + DisableTelemetry = true; + DisableFirefoxStudies = true; + EnableTrackingProtection = { + Value= true; + Locked = true; + Cryptomining = true; + Fingerprinting = true; + }; + # DisablePocket = true; + DisableFirefoxAccounts = true; + DisableAccounts = true; + DisableFirefoxScreenshots = true; + StartPage = "previous-session"; + # OverrideFirstRunPage = ""; + # OverridePostUpdatePage = ""; + # DontCheckDefaultBrowser = true; + DisplayBookmarksToolbar = "always"; # alternatives: "never" or "newtab" + # DisplayMenuBar = "default-off"; # alternatives: "always", "never" or "default-on" + # SearchBar = "unified"; # alternat + }; + }; + + + +} diff --git a/flake.nix b/flake.nix index 112d25f..b45b573 100644 --- a/flake.nix +++ b/flake.nix @@ -48,6 +48,22 @@ system-label = self.shortRev or self.dirtyShortRev or self.lastModified or "unknown"; }; }; + ymir = nixpkgs.lib.nixosSystem rec { + system = "x86_64-linux"; + modules = [ + ./hosts/ymir/configuration.nix + vscode-server.nixosModules.default + sops-nix.nixosModules.sops + # stylix.nixosModules.stylix + ]; + specialArgs = { + pkgs-unstable = import nixpkgs-unstable { + inherit system; + config.allowUnfree = true; + }; + system-label = self.shortRev or self.dirtyShortRev or self.lastModified or "unknown"; + }; + }; }; }; } diff --git a/hosts/tartarus/configuration.nix b/hosts/tartarus/configuration.nix index 7845bc3..ac4d9fd 100644 --- a/hosts/tartarus/configuration.nix +++ b/hosts/tartarus/configuration.nix @@ -1,6 +1,7 @@ # Edit this configuration file to define what should be installed on # your system. Help is available in the configuration.nix(5) man page # and in the NixOS manual (accessible by running ‘nixos-help’). + { config, pkgs, pkgs-unstable, system-label, ... }: { @@ -11,6 +12,8 @@ ../../common/i18n.nix ../../common/python.nix ../../common/arduino.nix + ../../common/firefox.nix + ../../common/common-packages.nix ]; # stylix.enable = true; @@ -73,17 +76,7 @@ pulse.enable = true; }; - programs.direnv = { - enable = true; - package = pkgs.direnv; - silent = false; - loadInNixShell = true; - direnvrcExtra = ""; - nix-direnv = { - enable = true; - package = pkgs.nix-direnv; - }; - }; + # Enable touchpad support (enabled default in most desktopManager). # services.xserver.libinput.enable = true; @@ -112,95 +105,15 @@ ]; }; - # Install firefox. - programs.firefox = { - enable = true; - languagePacks = [ "ja" "tr" "en-US" ]; - # profiles.osbm = { - - - # Check about:policies#documentation for options. - policies = { - DisableTelemetry = true; - DisableFirefoxStudies = true; - EnableTrackingProtection = { - Value= true; - Locked = true; - Cryptomining = true; - Fingerprinting = true; - }; - # DisablePocket = true; - DisableFirefoxAccounts = true; - DisableAccounts = true; - DisableFirefoxScreenshots = true; - StartPage = "previous-session"; - # OverrideFirstRunPage = ""; - # OverridePostUpdatePage = ""; - # DontCheckDefaultBrowser = true; - DisplayBookmarksToolbar = "always"; # alternatives: "never" or "newtab" - # DisplayMenuBar = "default-off"; # alternatives: "always", "never" or "default-on" - # SearchBar = "unified"; # alternat - }; - }; - - programs.steam = { - enable = true; - # Open ports in the firewall for Steam Remote Play - remotePlay.openFirewall = true; - # Open ports in the firewall for Source Dedicated Server - dedicatedServer.openFirewall = true; - # Open ports in the firewall for Steam Local Network Game Transfers - localNetworkGameTransfers.openFirewall = true; - }; environment.systemPackages = with pkgs; [ - vim - wget - git - git-lfs - gnumake - zip - fish - trash-cli - tmux - zoxide - htop - unzip - tlrc - wakeonlan - neovim - pkgs-unstable.ani-cli - btop - pciutils - nodePackages.npm - nodejs - cloc - neofetch - cbonsai - cowsay - fortune - lolcat - cmatrix - inxi - age - sops - jq - onefetch - just - gh - starship - tree - ffmpeg ]; # Some programs need SUID wrappers, can be configured further or are # started in user sessions. # programs.mtr.enable = true; - programs.gnupg.agent = { - enable = true; - enableSSHSupport = true; - }; + # List services that you want to enable: diff --git a/hosts/ymir/configuration.nix b/hosts/ymir/configuration.nix new file mode 100644 index 0000000..1d1e279 --- /dev/null +++ b/hosts/ymir/configuration.nix @@ -0,0 +1,170 @@ +# Edit this configuration file to define what should be installed on +# your system. Help is available in the configuration.nix(5) man page +# and in the NixOS manual (accessible by running ‘nixos-help’). + +{ config, pkgs, pkgs-unstable, system-label, ... }: + +{ + imports = [ + ./hardware-configuration.nix + ../../common/fonts.nix + ../../common/nix-settings.nix + ../../common/i18n.nix + ../../common/python.nix + ../../common/arduino.nix + ../../common/firefox.nix + ../../common/common-packages.nix + ]; + + # Bootloader. + boot.loader.systemd-boot.enable = true; + boot.loader.efi.canTouchEfiVariables = true; + + boot.initrd.luks.devices."luks-b84e6223-825f-4944-a6fe-16368b75c6de".device = "/dev/disk/by-uuid/b84e6223-825f-4944-a6fe-16368b75c6de"; + networking.hostName = "ymir"; # Define your hostname. + # networking.wireless.enable = true; # Enables wireless support via wpa_supplicant. + + # Configure network proxy if necessary + # networking.proxy.default = "http://user:password@proxy:port/"; + # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain"; + + # Enable networking + networking.networkmanager.enable = true; + + + # hardware.nvidia.package = config.boot.kernelPackages.nvidiaPackages.stable; + # Enable OpenGL + hardware.graphics = { + enable = true; + }; + + # Load nvidia driver for Xorg and Wayland + services.xserver.videoDrivers = ["nvidia"]; + + hardware.nvidia = { + + # Modesetting is required. + modesetting.enable = true; + + # Nvidia power management. Experimental, and can cause sleep/suspend to fail. + # Enable this if you have graphical corruption issues or application crashes after waking + # up from sleep. This fixes it by saving the entire VRAM memory to /tmp/ instead + # of just the bare essentials. + powerManagement.enable = false; + + # Fine-grained power management. Turns off GPU when not in use. + # Experimental and only works on modern Nvidia GPUs (Turing or newer). + powerManagement.finegrained = false; + + # Use the NVidia open source kernel module (not to be confused with the + # independent third-party "nouveau" open source driver). + # Support is limited to the Turing and later architectures. Full list of + # supported GPUs is at: + # https://github.com/NVIDIA/open-gpu-kernel-modules#compatible-gpus + # Only available from driver 515.43.04+ + # Currently alpha-quality/buggy, so false is currently the recommended setting. + open = false; + + # Enable the Nvidia settings menu, + # accessible via `nvidia-settings`. + nvidiaSettings = true; + + # Optionally, you may need to select the appropriate driver version for your specific GPU. + package = config.boot.kernelPackages.nvidiaPackages.stable; + }; + + + # Enable the X11 windowing system. + # You can disable this if you're only using the Wayland session. + services.xserver.enable = true; + + # Enable the KDE Plasma Desktop Environment. + services.displayManager.sddm.enable = true; + services.desktopManager.plasma6.enable = true; + + # Enable CUPS to print documents. + services.printing.enable = true; + + # Enable sound with pipewire. + hardware.pulseaudio.enable = false; + security.rtkit.enable = true; + services.pipewire = { + enable = true; + alsa.enable = true; + alsa.support32Bit = true; + pulse.enable = true; + # If you want to use JACK applications, uncomment this + #jack.enable = true; + + # use the example session manager (no others are packaged yet so this is enabled by default, + # no need to redefine it in your config for now) + #media-session.enable = true; + }; + + # Enable touchpad support (enabled default in most desktopManager). + # services.xserver.libinput.enable = true; + + # Define a user account. Don't forget to set a password with ‘passwd’. + virtualisation.docker.enable = true; + + users.users.osbm = { + isNormalUser = true; + description = "osbm"; + extraGroups = [ "networkmanager" "wheel" "docker" ]; + packages = with pkgs; [ + kdePackages.kate + vscode + pkgs-unstable.discord # discord sucks + alacritty + pkgs-unstable.obsidian + mpv + libreoffice + blender + gimp + kitty + obs-studio + audacity + pkgs-unstable.qbittorrent + arduino-ide + ]; + }; + + + + nixpkgs.config.allowUnfree = true; + + + # List packages installed in system profile. To search, run: + # $ nix search wget + environment.systemPackages = with pkgs; [ + # vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default. + ]; + + # Some programs need SUID wrappers, can be configured further or are + # started in user sessions. + # programs.mtr.enable = true; + # programs.gnupg.agent = { + # enable = true; + # enableSSHSupport = true; + # }; + + # List services that you want to enable: + + # Enable the OpenSSH daemon. + services.openssh.enable = true; + + # Open ports in the firewall. + # networking.firewall.allowedTCPPorts = [ ... ]; + # networking.firewall.allowedUDPPorts = [ ... ]; + # Or disable the firewall altogether. + # networking.firewall.enable = false; + + # This value determines the NixOS release from which the default + # settings for stateful data, like file locations and database versions + # on your system were taken. It‘s perfectly fine and recommended to leave + # this value at the release version of the first install of this system. + # Before changing this value read the documentation for this option + # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html). + system.stateVersion = "24.11"; # Did you read the comment? + +} diff --git a/hosts/ymir/hardware-configuration.nix b/hosts/ymir/hardware-configuration.nix new file mode 100644 index 0000000..08a4429 --- /dev/null +++ b/hosts/ymir/hardware-configuration.nix @@ -0,0 +1,43 @@ +# Do not modify this file! It was generated by ‘nixos-generate-config’ +# and may be overwritten by future invocations. Please make changes +# to /etc/nixos/configuration.nix instead. +{ config, lib, pkgs, modulesPath, ... }: + +{ + imports = + [ (modulesPath + "/installer/scan/not-detected.nix") + ]; + + boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod" ]; + boot.initrd.kernelModules = [ ]; + boot.kernelModules = [ "kvm-intel" ]; + boot.extraModulePackages = [ ]; + + fileSystems."/" = + { device = "/dev/disk/by-uuid/bfbd04d5-49bb-4571-8897-d36b2c679a6c"; + fsType = "ext4"; + }; + + boot.initrd.luks.devices."luks-58144581-4049-4169-b8a9-4da19129416a".device = "/dev/disk/by-uuid/58144581-4049-4169-b8a9-4da19129416a"; + + fileSystems."/boot" = + { device = "/dev/disk/by-uuid/7F17-2E5B"; + fsType = "vfat"; + options = [ "fmask=0077" "dmask=0077" ]; + }; + + swapDevices = + [ { device = "/dev/disk/by-uuid/a07d03b7-c2fb-40f9-89b0-d8f6db9d0e0e"; } + ]; + + # Enables DHCP on each ethernet and wireless interface. In case of scripted networking + # (the default) this is the recommended approach. When using systemd-networkd it's + # still possible to use this option, but it's recommended to use it in conjunction + # with explicit per-interface declarations with `networking.interfaces..useDHCP`. + networking.useDHCP = lib.mkDefault true; + # networking.interfaces.enp3s0.useDHCP = lib.mkDefault true; + # networking.interfaces.wlo1.useDHCP = lib.mkDefault true; + + nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux"; + hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware; +}