96 lines
2.3 KiB
Nix
96 lines
2.3 KiB
Nix
{
|
|
pkgs,
|
|
lib,
|
|
...
|
|
}: let
|
|
sshKeys = import ../../crypto/ssh-keys.nix;
|
|
in {
|
|
imports = [
|
|
./hardware-configuration.nix
|
|
../../common/default.nix
|
|
../../common/full-install.nix
|
|
../../common/allow-unfree.nix
|
|
|
|
../../common/locales/en.nix
|
|
../../common/locales/fr-keymap.nix
|
|
../../common/hardware/intel-cpu.nix
|
|
../../common/hardware/nvidia-gpu.nix
|
|
../../common/hardware/nvidia-gpu-offload.nix
|
|
../../common/hardware/ssd.nix
|
|
../../common/hardware/btrfs.nix
|
|
../../common/hardware/latest-kernel.nix
|
|
|
|
../../common/de/plasma6.nix
|
|
# ../../common/de/hyprland.nix
|
|
|
|
../../common/tasia-packages.nix
|
|
../../common/packages/sshd.nix
|
|
../../common/packages/steam.nix
|
|
# ../../common/packages/syncthing.nix
|
|
|
|
# ../../modules/nixos/vedirect-reader.nix
|
|
];
|
|
|
|
# boot.kernelModules = [ "fuse" "kvm-intel" "coretemp" ];
|
|
|
|
hardware.nvidia.prime = {
|
|
intelBusId = "PCI:1:0:0";
|
|
nvidiaBusId = "PCI:0:2:0";
|
|
};
|
|
|
|
networking = {
|
|
hostName = "new-new-phoenix";
|
|
|
|
firewall = {
|
|
enable = true;
|
|
allowedTCPPorts = [
|
|
8080 # ?
|
|
12345 # tildefriends
|
|
13378 # audiobookshelf
|
|
];
|
|
allowedUDPPorts = [
|
|
8080 # ?
|
|
];
|
|
};
|
|
};
|
|
|
|
users.users.tasia = {
|
|
isNormalUser = true;
|
|
description = "User";
|
|
extraGroups = ["networkmanager" "wheel" "syncthing"];
|
|
initialPassword = "correcthorsebatterystaple";
|
|
openssh.authorizedKeys.keys = [
|
|
sshKeys.new-new-phoenix.tasia
|
|
];
|
|
};
|
|
|
|
services.btrfs.autoScrub.fileSystems = ["/"];
|
|
|
|
# services.vedirect-reader.enable = true;
|
|
|
|
virtualisation.docker.enable = true;
|
|
# services.flatpak.enable = false;
|
|
|
|
services.syncthing = {
|
|
dataDir = lib.mkForce "/home/user";
|
|
configDir = lib.mkForce "/data/sync/configuration/";
|
|
};
|
|
|
|
# Needed to build enry
|
|
boot.binfmt.emulatedSystems = ["aarch64-linux"];
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
#
|
|
];
|
|
|
|
# security.auditd.enable = true;
|
|
# security.audit.enable = true;
|
|
# security.audit.rules = [
|
|
# "-a exit,always -F arch=b64 -S execve"
|
|
# ];
|
|
# You can monitor these logs with journalctl -f. If you don't see any audit logs show up, ssh in from another window and run some commands like ls. You should see a flurry of them show up.
|
|
|
|
# https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion
|
|
system.stateVersion = "23.11";
|
|
}
|