commit e1f472a7edc7650e4b47ce0ff4366c249e1eb418 Author: Adam Rabjerg Date: Mon Oct 17 14:36:07 2022 +0200 init diff --git a/configuration.nix b/configuration.nix new file mode 100644 index 0000000..d2b7062 --- /dev/null +++ b/configuration.nix @@ -0,0 +1,225 @@ +# Edit this configuration file to define what should be installed on +# your system. Help is available in the configuration.nix(5) man page +# and in the NixOS manual (accessible by running ‘nixos-help’). + +{ config, pkgs, ... }: + +{ + imports = + [ # Include the results of the hardware scan. + ./hardware-configuration.nix + ./fonts.nix + ./extra-services.nix + ./extra-hardware.nix + ./nvidia-intel.nix + ./games.nix + ]; + + # Bootloader. + boot.loader.systemd-boot.enable = true; + boot.loader.efi.canTouchEfiVariables = true; + boot.loader.efi.efiSysMountPoint = "/boot/efi"; + + # Setup keyfile + boot.initrd.secrets = { + "/crypto_keyfile.bin" = null; + }; + + # Enable swap on luks + boot.initrd.luks.devices."luks-295faf7a-fbd9-43a7-b8c2-6c2bddbb40d3".device = "/dev/disk/by-uuid/295faf7a-fbd9-43a7-b8c2-6c2bddbb40d3"; + boot.initrd.luks.devices."luks-295faf7a-fbd9-43a7-b8c2-6c2bddbb40d3".keyFile = "/crypto_keyfile.bin"; + + networking.hostName = "uwuntux"; # Define your hostname. + # networking.wireless.enable = true; # Enables wireless support via wpa_supplicant. + + # Configure network proxy if necessary + # networking.proxy.default = "http://user:password@proxy:port/"; + # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain"; + + # Enable networking + networking.networkmanager.enable = true; + + # Set your time zone. + time.timeZone = "Europe/Berlin"; + + # Select internationalisation properties. + i18n.defaultLocale = "en_US.utf8"; + + i18n.extraLocaleSettings = { + LC_ADDRESS = "de_DE.utf8"; + LC_IDENTIFICATION = "de_DE.utf8"; + LC_MEASUREMENT = "de_DE.utf8"; + LC_MONETARY = "de_DE.utf8"; + LC_NAME = "de_DE.utf8"; + LC_NUMERIC = "de_DE.utf8"; + LC_PAPER = "de_DE.utf8"; + LC_TELEPHONE = "de_DE.utf8"; + LC_TIME = "de_DE.utf8"; + }; + + # Enable the X11 windowing system. + services.xserver.enable = true; + + # Enable the KDE Plasma Desktop Environment. + services.xserver.displayManager.sddm.enable = true; + services.xserver.desktopManager.plasma5.enable = true; + + + # Configure keymap in X11 + services.xserver = { + layout = "de"; + xkbVariant = ""; + }; + + # Configure console keymap + console.keyMap = "de"; + + # Enable CUPS to print documents. + # services.printing.enable = true; + + # Enable sound with pipewire. + sound.enable = true; + hardware.pulseaudio.enable = false; + security.rtkit.enable = true; + services.pipewire = { + enable = true; + alsa.enable = true; + alsa.support32Bit = true; + pulse.enable = true; + # If you want to use JACK applications, uncomment this + #jack.enable = true; + + # use the example session manager (no others are packaged yet so this is enabled by default, + # no need to redefine it in your config for now) + #media-session.enable = true; + }; + + # Enable touchpad support (enabled default in most desktopManager). + # services.xserver.libinput.enable = true; + + # Define a user account. Don't forget to set a password with ‘passwd’. + users.users.adam = { + isNormalUser = true; + description = "Adam Rabjerg"; + extraGroups = [ "networkmanager" "wheel" "docker" ]; + packages = with pkgs; [ + # Web + firefox + thunderbird + nextcloud-client + + # Communication + gajim + signal-desktop + + # Text and office + kate + libreoffice-qt + + # media manipulation + gimp + + # Terminal + powerline + powerline-fonts + neofetch + guake + + # entertainment + spotify + + # dev + vscodium + kicad + + # security + yubioath-desktop + + # Desktop + ]; + }; + + # Allow unfree packages + nixpkgs.config.allowUnfree = true; + + # List packages installed in system profile. To search, run: + # $ nix search wget + environment.systemPackages = with pkgs; [ + # vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default. + # system needed + vim + wget + git + sysstat + + # Terminal + terminator + btop + htop + usbutils + pciutils + netcat + nvtop + + # hardware + bolt + plasma5Packages.plasma-thunderbolt + + # Media + vlc + + # Virtualisation + virt-manager + qemu + docker-compose + + ]; + + # Some programs need SUID wrappers, can be configured further or are + # started in user sessions. + # programs.mtr.enable = true; + programs.gnupg.agent = { + enable = true; + enableSSHSupport = true; + }; + + # List services that you want to enable: + + + # Enable the OpenSSH daemon. + # services.openssh.enable = true; + + # Open ports in the firewall. + # networking.firewall.allowedTCPPorts = [ ... ]; + # networking.firewall.allowedUDPPorts = [ ... ]; + # Or disable the firewall altogether. + # networking.firewall.enable = false; + + # This value determines the NixOS release from which the default + # settings for stateful data, like file locations and database versions + # on your system were taken. It‘s perfectly fine and recommended to leave + # this value at the release version of the first install of this system. + # Before changing this value read the documentation for this option + # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html). + system.stateVersion = "22.05"; # Did you read the comment? + + +##### nix extra options ####### + + nix = { + extraOptions = '' + experimental-features = nix-command flakes + keep-outputs = true + keep-derivations = true + ''; +# package = pkgs.nixFlakes; + gc = { + automatic = true; + dates = "weekly"; + options = "--delete-older-than 7d"; + persistent = true; + }; + autoOptimiseStore = true; + }; + +} diff --git a/extra-hardware.nix b/extra-hardware.nix new file mode 100644 index 0000000..d608114 --- /dev/null +++ b/extra-hardware.nix @@ -0,0 +1,15 @@ +{ config, pkgs, ... }: +{ +###### Thunderbolt ####### + +services.hardware.bolt.enable = true; + +###### Backlight ####### + +hardware.acpilight.enable = true; + +##### bluetooth ##### + +hardware.bluetooth.enable = true; +services.blueman.enable = true; +} \ No newline at end of file diff --git a/extra-services.nix b/extra-services.nix new file mode 100644 index 0000000..a090748 --- /dev/null +++ b/extra-services.nix @@ -0,0 +1,25 @@ +{ config, pkgs, ... }: +{ +##### sysstat ##### + +services.sysstat = { + enable = true; + collect-frequency = "*:*:00"; + }; + + +###### Virtualisation and Docker ####### + +virtualisation.libvirtd.enable = true; +programs.dconf.enable = true; + +virtualisation.docker.enable = true; + +###### Yubikey service ##### + +services.pcscd.enable = true; + +###### NTFS (3G) support ###### + +boot.supportedFilesystems = [ "ntfs" ]; +} \ No newline at end of file diff --git a/fonts.nix b/fonts.nix new file mode 100644 index 0000000..0b08dba --- /dev/null +++ b/fonts.nix @@ -0,0 +1,19 @@ +{ config, pkgs, ... }: + +###### FOnts AlL the f0nts ###### +{ + +fonts.fonts = with pkgs; [ + noto-fonts + noto-fonts-cjk + noto-fonts-emoji + liberation_ttf + fira-code + fira-code-symbols + mplus-outline-fonts.githubRelease + dina-font + proggyfonts + nerdfonts +]; + +} \ No newline at end of file diff --git a/games.nix b/games.nix new file mode 100644 index 0000000..d7a522c --- /dev/null +++ b/games.nix @@ -0,0 +1,9 @@ +{ config, pkgs, ... }: +{ +##### games #### + programs.steam = { + enable = true; + remotePlay.openFirewall = true; # Open ports in the firewall for Steam Remote Play + dedicatedServer.openFirewall = true; # Open ports in the firewall for Source Dedicated Server + }; +} \ No newline at end of file diff --git a/hardware-configuration.nix b/hardware-configuration.nix new file mode 100644 index 0000000..269742c --- /dev/null +++ b/hardware-configuration.nix @@ -0,0 +1,42 @@ +# Do not modify this file! It was generated by ‘nixos-generate-config’ +# and may be overwritten by future invocations. Please make changes +# to /etc/nixos/configuration.nix instead. +{ config, lib, pkgs, modulesPath, ... }: + +{ + imports = + [ (modulesPath + "/installer/scan/not-detected.nix") + ]; + + boot.initrd.availableKernelModules = [ "xhci_pci" "thunderbolt" "nvme" "usb_storage" "sd_mod" ]; + boot.initrd.kernelModules = [ ]; + boot.kernelModules = [ "kvm-intel" ]; + boot.extraModulePackages = [ ]; + + fileSystems."/" = + { device = "/dev/disk/by-uuid/bd892fa4-c582-41d0-a916-874e0bfba6cb"; + fsType = "ext4"; + }; + + boot.initrd.luks.devices."luks-822df80a-bf9e-4ef0-81fc-312cb7f19fbb".device = "/dev/disk/by-uuid/822df80a-bf9e-4ef0-81fc-312cb7f19fbb"; + + fileSystems."/boot/efi" = + { device = "/dev/disk/by-uuid/35E3-66A9"; + fsType = "vfat"; + }; + + swapDevices = + [ { device = "/dev/disk/by-uuid/98e2ba20-f29e-4f0c-80ab-580062ac6fa7"; } + ]; + + # Enables DHCP on each ethernet and wireless interface. In case of scripted networking + # (the default) this is the recommended approach. When using systemd-networkd it's + # still possible to use this option, but it's recommended to use it in conjunction + # with explicit per-interface declarations with `networking.interfaces..useDHCP`. + networking.useDHCP = lib.mkDefault true; + # networking.interfaces.enp0s20f0u1.useDHCP = lib.mkDefault true; + # networking.interfaces.wlo1.useDHCP = lib.mkDefault true; + + powerManagement.cpuFreqGovernor = lib.mkDefault "powersave"; + hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware; +} diff --git a/nvidia-intel.nix b/nvidia-intel.nix new file mode 100644 index 0000000..4f4923e --- /dev/null +++ b/nvidia-intel.nix @@ -0,0 +1,23 @@ +{ config, pkgs, ... }: +{ +###### intel igpu ######## + +boot.kernelPackages = pkgs.linuxPackages_latest; + +hardware.opengl.enable = true; +hardware.opengl.extraPackages = [ pkgs.mesa.drivers ]; + +##### nvidia offloading ######## + + services.xserver.videoDrivers = [ "nvidia" ]; + + hardware.nvidia.prime = { + sync.enable = true; + + # Bus ID of the NVIDIA GPU. You can find it using lspci, either under 3D or VGA + nvidiaBusId = "PCI:1:0:0"; + + # Bus ID of the Intel GPU. You can find it using lspci, either under 3D or VGA + intelBusId = "PCI:0:2:0"; + }; +} \ No newline at end of file