organize configuration by hardware machine
This commit is contained in:
Haak Saxberg
parent
378a4dcef7
commit
15dfc5c9b7
6 changed files with 118 additions and 4 deletions
|
|
@ -1,187 +0,0 @@
|
|||
# Edit this configuration file to define what should be installed on
|
||||
# your system. Help is available in the configuration.nix(5) man page
|
||||
# and in the NixOS manual (accessible by running ‘nixos-help’).
|
||||
|
||||
{ config, pkgs, ... }:
|
||||
|
||||
{
|
||||
imports =
|
||||
[
|
||||
# Include the results of the hardware scan.
|
||||
/etc/nixos/hardware-configuration.nix
|
||||
];
|
||||
|
||||
# Use the systemd-boot EFI boot loader.
|
||||
boot.loader.systemd-boot.enable = true;
|
||||
# do not fill the bootloader space with generations until it pops; only keep
|
||||
# a reasonable number around.
|
||||
boot.loader.systemd-boot.configurationLimit = 42;
|
||||
# WiFi support requires kernel 5.13
|
||||
boot.kernelPackages = pkgs.linuxPackages_latest;
|
||||
boot.loader.efi.canTouchEfiVariables = true;
|
||||
# Enable deep sleep mode
|
||||
boot.kernelParams = [ "mem_sleep_default=deep" ];
|
||||
# Be able to track CPU temperature.
|
||||
boot.kernelModules = [ "coretemp" ];
|
||||
|
||||
hardware.bluetooth.enable = true;
|
||||
networking.hostName = "framework"; # Define your hostname.
|
||||
networking.networkmanager.enable = true;
|
||||
# Create entries for /etc/wpa_supplicant.conf by running `wpa_passphrase SSID PASSWORD`
|
||||
# networking.wireless.enable = true; # Enables wireless support via wpa_supplicant.
|
||||
|
||||
# The global useDHCP flag is deprecated, therefore explicitly set to false here.
|
||||
# Per-interface useDHCP will be mandatory in the future, so this generated config
|
||||
# replicates the default behaviour.
|
||||
networking.useDHCP = false;
|
||||
networking.interfaces.wlp170s0.useDHCP = true;
|
||||
|
||||
# Configure network proxy if necessary
|
||||
# networking.proxy.default = "http://user:password@proxy:port/";
|
||||
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
|
||||
|
||||
# Select internationalisation properties.
|
||||
i18n = {
|
||||
defaultLocale = "en_US.UTF-8";
|
||||
};
|
||||
console = {
|
||||
font = "Lat2-Terminus16";
|
||||
keyMap = "us";
|
||||
};
|
||||
|
||||
|
||||
# Set your time zone.
|
||||
time.timeZone = "America/Los_Angeles";
|
||||
|
||||
# List packages installed in system profile. To search, run:
|
||||
# $ nix search wget
|
||||
environment.systemPackages = with pkgs; [
|
||||
cachix
|
||||
nixops
|
||||
vim
|
||||
wget
|
||||
zsh
|
||||
];
|
||||
|
||||
nixpkgs.config.allowUnfree = true;
|
||||
|
||||
# Open ports in the firewall.
|
||||
networking.firewall = {
|
||||
allowedTCPPorts = [
|
||||
631 # CUPs port for printing
|
||||
4000 # phoenix development port
|
||||
];
|
||||
allowedUDPPorts = [
|
||||
631
|
||||
4000
|
||||
];
|
||||
};
|
||||
# Or disable the firewall altogether.
|
||||
# networking.firewall.enable = false;
|
||||
|
||||
|
||||
# Some programs need SUID wrappers, can be configured further or are
|
||||
# started in user sessions.
|
||||
# programs.mtr.enable = true;
|
||||
programs.gnupg.agent = { enable = true; enableSSHSupport = true; };
|
||||
|
||||
# enable ADB for connecting to android phones
|
||||
programs.adb.enable = true;
|
||||
|
||||
# List services that you want to enable:
|
||||
services.dbus.packages = with pkgs; [ dconf ];
|
||||
|
||||
# Enable fingerprint reading
|
||||
services.fprintd.enable = true;
|
||||
|
||||
# Enable the OpenSSH daemon.
|
||||
# services.openssh.enable = true;
|
||||
|
||||
# Enable CUPS to print documents.
|
||||
services.printing = {
|
||||
enable = true;
|
||||
drivers = [ pkgs.hplip ];
|
||||
};
|
||||
# enable avahi for printer discovery
|
||||
services.avahi = {
|
||||
enable = true;
|
||||
nssmdns = true;
|
||||
};
|
||||
|
||||
# VPN setup
|
||||
services.mullvad-vpn.enable = true;
|
||||
networking.wireguard.enable = true;
|
||||
|
||||
|
||||
# Enable sound.
|
||||
# sound.enable turns on pulseaudio, which conflicts with pipwire. As
|
||||
# Pipewire is now enabled by default (??) we should not enable the default
|
||||
# sound provider.
|
||||
# https://github.com/NixOS/nixpkgs/issues/163066
|
||||
sound.enable = true;
|
||||
# hardware.pulseaudio.enable = false;
|
||||
# security.rtkit.enable = true;
|
||||
services.pipewire = {
|
||||
enable = false;
|
||||
alsa.enable = true;
|
||||
jack.enable = true;
|
||||
pulse.enable = true;
|
||||
};
|
||||
services.gnome.gnome-remote-desktop.enable = false;
|
||||
|
||||
# Enable touchpad support.
|
||||
services.xserver.libinput.enable = true;
|
||||
|
||||
services.xserver = {
|
||||
# Enable the X11 windowing system.
|
||||
enable = true;
|
||||
|
||||
# Enable the GNOME Desktop Environment.
|
||||
displayManager.gdm.enable = true;
|
||||
desktopManager.gnome.enable = true;
|
||||
|
||||
layout = "us";
|
||||
# run the following command to swap escape and caps-lock keys, like a
|
||||
# civilized person:
|
||||
xkbOptions = "caps:swapescape";
|
||||
};
|
||||
|
||||
services.syncthing = {
|
||||
enable = true;
|
||||
user = "haak";
|
||||
dataDir = "/home/haak/synced";
|
||||
configDir = "/home/haak/synced/.config/syncthing";
|
||||
cert = if builtins.pathExists "/home/haak/dotfiles/secrets//syncthing/cert.pem" then "/home/haak/dotfiles/secrets//syncthing/cert.pem" else null;
|
||||
key = if builtins.pathExists "/home/haak/dotfiles/secrets//syncthing/key.pem" then "/home/haak/dotfiles/secrets//syncthing/key.pem" else null;
|
||||
};
|
||||
|
||||
location.provider = "geoclue2";
|
||||
|
||||
# Define a user account. Don't forget to set a password with ‘passwd’.
|
||||
users.users.haak = {
|
||||
isNormalUser = true;
|
||||
extraGroups = [
|
||||
"wheel" # Enable ‘sudo’ for the user.
|
||||
"networkmanager" # Allow the user to manage networks
|
||||
"adbusers" # allow ADB use
|
||||
];
|
||||
};
|
||||
|
||||
users.extraUsers.haak = {
|
||||
shell = pkgs.zsh;
|
||||
};
|
||||
|
||||
nix.settings.trusted-users = [ "root" "haak" ];
|
||||
|
||||
# This value determines the NixOS release with which your system is to be
|
||||
# compatible, in order to avoid breaking some software such as database
|
||||
# servers. You should change this only after NixOS release notes say you
|
||||
# should.
|
||||
system.stateVersion = "21.05"; # Did you read the comment?
|
||||
|
||||
# On 2021-12-01 or thereabouts, a new generation was created that failed to
|
||||
# boot; that's a little worrying!
|
||||
system.autoUpgrade.enable = false;
|
||||
}
|
||||
|
||||
|
||||
Loading…
Add table
Add a link
Reference in a new issue