419 lines
14 KiB
Nix
419 lines
14 KiB
Nix
# Edit this configuration file to define what should be installed on
|
|
# your system. Help is available in the configuration.nix(5) man page
|
|
# and in the NixOS manual (accessible by running ‘nixos-help’).
|
|
|
|
{ config, pkgs, ... }:
|
|
|
|
{
|
|
imports =
|
|
[
|
|
# Include the results of the hardware scan.
|
|
./hardware-configuration.nix
|
|
# Support Brother scanner
|
|
<nixpkgs/nixos/modules/services/hardware/sane_extra_backends/brscan4.nix>
|
|
# Include Framework-specific tweaks supported by the NixOS community
|
|
<nixos-hardware/framework/16-inch/common>
|
|
# This amazing script seems to cause the computer to not have a properly functioning screen
|
|
# if it is put to sleep by closing the lid. So, uh, not good.
|
|
# ./framework-lid-workaround.nix
|
|
# Presumably need to re-add the Nix home-manager channel before adding this back.
|
|
# <home-manager/nixos>
|
|
];
|
|
|
|
# List packages installed in system profile. To search, run:
|
|
# $ nix search example
|
|
environment.systemPackages = with pkgs; [
|
|
# vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
|
|
# amarok # music player - that is so far from intuitive i *could not start a track playing at all*
|
|
annotator # image annotation, KDE's Spectacle does too but only for screenshots it just took, maybe ksnip or shutter would be more flexible screenshot tools, hmm kdePackages.kquickimageedit and kdePackages.kimageannotator basically use the same tools as Spectacle, i'll try them too.
|
|
ansible
|
|
authenticator # 2-factor auth, it's for Gnome but it's the only good one (can scan in from the phone etc)
|
|
beets
|
|
birdtray
|
|
bitwarden-cli
|
|
bitwarden-desktop
|
|
bitwarden-menu
|
|
brave
|
|
btop
|
|
calibre
|
|
contrast
|
|
# cruft
|
|
cups-brother-hll2375dw
|
|
curl
|
|
unstable.ddev
|
|
diffr
|
|
dig
|
|
dmidecode
|
|
docker
|
|
# dog # breaks build
|
|
# espanso-wayland # breaks build??? # no longer breaks build but is constant errors in journalctl
|
|
et # 'egg timer' command-line-ish timer app; mpris-timer is a Gnome graphical alternative in the surprisingly sparse set of timer options (cannot find one built into KDE?)
|
|
exif
|
|
fish
|
|
fishPlugins.done
|
|
fira-mono # coding font WITHOUT ligatures, thank god
|
|
firefox
|
|
firefoxpwa
|
|
flameshot # screenshots with annotations
|
|
floorp
|
|
fsearch
|
|
getxbook
|
|
# gimp-with-plugins # Currently breaks build, but works if in nix shell solo
|
|
git
|
|
git-open
|
|
gtk3 # for Pomodoro Prompt
|
|
gnucash
|
|
gnumake
|
|
gobject-introspection # for Pomodoro Prompt
|
|
# handbrake # converting video, https://handbrake.fr/
|
|
htop
|
|
hunspell
|
|
hunspellDicts.en_US-large
|
|
hunspellDicts.es_MX
|
|
inetutils # telnet among other things
|
|
# jitsi # - this is unusuable with a regular Jitsi Meet server like May First?
|
|
jitsi-meet-electron # currently breaks build
|
|
jq
|
|
just
|
|
kdePackages.audex
|
|
kdePackages.filelight
|
|
kdePackages.isoimagewriter
|
|
kdePackages.kasts
|
|
kdePackages.kcalc
|
|
kdePackages.kcolorchooser
|
|
# kdePackages.kdenetwork-filesharing
|
|
# kdePackages.keysmith
|
|
kdePackages.kimageannotator
|
|
kdePackages.konqueror
|
|
kdePackages.kontrast
|
|
kdePackages.kquickimageedit
|
|
kdePackages.krecorder
|
|
kdePackages.kruler
|
|
kdePackages.kweather
|
|
# kdePackages.neochat # For matrix but relying on insecure olm-3.2.16
|
|
kdePackages.partitionmanager
|
|
kdePackages.print-manager
|
|
kdePackages.xdg-desktop-portal-kde
|
|
keepassxc
|
|
kirc
|
|
# kiwix
|
|
# kiwix-tools
|
|
# kupfer # a nice launcher, installed because my main desktop screen is broken and i needed a way to see what apps i was picking - not used it much since though, so uninstalling
|
|
libinput
|
|
libreoffice-qt6-still # this is basically unusable, graphics all mis-aligned
|
|
# light
|
|
losslesscut-bin # simple audio/video editor GUI via https://chaos.social/@nblr/113911420594814380
|
|
lshw
|
|
magic-wormhole
|
|
md2pdf
|
|
mdbook
|
|
meld
|
|
mkcert
|
|
mmv
|
|
ncdu
|
|
neovim # aka nvim
|
|
nerd-fonts.zed-mono # Defoult font for Zed code editor
|
|
nextcloud-client
|
|
# nheko # For matrix but relying on insecure olm-3.2.16
|
|
# nfs-utils
|
|
nix-search-cli
|
|
onlyoffice-desktopeditors
|
|
openshot-qt # Video editing, http://www.openshot.org/
|
|
peruse # Read comic books, zines, graphic novels a bit more easily
|
|
photini # digital photograph metadata editing
|
|
php # does PHP 8.2 currently and there's php81, php83, and php84 alternatives
|
|
php82Packages.composer
|
|
# php84Packages.composer ansible_2_16
|
|
pinta # simple image editing
|
|
(python3.withPackages(ps: with ps; [
|
|
numpy
|
|
pandas
|
|
playsound
|
|
pycairo
|
|
pygobject3
|
|
python-dotenv
|
|
pytz
|
|
tzlocal
|
|
])) # https://github.com/NixOS/nixpkgs/blob/master/doc/languages-frameworks/python.section.md#environment-defined-in-etcnixosconfigurationnix-environment-defined-in-etcnixosconfigurationnix (note this is literally the last thing they wanted me to do, would rather it not be global) but i want Pomodoro Prompt and Parse Timelogs to be able to run directly.
|
|
poppins
|
|
postgresql
|
|
qrscan
|
|
# quick-lookup
|
|
# radiotray-ng # Prefer shortwave for real radio # breaking build
|
|
recoll
|
|
repren
|
|
reveal-md
|
|
rink
|
|
rofi
|
|
# rustdesk - not using error-ish
|
|
# samba - not using…?
|
|
sassc # Convenient to use directly, though it is deprecated in favor of dart-sass i think
|
|
shortwave
|
|
shotwell # Even though i'm not on Gnome anymore, really don't see the need to switch to KPhotoAlbum (NixOS has to download more for that anyway). The other option is digikam and if getting into RAW and editing more, darktable
|
|
signal-desktop
|
|
sioyek # Science-document-focused PDF viewer
|
|
slack
|
|
sly # simple image editing
|
|
spideroak # backups
|
|
starship # fancy command line prompt
|
|
# strawberry-qt6 # oh no, breaks build with a libgpod fail.
|
|
system-config-printer
|
|
tdf # Terminal PDF viewer
|
|
textpieces
|
|
tldr
|
|
thunderbird
|
|
toot
|
|
tor-browser
|
|
tuner # UI for radio stations that have online streams.
|
|
transmission_4-qt
|
|
trashy
|
|
tuba
|
|
ungoogled-chromium
|
|
vimPlugins.vim-fetch
|
|
vimPlugins.vim-wayland-clipboard
|
|
wget
|
|
whois
|
|
vlc
|
|
vscodium
|
|
# wcalc - command-line calculator but rink does that plus unit conversion!
|
|
wl-clipboard-rs
|
|
wrapGAppsHook # for Pomodoro Prompt
|
|
xorg.xkill
|
|
# xpdf # Simple PDF viewer - currently marked insecure
|
|
yt-dlp
|
|
zed-editor
|
|
zoxide
|
|
zulip
|
|
# zulip-term
|
|
];
|
|
environment.pathsToLink = [ "/share/fish" ];
|
|
|
|
# Add ~/.local/bin/ to $PATH
|
|
environment.localBinInPath = true;
|
|
environment.homeBinInPath = true;
|
|
# Only this works, from https://github.com/NixOS/nixpkgs/issues/157383#issuecomment-1186081648
|
|
environment.shellInit = ''
|
|
export PATH="$PATH:$HOME/.local/bin"
|
|
'';
|
|
|
|
# Needed for Slack but probably helps other stuff too.
|
|
# See https://wiki.nixos.org/wiki/Slack
|
|
environment.sessionVariables.NIXOS_OZONE_WL = "1";
|
|
|
|
# Make it possible for ddev to modify the /etc/hosts file.
|
|
# Otherwise you'll have to manually change the
|
|
# hosts configuration after creating a new ddev project.
|
|
environment.etc.hosts.mode = "0644";
|
|
|
|
# Bootloader.
|
|
boot.loader.systemd-boot.enable = true;
|
|
boot.loader.efi.canTouchEfiVariables = true;
|
|
|
|
# Garbage collection - via https://discourse.nixos.org/t/no-space-left-on-boot/24019/8
|
|
nix.gc = {
|
|
automatic = true;
|
|
randomizedDelaySec = "14m";
|
|
options = "--delete-older-than 60d";
|
|
};
|
|
|
|
# Hardware
|
|
# hardware.sane.enable = true; # enables support for SANE scanners per https://wiki.nixos.org/wiki/Scanners
|
|
hardware = {
|
|
sane = {
|
|
enable = true;
|
|
brscan4 = {
|
|
enable = true;
|
|
netDevices = {
|
|
home = { model = "HL-L2380DW"; ip = "192.168.178.23"; };
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
networking.hostName = "nixos"; # Define your hostname.
|
|
# networking.wireless.enable = true; # Enables wireless support via wpa_supplicant.
|
|
|
|
# Configure network proxy if necessary
|
|
# networking.proxy.default = "http://user:password@proxy:port/";
|
|
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
|
|
|
|
# Enable networking
|
|
networking.networkmanager.enable = true;
|
|
|
|
# Set your time zone.
|
|
time.timeZone = "America/New_York";
|
|
|
|
# Select internationalisation properties.
|
|
i18n.defaultLocale = "en_US.UTF-8";
|
|
|
|
i18n.extraLocaleSettings = {
|
|
LC_ADDRESS = "en_US.UTF-8";
|
|
LC_IDENTIFICATION = "en_US.UTF-8";
|
|
LC_MEASUREMENT = "en_US.UTF-8";
|
|
LC_MONETARY = "en_US.UTF-8";
|
|
LC_NAME = "en_US.UTF-8";
|
|
LC_NUMERIC = "en_US.UTF-8";
|
|
LC_PAPER = "en_US.UTF-8";
|
|
LC_TELEPHONE = "en_US.UTF-8";
|
|
LC_TIME = "en_US.UTF-8";
|
|
};
|
|
|
|
# Just make bin/bash work, see https://github.com/Mic92/envfs
|
|
# via the long, sad https://discourse.nixos.org/t/add-bin-bash-to-avoid-unnecessary-pain/5673/37
|
|
services.envfs.enable = true;
|
|
|
|
# Via https://github.com/NixOS/nixos-hardware/tree/master/framework
|
|
services.fwupd.enable = true;
|
|
services.fwupd.extraRemotes = [ "lvfs-testing" ];
|
|
# Might be necessary once to make the update succeed
|
|
services.fwupd.uefiCapsuleSettings.DisableCapsuleUpdateOnDisk = true;
|
|
|
|
# Enable the X11 windowing system.
|
|
# You can disable this if you're only using the Wayland session.
|
|
services.xserver.enable = true;
|
|
|
|
# Enable the KDE Plasma Desktop Environment.
|
|
services.displayManager.sddm.enable = true;
|
|
services.desktopManager.plasma6.enable = true;
|
|
|
|
# Configure keymap in X11
|
|
services.xserver.xkb = {
|
|
layout = "us";
|
|
variant = "dvorak-alt-intl";
|
|
};
|
|
|
|
# Configure console keymap
|
|
console.keyMap = "dvorak";
|
|
|
|
# Enable CUPS to print documents.
|
|
services.printing.enable = true;
|
|
|
|
# Add Brother printer drivers, per https://nixos.wiki/wiki/Hardware/Brother
|
|
services.printing.drivers = [
|
|
pkgs.brlaser
|
|
pkgs.brgenml1lpr
|
|
pkgs.brgenml1cupswrapper
|
|
];
|
|
|
|
# Enable sound with pipewire.
|
|
services.pulseaudio.enable = false;
|
|
security.rtkit.enable = true;
|
|
|
|
# Enable samba network filesharing in Dolphin
|
|
# security.wrappers = {
|
|
# mount.source = "${pkgs.utillinux}/bin/mount";
|
|
# umount.source = "${pkgs.utillinux}/bin/umount";
|
|
#};
|
|
#security.wrappers."mount.nfs".source = "${pkgs.nfs-utils.out}/bin/mount.nfs";
|
|
|
|
services.pipewire = {
|
|
enable = true;
|
|
alsa.enable = true;
|
|
alsa.support32Bit = true;
|
|
pulse.enable = true;
|
|
# If you want to use JACK applications, uncomment this
|
|
#jack.enable = true;
|
|
|
|
# use the example session manager (no others are packaged yet so this is enabled by default,
|
|
# no need to redefine it in your config for now)
|
|
#media-session.enable = true;
|
|
};
|
|
|
|
# Install & enable docker.
|
|
virtualisation.docker.enable = true;
|
|
|
|
# Enable touchpad support (enabled default in most desktopManager).
|
|
# services.xserver.libinput.enable = true;
|
|
|
|
# Define a user account. Don't forget to set a password with ‘passwd’.
|
|
users.users.mlncn = {
|
|
isNormalUser = true;
|
|
description = "mlncn";
|
|
extraGroups = [ "networkmanager" "wheel" "docker" "scanner" "lp" ];
|
|
packages = with pkgs; [
|
|
# discord # trash as is predictable, but damn it is hard to get Nix to say what the damn problem is, --show-trace on the rebuild is the only way because i can only get nix why-depends
|
|
kdePackages.kate
|
|
logseq
|
|
];
|
|
# Per Chris for SSHing from the old machine to here
|
|
openssh.authorizedKeys.keys = [ "ssh-ed25519 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIc/pc2oL80XjIeeazzT5YOCrEaPW7uohA/qlmGr5cM6 mlncn@d64" ];
|
|
};
|
|
# home-manager.users.mlncn = { pkgs, ... }: {
|
|
# home.packages = [
|
|
# pkgs.atool
|
|
# pkgs.httpie
|
|
# ];
|
|
# programs.bash.enable = true;
|
|
# programs.fish.enable = true;
|
|
|
|
# The state version is required and should stay at the version you
|
|
# originally installed.
|
|
# home.stateVersion = "24.05";
|
|
# };
|
|
# home-manager.useUserPackages = true;
|
|
# home-manager.useGlobalPkgs = true;
|
|
|
|
|
|
# Install firefox.
|
|
# Going with the main packages version instead
|
|
# programs.firefox.enable = true; # Going with the main packages version instead because this version cannot screenshare and seems to tend to be a minor point version behind anyway https://discourse.nixos.org/t/screen-sharing-with-wayland-gnome/12449/8
|
|
programs.firefox.nativeMessagingHosts.packages = [ pkgs.firefoxpwa ];
|
|
programs.fish.enable = true;
|
|
programs.bash = {
|
|
interactiveShellInit = ''
|
|
if [[ $(${pkgs.procps}/bin/ps --no-header --pid=$PPID --format=comm) != "fish" && -z ''${BASH_EXECUTION_STRING} ]]
|
|
then
|
|
shopt -q login_shell && LOGIN_OPTION='--login' || LOGIN_OPTION=""
|
|
exec ${pkgs.fish}/bin/fish $LOGIN_OPTION
|
|
fi
|
|
'';
|
|
};
|
|
# Support AppImages
|
|
# programs.appimage.enable = true;
|
|
# programs.appimage.binfmt = true;
|
|
|
|
nixpkgs.config = {
|
|
# Allow unfree packages
|
|
allowUnfree = true;
|
|
# Allow getting packages from unstable by prefixing unstable in package list.
|
|
packageOverrides = pkgs: {
|
|
unstable = import <nixpkgs> {
|
|
config = config.nixpkgs.config;
|
|
};
|
|
};
|
|
};
|
|
|
|
# TODO remove this when Logseq gets its act together
|
|
# nixpkgs.config.permittedInsecurePackages = [
|
|
# "olm-3.2.16"
|
|
# ];
|
|
|
|
# Some programs need SUID wrappers, can be configured further or are
|
|
# started in user sessions.
|
|
# programs.mtr.enable = true;
|
|
# programs.gnupg.agent = {
|
|
# enable = true;
|
|
# enableSSHSupport = true;
|
|
# };
|
|
|
|
# List services that you want to enable:
|
|
|
|
# Enable the OpenSSH daemon.
|
|
services.openssh.enable = true;
|
|
|
|
# Open ports in the firewall.
|
|
# networking.firewall.allowedTCPPorts = [ ... ];
|
|
# networking.firewall.allowedUDPPorts = [ ... ];
|
|
# Or disable the firewall altogether.
|
|
# networking.firewall.enable = false;
|
|
networking.firewall.allowedTCPPorts = [ 9003 ];
|
|
|
|
# This value determines the NixOS release from which the default
|
|
# settings for stateful data, like file locations and database versions
|
|
# on your system were taken. It‘s perfectly fine and recommended to leave
|
|
# this value at the release version of the first install of this system.
|
|
# Before changing this value read the documentation for this option
|
|
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
|
|
system.stateVersion = "24.05"; # Did you read the comment?
|
|
|
|
}
|