176 lines
3.5 KiB
Nix
176 lines
3.5 KiB
Nix
{
|
|
lib,
|
|
pkgs,
|
|
config,
|
|
username,
|
|
sopsRoot,
|
|
...
|
|
}:
|
|
{
|
|
security.pam.loginLimits = [
|
|
{
|
|
domain = "*";
|
|
type = "soft";
|
|
item = "nofile";
|
|
value = "524288";
|
|
}
|
|
];
|
|
|
|
boot.kernelParams = [
|
|
"usbcore.autosuspend=-1" # Avoid usb autosuspend (for usb bluetooth adapter)
|
|
];
|
|
|
|
boot.loader = {
|
|
efi.canTouchEfiVariables = true;
|
|
systemd-boot.enable = true;
|
|
grub.enable = false;
|
|
timeout = 0;
|
|
};
|
|
|
|
hardware.graphics.enable = true;
|
|
hardware.graphics.enable32Bit = true;
|
|
|
|
systemd.services.nix-daemon = {
|
|
environment.TMPDIR = "/var/cache/nix";
|
|
serviceConfig.CacheDirectory = "nix";
|
|
};
|
|
environment.variables.NIX_REMOTE = "daemon";
|
|
|
|
security.rtkit.enable = true;
|
|
services.pipewire = {
|
|
enable = true;
|
|
alsa.enable = false;
|
|
alsa.support32Bit = false;
|
|
pulse.enable = false;
|
|
audio.enable = false;
|
|
};
|
|
services.pulseaudio = {
|
|
enable = true;
|
|
support32Bit = true;
|
|
package = pkgs.pulseaudioFull;
|
|
extraConfig = ''
|
|
load-module module-switch-on-connect
|
|
unload-module module-suspend-on-idle
|
|
'';
|
|
};
|
|
hardware.bluetooth = {
|
|
enable = true;
|
|
powerOnBoot = true;
|
|
settings = {
|
|
General = {
|
|
Enable = "Source,Sink,Media,Socket";
|
|
Disable = "HeadSet";
|
|
MultiProfile = "multiple";
|
|
};
|
|
};
|
|
};
|
|
users.extraUsers.${username}.extraGroups = [ "audio" ];
|
|
|
|
fonts = {
|
|
enableDefaultPackages = false;
|
|
fontDir.enable = true;
|
|
|
|
packages = with pkgs; [
|
|
noto-fonts
|
|
noto-fonts-cjk-sans
|
|
noto-fonts-emoji
|
|
|
|
jetbrains-mono
|
|
|
|
nerd-fonts.symbols-only
|
|
];
|
|
|
|
fontconfig.defaultFonts = {
|
|
serif = [
|
|
"Noto Serif CJK SC"
|
|
"Noto Serif"
|
|
"Symbols Nerd Font"
|
|
];
|
|
sansSerif = [
|
|
"Noto Sans CJK SC"
|
|
"Noto Sans"
|
|
"Symbols Nerd Font"
|
|
];
|
|
monospace = [
|
|
"JetBrains Mono"
|
|
"Noto Sans Mono CJK SC"
|
|
"Symbols Nerd Font Mono"
|
|
];
|
|
emoji = [ "Noto Color Emoji" ];
|
|
};
|
|
};
|
|
|
|
services.printing.enable = true;
|
|
|
|
services.keyd = {
|
|
enable = true;
|
|
keyboards.default.settings = {
|
|
main = {
|
|
capslock = "overload(control, esc)";
|
|
home = "end";
|
|
};
|
|
shift = {
|
|
home = "home";
|
|
};
|
|
control = {
|
|
delete = "print";
|
|
};
|
|
};
|
|
};
|
|
|
|
services.gvfs.enable = true;
|
|
|
|
services.openssh = {
|
|
enable = true;
|
|
settings = {
|
|
# Forbid root login through SSH.
|
|
PermitRootLogin = null;
|
|
PasswordAuthentication = true;
|
|
};
|
|
};
|
|
|
|
environment.systemPackages = [
|
|
pkgs.rclone
|
|
];
|
|
|
|
sops.secrets.imxyy-nix-rclone = {
|
|
sopsFile = sopsRoot + /imxyy-nix-rclone.conf;
|
|
format = "binary";
|
|
};
|
|
fileSystems = {
|
|
"/home/${username}/Nextcloud" = {
|
|
device = "Nextcloud:";
|
|
fsType = "rclone";
|
|
options = [
|
|
"nodev"
|
|
"nofail"
|
|
"allow_other"
|
|
"args2env"
|
|
"config=${config.sops.secrets.imxyy-nix-rclone.path}"
|
|
"uid=1000"
|
|
"gid=100"
|
|
"rw"
|
|
"no-check-certificate"
|
|
"vfs-cache-mode=full"
|
|
];
|
|
};
|
|
"/home/${username}/NAS" = {
|
|
device = "//10.0.0.1/share";
|
|
fsType = "cifs";
|
|
options = [
|
|
"username=nas"
|
|
"password=nasshare"
|
|
"x-systemd.automount,noauto,x-systemd.idle-timeout=60,x-systemd.device-timeout=5s,x-systemd.mount-timeout=5s"
|
|
"nodev"
|
|
"nofail"
|
|
"uid=1000"
|
|
"gid=100"
|
|
"vers=3"
|
|
"rw"
|
|
];
|
|
};
|
|
};
|
|
|
|
my.persist.nixosDirs = [ "/etc/NetworkManager/system-connections" ];
|
|
}
|