336 lines
11 KiB
Nix
336 lines
11 KiB
Nix
# Edit this configuration file to define what should be installed on
|
||
# your system. Help is available in the configuration.nix(5) man page
|
||
# and in the NixOS manual (accessible by running ‘nixos-help’).
|
||
|
||
# New TODO:
|
||
# - investigate tmux-session-wizard, and tpm
|
||
# - see if zoxide can import .z file (from z.sh)
|
||
# - so far, have added aliases and bashrc directly, along with bin folder and ssh setup.
|
||
# - aaaaaah! so much
|
||
|
||
{ config, pkgs, inputs, ... }:
|
||
|
||
{
|
||
imports =
|
||
[ # Include the results of the hardware scan.
|
||
./hardware-configuration.nix
|
||
inputs.home-manager.nixosModules.default
|
||
./main-user.nix
|
||
];
|
||
|
||
#fileSystems."/mnt/arch" =
|
||
# { device = "/dev/disk/by-uuid/72db20ba-4dbd-4fb7-891c-b457e2cf9648";
|
||
# fsType = "btrfs";
|
||
# options = [ "subvol=5" ];
|
||
# };
|
||
#fileSystems."/mnt/arch/home" =
|
||
# { device = "/dev/disk/by-uuid/4eda05c2-d434-495d-97a0-8a81e8a533ec";
|
||
# fsType = "btrfs";
|
||
# options = [ "subvol=5" ];
|
||
# };
|
||
#fileSystems."/mnt/bulk" =
|
||
# { device = "/dev/disk/by-uuid/xxxx";
|
||
# fsType = "ext4";
|
||
# };
|
||
#fileSystems."/mnt/slow" =
|
||
# { device = "/dev/disk/by-uuid/xxxx";
|
||
# fsType = "etx4";
|
||
# };
|
||
boot.initrd.luks.devices."nvme2n1p2_oldcrypt".device = "/dev/disk/by-uuid/44235dca-99e8-4ea8-9516-97d9f5a2d702";
|
||
boot.kernelModules = [ "kvm-amd" "nct6775" ];
|
||
|
||
services.fwupd.enable = true;
|
||
services.hardware.openrgb.enable = true;
|
||
# Add flakes
|
||
nix.settings.experimental-features = [ "nix-command" "flakes" ];
|
||
|
||
# Feel like I should be sure this is safe w/flakes first:
|
||
#system.autoUpgrade.enable = true;
|
||
# sets up things so envs can do shebang whatever
|
||
# instead of #!/usr/bin/env whatever
|
||
#services.envfs.enable = true;
|
||
|
||
# Bootloader.
|
||
boot.loader.systemd-boot.enable = true;
|
||
boot.loader.efi.canTouchEfiVariables = true;
|
||
|
||
# System name
|
||
networking.hostName = "supercell"; # Define your hostname.
|
||
# networking.wireless.enable = true; # Enables wireless support via wpa_supplicant.
|
||
|
||
# Configure network proxy if necessary
|
||
# networking.proxy.default = "http://user:password@proxy:port/";
|
||
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
|
||
|
||
# Enable networking
|
||
networking.networkmanager.enable = true;
|
||
|
||
# Set your time zone.
|
||
time.timeZone = "America/New_York";
|
||
|
||
# Select internationalisation properties.
|
||
i18n.defaultLocale = "en_US.UTF-8";
|
||
|
||
i18n.extraLocaleSettings = {
|
||
LC_ADDRESS = "en_US.UTF-8";
|
||
LC_IDENTIFICATION = "en_US.UTF-8";
|
||
LC_MEASUREMENT = "en_US.UTF-8";
|
||
LC_MONETARY = "en_US.UTF-8";
|
||
LC_NAME = "en_US.UTF-8";
|
||
LC_NUMERIC = "en_US.UTF-8";
|
||
LC_PAPER = "en_US.UTF-8";
|
||
LC_TELEPHONE = "en_US.UTF-8";
|
||
LC_TIME = "en_US.UTF-8";
|
||
};
|
||
|
||
# Enable the X11 windowing system.
|
||
# You can disable this if you're only using the Wayland session.
|
||
# services.xserver.enable = true;
|
||
|
||
# Enable the KDE Plasma Desktop Environment.
|
||
services.displayManager.sddm.enable = true;
|
||
services.displayManager.sddm.wayland.enable = true;
|
||
services.desktopManager.plasma6.enable = true;
|
||
|
||
# Configure keymap in X11 (presumably, XWayland uses something different?)
|
||
#services.xserver.xkb = {
|
||
# layout = "us";
|
||
# variant = "";
|
||
#};
|
||
|
||
# Enable CUPS to print documents.
|
||
# ...no. Recent security issues, prefer disabled
|
||
# apps like e.g. LibreOffice can still generate pdf's (e.g. to stand in [generally] for Print to pdf)
|
||
# services.printing.enable = true;
|
||
|
||
# Enable sound with pipewire.
|
||
hardware.pulseaudio.enable = false;
|
||
security.rtkit.enable = true;
|
||
services.pipewire = {
|
||
enable = true;
|
||
alsa.enable = true;
|
||
alsa.support32Bit = true;
|
||
pulse.enable = true;
|
||
# If you want to use JACK applications, uncomment this
|
||
#jack.enable = true;
|
||
|
||
# use the example session manager (no others are packaged yet so this is enabled by default,
|
||
# no need to redefine it in your config for now)
|
||
#media-session.enable = true;
|
||
};
|
||
|
||
# Enable touchpad support (enabled default in most desktopManager).
|
||
# services.xserver.libinput.enable = true;
|
||
# Define a user account. Don't forget to set a password with ‘passwd’.
|
||
# Note that extraGroups overrides the module defaults entirely (they don't merge...probably a lib.* thing for that?)
|
||
# Pull defaults from main-user:
|
||
main-user.enable = true;
|
||
main-user.userName = "wolcen";
|
||
# And system-specific settings:
|
||
users.users.wolcen = {
|
||
description = "Chris Thompson";
|
||
openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEdxdKYrlwOolJpYxvWu6gW/60pzT6aKN6JHhnTSBFqN wolcen@typhoon" ];
|
||
extraGroups = [ "networkmanager" "wheel" "docker" "dialout" ];
|
||
};
|
||
|
||
home-manager = {
|
||
extraSpecialArgs = { inherit inputs; };
|
||
users = {
|
||
"wolcen" = import ./home.nix;
|
||
};
|
||
};
|
||
|
||
# Install firefox.
|
||
programs.firefox.enable = true;
|
||
|
||
# Required for DDEV to add hosts files, if your DNS will not resolve addresses to localhost.
|
||
# Some firewall DNS resolvers will NOT allow an externally resolved domain name to resolve to a reserved IP (e.g. localhost).
|
||
# This is a security protection method that can assist attackers with discovery of a LAN.
|
||
# With fpSense, you can tell unbound (or dnsmasq) to resolve *.ddev.site to 127.0.0.1 and remove this mode statement
|
||
# See https://docs.netgate.com/pfsense/en/latest/services/dns/wildcards.html
|
||
# environment.etc.hosts.mode = "0644";
|
||
|
||
# For xdebug...verify actual necessity
|
||
# Have had to use this, but I think it can be disabled still - perhaps w/xdebug binding setting...don't know.
|
||
networking.firewall.allowedTCPPorts = [ 9003 ];
|
||
# Allow unfree packages
|
||
nixpkgs.config.allowUnfree = true;
|
||
|
||
# List packages installed in system profile. To search, run:
|
||
# $ nix search wget
|
||
environment.systemPackages = with pkgs; [
|
||
neovim # next gen vim w/lua
|
||
wget # url fetcher/spider
|
||
curl # url fetcher
|
||
tmux # terminal multiplexer
|
||
whois # net ip/dns lookup
|
||
meld # file diff'r
|
||
wl-clipboard-rs # rust implementation of wayland clipboard cli
|
||
dogdns # a better dig cmd
|
||
bat # a better cat command
|
||
nix-search-cli # search the nix repo
|
||
lsof # show open file handles
|
||
eza # a better ls
|
||
lm_sensors # hardware monitoring (e.g. temps)
|
||
btop # cli sys monitor
|
||
amdgpu_top # top-like monitor for AMD GPUs
|
||
direnv # autoload .envrc files
|
||
zoxide # directory navigator (z)
|
||
nextcloud-client # next cloud UI
|
||
file # show file types
|
||
tldr # cli command summary
|
||
stress # system workload generator
|
||
dmidecode # system settings provider (e.g. bios)
|
||
jq # json query
|
||
niv # dependency cli for nix-shell
|
||
openrgb-with-all-plugins # colors hardware control
|
||
just # command runner like make
|
||
#ansible # configuration management system/automation tool
|
||
kdePackages.kcachegrind # analyze xdebug output
|
||
libreoffice-qt # libreoffice - qt is best for KDE
|
||
hunspell # spell checking
|
||
hunspellDicts.en_US # spell check dictionary
|
||
#corectl # this doesn't exist????
|
||
magic-wormhole # transfer files with ease
|
||
screen # terminal multiplexer...from GNU
|
||
gnumake # build automation tool
|
||
git-open # open the url of the project in web
|
||
diffr # another diff hilighting tool
|
||
brave # privacy oriented browser
|
||
zig # the zig language
|
||
powerline # prompt utility
|
||
];
|
||
programs.zsh.enable = true;
|
||
programs.git = {
|
||
enable = true;
|
||
lfs.enable = true;
|
||
};
|
||
# Orchestrator for FOSS VR stack
|
||
#programs.envision = {
|
||
# enable = true;
|
||
# openFirewall = true; # This is set true by default
|
||
#};
|
||
nixpkgs.config.permittedInsecurePackages = [
|
||
"electron-27.3.11"
|
||
];
|
||
fonts.packages = with pkgs; [
|
||
anonymousPro
|
||
corefonts
|
||
dejavu_fonts
|
||
dina-font
|
||
fira-code
|
||
fira-code-symbols
|
||
gohufont
|
||
liberation_ttf
|
||
nerd-fonts.daddy-time-mono
|
||
nerd-fonts.monofur
|
||
nerd-fonts._3270
|
||
nerd-fonts.ubuntu
|
||
noto-fonts
|
||
noto-fonts-color-emoji
|
||
noto-fonts-monochrome-emoji
|
||
mplus-outline-fonts.githubRelease
|
||
mononoki
|
||
proggyfonts
|
||
];
|
||
programs.zsh.enable = true;
|
||
programs.git = {
|
||
enable = true;
|
||
lfs.enable = true;
|
||
};
|
||
# Orchestrator for FOSS VR stack
|
||
#programs.envision = {
|
||
# enable = true;
|
||
# openFirewall = true; # This is set true by default
|
||
#};
|
||
nixpkgs.config.permittedInsecurePackages = [
|
||
"electron-27.3.11"
|
||
];
|
||
|
||
#fonts = {
|
||
# fontconfig.enable = true;
|
||
# enableFontDir = true;
|
||
# enableGhostscriptFonts = true;
|
||
# fonts = with pkgs; [
|
||
# corefonts
|
||
# dejavu_fonts
|
||
# inconsolata
|
||
# source-han-sans-japanese
|
||
# source-han-sans-korean
|
||
# source-han-sans-simplified-chinese
|
||
# source-han-sans-traditional-chinese
|
||
# ubuntu_font_family
|
||
# ];
|
||
#};
|
||
# Some programs need SUID wrappers, can be configured further or are
|
||
# started in user sessions.
|
||
# programs.mtr.enable = true;
|
||
# programs.gnupg.agent = {
|
||
# enable = true;
|
||
# enableSSHSupport = true;
|
||
# };
|
||
|
||
# List services that you want to enable:
|
||
|
||
# Enable the OpenSSH daemon.
|
||
services.openssh.enable = true;
|
||
services.openssh.ports = [ 2112 ]; # must be a list...for some reason.
|
||
# Enable mobile shell (for roaming, intermittent connectivity, etc)
|
||
programs.mosh.enable = true;
|
||
|
||
# RX 6700 XT setup
|
||
hardware.graphics.extraPackages = [
|
||
pkgs.rocmPackages.clr.icd
|
||
pkgs.amdvlk
|
||
pkgs.libva
|
||
];
|
||
# To enable Vulkan support for 32-bit applications, also add:
|
||
hardware.graphics.extraPackages32 = [
|
||
pkgs.driversi686Linux.amdvlk
|
||
];
|
||
|
||
# Force radv
|
||
environment.variables.AMD_VULKAN_ICD = "RADV";
|
||
# Or
|
||
#environment.variables.VK_ICD_FILENAMES =
|
||
# "/run/opengl-driver/share/vulkan/icd.d/radeon_icd.x86_64.json";
|
||
|
||
# Steam
|
||
programs.steam = {
|
||
enable = true;
|
||
remotePlay.openFirewall = true; # Open ports in the firewall for Steam Remote Play
|
||
dedicatedServer.openFirewall = true; # Open ports in the firewall for Source Dedicated Server
|
||
localNetworkGameTransfers.openFirewall = true; # Open ports in the firewall for Steam Local Network Game Transfers
|
||
};
|
||
# VR
|
||
#Commmand: `renice -20 -p $(pgrep monado)` may help w/issues
|
||
services.monado = {
|
||
enable = true;
|
||
defaultRuntime = true; # Register as default OpenXR runtime
|
||
#environment.WMR_HANDTRACKING = "1"; # Enable for hand tracking
|
||
#environment.U_PACING_COMP_MIN_TIME_MS = "5"; # This is a tweak for something...I forgot
|
||
};
|
||
# allow clock adjustments/priority change, etc (gamemoderun ./game)
|
||
# https://wiki.nixos.org/wiki/GameMode
|
||
programs.gamemode.enable = true; # for performance mode
|
||
#programs.java.enable = true;
|
||
#programs.steam.package = pkgs.steam.override { withJava = true; };
|
||
|
||
programs.steam.gamescopeSession.enable = true;
|
||
|
||
# Open ports in the firewall.
|
||
# networking.firewall.allowedTCPPorts = [ ... ];
|
||
# networking.firewall.allowedUDPPorts = [ ... ];
|
||
# Or disable the firewall altogether.
|
||
# networking.firewall.enable = false;
|
||
|
||
# This value determines the NixOS release from which the default
|
||
# settings for stateful data, like file locations and database versions
|
||
# on your system were taken. It‘s perfectly fine and recommended to leave
|
||
# this value at the release version of the first install of this system.
|
||
# Before changing this value read the documentation for this option
|
||
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
|
||
system.stateVersion = "24.05"; # Did you read the comment?
|
||
|
||
}
|
||
|