2024-04-08 21:28:07 +02:00
|
|
|
{
|
|
|
|
|
pkgs,
|
|
|
|
|
lib,
|
|
|
|
|
...
|
|
|
|
|
}: {
|
2024-04-08 20:32:17 +02:00
|
|
|
imports = [
|
|
|
|
|
./hardware-configuration.nix
|
|
|
|
|
../../common/default.nix
|
|
|
|
|
|
|
|
|
|
../../common/locales/en.nix
|
|
|
|
|
../../common/locales/fr-keymap.nix
|
|
|
|
|
../../common/hardware/intelcpu.nix
|
|
|
|
|
../../common/hardware/amdgpu.nix
|
|
|
|
|
|
|
|
|
|
../../common/de/plasma6.nix
|
|
|
|
|
../../common/de/hyprland.nix
|
|
|
|
|
|
2024-04-08 21:28:07 +02:00
|
|
|
../../common/packages/syncthing.nix
|
|
|
|
|
../../common/packages/adguardhome.nix
|
2024-04-08 20:32:17 +02:00
|
|
|
|
|
|
|
|
# If you want to use modules your own flake exports (from modules/nixos):
|
|
|
|
|
# outputs.nixosModules.example
|
|
|
|
|
|
|
|
|
|
# Or modules from other flakes (such as nixos-hardware):
|
|
|
|
|
# inputs.hardware.nixosModules.common-cpu-amd
|
|
|
|
|
# inputs.hardware.nixosModules.common-ssd
|
|
|
|
|
];
|
|
|
|
|
|
|
|
|
|
boot = {
|
|
|
|
|
kernelPackages = pkgs.linuxPackages_latest;
|
|
|
|
|
# boot.kernelModules = [ "fuse" "kvm-intel" "coretemp" ];
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
networking = {
|
|
|
|
|
hostName = "phoenix";
|
|
|
|
|
|
|
|
|
|
firewall.enable = true;
|
|
|
|
|
firewall.allowedTCPPorts = [8080 12345 13378];
|
|
|
|
|
firewall.allowedUDPPorts = [8080];
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
users.users.user = {
|
|
|
|
|
isNormalUser = true;
|
|
|
|
|
description = "User";
|
|
|
|
|
extraGroups = ["networkmanager" "wheel" "dialout" "syncthing"];
|
|
|
|
|
initialPassword = "correcthorsebatterystaple";
|
|
|
|
|
openssh.authorizedKeys.keys = [
|
|
|
|
|
# TODO: Add your SSH public key(s) here, if you plan on using SSH to connect
|
|
|
|
|
];
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
services.btrfs.autoScrub = {
|
|
|
|
|
enable = true;
|
|
|
|
|
interval = "weekly";
|
|
|
|
|
fileSystems = ["/" "/data"];
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
virtualisation.docker.enable = true;
|
|
|
|
|
services.flatpak.enable = true;
|
|
|
|
|
|
|
|
|
|
# Some programs need SUID wrappers, can be configured further or are
|
|
|
|
|
# started in user sessions.
|
|
|
|
|
programs.mtr.enable = true;
|
|
|
|
|
programs.gnupg.agent = {
|
|
|
|
|
enable = true;
|
|
|
|
|
enableSSHSupport = true;
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
programs.steam = {
|
|
|
|
|
enable = true;
|
|
|
|
|
remotePlay.openFirewall = false; # Open ports in the firewall for Steam Remote Play
|
|
|
|
|
dedicatedServer.openFirewall = false; # Open ports in the firewall for Source Dedicated Server
|
|
|
|
|
};
|
|
|
|
|
|
2024-04-08 21:28:07 +02:00
|
|
|
services.syncthing = {
|
|
|
|
|
dataDir = lib.mkForce "/home/user";
|
|
|
|
|
configDir = lib.mkForce "/data/sync/configuration/";
|
|
|
|
|
};
|
|
|
|
|
|
2024-04-13 21:42:05 +02:00
|
|
|
boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
|
|
|
|
|
|
2024-04-08 20:32:17 +02:00
|
|
|
environment.systemPackages = with pkgs; [
|
|
|
|
|
bitwarden
|
|
|
|
|
libreoffice-fresh
|
|
|
|
|
nextdns
|
|
|
|
|
android-tools
|
|
|
|
|
gocryptfs
|
|
|
|
|
#endless-sky
|
|
|
|
|
#gnucash
|
|
|
|
|
obs-studio
|
|
|
|
|
kdenlive
|
|
|
|
|
rustc
|
|
|
|
|
cargo
|
|
|
|
|
nodejs
|
|
|
|
|
rpi-imager
|
|
|
|
|
wireshark
|
|
|
|
|
appimage-run
|
|
|
|
|
#ssb-patchwork
|
|
|
|
|
simplex-chat-desktop
|
|
|
|
|
#android-studio
|
|
|
|
|
#swig
|
|
|
|
|
picard
|
|
|
|
|
kleopatra
|
|
|
|
|
qbittorrent
|
|
|
|
|
tor-browser
|
|
|
|
|
protonvpn-gui
|
|
|
|
|
# radicle-cli
|
|
|
|
|
# opensnitch-ui
|
|
|
|
|
yarn
|
|
|
|
|
nodePackages.node-gyp
|
|
|
|
|
nodePackages.node-pre-gyp
|
|
|
|
|
superTuxKart
|
|
|
|
|
openssl
|
|
|
|
|
|
|
|
|
|
# qgis
|
|
|
|
|
helix
|
|
|
|
|
holehe
|
|
|
|
|
smartmontools
|
|
|
|
|
cheat
|
|
|
|
|
lazygit
|
|
|
|
|
ripgrep
|
|
|
|
|
jq
|
|
|
|
|
yq
|
|
|
|
|
neofetch
|
|
|
|
|
tldr
|
|
|
|
|
bat
|
|
|
|
|
dust
|
|
|
|
|
powertop
|
|
|
|
|
fzf
|
|
|
|
|
atuin
|
|
|
|
|
zellij
|
|
|
|
|
eza
|
|
|
|
|
lapce
|
|
|
|
|
gotty
|
|
|
|
|
gping
|
|
|
|
|
yazi
|
|
|
|
|
|
|
|
|
|
tildefriends
|
|
|
|
|
];
|
|
|
|
|
|
|
|
|
|
# https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion
|
|
|
|
|
system.stateVersion = "23.05";
|
|
|
|
|
}
|
