374 lines
8.8 KiB
Nix
374 lines
8.8 KiB
Nix
{ config, pkgs, ... }:
|
|
let SAX2 = pkgs.fetchurl {
|
|
name = "SAX2";
|
|
url = "https://abrudz.github.io/SAX2/SAX2.ttf";
|
|
sha256 = "sha256-DgvDWXO2fnKZNu9EvQOq8GNMTU3PUdp85+/0ZHdRXZc=";
|
|
|
|
recursiveHash = true;
|
|
|
|
downloadToTemp = true;
|
|
postFetch = ''
|
|
mkdir -p "$out/share/fonts/truetype"
|
|
mv "$downloadedFile" "$out/share/fonts/truetype/SAX2.ttf"
|
|
'';
|
|
};
|
|
in
|
|
rec {
|
|
|
|
# [HARDWARE]
|
|
imports =
|
|
[ # Include the results of the hardware scan.
|
|
./hardware-configuration.nix
|
|
<home-manager/nixos>
|
|
];
|
|
hardware.opengl = {
|
|
enable = true;
|
|
driSupport = true;
|
|
driSupport32Bit = true;
|
|
};
|
|
services.logind = {
|
|
lidSwitch = "hibernate";
|
|
lidSwitchDocked = "ignore";
|
|
lidSwitchExternalPower = "hibernate";
|
|
};
|
|
services.tlp = {
|
|
enable = true;
|
|
settings = {
|
|
TLP_DEFAULT_MODE = "BAT";
|
|
DISK_IDLE_SECS_ON_AC = 0;
|
|
DISK_IDLE_SECS_ON_BAT = 5;
|
|
MAX_LOST_WORK_SECS_ON_AC = 15;
|
|
MAX_LOST_WORK_SECS_ON_BAT = 120;
|
|
CPU_SCALING_GOVERNOR_ON_AC = "performance";
|
|
CPU_SCALING_GOVERNOR_ON_BAT = "powersave";
|
|
CPU_SCALING_MIN_FREQ_ON_AC = 400000;
|
|
CPU_SCALING_MAX_FREQ_ON_AC = 4700000;
|
|
CPU_SCALING_MIN_FREQ_ON_BAT = 400000;
|
|
CPU_SCALING_MAX_FREQ_ON_BAT = 2700000;
|
|
CPU_ENERGY_PERF_POLICY_ON_AC = "balance_performance";
|
|
CPU_ENERGY_PERF_POLICY_ON_BAT = "power";
|
|
CPU_MIN_PERF_ON_AC = 0;
|
|
CPU_MAX_PERF_ON_AC = 100;
|
|
CPU_MIN_PERF_ON_BAT = 0;
|
|
CPU_MAX_PERF_ON_BAT = 30;
|
|
CPU_BOOST_ON_AC = 1;
|
|
CPU_BOOST_ON_BAT = 0;
|
|
SCHED_POWERSAVE_ON_AC = 0;
|
|
SCHED_POWERSAVE_ON_BAT = 1;
|
|
NMI_WATCHDOG = 0;
|
|
DISK_DEVICES = "nvme0n1";
|
|
};
|
|
};
|
|
services.power-profiles-daemon.enable = false;
|
|
|
|
# [BOOT / DISK ENCRYPTION]
|
|
boot.loader.efi.canTouchEfiVariables = true;
|
|
boot.loader.grub = {
|
|
enable = true;
|
|
device = "nodev";
|
|
efiSupport = true;
|
|
enableCryptodisk = true;
|
|
theme = "/boot/grub/themes/sayonara";
|
|
};
|
|
boot.loader.efi.efiSysMountPoint = "/boot/efi";
|
|
boot.initrd = {
|
|
availableKernelModules = [ "aesni_intel" "cryptd" ];
|
|
secrets = { "/boot/key" = "/boot/key"; };
|
|
luks.mitigateDMAAttacks = true;
|
|
luks.devices = {
|
|
root = {
|
|
device = "/dev/disk/by-uuid/91114176-b6cc-4454-89df-e2bf5c1fac0a";
|
|
keyFile = "/boot/key";
|
|
preLVM = true;
|
|
};
|
|
};
|
|
};
|
|
|
|
# [NETWORKING]
|
|
networking.hostName = "lambda";
|
|
networking.networkmanager = {
|
|
enable = true;
|
|
wifi.powersave = true;
|
|
wifi.scanRandMacAddress = true;
|
|
wifi.macAddress = "random";
|
|
};
|
|
# Xenia's router sucks
|
|
networking.resolvconf.enable = true;
|
|
networking.nameservers = [ "8.8.8.8" ];
|
|
networking.resolvconf.dnsExtensionMechanism = false;
|
|
|
|
# [NFS]
|
|
fileSystems."/home/rachel/music" = {
|
|
device = "rachel.cafe:/srv/music";
|
|
fsType = "nfs";
|
|
options = [ "x-systemd.automount" "noauto" "x-systemd.idle-timeout=60" ];
|
|
};
|
|
|
|
# [LOCALE]
|
|
time.timeZone = "Europe/Stockholm";
|
|
i18n.defaultLocale = "en_GB.UTF-8";
|
|
i18n.supportedLocales = [ "sv_SE.UTF-8/UTF-8" "en_GB.UTF-8/UTF-8" ] ;
|
|
console = {
|
|
font = "LatGrkCyr-12x22";
|
|
keyMap = "us";
|
|
};
|
|
|
|
# [NIX]
|
|
nix = {
|
|
settings = {
|
|
experimental-features = [ "nix-command" "flakes" ];
|
|
auto-optimise-store = true;
|
|
};
|
|
gc = {
|
|
automatic = true;
|
|
dates = "monthly";
|
|
options = "--delete-older-than 30d";
|
|
};
|
|
};
|
|
|
|
nixpkgs.config.allowUnfree = true;
|
|
|
|
# [DESKTOP / XORG / WAYLAND]
|
|
services.xserver = {
|
|
enable = true;
|
|
desktopManager.plasma5.enable = true;
|
|
displayManager.startx.enable = true;
|
|
layout = "us,se";
|
|
xkbOptions = "grp:alt_caps_toggle";
|
|
libinput = {
|
|
enable = true;
|
|
touchpad = {
|
|
naturalScrolling = true;
|
|
accelProfile = "flat" ;
|
|
tapping = false;
|
|
};
|
|
};
|
|
};
|
|
|
|
# [SOUND]
|
|
sound.enable = false;
|
|
services.pipewire = {
|
|
enable = true;
|
|
|
|
alsa = {
|
|
enable = true;
|
|
support32Bit = true;
|
|
};
|
|
|
|
pulse.enable = true;
|
|
|
|
wireplumber.enable = true;
|
|
};
|
|
|
|
|
|
# [PACKAGES]
|
|
environment.systemPackages = with pkgs; [
|
|
git
|
|
neovim
|
|
];
|
|
|
|
# [SERVICES]
|
|
services.printing.enable = true;
|
|
|
|
# [SECURITY / FIREWALL]
|
|
networking.firewall.enable = true;
|
|
networking.firewall.allowedTCPPorts = [ ];
|
|
networking.firewall.allowedUDPPorts = [ ];
|
|
security.doas = {
|
|
enable = true;
|
|
extraRules = [{
|
|
runAs = "root";
|
|
groups = [ "wheel" ];
|
|
noPass = false;
|
|
keepEnv = true;
|
|
}];
|
|
};
|
|
|
|
# [USER / HOME MANAGER]
|
|
users.users.rachel = {
|
|
isNormalUser = true;
|
|
extraGroups = [ "wheel" "networkmanager" "video" "input" "audio" "wireshark" ];
|
|
};
|
|
|
|
home-manager.users.rachel = rec {
|
|
home = {
|
|
username = "rachel";
|
|
homeDirectory = "/home/rachel";
|
|
packages = with pkgs; [
|
|
neofetch
|
|
pfetch
|
|
unzip
|
|
zip
|
|
xz
|
|
gzip
|
|
bzip2
|
|
p7zip
|
|
usbutils
|
|
pciutils
|
|
nettools
|
|
nmap
|
|
arp-scan
|
|
acpi
|
|
julia
|
|
python3
|
|
ghc
|
|
firefox
|
|
sxiv
|
|
zathura
|
|
gnupg
|
|
agda
|
|
rofi
|
|
discord
|
|
pinentry_qt
|
|
dig
|
|
xxd
|
|
mpv
|
|
zoom-us
|
|
slack
|
|
imagemagick
|
|
ffmpeg
|
|
sl
|
|
cowsay
|
|
lolcat
|
|
fortune
|
|
banner
|
|
yt-dlp
|
|
libreoffice
|
|
protonmail-bridge
|
|
pass
|
|
protonvpn-cli
|
|
protonvpn-gui
|
|
thunderbird
|
|
tidal-hifi
|
|
signal-desktop
|
|
transmission-gtk
|
|
xclip
|
|
clinfo
|
|
glxinfo
|
|
vulkan-tools
|
|
obs-studio
|
|
file
|
|
gimp
|
|
SAX2
|
|
twemoji-color-font
|
|
bat
|
|
steam
|
|
steam-run
|
|
];
|
|
stateVersion = system.stateVersion;
|
|
};
|
|
|
|
xdg.userDirs = {
|
|
enable = true;
|
|
createDirectories = true;
|
|
desktop = "${home.homeDirectory}";
|
|
documents = "${home.homeDirectory}/doc";
|
|
download = "${home.homeDirectory}/dwn";
|
|
music = "${home.homeDirectory}/music";
|
|
pictures = "${home.homeDirectory}/img";
|
|
publicShare = "${home.homeDirectory}/srv";
|
|
templates = "${home.homeDirectory}/doc/templates";
|
|
videos = "${home.homeDirectory}/vid";
|
|
};
|
|
|
|
|
|
programs = {
|
|
bash = {
|
|
enable = true;
|
|
enableCompletion = true;
|
|
historyFile = "/dev/null";
|
|
sessionVariables = {
|
|
PS1 ="\\033[1m\\u\\033[0m@\\033[1m\\h\\033[0m: \\w\nλ ";
|
|
BROWSER = "firefox";
|
|
XINITRC = "${home.homeDirectory}/bin/xinitrc";
|
|
XAUTHORITY = "${home.homeDirectory}/.local/share/Xauthority";
|
|
PASH_KEYID = "3E4A909C8FEF6E3783699C79DFC26EF8EDAD6D71";
|
|
QT_AUTO_SCREEN_FACTOR = 1;
|
|
EDITOR = "emacsclient";
|
|
PATH = "${home.homeDirectory}/bin:$PATH";
|
|
NIX_SHELL_PRESERVE_PROMPT=1;
|
|
};
|
|
shellAliases = {
|
|
x = "startx";
|
|
rm = "rm -i";
|
|
cal = "cal -m";
|
|
};
|
|
initExtra = ''
|
|
source ~/.profile
|
|
set -o vi
|
|
[ "$IN_NIX_SHELL" ] && export PS1="''${PS1%λ }❄ "
|
|
'';
|
|
};
|
|
|
|
|
|
emacs = {
|
|
enable = true;
|
|
package = pkgs.emacs-gtk;
|
|
extraPackages = epkgs: with epkgs; with melpaStablePackages; [
|
|
magit
|
|
nix-mode
|
|
julia-repl
|
|
julia-mode
|
|
lean-mode
|
|
proof-general
|
|
pdf-tools
|
|
dune
|
|
tuareg
|
|
idris-mode
|
|
haskell-emacs-base
|
|
multi-vterm
|
|
dmenu
|
|
markdown-preview-mode
|
|
markdown-mode
|
|
exwm
|
|
org-superstar
|
|
org-fragtog
|
|
visual-fill
|
|
writeroom-mode
|
|
haskell-emacs
|
|
treemacs-evil
|
|
treemacs
|
|
solarized-theme
|
|
doom-modeline
|
|
all-the-icons-dired
|
|
page-break-lines
|
|
all-the-icons
|
|
dashboard
|
|
org-evil
|
|
zotero
|
|
vterm
|
|
undo-fu
|
|
latex-math-preview
|
|
haskell-mode
|
|
evil-surround
|
|
undo-tree
|
|
evil-org
|
|
evil
|
|
evil-commentary
|
|
evil-leader
|
|
meow
|
|
purescript-mode
|
|
];
|
|
};
|
|
|
|
git = {
|
|
enable = true;
|
|
userName = "Rachel Lambda Samuelsson";
|
|
userEmail = "depsterr@protonmail.com";
|
|
extraConfig = {
|
|
init.defaultBranch = "master";
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
# This value determines the NixOS release from which the default
|
|
# settings for stateful data, like file locations and database versions
|
|
# on your system were taken. It's perfectly fine and recommended to leave
|
|
# this value at the release version of the first install of this system.
|
|
# Before changing this value read the documentation for this option
|
|
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
|
|
system.stateVersion = "23.05"; # Did you read the comment?
|
|
|
|
}
|