149 lines
4.1 KiB
Nix
149 lines
4.1 KiB
Nix
{ config, inputs, outputs, pkgs, lib, ... }:
|
||
with pkgs; {
|
||
imports = [
|
||
./hardware.nix
|
||
./hardware-configuration.nix # Include the results of the hardware scan.
|
||
../common/users/m3tam3re
|
||
../common/base
|
||
./services
|
||
];
|
||
|
||
specialisation = {
|
||
"NVIDIA".configuration = {
|
||
boot.kernelParams = [ "nvidia.NVreg_PreserveVideoMemoryAllocations=1" ];
|
||
system.nixos.tags = [ "NVIDIA" ];
|
||
services.xserver.videoDrivers = [ "nvidia" ];
|
||
};
|
||
};
|
||
# Bootloader.
|
||
boot.loader.systemd-boot.enable = true;
|
||
boot.loader.systemd-boot.memtest86.enable = true;
|
||
|
||
boot.extraModulePackages = with config.boot.kernelPackages; [ v4l2loopback ];
|
||
boot.kernelModules = [ "v4l2loopback" ];
|
||
|
||
boot.extraModprobeConfig = ''
|
||
options kvm_intel nested=1
|
||
options kvm_intel emulate_invalid_guest_state=0
|
||
options kvm ignore_msrs=1
|
||
options v4l2loopback exclusive_caps=1 max_buffers=2
|
||
'';
|
||
|
||
networking = {
|
||
hostName = "m3-nix";
|
||
firewall.extraCommands =
|
||
"iptables -t raw -A OUTPUT -p udp -m udp --dport 137 -j CT --helper netbios-ns";
|
||
networkmanager.enable = true;
|
||
};
|
||
|
||
services.openssh = {
|
||
enable = true;
|
||
settings.PermitRootLogin = "no";
|
||
allowSFTP = true;
|
||
};
|
||
|
||
services.avahi = {
|
||
enable = true;
|
||
nssmdns4 = true;
|
||
publish = {
|
||
addresses = true;
|
||
workstation = true;
|
||
userServices = true;
|
||
};
|
||
};
|
||
|
||
programs.nix-ld.enable = true;
|
||
programs.nix-ld.libraries = with pkgs;
|
||
[
|
||
# Add any missing dynamic libraries for unpackaged programs
|
||
# here, NOT in environment.systemPackages
|
||
];
|
||
programs.hyprland = {
|
||
enable = true;
|
||
xwayland.enable = true;
|
||
};
|
||
programs.steam = {
|
||
enable = true;
|
||
remotePlay.openFirewall = true;
|
||
dedicatedServer.openFirewall = true;
|
||
};
|
||
programs.fish.enable = true;
|
||
programs.thunar = {
|
||
enable = true;
|
||
plugins = with pkgs.xfce; [ thunar-archive-plugin thunar-volman ];
|
||
};
|
||
age = {
|
||
secrets = {
|
||
tailscale-key.file = ../../secrets/tailscale-key.age;
|
||
wg-key.file = ../../secrets/wg-key.age;
|
||
m3tam3re-secrets = {
|
||
file = ../../secrets/m3tam3re-secrets.age;
|
||
owner = "m3tam3re";
|
||
};
|
||
};
|
||
identityPaths = [ "/root/.ssh/lkk-nix-1" ];
|
||
};
|
||
|
||
time.timeZone = "Europe/Berlin";
|
||
i18n.defaultLocale = "de_DE.utf8";
|
||
console.keyMap = "de";
|
||
|
||
# NOTE: NIX related config
|
||
|
||
programs.nh = {
|
||
enable = true;
|
||
clean.enable = true;
|
||
clean.extraArgs = "--keep-since 4d --keep 3";
|
||
flake = "/home/m3tam3re/projects/nix-configurations";
|
||
};
|
||
nix.extraOptions = ''
|
||
experimental-features = nix-command
|
||
keep-outputs = true
|
||
keep-derivations = true
|
||
'';
|
||
nix = {
|
||
settings = {
|
||
experimental-features = "nix-command flakes";
|
||
trusted-users = [ "root" "m3tam3re" ];
|
||
};
|
||
gc = {
|
||
automatic = true;
|
||
options = "--delete-older-than 30d";
|
||
};
|
||
optimise.automatic = true;
|
||
registry = (lib.mapAttrs (_: flake: { inherit flake; }))
|
||
((lib.filterAttrs (_: lib.isType "flake")) inputs);
|
||
nixPath = [ "/etc/nix/path" ];
|
||
};
|
||
|
||
environment.etc = lib.mapAttrs' (name: value: {
|
||
name = "nix/path/${name}";
|
||
value.source = value.flake;
|
||
}) config.nix.registry;
|
||
environment.systemPackages =
|
||
[ neovim nvd nix-output-monitor wally-cli nfs-utils restic sshfs ];
|
||
|
||
systemd.extraConfig = ''
|
||
DefaultTimeoutStopSec=10s
|
||
'';
|
||
nixpkgs = {
|
||
overlays = [
|
||
outputs.overlays.additions
|
||
outputs.overlays.modifications
|
||
outputs.overlays.stable-packages
|
||
];
|
||
config = {
|
||
allowUnfree = true;
|
||
nvidia.acceptLicense = true;
|
||
};
|
||
};
|
||
|
||
# This value determines the NixOS release from which the default
|
||
# settings for stateful data, like file locations and database versions
|
||
# on your system were taken. It‘s perfectly fine and recommended to leavecatenate(variables, "bootdev", bootdev)
|
||
# this value at the release version of the first install of this system.
|
||
# Before changing this value read the documentation for this option
|
||
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
|
||
system.stateVersion = "24.05"; # Did you read the comment?
|
||
}
|