nixos-config/hosts/cave/configuration.nix

138 lines
2.7 KiB
Nix
Raw Normal View History

2024-04-11 13:16:26 +02:00
{
pkgs,
lib,
2024-04-23 17:29:48 +02:00
inputs,
config,
2024-04-11 13:16:26 +02:00
...
2024-04-22 05:51:31 +02:00
}: let
sshKeys = import ../../crypto/ssh-keys.nix;
in {
2024-04-11 13:16:26 +02:00
imports = [
2024-06-07 18:06:59 +02:00
# Defaults
2024-04-11 13:16:26 +02:00
./hardware-configuration.nix
2024-04-22 20:48:35 +02:00
../../common/base.nix
2024-04-17 20:39:12 +02:00
../../common/full-install.nix
2024-04-11 13:16:26 +02:00
2024-06-07 18:06:59 +02:00
# Localization
2024-04-11 13:16:26 +02:00
../../common/locales/en.nix
2024-04-18 21:10:13 +02:00
../../common/locales/fr-keymap.nix
2024-04-22 06:39:13 +02:00
2024-06-07 18:06:59 +02:00
# Hardware
2025-01-23 20:22:39 +01:00
# ../../common/hardware/tpm2.nix
2024-04-22 21:24:54 +02:00
../../common/hardware/wireless.nix
# ../../common/hardware/ssd.nix
2024-04-22 05:51:31 +02:00
../../common/hardware/btrfs.nix
../../common/components/lanzaboote.nix
2024-04-11 13:16:26 +02:00
2024-06-07 18:06:59 +02:00
# Software components
../../common/components/de/greetd.nix
../../common/components/de/sway.nix
2024-04-22 21:24:54 +02:00
../../common/components/de/plasma6.nix
2024-04-11 13:16:26 +02:00
2024-06-07 18:06:59 +02:00
# Programs
2024-04-22 20:48:35 +02:00
../../common/programs/steam.nix
2024-05-24 12:57:53 +02:00
2024-06-07 18:06:59 +02:00
# Services
2024-08-10 19:23:59 +02:00
# ../../common/services/auditd.nix
2025-01-23 20:22:39 +01:00
# ../../common/services/nix-gc.nix
2024-06-26 10:40:08 +02:00
../../common/services/opensnitch.nix
2024-08-10 19:23:59 +02:00
# ../../common/services/adguardhome.nix
2024-04-22 20:48:35 +02:00
../../common/services/syncthing.nix
../../common/services/usbguard.nix
2024-05-24 12:51:50 +02:00
../../common/services/autoupgrade.nix
2024-04-18 21:10:13 +02:00
2024-06-07 18:06:59 +02:00
# Home-manager
2024-04-23 17:29:48 +02:00
../../home/tasia/home.nix
2024-06-07 18:06:59 +02:00
2024-08-10 19:23:59 +02:00
inputs.agenix.nixosModules.default
../../common/components/wifi-secrets.nix
2025-01-23 20:22:39 +01:00
# inputs.thymis.nixosModules.thymis-controller
2024-06-07 18:06:59 +02:00
# Personal modules
2024-06-07 18:14:47 +02:00
# ../../modules/nixos/tildefriends.nix
2024-10-04 20:25:54 +02:00
./yubikey.nix
./rtl-sdr.nix
2025-01-28 10:01:00 +01:00
];
2024-06-07 18:06:59 +02:00
2024-04-11 13:16:26 +02:00
networking = {
2025-01-24 11:31:28 +01:00
hostName = "cave";
2024-04-11 13:16:26 +02:00
2024-04-18 21:10:13 +02:00
firewall = {
allowedTCPPorts = [
2024-06-01 00:29:03 +02:00
# 8080 # ?
# 80
# 443
# 3001
# 8000
2024-06-07 18:06:59 +02:00
# 8008 # ssb
# 12345 # tildefriends
# 13378 # audiobookshelf
2024-04-18 21:10:13 +02:00
];
allowedUDPPorts = [
2024-06-07 18:06:59 +02:00
# 8080 # ?
2024-04-18 21:10:13 +02:00
];
};
2024-04-11 13:16:26 +02:00
};
2024-04-23 17:29:48 +02:00
users.users.tasia.openssh.authorizedKeys.keys = [
2025-01-24 11:31:28 +01:00
sshKeys.tasia.cave
2024-04-23 17:29:48 +02:00
];
2024-04-11 13:16:26 +02:00
2024-04-18 21:10:13 +02:00
virtualisation.docker.enable = true;
2024-05-23 13:45:32 +02:00
services.flatpak.enable = true;
2024-04-11 13:16:26 +02:00
2024-04-11 17:08:50 +02:00
services.syncthing = {
2024-04-22 06:39:13 +02:00
user = "tasia";
dataDir = lib.mkForce "/home/tasia/Sync/data";
configDir = lib.mkForce "/home/tasia/Sync/configuration";
2024-04-11 17:08:50 +02:00
};
2024-04-11 13:16:26 +02:00
environment.systemPackages = with pkgs; [
inputs.tildefriends.packages.${system}.default
2024-04-23 18:26:19 +02:00
osu-lazer-bin
prismlauncher
2024-06-07 18:14:47 +02:00
2024-06-24 10:16:41 +02:00
sherlock
whois
android-tools
2024-06-28 10:53:34 +02:00
ripgrep
lsd
viu
logseq
2024-07-31 16:27:07 +02:00
nix-tree
# android-studio
2024-08-06 18:44:43 +02:00
lutris
2024-10-03 12:50:40 +02:00
# nheko
iamb
ladybird
lynx
chirp
2024-10-04 20:25:54 +02:00
yubikey-manager
2024-10-03 12:50:40 +02:00
signal-desktop
2025-02-09 22:03:02 +01:00
element-desktop
# element-web
fluffychat
# fluffychat-web
2024-04-11 13:16:26 +02:00
];
2024-04-27 13:56:15 +02:00
2024-10-03 12:50:40 +02:00
nixpkgs.config.permittedInsecurePackages = [
2025-01-28 21:47:38 +01:00
"electron-27.3.11"
2025-02-09 22:03:02 +01:00
"fluffychat-linux-1.22.1"
"fluffychat-web-1.22.1"
"olm-3.2.16"
2025-01-28 21:47:38 +01:00
];
2025-02-09 22:03:02 +01:00
# services.systembus-notify.enable = true;
2024-09-05 20:49:12 +02:00
services.printing.drivers = [pkgs.cnijfilter2];
2024-10-13 18:49:45 +02:00
2024-04-11 13:16:26 +02:00
# https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion
2024-04-18 21:10:13 +02:00
system.stateVersion = "23.11";
2024-04-11 13:16:26 +02:00
}