feat: rename server and default

This commit is contained in:
Noa Aarts 2024-08-31 18:38:39 +02:00
parent c4e70114ac
commit 40898c5a14
Signed by: noa
GPG key ID: 1850932741EFF672
10 changed files with 2 additions and 2 deletions

View file

@ -0,0 +1,393 @@
# Edit this configuration file to define what should be installed on
# your system.Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running nixos-help).
{ config, pkgs, inputs, nix-colors, lib, ... }:
{
imports =
[
# Include the results of the hardware scan.
./hardware-configuration.nix
../../modules/games/steam.nix
../../modules/plasma
../../common
];
hardware = {
bluetooth = {
enable = true;
powerOnBoot = true;
};
enableRedistributableFirmware = true;
enableAllFirmware = true;
graphics = {
enable = true;
enable32Bit = true;
};
nvidia = {
modesetting.enable = true;
powerManagement = {
enable = true;
finegrained = false;
};
open = false;
nvidiaSettings = true;
package = config.boot.kernelPackages.nvidiaPackages.beta;
};
};
# Allow unfree packages
nixpkgs.config = {
allowUnfree = true;
nvidia.acceptLicense = true;
};
nixpkgs.overlays = [ ];
networking = {
hostName = "lambdaOS"; # Define your hostname.
};
networking.networkmanager.enable = true;
programs.nm-applet.enable = true;
nix = {
settings = {
# auto optimise every so often
# auto-optimise-store = true;
experimental-features = [ "nix-command" "flakes" ];
substituters = [
"https://hyprland.cachix.org"
"https://cache.iog.io"
"https://cuda-maintainers.cachix.org"
];
trusted-public-keys = [
"hyprland.cachix.org-1:a7pgxzMz7+chwVL3/pzj6jIBMioiJM7ypFP8PwtkuGc="
"hydra.iohk.io:f/Ea+s+dFdN+3Y/G+FDgSq+a5NEWhJGzdjvKNGv0/EQ="
"cuda-maintainers.cachix.org-1:0dq3bujKpuEPMCX6U4WylrUDZ9JyUG0VpVZa7CNfq5E="
];
allowed-uris = [
"github:"
"gitlab:"
];
};
optimise.automatic = true;
gc = {
automatic = false;
dates = "weekly";
options = "--delete-older-than 7d";
};
};
# Set your time zone.
time.timeZone = "Europe/Amsterdam";
# Configure console keymap
console.keyMap = "us-acentos";
# Define a user account. Don't forget to set a password with passwd.
users.users = {
root = {
hashedPassword = "!";
};
noa = {
isNormalUser = true;
description = "Noa Aarts";
extraGroups = [ "networkmanager" "wheel" "docker" "wireshark" ];
hashedPassword = "$6$rounds=512400$Zip3xoK2zcoR4qEL$N13YTHO5tpWfx2nKb1sye.ZPwfoRtMQ5f3YrMZqKzzoFoSSHHJ.l5ulCEa9HygFxZmBtPnwlseFEtl8ERnwF50";
openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBFemc4Pzp7I0y8FHxgRO/c/ReBmXuqXR6CWqbhiQ+0t noa@Noas_flaptop"
];
};
};
home-manager = {
extraSpecialArgs = {
inherit inputs;
inherit nix-colors;
};
users = {
"noa" = import ./home.nix;
"root" = import ./root.nix;
};
};
# TODO: find list of fonts to install
fonts.packages = with pkgs; [
font-awesome
noto-fonts
fira-code
fira-code-symbols
liberation_ttf
maple-mono-NF
];
# Some programs need SUID wrappers, can be configured further or are
# started in user sessions.
# programs.mtr.enable = true;
programs.gnupg.agent = {
enable = true;
enableSSHSupport = true;
pinentryPackage = pkgs.pinentry-curses;
};
xdg.portal.enable = true;
programs = {
zsh.enable = true;
hyprland = {
enable = true;
package = inputs.hyprland.packages.${pkgs.system}.hyprland;
};
nix-ld.enable = true;
nix-ld.libraries = with pkgs; [
wayland
];
wireshark.enable = true;
};
modules = {
games.steam.enable = true;
plasma.enable = true;
};
users.defaultUserShell = pkgs.zsh;
security.rtkit.enable = true;
boot = rec {
kernelPackages = pkgs.linuxPackages_latest;
extraModulePackages = with kernelPackages; [
v4l2loopback
];
consoleLogLevel = 0;
initrd.verbose = false;
plymouth = rec {
enable = true;
theme = "colorful";
themePackages = [ (pkgs.adi1090x-plymouth-themes.override { selected_themes = [ theme ]; }) ];
};
kernelParams = [
"quiet"
"splash"
"boot.shell_on_fail"
"i915.fastboot=1"
"loglevel=3"
"rd.systemd.show_status=false"
"rd.udev.log_level=3"
"udev.log_priority=3"
];
kernelModules = [
"v4l2loopback"
"nct6775"
"k10temp"
];
extraModprobeConfig = ''
options v4l2loopback devices=1 video_nr=2 card_label="OBS Cam" exclusive_caps=1
'';
loader = {
timeout = 3;
efi.canTouchEfiVariables = true;
systemd-boot = {
enable = true;
editor = false;
configurationLimit = 100;
};
};
};
services = {
pcscd.enable = true; # for yubikey
pipewire = {
enable = true;
alsa.enable = true;
alsa.support32Bit = true;
pulse.enable = true;
jack.enable = true;
};
nix-serve = {
enable = true;
secretKeyFile = "/var/cache-priv-key.pem";
bindAddress = "127.0.0.1";
port = 22332;
};
hydra = {
enable = false;
hydraURL = "http://localhost:3000";
notificationSender = "hydra@localhost";
buildMachinesFiles = [ ];
useSubstitutes = true;
};
fail2ban.enable = true;
greetd = {
enable = false;
settings = rec {
initial_session = {
command = "${pkgs.hyprland}/bin/Hyprland";
user = "noa";
};
default_session = initial_session;
};
};
hardware = {
openrgb = {
enable = true;
};
};
openssh = {
enable = true;
settings.PasswordAuthentication = false;
settings.KbdInteractiveAuthentication = false;
};
monado = {
enable = true;
defaultRuntime = true;
};
xserver = {
enable = true;
xkb = {
layout = "us";
variant = "intl";
};
videoDrivers = [ "nvidia" ];
};
displayManager.sddm = {
enable = true;
wayland.enable = true;
};
flatpak.enable = true;
udev.packages = [ pkgs.yubikey-personalization ];
nginx =
{
enable = true;
package = pkgs.nginx.override {
modules = [ pkgs.nginxModules.brotli ];
};
recommendedOptimisation = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
recommendedBrotliSettings = true;
sslCiphers = "AES256+EECDH:AES256+EDH:!aNULL";
virtualHosts = {
"noasserver" = {
locations."/".proxyPass = "http://127.0.0.1:22332";
};
};
};
};
systemd = {
timers."update-flake" = {
wantedBy = [ "timers.target" ];
timerConfig = {
OnCalendar = "daily";
Persistent = true;
};
};
services = {
"update-flake" = {
path = with pkgs; [
git
openssh
nix
nixos-rebuild
];
script = ''
[[ ! -d '/root/nixconf' ]] && cd /root && git clone git@github.com:itepastra/nixconf
cd /root/nixconf
git pull
nix flake update --commit-lock-file /root/nixconf
nixos-rebuild boot --flake .
git push
'';
serviceConfig = {
Type = "oneshot";
User = "root";
RemainAfterExit = true;
};
wants = [
"network-online.target"
];
after = [
"network-online.target"
];
restartIfChanged = false;
};
};
user.services.polkit-gnome-authentication-agent-1 = {
description = "polkit-gnome-authentication-agent-1";
wantedBy = [ "graphical-session.target" ];
wants = [ "graphical-session.target" ];
after = [ "graphical-session.target" ];
serviceConfig = {
Type = "simple";
ExecStart = "${pkgs.polkit_gnome}/libexec/polkit-gnome-authentication-agent-1";
Restart = "on-failure";
RestartSec = 1;
TimeoutStopSec = 10;
};
};
};
virtualisation.docker = {
enable = true;
package = pkgs.docker_27;
rootless = {
enable = true;
setSocketVariable = true;
};
};
security = {
polkit.enable = true;
};
# Open ports in the firewall.
networking.firewall.allowedTCPPorts = [
80 # nix-serve
53317 # Localsend
7791 # Pixelflut
38281 # Archipelago
22000 # syncthing
2283 # immich
];
networking.firewall.allowedUDPPorts = [
53317
38281 # Archipelago
22000 # syncthing
21027 # syncthing
];
# Or disable the firewall altogether.
# networking.firewall.enable = false;
# This value determines the NixOS release from which the default
# settings for stateful data, like file locations and database versions
# on your system were taken. Its perfectly fine and recommended to leave
# this value at the release version of the first install of this system.
# Before changing this value read the documentation for this option
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
system.stateVersion = "23.11"; # Did you read the comment?
}

View file

@ -0,0 +1,46 @@
# Do not modify this file! It was generated by nixos-generate-config
# and may be overwritten by future invocations. Please make changes
# to /etc/nixos/configuration.nix instead.
{ config, lib, pkgs, modulesPath, ... }:
{
imports =
[
(modulesPath + "/installer/scan/not-detected.nix")
];
boot.initrd.availableKernelModules = [ "nvme" "ahci" "xhci_pci" "usbhid" "usb_storage" "sd_mod" ];
boot.initrd.kernelModules = [ ];
boot.kernelModules = [ "kvm-amd" ];
boot.extraModulePackages = [ ];
fileSystems."/" =
{
device = "/dev/disk/by-uuid/263716dd-52cb-4a91-ba0b-e39e492ed0e5";
fsType = "ext4";
};
fileSystems."/boot" =
{
device = "/dev/disk/by-uuid/B08E-916D";
fsType = "vfat";
};
fileSystems."/home/noa/Pictures/library" =
{
device = "/dev/disk/by-uuid/93a74173-8719-4be2-86b3-dc80588b9cf8";
fsType = "ext4";
};
swapDevices = [ ];
# Enables DHCP on each ethernet and wireless interface. In case of scripted networking
# (the default) this is the recommended approach. When using systemd-networkd it's
# still possible to use this option, but it's recommended to use it in conjunction
# with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
networking.useDHCP = lib.mkDefault true;
# networking.interfaces.enp39s0.useDHCP = lib.mkDefault true;
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
}

188
hosts/lambdaos/home.nix Normal file
View file

@ -0,0 +1,188 @@
{ config, pkgs, inputs, lib, ... }:
{
imports =
[
../../modules/hyprland.nix
../../modules/games
../../modules/applications
../../common/nvim/nvim.nix
../../common/discord/discord.nix
../../common/spotify.nix
];
# Home Manager needs a bit of information about you and the paths it should
# manage.
home.username = "noa";
home.homeDirectory = "/home/noa";
# This value determines the Home Manager release that your configuration is
# compatible with. This helps avoid breakage when a new Home Manager release
# introduces backwards incompatible changes.
#
# You should not change this value, even if you update Home Manager. If you do
# want to update the value, then make sure to first check the Home Manager
# release notes.
home.stateVersion = "23.11"; # Please read the comment before changing.
nixpkgs.config.allowUnfree = true;
modules = {
hyprland.enable = true;
games.enable = true;
apps = {
enable = true;
git = {
name = "Noa Aarts";
email = "noa@voorwaarts.nl";
do_sign = true;
};
thunderbird = {
enable = true;
};
};
};
# The home.packages option allows you to install Nix packages into your
# environment.
home.packages = with pkgs; [
file
unzip
zip
dig
mtr
obs-studio
wayvnc
signal-desktop
btop
dconf
pipewire
lsd
localsend
blueberry
qbittorrent
planify
keepassxc
yubikey-manager-qt
yubico-piv-tool
];
# Home Manager is pretty good at managing dotfiles. The primary way to manage
# plain files is through 'home.file'.
home.file = {
# # Building this configuration will create a copy of 'dotfiles/screenrc' in
# # the Nix store. Activating the configuration will then make '~/.screenrc' a
# # symlink to the Nix store copy.
# ".screenrc".source = dotfiles/screenrc;
# # You can also set the file content immediately.
# ".gradle/gradle.properties".text = ''
# org.gradle.console=verbose
# org.gradle.daemon.idletimeout=3600000
# '';
"ykcs/ykcs11.so".source = "${pkgs.yubico-piv-tool}/lib/libykcs11.so";
};
# Home Manager can also manage your environment variables through
# 'home.sessionVariables'. If you don't want to manage your shell through Home
# Manager then you have to manually source 'hm-session-vars.sh' located at
# either
#
# ~/.nix-profile/etc/profile.d/hm-session-vars.sh
#
# or
#
# ~/.local/state/nix/profiles/profile/etc/profile.d/hm-session-vars.sh
#
# or
#
# /etc/profiles/per-user/noa/etc/profile.d/hm-session-vars.sh
#
home.sessionVariables = {
EDITOR = "nvim";
TERM = "kitty";
GDK_BACKEND = "wayland,x11";
QT_QPA_PLATFORM = "wayland;xcb";
CLUTTER_BACKEND = "wayland";
XDG_CURRENT_DESKTOP = "Hyprland";
XDG_SESSION_TYPE = "wayland";
XDG_SESSION_DESKTOP = "Hyprland";
WLR_NO_HARDWARE_CURSORS = "1";
};
xdg = {
enable = true;
userDirs = {
enable = true;
createDirectories = true;
};
};
dconf = {
enable = true;
settings = {
"org/gnome/desktop/interface" = {
color-scheme = "prefer-dark";
};
};
};
gtk = {
enable = true;
gtk2.extraConfig = ''
gtk-enable-animations=1
gtk-primary-button-warps-slider=1
gtk-toolbar-style=3
gtk-menu-images=1
gtk-button-images=1
gtk-sound-theme-name="ocean"
gtk-font-name="Noto Sans, 10"
'';
theme = {
name = "Adwaita-dark";
package = pkgs.gnome-themes-extra;
};
};
# Let Home Manager install and manage itself.
programs = {
home-manager.enable = true;
zsh.shellAliases.bzzt = ''nix-shell -p mpv --command "mpv ~/Videos/BZZZM.mp4"'';
};
services.syncthing = {
enable = true;
};
home.pointerCursor =
let
getFrom = url: hash: name: {
gtk.enable = true;
x11.enable = true;
name = name;
size = 32;
package =
pkgs.runCommand "moveUp" { } ''
mkdir -p $out/share/icons
ln -s ${pkgs.fetchzip {
url = url;
hash = hash;
}} $out/share/icons/${name}
'';
};
in
getFrom
"https://github.com/ful1e5/Bibata_Cursor_Rainbow/releases/download/v1.1.2/Bibata-Rainbow-Modern.tar.gz"
"sha256-Ps+IKPwQoRwO9Mqxwc/1nHhdBT2R25IoeHLKe48uHB8="
"Bibata-Rainbow-Modern";
}

97
hosts/lambdaos/root.nix Normal file
View file

@ -0,0 +1,97 @@
{ config, pkgs, inputs, ... }:
{
imports = [
../../modules/applications
];
# Home Manager needs a bit of information about you and the paths it should
# manage.
home.username = "root";
home.homeDirectory = "/root";
# This value determines the Home Manager release that your configuration is
# compatible with. This helps avoid breakage when a new Home Manager release
# introduces backwards incompatible changes.
#
# You should not change this value, even if you update Home Manager. If you do
# want to update the value, then make sure to first check the Home Manager
# release notes.
home.stateVersion = "23.11"; # Please read the comment before changing.
nixpkgs.config.allowUnfree = true;
# The home.packages option allows you to install Nix packages into your
# environment.
home.packages = with pkgs; [
file
unzip
zip
dig
mtr
kitty
lsd
];
modules = {
apps = {
enable = true;
git = {
name = "Noa Aarts";
email = "noa@voorwaarts.nl";
};
};
};
# Home Manager is pretty good at managing dotfiles. The primary way to manage
# plain files is through 'home.file'.
home.file = {
# # Building this configuration will create a copy of 'dotfiles/screenrc' in
# # the Nix store. Activating the configuration will then make '~/.screenrc' a
# # symlink to the Nix store copy.
# ".screenrc".source = dotfiles/screenrc;
# # You can also set the file content immediately.
# ".gradle/gradle.properties".text = ''
# org.gradle.console=verbose
# org.gradle.daemon.idletimeout=3600000
# '';
};
# Home Manager can also manage your environment variables through
# 'home.sessionVariables'. If you don't want to manage your shell through Home
# Manager then you have to manually source 'hm-session-vars.sh' located at
# either
#
# ~/.nix-profile/etc/profile.d/hm-session-vars.sh
#
# or
#
# ~/.local/state/nix/profiles/profile/etc/profile.d/hm-session-vars.sh
#
# or
#
# /etc/profiles/per-user/noa/etc/profile.d/hm-session-vars.sh
#
home.sessionVariables = {
EDITOR = "nvim";
TERM = "kitty";
};
xdg.userDirs.enable = true;
xdg.userDirs.createDirectories = true;
dconf = {
enable = true;
settings = {
"org/gnome/desktop/interface" = {
color-scheme = "prefer-dark";
};
};
};
# Let Home Manager install and manage itself.
programs.home-manager.enable = true;
}