This commit is contained in:
Simon Gardling 2024-10-20 02:48:04 -04:00
parent 4e4f69484f
commit ab6aadcda5
Signed by: titaniumtown
GPG Key ID: 9AB28AC10ECE533D
5 changed files with 34 additions and 42 deletions

View File

@ -13,37 +13,32 @@
./declarative-nm.nix ./declarative-nm.nix
inputs.nixos-hardware.nixosModules.common-pc-ssd inputs.nixos-hardware.nixosModules.common-pc-ssd
]; ];
nix = { nix = {
#garbage collection and cleanup stuff # garbage collection and cleanup stuff
gc = { gc = {
automatic = true; automatic = true;
dates = "weekly"; dates = "weekly";
options = "--delete-older-than 7d"; options = "--delete-older-than 7d";
}; };
#optimize the store # optimize the store
optimise.automatic = true; optimise.automatic = true;
#enable flakes! # enable flakes!
settings.experimental-features = [ settings.experimental-features = [
"nix-command" "nix-command"
"flakes" "flakes"
]; ];
}; };
#kernel options # kernel options
boot = { boot = {
kernelPackages = pkgs.linuxPackages_cachyos-lto; kernelPackages = pkgs.linuxPackages_cachyos-lto;
kernel.sysctl = { kernel.sysctl = {
#for profiling # dmesg shushhhhh
"kernel.perf_event_paranoid" = 1;
"kernel.kptr_restrict" = 0;
#dmesg shushhhhh
"kernel.printk" = "2 4 1 7"; "kernel.printk" = "2 4 1 7";
}; };
@ -61,18 +56,18 @@
}; };
environment.etc = { environment.etc = {
#override default nixos /etc/issue # override default nixos /etc/issue
"issue".text = ""; "issue".text = "";
}; };
services = { services = {
#fwupd for updating firmware # fwupd for updating firmware
fwupd = { fwupd = {
enable = true; enable = true;
extraRemotes = [ "lvfs-testing" ]; extraRemotes = [ "lvfs-testing" ];
}; };
#auto detect network printers # auto detect network printers
avahi = { avahi = {
enable = true; enable = true;
nssmdns4 = true; nssmdns4 = true;
@ -85,10 +80,10 @@
drivers = with pkgs; [ hplip ]; drivers = with pkgs; [ hplip ];
}; };
#disable fprintd (doesn't compile, idk) # disable fprintd (doesn't compile, idk)
fprintd.enable = false; fprintd.enable = false;
#Making sure mullvad works on boot # Making sure mullvad works on boot
mullvad-vpn.enable = true; mullvad-vpn.enable = true;
}; };
@ -96,7 +91,7 @@
time.timeZone = "America/New_York"; time.timeZone = "America/New_York";
security = { security = {
#lets use doas and not sudo! # lets use doas and not sudo!
doas.enable = true; doas.enable = true;
sudo.enable = false; sudo.enable = false;
# Configure doas # Configure doas
@ -111,12 +106,7 @@
age.identityPaths = [ "/home/${username}/.ssh/id_ed25519" ]; age.identityPaths = [ "/home/${username}/.ssh/id_ed25519" ];
age.secrets.primary-password = { # networking
file = ./secrets/primary-password.age;
path = "/etc/secrets/primary-password";
};
#networking
networking = import ./networking.nix { inherit hostname; }; networking = import ./networking.nix { inherit hostname; };
# Select internationalisation properties. # Select internationalisation properties.
@ -139,11 +129,11 @@
enable = true; enable = true;
powerOnBoot = true; powerOnBoot = true;
#Enable experimental features for battery % of bluetooth devices # Enable experimental features for battery % of bluetooth devices
settings.General.Experimental = true; settings.General.Experimental = true;
}; };
#apply gtk themes by enabling dconf # Apply gtk themes by enabling dconf
programs.dconf.enable = true; programs.dconf.enable = true;
# Enable sound with pipewire. # Enable sound with pipewire.
@ -154,8 +144,11 @@
alsa.enable = true; alsa.enable = true;
alsa.support32Bit = true; alsa.support32Bit = true;
pulse.enable = true; pulse.enable = true;
# If you want to use JACK applications, uncomment this };
# jack.enable = true;
age.secrets.primary-password = {
file = ./secrets/primary-password.age;
path = "/etc/secrets/primary-password";
}; };
# Define my user account (the rest of the configuration if found in `~/.config/home-manager/...`) # Define my user account (the rest of the configuration if found in `~/.config/home-manager/...`)
@ -192,7 +185,7 @@
extraCompatPackages = with pkgs; [ proton-ge-bin ]; extraCompatPackages = with pkgs; [ proton-ge-bin ];
}; };
#System packages # System packages
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
mullvad-vpn mullvad-vpn

4
etcnixos/flake.lock generated
View File

@ -392,11 +392,11 @@
}, },
"wivrn": { "wivrn": {
"locked": { "locked": {
"lastModified": 1729402130, "lastModified": 1729405003,
"narHash": "sha256-V9ZdbZ2iFVsN2AF/aJmSiRDp9rU5HYeQX+1NBYcKJzQ=", "narHash": "sha256-V9ZdbZ2iFVsN2AF/aJmSiRDp9rU5HYeQX+1NBYcKJzQ=",
"owner": "NixOS", "owner": "NixOS",
"repo": "nixpkgs", "repo": "nixpkgs",
"rev": "a2922fae7ea92ee5c3ddb5999ee1997c699d87f8", "rev": "414c84c95aab19cb7dc603f0139d6dea2bc9f053",
"type": "github" "type": "github"
}, },
"original": { "original": {

View File

@ -2,14 +2,14 @@
{ {
hostName = hostname; hostName = hostname;
hostId = "cfe0ff46";
networkmanager = { networkmanager = {
enable = true; enable = true;
insertNameservers = [ insertNameservers = [
"1.1.1.1" "1.1.1.1"
"9.9.9.9" "9.9.9.9"
]; ];
wifi = { wifi = {
scanRandMacAddress = true; scanRandMacAddress = true;
}; };

View File

@ -12,7 +12,6 @@
./hardware_laptop.nix ./hardware_laptop.nix
inputs.nixos-hardware.nixosModules.framework-12th-gen-intel inputs.nixos-hardware.nixosModules.framework-12th-gen-intel
inputs.nixos-hardware.nixosModules.common-pc-ssd
inputs.lanzaboote.nixosModules.lanzaboote inputs.lanzaboote.nixosModules.lanzaboote
]; ];

View File

@ -18,9 +18,6 @@
]; ];
boot = { boot = {
# kernelPackages = lib.mkForce pkgs.linuxPackages_6_10;
# supportedFilesystems = [ "zfs" ];
kernelParams = [ kernelParams = [
# allow overclocking (I actually underclock but lol) # allow overclocking (I actually underclock but lol)
"amdgpu.ppfeaturemask=0xFFF7FFFF" "amdgpu.ppfeaturemask=0xFFF7FFFF"
@ -34,14 +31,16 @@
services.xserver.enable = false; services.xserver.enable = false;
services.desktopManager.plasma6.enable = true; services.desktopManager.plasma6.enable = true;
services.displayManager.sddm = { services.displayManager = {
enable = true; sddm = {
wayland.enable = true; enable = true;
}; wayland.enable = true;
};
services.displayManager.autoLogin = { autoLogin = {
enable = true; enable = true;
user = "primary"; user = username;
};
}; };
services.openssh = { services.openssh = {
@ -60,6 +59,7 @@
remotePlay.openFirewall = true; # Open ports in the firewall for Steam Remote Play remotePlay.openFirewall = true; # Open ports in the firewall for Steam Remote Play
}; };
# LACT (Linux AMDGPU Configuration Tool): https://github.com/ilya-zlobintsev/LACT
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
lact lact
]; ];