138 lines
2.7 KiB
Nix
138 lines
2.7 KiB
Nix
{
|
|
pkgs,
|
|
lib,
|
|
inputs,
|
|
config,
|
|
...
|
|
}: let
|
|
sshKeys = import ../../crypto/ssh-keys.nix;
|
|
in {
|
|
imports = [
|
|
# Defaults
|
|
./hardware-configuration.nix
|
|
../../common/base.nix
|
|
../../common/full-install.nix
|
|
|
|
# Localization
|
|
../../common/locales/en.nix
|
|
../../common/locales/fr-keymap.nix
|
|
|
|
# Hardware
|
|
# ../../common/hardware/tpm2.nix
|
|
../../common/hardware/wireless.nix
|
|
../../common/hardware/ssd.nix
|
|
../../common/hardware/btrfs.nix
|
|
../../common/components/lanzaboote.nix
|
|
|
|
# Software components
|
|
../../common/components/de/greetd.nix
|
|
../../common/components/de/sway.nix
|
|
../../common/components/de/plasma6.nix
|
|
|
|
# Programs
|
|
../../common/programs/steam.nix
|
|
|
|
# Services
|
|
# ../../common/services/auditd.nix
|
|
# ../../common/services/nix-gc.nix
|
|
../../common/services/opensnitch.nix
|
|
# ../../common/services/adguardhome.nix
|
|
../../common/services/syncthing.nix
|
|
../../common/services/usbguard.nix
|
|
../../common/services/autoupgrade.nix
|
|
|
|
# Home-manager
|
|
../../home/tasia/home.nix
|
|
|
|
inputs.agenix.nixosModules.default
|
|
../../common/components/wifi-secrets.nix
|
|
|
|
# inputs.thymis.nixosModules.thymis-controller
|
|
# Personal modules
|
|
# ../../modules/nixos/tildefriends.nix
|
|
./yubikey.nix
|
|
./rtl-sdr.nix
|
|
];
|
|
|
|
networking = {
|
|
hostName = "cave";
|
|
|
|
firewall = {
|
|
allowedTCPPorts = [
|
|
# 8080 # ?
|
|
# 80
|
|
# 443
|
|
# 3001
|
|
# 8000
|
|
# 8008 # ssb
|
|
# 12345 # tildefriends
|
|
# 13378 # audiobookshelf
|
|
];
|
|
allowedUDPPorts = [
|
|
# 8080 # ?
|
|
];
|
|
};
|
|
};
|
|
|
|
users.users.tasia.openssh.authorizedKeys.keys = [
|
|
sshKeys.tasia.cave
|
|
];
|
|
|
|
virtualisation.docker.enable = true;
|
|
services.flatpak.enable = true;
|
|
|
|
services.syncthing = {
|
|
user = "tasia";
|
|
dataDir = lib.mkForce "/home/tasia/Sync/data";
|
|
configDir = lib.mkForce "/home/tasia/Sync/configuration";
|
|
};
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
inputs.tildefriends.packages.${system}.default
|
|
|
|
osu-lazer-bin
|
|
prismlauncher
|
|
|
|
sherlock
|
|
whois
|
|
android-tools
|
|
|
|
ripgrep
|
|
lsd
|
|
viu
|
|
logseq
|
|
nix-tree
|
|
# android-studio
|
|
lutris
|
|
|
|
# nheko
|
|
iamb
|
|
ladybird
|
|
lynx
|
|
|
|
chirp
|
|
yubikey-manager
|
|
|
|
signal-desktop
|
|
|
|
element-desktop
|
|
# element-web
|
|
fluffychat
|
|
# fluffychat-web
|
|
];
|
|
|
|
nixpkgs.config.permittedInsecurePackages = [
|
|
"electron-27.3.11"
|
|
"fluffychat-linux-1.22.1"
|
|
"fluffychat-web-1.22.1"
|
|
"olm-3.2.16"
|
|
];
|
|
|
|
# services.systembus-notify.enable = true;
|
|
|
|
services.printing.drivers = [pkgs.cnijfilter2];
|
|
|
|
# https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion
|
|
system.stateVersion = "23.11";
|
|
}
|