update
This commit is contained in:
parent
98f309e72a
commit
8a32e2f31b
16 changed files with 645 additions and 271 deletions
|
@ -1,245 +1,58 @@
|
||||||
# Edit this configuration file to define what should be installed on
|
# configuration.nix for tux computer
|
||||||
# your system. Help is available in the configuration.nix(5) man page
|
|
||||||
# and in the NixOS manual (accessible by running ‘nixos-help’).
|
|
||||||
|
|
||||||
{ config, pkgs, ...}:
|
{ config, lib, pkgs, ... }:
|
||||||
|
|
||||||
{
|
{
|
||||||
imports =
|
imports =
|
||||||
[ # Include the results of the hardware scan.
|
[ # Include the results of the hardware scan.
|
||||||
./hardware-configuration.nix
|
./hardware-configuration.nix
|
||||||
./gnome.nix
|
./mods/base.nix
|
||||||
|
# ./mods/gnome.nix
|
||||||
|
# ./mods/fonts.nix
|
||||||
|
# ./mods/systemd.nix
|
||||||
|
# ./mods/intel-gpu.nix
|
||||||
];
|
];
|
||||||
|
|
||||||
# Nix flakes support
|
# Hostname
|
||||||
nix.settings.experimental-features = [ "nix-command" "flakes"];
|
networking.hostName = "macbook"; # Define your hostname.
|
||||||
|
|
||||||
|
# Enable the Flakes feature and the accompanying new nix command-line tool
|
||||||
|
nix.settings.experimental-features = [ "nix-command" "flakes" ];
|
||||||
|
|
||||||
# Bootloader.
|
# Bootloader.
|
||||||
boot.loader.systemd-boot.enable = true;
|
boot.loader.systemd-boot.enable = true;
|
||||||
boot.loader.efi.canTouchEfiVariables = true;
|
boot.loader.efi.canTouchEfiVariables = true;
|
||||||
boot.loader.grub.configurationLimit = 10;
|
boot.loader.grub.configurationLimit = 10;
|
||||||
|
|
||||||
boot.initrd.luks.devices."luks-4060c1c6-89ef-4d17-9ef1-0d86c907a48f".device = "/dev/disk/by-uuid/4060c1c6-89ef-4d17-9ef1-0d86c907a48f";
|
|
||||||
networking.hostName = "macbook"; # Define your hostname.
|
|
||||||
# networking.wireless.enable = true; # Enables wireless support via wpa_supplicant.
|
|
||||||
|
|
||||||
# Clear /tmp during boot
|
|
||||||
boot.tmp.cleanOnBoot = true;
|
boot.tmp.cleanOnBoot = true;
|
||||||
|
|
||||||
# Housekeeping: Garbage collection
|
boot.initrd.luks.devices."luks-4060c1c6-89ef-4d17-9ef1-0d86c907a48f".device = "/dev/disk/by-uuid/4060c1c6-89ef-4d17-9ef1-0d86c907a48f";
|
||||||
nix.gc.automatic = true;
|
|
||||||
nix.optimise.automatic = true;
|
|
||||||
|
|
||||||
# Disable sudo password for the wheel group
|
# User
|
||||||
security.sudo.wheelNeedsPassword = false;
|
|
||||||
|
|
||||||
# Configure network proxy if necessary
|
|
||||||
# networking.proxy.default = "http://user:password@proxy:port/";
|
|
||||||
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
|
|
||||||
|
|
||||||
# Enable networking
|
|
||||||
networking.networkmanager.enable = true;
|
|
||||||
|
|
||||||
# Nvidia card
|
|
||||||
# Enable OpenGL
|
|
||||||
hardware.opengl = {
|
|
||||||
enable = true;
|
|
||||||
};
|
|
||||||
|
|
||||||
# Load nvidia driver for Xorg and Wayland
|
|
||||||
services.xserver.videoDrivers = ["nvidia"];
|
|
||||||
|
|
||||||
hardware.nvidia = {
|
|
||||||
|
|
||||||
# Modesetting is required.
|
|
||||||
modesetting.enable = true;
|
|
||||||
|
|
||||||
# Nvidia power management. Experimental, and can cause sleep/suspend to fail.
|
|
||||||
# Enable this if you have graphical corruption issues or application crashes after waking
|
|
||||||
# up from sleep. This fixes it by saving the entire VRAM memory to /tmp/ instead
|
|
||||||
# of just the bare essentials.
|
|
||||||
powerManagement.enable = false;
|
|
||||||
|
|
||||||
# Fine-grained power management. Turns off GPU when not in use.
|
|
||||||
# Experimental and only works on modern Nvidia GPUs (Turing or newer).
|
|
||||||
#powerManagement.finegrained = false;
|
|
||||||
|
|
||||||
# Use the NVidia open source kernel module (not to be confused with the
|
|
||||||
# independent third-party "nouveau" open source driver).
|
|
||||||
# Support is limited to the Turing and later architectures. Full list of
|
|
||||||
# supported GPUs is at:
|
|
||||||
# https://github.com/NVIDIA/open-gpu-kernel-modules#compatible-gpus
|
|
||||||
# Only available from driver 515.43.04+
|
|
||||||
# Currently alpha-quality/buggy, so false is currently the recommended setting.
|
|
||||||
open = false;
|
|
||||||
|
|
||||||
# Enable the Nvidia settings menu,
|
|
||||||
# accessible via `nvidia-settings`.
|
|
||||||
nvidiaSettings = true;
|
|
||||||
|
|
||||||
# Optionally, you may need to select the appropriate driver version for your specific GPU.
|
|
||||||
package = config.boot.kernelPackages.nvidiaPackages.legacy_340;
|
|
||||||
};
|
|
||||||
|
|
||||||
# Set your time zone.
|
|
||||||
time.timeZone = "Asia/Taipei";
|
|
||||||
|
|
||||||
# Select internationalisation properties.
|
|
||||||
i18n.defaultLocale = "en_US.UTF-8";
|
|
||||||
|
|
||||||
i18n.extraLocaleSettings = {
|
|
||||||
LC_ADDRESS = "en_US.UTF-8";
|
|
||||||
LC_IDENTIFICATION = "en_US.UTF-8";
|
|
||||||
LC_MEASUREMENT = "en_US.UTF-8";
|
|
||||||
LC_MONETARY = "en_US.UTF-8";
|
|
||||||
LC_NAME = "en_US.UTF-8";
|
|
||||||
LC_NUMERIC = "en_US.UTF-8";
|
|
||||||
LC_PAPER = "en_US.UTF-8";
|
|
||||||
LC_TELEPHONE = "en_US.UTF-8";
|
|
||||||
LC_TIME = "en_US.UTF-8";
|
|
||||||
};
|
|
||||||
|
|
||||||
i18n.inputMethod.enabled = "fcitx5";
|
|
||||||
i18n.inputMethod.fcitx5.addons = with pkgs; [
|
|
||||||
fcitx5-chewing
|
|
||||||
fcitx5-chinese-addons
|
|
||||||
#fcitx5-mcbopomofo
|
|
||||||
#fcitx5-pinyin-zhwiki
|
|
||||||
#fcitx5-pinyin-moegirl
|
|
||||||
fcitx5-table-other
|
|
||||||
fcitx5-table-extra
|
|
||||||
fcitx5-gtk
|
|
||||||
fcitx5-rime
|
|
||||||
];
|
|
||||||
|
|
||||||
# Enable the X11 windowing system.
|
|
||||||
services.xserver.enable = true;
|
|
||||||
|
|
||||||
# Enable the GNOME Desktop Environment.
|
|
||||||
services.xserver.displayManager.gdm.enable = true;
|
|
||||||
services.xserver.desktopManager.gnome.enable = true;
|
|
||||||
# remove xterm
|
|
||||||
services.xserver.excludePackages = [ pkgs.xterm ];
|
|
||||||
services.xserver.desktopManager.xterm.enable = false;
|
|
||||||
|
|
||||||
# Configure keymap in X11
|
|
||||||
services.xserver.xkb = {
|
|
||||||
layout = "us";
|
|
||||||
variant = "";
|
|
||||||
};
|
|
||||||
|
|
||||||
# Enable CUPS to print documents.
|
|
||||||
services.printing.enable = true;
|
|
||||||
|
|
||||||
# Enable sound with pipewire.
|
|
||||||
hardware.pulseaudio.enable = false;
|
|
||||||
security.rtkit.enable = true;
|
|
||||||
services.pipewire = {
|
|
||||||
enable = true;
|
|
||||||
alsa.enable = true;
|
|
||||||
alsa.support32Bit = true;
|
|
||||||
pulse.enable = true;
|
|
||||||
# If you want to use JACK applications, uncomment this
|
|
||||||
#jack.enable = true;
|
|
||||||
|
|
||||||
# use the example session manager (no others are packaged yet so this is enabled by default,
|
|
||||||
# no need to redefine it in your config for now)
|
|
||||||
#media-session.enable = true;
|
|
||||||
};
|
|
||||||
|
|
||||||
# Enable touchpad support (enabled default in most desktopManager).
|
|
||||||
# services.xserver.libinput.enable = true;
|
|
||||||
|
|
||||||
# Define a user account. Don't forget to set a password with ‘passwd’.
|
|
||||||
users.users.elias = {
|
users.users.elias = {
|
||||||
isNormalUser = true;
|
isNormalUser = true;
|
||||||
description = "elias";
|
description = "elias";
|
||||||
extraGroups = [ "networkmanager" "wheel" ];
|
extraGroups = [ "networkmanager" "wheel" ];
|
||||||
packages = with pkgs; [
|
packages = with pkgs; [
|
||||||
# thunderbird
|
# install apps in home-manager
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
|
|
||||||
# Enable automatic login for the user.
|
# This option defines the first version of NixOS you have installed on this particular machine,
|
||||||
services.displayManager.autoLogin.enable = true;
|
# and is used to maintain compatibility with application data (e.g. databases) created on older NixOS versions.
|
||||||
services.displayManager.autoLogin.user = "elias";
|
#
|
||||||
|
# Most users should NEVER change this value after the initial install, for any reason,
|
||||||
# Workaround for GNOME autologin: https://github.com/NixOS/nixpkgs/issues/103746#issuecomment-945091229
|
# even if you've upgraded your system to a new NixOS release.
|
||||||
systemd.services."getty@tty1".enable = false;
|
#
|
||||||
systemd.services."autovt@tty1".enable = false;
|
# This value does NOT affect the Nixpkgs version your packages and OS are pulled from,
|
||||||
|
# so changing it will NOT upgrade your system.
|
||||||
# Install firefox.
|
#
|
||||||
programs.firefox.enable = true;
|
# This value being lower than the current NixOS release does NOT mean your system is
|
||||||
|
# out of date, out of support, or vulnerable.
|
||||||
# Allow unfree packages
|
#
|
||||||
nixpkgs.config.allowUnfree = true;
|
# Do NOT change this value unless you have manually inspected all the changes it would make to your configuration,
|
||||||
nixpkgs.config.nvidia.acceptLicense = true;
|
# and migrated your data accordingly.
|
||||||
|
#
|
||||||
# List packages installed in system profile. To search, run:
|
# For more information, see `man configuration.nix` or https://nixos.org/manual/nixos/stable/options#opt-system.stateVersion .
|
||||||
# $ nix search wget
|
|
||||||
environment.systemPackages = with pkgs; [
|
|
||||||
# vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
|
|
||||||
wget
|
|
||||||
fastfetch
|
|
||||||
curl
|
|
||||||
keepassxc
|
|
||||||
git
|
|
||||||
htop
|
|
||||||
nextcloud-client
|
|
||||||
libreoffice-fresh
|
|
||||||
hunspell #dictionary for libreoffice
|
|
||||||
hunspellDicts.en_CA
|
|
||||||
hunspellDicts.en_US
|
|
||||||
];
|
|
||||||
|
|
||||||
# Fonts
|
|
||||||
fonts.packages = with pkgs; [
|
|
||||||
corefonts
|
|
||||||
vistafonts
|
|
||||||
noto-fonts
|
|
||||||
noto-fonts-cjk
|
|
||||||
noto-fonts-emoji
|
|
||||||
liberation_ttf
|
|
||||||
fira-code
|
|
||||||
fira-code-symbols
|
|
||||||
mplus-outline-fonts.githubRelease
|
|
||||||
dina-font
|
|
||||||
proggyfonts
|
|
||||||
];
|
|
||||||
|
|
||||||
fonts.fontDir.enable = true;
|
|
||||||
|
|
||||||
# Some programs need SUID wrappers, can be configured further or are
|
|
||||||
# started in user sessions.
|
|
||||||
# programs.mtr.enable = true;
|
|
||||||
# programs.gnupg.agent = {
|
|
||||||
# enable = true;
|
|
||||||
# enableSSHSupport = true;
|
|
||||||
# };
|
|
||||||
|
|
||||||
# List services that you want to enable:
|
|
||||||
|
|
||||||
# Enable the OpenSSH daemon.
|
|
||||||
services.openssh.enable = true;
|
|
||||||
|
|
||||||
# Tailscale
|
|
||||||
services.tailscale.enable = true;
|
|
||||||
|
|
||||||
# Flatpak
|
|
||||||
services.flatpak.enable = true;
|
|
||||||
|
|
||||||
# Open ports in the firewall.
|
|
||||||
networking.firewall.allowedTCPPorts = [ 22 ];
|
|
||||||
# networking.firewall.allowedUDPPorts = [ ... ];
|
|
||||||
# Or disable the firewall altogether.
|
|
||||||
# networking.firewall.enable = false;
|
|
||||||
|
|
||||||
# This value determines the NixOS release from which the default
|
|
||||||
# settings for stateful data, like file locations and database versions
|
|
||||||
# on your system were taken. It‘s perfectly fine and recommended to leave
|
|
||||||
# this value at the release version of the first install of this system.
|
|
||||||
# Before changing this value read the documentation for this option
|
|
||||||
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
|
|
||||||
system.stateVersion = "24.05"; # Did you read the comment?
|
system.stateVersion = "24.05"; # Did you read the comment?
|
||||||
|
|
||||||
}
|
}
|
||||||
|
|
BIN
files/tootbrute.png
Normal file
BIN
files/tootbrute.png
Normal file
Binary file not shown.
After Width: | Height: | Size: 75 KiB |
BIN
files/wallpaper.png
Normal file
BIN
files/wallpaper.png
Normal file
Binary file not shown.
After Width: | Height: | Size: 9.1 MiB |
27
flake.lock
generated
Normal file
27
flake.lock
generated
Normal file
|
@ -0,0 +1,27 @@
|
||||||
|
{
|
||||||
|
"nodes": {
|
||||||
|
"nixpkgs": {
|
||||||
|
"locked": {
|
||||||
|
"lastModified": 1748421225,
|
||||||
|
"narHash": "sha256-XXILOc80tvlvEQgYpYFnze8MkQQmp3eQxFbTzb3m/R0=",
|
||||||
|
"owner": "NixOS",
|
||||||
|
"repo": "nixpkgs",
|
||||||
|
"rev": "78add7b7abb61689e34fc23070a8f55e1d26185b",
|
||||||
|
"type": "github"
|
||||||
|
},
|
||||||
|
"original": {
|
||||||
|
"owner": "NixOS",
|
||||||
|
"ref": "nixos-24.11",
|
||||||
|
"repo": "nixpkgs",
|
||||||
|
"type": "github"
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"root": {
|
||||||
|
"inputs": {
|
||||||
|
"nixpkgs": "nixpkgs"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"root": "root",
|
||||||
|
"version": 7
|
||||||
|
}
|
19
flake.nix
Normal file
19
flake.nix
Normal file
|
@ -0,0 +1,19 @@
|
||||||
|
{
|
||||||
|
description = "NixOS configuration";
|
||||||
|
|
||||||
|
inputs = {
|
||||||
|
nixpkgs.url = "github:NixOS/nixpkgs/nixos-24.11";
|
||||||
|
};
|
||||||
|
|
||||||
|
outputs = inputs@{ nixpkgs, ... }: {
|
||||||
|
nixosConfigurations = {
|
||||||
|
macbook = nixpkgs.lib.nixosSystem {
|
||||||
|
system = "x86_64-linux";
|
||||||
|
modules = [
|
||||||
|
./configuration.nix
|
||||||
|
|
||||||
|
];
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
}
|
53
gnome.nix
53
gnome.nix
|
@ -1,53 +0,0 @@
|
||||||
{ config, pkgs, lib, ... }:
|
|
||||||
|
|
||||||
{
|
|
||||||
|
|
||||||
# Auto unlock gnome keyring
|
|
||||||
services.gnome.gnome-keyring.enable = true;
|
|
||||||
security.pam.services.sddm.enableGnomeKeyring = true;
|
|
||||||
|
|
||||||
# Remove default packages from GNOME
|
|
||||||
environment.gnome.excludePackages = with pkgs.gnome; [
|
|
||||||
baobab # disk usage analyzer
|
|
||||||
cheese # photo booth
|
|
||||||
eog # image viewer
|
|
||||||
epiphany # web browser
|
|
||||||
#gedit # text editor
|
|
||||||
simple-scan # document scanner
|
|
||||||
totem # video player
|
|
||||||
yelp # help viewer
|
|
||||||
evince # document viewer
|
|
||||||
file-roller # archive manager
|
|
||||||
geary # email client
|
|
||||||
seahorse # password manager
|
|
||||||
gnome-contacts
|
|
||||||
gnome-weather
|
|
||||||
gnome-maps
|
|
||||||
gnome-music
|
|
||||||
gnome-software
|
|
||||||
gnome-shell-extensions
|
|
||||||
pkgs.gnome-photos
|
|
||||||
pkgs.gnome-connections
|
|
||||||
pkgs.snapshot
|
|
||||||
gnome-logs
|
|
||||||
gnome-system-monitor
|
|
||||||
gnome-calculator
|
|
||||||
pkgs.gnome-tour
|
|
||||||
#gnome-calendar
|
|
||||||
#gnome-characters
|
|
||||||
#gnome-clocks
|
|
||||||
#gnome-font-viewer gnome-screenshot
|
|
||||||
#gnome-disk-utilitys
|
|
||||||
];
|
|
||||||
|
|
||||||
environment.systemPackages = with pkgs; [
|
|
||||||
#Gnome tweak tools
|
|
||||||
gnome.gnome-tweaks
|
|
||||||
gnomeExtensions.appindicator
|
|
||||||
gnomeExtensions.caffeine
|
|
||||||
gnomeExtensions.gsconnect
|
|
||||||
gnomeExtensions.hot-edge
|
|
||||||
gnomeExtensions.alphabetical-app-grid
|
|
||||||
];
|
|
||||||
|
|
||||||
}
|
|
158
mods/base.nix
Normal file
158
mods/base.nix
Normal file
|
@ -0,0 +1,158 @@
|
||||||
|
# base.nix
|
||||||
|
# configuration for all my computers
|
||||||
|
|
||||||
|
{ pkgs, config, ... }:
|
||||||
|
|
||||||
|
{
|
||||||
|
imports =
|
||||||
|
[
|
||||||
|
./gnome.nix
|
||||||
|
./systemd.nix
|
||||||
|
./fonts.nix
|
||||||
|
./gpu.nix
|
||||||
|
];
|
||||||
|
|
||||||
|
# Housekeeping: Garbage collection
|
||||||
|
nix.optimise.automatic = true;
|
||||||
|
nix.gc = {
|
||||||
|
automatic = true;
|
||||||
|
dates = "daily";
|
||||||
|
options = "--delete-older-than 7d";
|
||||||
|
};
|
||||||
|
|
||||||
|
nix.settings.auto-optimise-store = true;
|
||||||
|
|
||||||
|
# Increase buffer size for NixOS-Rebuild
|
||||||
|
nix.settings.download-buffer-size = "4G";
|
||||||
|
|
||||||
|
# Enable networking
|
||||||
|
networking.networkmanager.enable = true;
|
||||||
|
|
||||||
|
# Open ports in the firewall.
|
||||||
|
networking.firewall.allowedTCPPorts = [ 22 ];
|
||||||
|
# networking.firewall.allowedUDPPorts = [ ... ];
|
||||||
|
# Or disable the firewall altogether.
|
||||||
|
# networking.firewall.enable = false;
|
||||||
|
|
||||||
|
# Disable sudo password for the wheel group
|
||||||
|
security.sudo.wheelNeedsPassword = false;
|
||||||
|
|
||||||
|
# Set your time zone.
|
||||||
|
time.timeZone = "Asia/Taipei";
|
||||||
|
|
||||||
|
# Select internationalisation properties.
|
||||||
|
i18n.defaultLocale = "en_US.UTF-8";
|
||||||
|
|
||||||
|
i18n.extraLocaleSettings = {
|
||||||
|
LC_ADDRESS = "zh_TW.UTF-8";
|
||||||
|
LC_IDENTIFICATION = "zh_TW.UTF-8";
|
||||||
|
LC_MEASUREMENT = "zh_TW.UTF-8";
|
||||||
|
LC_MONETARY = "zh_TW.UTF-8";
|
||||||
|
LC_NAME = "zh_TW.UTF-8";
|
||||||
|
LC_NUMERIC = "zh_TW.UTF-8";
|
||||||
|
LC_PAPER = "zh_TW.UTF-8";
|
||||||
|
LC_TELEPHONE = "zh_TW.UTF-8";
|
||||||
|
LC_TIME = "zh_TW.UTF-8";
|
||||||
|
};
|
||||||
|
|
||||||
|
# Traditional Chinese input
|
||||||
|
i18n.inputMethod = {
|
||||||
|
enable = true;
|
||||||
|
type = "fcitx5";
|
||||||
|
fcitx5.addons = with pkgs; [
|
||||||
|
fcitx5-chewing
|
||||||
|
fcitx5-chinese-addons
|
||||||
|
fcitx5-table-extra
|
||||||
|
];
|
||||||
|
};
|
||||||
|
|
||||||
|
# Enable the X11 windowing system.
|
||||||
|
services.xserver.enable = true;
|
||||||
|
|
||||||
|
# Enable the GNOME Desktop Environment.
|
||||||
|
services.xserver.displayManager.gdm.enable = true;
|
||||||
|
services.xserver.desktopManager.gnome.enable = true;
|
||||||
|
# remove xterm
|
||||||
|
services.xserver.excludePackages = [ pkgs.xterm ];
|
||||||
|
services.xserver.desktopManager.xterm.enable = false;
|
||||||
|
|
||||||
|
# Configure keymap in X11
|
||||||
|
services.xserver.xkb = {
|
||||||
|
layout = "us";
|
||||||
|
variant = "";
|
||||||
|
};
|
||||||
|
|
||||||
|
# Enable CUPS to print documents.
|
||||||
|
services.printing.enable = false;
|
||||||
|
|
||||||
|
# Enable touchpad support (enabled default in most desktop>
|
||||||
|
services.libinput.enable = true;
|
||||||
|
|
||||||
|
# Enable automatic login for the user.
|
||||||
|
services.displayManager.autoLogin.enable = true;
|
||||||
|
services.displayManager.autoLogin.user = "elias";
|
||||||
|
|
||||||
|
# PROGRAMS
|
||||||
|
# ================
|
||||||
|
# Install Firefox.
|
||||||
|
programs.firefox.enable = true;
|
||||||
|
|
||||||
|
# Allow unfree packages
|
||||||
|
nixpkgs.config.allowUnfree = true;
|
||||||
|
|
||||||
|
# List packages installed in system profile. To search, run:
|
||||||
|
# $ nix search wget
|
||||||
|
nix.settings.experimental-features = [ "nix-command" "flakes" ];
|
||||||
|
environment.systemPackages = with pkgs; [
|
||||||
|
|
||||||
|
# MOVE MOST TO HOME.NIX
|
||||||
|
# terminal apps
|
||||||
|
wget
|
||||||
|
curl
|
||||||
|
fastfetch
|
||||||
|
gnome-tweaks
|
||||||
|
btop
|
||||||
|
htop
|
||||||
|
tree
|
||||||
|
restic # backup program
|
||||||
|
lm_sensors
|
||||||
|
hddtemp
|
||||||
|
f3
|
||||||
|
unzip
|
||||||
|
git
|
||||||
|
|
||||||
|
# terminal editors
|
||||||
|
neovim
|
||||||
|
ptyxis
|
||||||
|
|
||||||
|
# nix helper apps
|
||||||
|
nh
|
||||||
|
];
|
||||||
|
|
||||||
|
# Services
|
||||||
|
# =========================
|
||||||
|
|
||||||
|
# Enable OpenSSH
|
||||||
|
services.openssh = {
|
||||||
|
enable = true;
|
||||||
|
# require public key authentication for better security
|
||||||
|
settings.PasswordAuthentication = true;
|
||||||
|
settings.KbdInteractiveAuthentication = false;
|
||||||
|
settings.PermitRootLogin = "no";
|
||||||
|
};
|
||||||
|
|
||||||
|
# Enable Flatpak
|
||||||
|
services.flatpak.enable = true;
|
||||||
|
|
||||||
|
# Enable Tailscale
|
||||||
|
services.tailscale.enable = true;
|
||||||
|
|
||||||
|
# Enable Docker
|
||||||
|
#virtualisation.docker.enable = true;
|
||||||
|
|
||||||
|
# Enable Firmware Updater
|
||||||
|
services.fwupd.enable = true;
|
||||||
|
# fwupdmgr refresh
|
||||||
|
# fwupdmgr get-updates
|
||||||
|
|
||||||
|
}
|
32
mods/fonts.nix
Normal file
32
mods/fonts.nix
Normal file
|
@ -0,0 +1,32 @@
|
||||||
|
{ config, pkgs, ... }:
|
||||||
|
|
||||||
|
{
|
||||||
|
# Fonts
|
||||||
|
fonts.packages = with pkgs; [
|
||||||
|
corefonts
|
||||||
|
vistafonts
|
||||||
|
noto-fonts
|
||||||
|
|
||||||
|
# cjk fonts
|
||||||
|
noto-fonts-cjk-sans
|
||||||
|
noto-fonts-cjk-serif
|
||||||
|
noto-fonts-emoji
|
||||||
|
vistafonts-cht
|
||||||
|
source-han-serif
|
||||||
|
source-han-sans-vf-otf
|
||||||
|
source-han-sans-vf-ttf
|
||||||
|
source-han-mono
|
||||||
|
|
||||||
|
# coding/terminal fonts
|
||||||
|
liberation_ttf
|
||||||
|
fira-code
|
||||||
|
fira-code-symbols
|
||||||
|
mplus-outline-fonts.githubRelease
|
||||||
|
dina-font
|
||||||
|
proggyfonts
|
||||||
|
iosevka
|
||||||
|
#nerdfonts
|
||||||
|
];
|
||||||
|
|
||||||
|
fonts.fontDir.enable = true;
|
||||||
|
}
|
63
mods/gnome.nix
Normal file
63
mods/gnome.nix
Normal file
|
@ -0,0 +1,63 @@
|
||||||
|
{ config, pkgs, lib, ... }:
|
||||||
|
|
||||||
|
{
|
||||||
|
# Auto unlock GNOME keyring
|
||||||
|
services.gnome.gnome-keyring.enable = true;
|
||||||
|
security.pam.services.sddm.enableGnomeKeyring = true;
|
||||||
|
# also need to install pkgs.seahorse, set keyring key to blank password
|
||||||
|
|
||||||
|
# Remove default packages from GNOME
|
||||||
|
environment.gnome.excludePackages = with pkgs; [
|
||||||
|
baobab # disk usage analyzer
|
||||||
|
cheese # photo booth
|
||||||
|
eog # image viewer
|
||||||
|
epiphany # web browser
|
||||||
|
#gedit # text editor
|
||||||
|
simple-scan # document scanner
|
||||||
|
totem # video player
|
||||||
|
yelp # help viewer
|
||||||
|
file-roller # archive manager
|
||||||
|
geary # email client
|
||||||
|
seahorse # password manager
|
||||||
|
gnome-contacts
|
||||||
|
gnome-weather
|
||||||
|
gnome-maps
|
||||||
|
gnome-music
|
||||||
|
gnome-software
|
||||||
|
gnome-extension-manager
|
||||||
|
gnome-shell-extensions
|
||||||
|
gnome-photos
|
||||||
|
gnome-connections
|
||||||
|
snapshot
|
||||||
|
gnome-logs
|
||||||
|
gnome-system-monitor
|
||||||
|
gnome-calculator
|
||||||
|
gnome-tour
|
||||||
|
];
|
||||||
|
|
||||||
|
# Install GNOME Extensions
|
||||||
|
# Logout and login again after rebuilding to see changes in GNOME
|
||||||
|
environment.systemPackages = with pkgs; [
|
||||||
|
gnomeExtensions.appindicator
|
||||||
|
gnomeExtensions.caffeine
|
||||||
|
gnomeExtensions.gsconnect
|
||||||
|
gnomeExtensions.hot-edge
|
||||||
|
gnomeExtensions.alphabetical-app-grid
|
||||||
|
gnomeExtensions.kimpanel
|
||||||
|
gnomeExtensions.tailscale-qs
|
||||||
|
];
|
||||||
|
|
||||||
|
# Set User 'elias' icon to tootbrute.png image
|
||||||
|
system.activationScripts.script.text = ''
|
||||||
|
mkdir -p /var/lib/AccountsService/{icons,users}
|
||||||
|
cp /home/elias/nixos-config/files/tootbrute.png /var/lib/AccountsService/icons/elias
|
||||||
|
echo -e "[User]\nIcon=/var/lib/AccountsService/icons/elias\n" > /var/lib/AccountsService/users/elias
|
||||||
|
|
||||||
|
chown root:root /var/lib/AccountsService/users/elias
|
||||||
|
chmod 0600 /var/lib/AccountsService/users/elias
|
||||||
|
|
||||||
|
chown root:root /var/lib/AccountsService/icons/elias
|
||||||
|
chmod 0444 /var/lib/AccountsService/icons/elias
|
||||||
|
'';
|
||||||
|
|
||||||
|
}
|
22
mods/gpu.nix
Normal file
22
mods/gpu.nix
Normal file
|
@ -0,0 +1,22 @@
|
||||||
|
{ config, pkgs, lib, ... }:
|
||||||
|
|
||||||
|
{
|
||||||
|
# add comments back in later from forgejo
|
||||||
|
|
||||||
|
nixpkgs.config.allowUnfree = true;
|
||||||
|
nixpkgs.config.nvidia.acceptLicense = true;
|
||||||
|
|
||||||
|
hardware.graphics.enable = true;
|
||||||
|
|
||||||
|
services.xserver.videoDrivers = ["nvidia"];
|
||||||
|
|
||||||
|
hardware.nvidia = {
|
||||||
|
modesetting.enable = true;
|
||||||
|
powerManagement.enable = false;
|
||||||
|
open = false;
|
||||||
|
nvidiaSettings = true;
|
||||||
|
package = config.boot.kernelPackages.nvidiaPackages.legacy_340;
|
||||||
|
};
|
||||||
|
|
||||||
|
|
||||||
|
}
|
26
mods/systemd.nix
Normal file
26
mods/systemd.nix
Normal file
|
@ -0,0 +1,26 @@
|
||||||
|
{ config, pkgs, lib, ... }:
|
||||||
|
|
||||||
|
{
|
||||||
|
# update flatpaks everyday upon bootup
|
||||||
|
systemd.timers."update-flatpak" = {
|
||||||
|
wantedBy = [ "timers.target" ];
|
||||||
|
timerConfig = {
|
||||||
|
OnBootSec = "1m";
|
||||||
|
OnCalendar = "daily";
|
||||||
|
Unit = "update-flatpak.service";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
systemd.services."update-flatpak" = {
|
||||||
|
script = ''
|
||||||
|
set -eu
|
||||||
|
${pkgs.flatpak}/bin/flatpak update --noninteractive --assumeyes
|
||||||
|
'';
|
||||||
|
serviceConfig = {
|
||||||
|
Type = "oneshot";
|
||||||
|
User = "root";
|
||||||
|
};
|
||||||
|
wantedBy = [ "multi-user.target" ]; # Ensure the service starts after rebuild
|
||||||
|
};
|
||||||
|
|
||||||
|
}
|
2
nix-upgrade.sh
Executable file
2
nix-upgrade.sh
Executable file
|
@ -0,0 +1,2 @@
|
||||||
|
nix flake update
|
||||||
|
sudo nixos-rebuild switch --upgrade --flake .#
|
253
old-configuration.nix
Normal file
253
old-configuration.nix
Normal file
|
@ -0,0 +1,253 @@
|
||||||
|
# Edit this configuration file to define what should be installed on
|
||||||
|
# your system. Help is available in the configuration.nix(5) man page
|
||||||
|
# and in the NixOS manual (accessible by running ‘nixos-help’).
|
||||||
|
|
||||||
|
{ config, pkgs, ...}:
|
||||||
|
|
||||||
|
{
|
||||||
|
imports =
|
||||||
|
[ # Include the results of the hardware scan.
|
||||||
|
./hardware-configuration.nix
|
||||||
|
./gnome.nix
|
||||||
|
];
|
||||||
|
|
||||||
|
# Nix flakes support
|
||||||
|
nix.settings.experimental-features = [ "nix-command" "flakes"];
|
||||||
|
|
||||||
|
# Bootloader.
|
||||||
|
boot.loader.systemd-boot.enable = true;
|
||||||
|
boot.loader.efi.canTouchEfiVariables = true;
|
||||||
|
boot.loader.grub.configurationLimit = 10;
|
||||||
|
|
||||||
|
boot.initrd.luks.devices."luks-4060c1c6-89ef-4d17-9ef1-0d86c907a48f".device = "/dev/disk/by-uuid/4060c1c6-89ef-4d17-9ef1-0d86c907a48f";
|
||||||
|
networking.hostName = "macbook"; # Define your hostname.
|
||||||
|
# networking.wireless.enable = true; # Enables wireless support via wpa_supplicant.
|
||||||
|
|
||||||
|
# Clear /tmp during boot
|
||||||
|
boot.tmp.cleanOnBoot = true;
|
||||||
|
|
||||||
|
# Housekeeping: Garbage collection
|
||||||
|
nix.gc.automatic = true;
|
||||||
|
nix.optimise.automatic = true;
|
||||||
|
|
||||||
|
# Increase buffer size
|
||||||
|
nix.settings.download-buffer-size = "4G";
|
||||||
|
|
||||||
|
# Disable sudo password for the wheel group
|
||||||
|
security.sudo.wheelNeedsPassword = false;
|
||||||
|
|
||||||
|
# Configure network proxy if necessary
|
||||||
|
# networking.proxy.default = "http://user:password@proxy:port/";
|
||||||
|
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
|
||||||
|
|
||||||
|
# Enable networking
|
||||||
|
networking.networkmanager.enable = true;
|
||||||
|
|
||||||
|
# Nvidia card
|
||||||
|
# Enable OpenGL
|
||||||
|
hardware.opengl = {
|
||||||
|
enable = true;
|
||||||
|
};
|
||||||
|
|
||||||
|
# Load nvidia driver for Xorg and Wayland
|
||||||
|
# services.xserver.videoDrivers = ["nvidia"];
|
||||||
|
|
||||||
|
|
||||||
|
#marked broken in 25.05
|
||||||
|
# error: Package ‘nvidia-x11-340.108-6.12.30’ in /nix/store/030zwnyrng6gx425qdzmvdi9aqasi27m-nixos-25.05/nixos/pkgs/os-specific/linux/nvidia-x11/generic.nix:320 is marked as broken, refusing to evaluate.
|
||||||
|
/*
|
||||||
|
hardware.nvidia = {
|
||||||
|
|
||||||
|
# Modesetting is required.
|
||||||
|
modesetting.enable = true;
|
||||||
|
|
||||||
|
# Nvidia power management. Experimental, and can cause sleep/suspend to fail.
|
||||||
|
# Enable this if you have graphical corruption issues or application crashes after waking
|
||||||
|
# up from sleep. This fixes it by saving the entire VRAM memory to /tmp/ instead
|
||||||
|
# of just the bare essentials.
|
||||||
|
powerManagement.enable = false;
|
||||||
|
|
||||||
|
# Fine-grained power management. Turns off GPU when not in use.
|
||||||
|
# Experimental and only works on modern Nvidia GPUs (Turing or newer).
|
||||||
|
#powerManagement.finegrained = false;
|
||||||
|
|
||||||
|
# Use the NVidia open source kernel module (not to be confused with the
|
||||||
|
# independent third-party "nouveau" open source driver).
|
||||||
|
# Support is limited to the Turing and later architectures. Full list of
|
||||||
|
# supported GPUs is at:
|
||||||
|
# https://github.com/NVIDIA/open-gpu-kernel-modules#compatible-gpus
|
||||||
|
# Only available from driver 515.43.04+
|
||||||
|
# Currently alpha-quality/buggy, so false is currently the recommended setting.
|
||||||
|
open = false;
|
||||||
|
|
||||||
|
# Enable the Nvidia settings menu,
|
||||||
|
# accessible via `nvidia-settings`.
|
||||||
|
nvidiaSettings = true;
|
||||||
|
|
||||||
|
# Optionally, you may need to select the appropriate driver version for your specific GPU.
|
||||||
|
package = config.boot.kernelPackages.nvidiaPackages.legacy_340;
|
||||||
|
};
|
||||||
|
*/
|
||||||
|
|
||||||
|
# Set your time zone.
|
||||||
|
time.timeZone = "Asia/Taipei";
|
||||||
|
|
||||||
|
# Select internationalisation properties.
|
||||||
|
i18n.defaultLocale = "en_US.UTF-8";
|
||||||
|
|
||||||
|
i18n.extraLocaleSettings = {
|
||||||
|
LC_ADDRESS = "en_US.UTF-8";
|
||||||
|
LC_IDENTIFICATION = "en_US.UTF-8";
|
||||||
|
LC_MEASUREMENT = "en_US.UTF-8";
|
||||||
|
LC_MONETARY = "en_US.UTF-8";
|
||||||
|
LC_NAME = "en_US.UTF-8";
|
||||||
|
LC_NUMERIC = "en_US.UTF-8";
|
||||||
|
LC_PAPER = "en_US.UTF-8";
|
||||||
|
LC_TELEPHONE = "en_US.UTF-8";
|
||||||
|
LC_TIME = "en_US.UTF-8";
|
||||||
|
};
|
||||||
|
|
||||||
|
i18n.inputMethod.enabled = "fcitx5";
|
||||||
|
i18n.inputMethod.fcitx5.addons = with pkgs; [
|
||||||
|
fcitx5-chewing
|
||||||
|
fcitx5-chinese-addons
|
||||||
|
#fcitx5-mcbopomofo
|
||||||
|
#fcitx5-pinyin-zhwiki
|
||||||
|
#fcitx5-pinyin-moegirl
|
||||||
|
fcitx5-table-other
|
||||||
|
fcitx5-table-extra
|
||||||
|
fcitx5-gtk
|
||||||
|
fcitx5-rime
|
||||||
|
];
|
||||||
|
|
||||||
|
# Enable the X11 windowing system.
|
||||||
|
services.xserver.enable = true;
|
||||||
|
|
||||||
|
# Enable the GNOME Desktop Environment.
|
||||||
|
services.xserver.displayManager.gdm.enable = true;
|
||||||
|
services.xserver.desktopManager.gnome.enable = true;
|
||||||
|
# remove xterm
|
||||||
|
services.xserver.excludePackages = [ pkgs.xterm ];
|
||||||
|
services.xserver.desktopManager.xterm.enable = false;
|
||||||
|
|
||||||
|
# Configure keymap in X11
|
||||||
|
services.xserver.xkb = {
|
||||||
|
layout = "us";
|
||||||
|
variant = "";
|
||||||
|
};
|
||||||
|
|
||||||
|
# Enable CUPS to print documents.
|
||||||
|
services.printing.enable = true;
|
||||||
|
|
||||||
|
# Enable sound with pipewire.
|
||||||
|
hardware.pulseaudio.enable = false;
|
||||||
|
security.rtkit.enable = true;
|
||||||
|
services.pipewire = {
|
||||||
|
enable = true;
|
||||||
|
alsa.enable = true;
|
||||||
|
alsa.support32Bit = true;
|
||||||
|
pulse.enable = true;
|
||||||
|
# If you want to use JACK applications, uncomment this
|
||||||
|
#jack.enable = true;
|
||||||
|
|
||||||
|
# use the example session manager (no others are packaged yet so this is enabled by default,
|
||||||
|
# no need to redefine it in your config for now)
|
||||||
|
#media-session.enable = true;
|
||||||
|
};
|
||||||
|
|
||||||
|
# Enable touchpad support (enabled default in most desktopManager).
|
||||||
|
# services.xserver.libinput.enable = true;
|
||||||
|
|
||||||
|
# Define a user account. Don't forget to set a password with ‘passwd’.
|
||||||
|
users.users.elias = {
|
||||||
|
isNormalUser = true;
|
||||||
|
description = "elias";
|
||||||
|
extraGroups = [ "networkmanager" "wheel" ];
|
||||||
|
packages = with pkgs; [
|
||||||
|
# thunderbird
|
||||||
|
];
|
||||||
|
};
|
||||||
|
|
||||||
|
# Enable automatic login for the user.
|
||||||
|
services.displayManager.autoLogin.enable = true;
|
||||||
|
services.displayManager.autoLogin.user = "elias";
|
||||||
|
|
||||||
|
# Workaround for GNOME autologin: https://github.com/NixOS/nixpkgs/issues/103746#issuecomment-945091229
|
||||||
|
systemd.services."getty@tty1".enable = false;
|
||||||
|
systemd.services."autovt@tty1".enable = false;
|
||||||
|
|
||||||
|
# Install firefox.
|
||||||
|
programs.firefox.enable = true;
|
||||||
|
|
||||||
|
# Allow unfree packages
|
||||||
|
nixpkgs.config.allowUnfree = true;
|
||||||
|
nixpkgs.config.nvidia.acceptLicense = true;
|
||||||
|
|
||||||
|
# List packages installed in system profile. To search, run:
|
||||||
|
# $ nix search wget
|
||||||
|
environment.systemPackages = with pkgs; [
|
||||||
|
# vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
|
||||||
|
wget
|
||||||
|
fastfetch
|
||||||
|
curl
|
||||||
|
keepassxc
|
||||||
|
git
|
||||||
|
htop
|
||||||
|
nextcloud-client
|
||||||
|
libreoffice-fresh
|
||||||
|
hunspell #dictionary for libreoffice
|
||||||
|
hunspellDicts.en_CA
|
||||||
|
hunspellDicts.en_US
|
||||||
|
];
|
||||||
|
|
||||||
|
# Fonts
|
||||||
|
fonts.packages = with pkgs; [
|
||||||
|
corefonts
|
||||||
|
vistafonts
|
||||||
|
noto-fonts
|
||||||
|
noto-fonts-cjk
|
||||||
|
noto-fonts-emoji
|
||||||
|
liberation_ttf
|
||||||
|
fira-code
|
||||||
|
fira-code-symbols
|
||||||
|
mplus-outline-fonts.githubRelease
|
||||||
|
dina-font
|
||||||
|
proggyfonts
|
||||||
|
];
|
||||||
|
|
||||||
|
fonts.fontDir.enable = true;
|
||||||
|
|
||||||
|
# Some programs need SUID wrappers, can be configured further or are
|
||||||
|
# started in user sessions.
|
||||||
|
# programs.mtr.enable = true;
|
||||||
|
# programs.gnupg.agent = {
|
||||||
|
# enable = true;
|
||||||
|
# enableSSHSupport = true;
|
||||||
|
# };
|
||||||
|
|
||||||
|
# List services that you want to enable:
|
||||||
|
|
||||||
|
# Enable the OpenSSH daemon.
|
||||||
|
services.openssh.enable = true;
|
||||||
|
|
||||||
|
# Tailscale
|
||||||
|
services.tailscale.enable = true;
|
||||||
|
|
||||||
|
# Flatpak
|
||||||
|
services.flatpak.enable = true;
|
||||||
|
|
||||||
|
# Open ports in the firewall.
|
||||||
|
networking.firewall.allowedTCPPorts = [ 22 ];
|
||||||
|
# networking.firewall.allowedUDPPorts = [ ... ];
|
||||||
|
# Or disable the firewall altogether.
|
||||||
|
# networking.firewall.enable = false;
|
||||||
|
|
||||||
|
# This value determines the NixOS release from which the default
|
||||||
|
# settings for stateful data, like file locations and database versions
|
||||||
|
# on your system were taken. It‘s perfectly fine and recommended to leave
|
||||||
|
# this value at the release version of the first install of this system.
|
||||||
|
# Before changing this value read the documentation for this option
|
||||||
|
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
|
||||||
|
system.stateVersion = "24.05"; # Did you read the comment?
|
||||||
|
|
||||||
|
}
|
2
old-rebuild.sh
Executable file
2
old-rebuild.sh
Executable file
|
@ -0,0 +1,2 @@
|
||||||
|
sudo nixos-rebuild switch -I nixos-config=/home/elias/nixos-config/configuration.nix
|
||||||
|
|
1
rebuild.sh
Executable file
1
rebuild.sh
Executable file
|
@ -0,0 +1 @@
|
||||||
|
sudo nixos-rebuild switch --flake .#
|
9
update.sh
Executable file
9
update.sh
Executable file
|
@ -0,0 +1,9 @@
|
||||||
|
# add things to git
|
||||||
|
COMMIT_MSG="Update NixOS config."
|
||||||
|
echo "Commit message?"
|
||||||
|
read COMMIT_MSG
|
||||||
|
echo "OK!"
|
||||||
|
|
||||||
|
git add .
|
||||||
|
git commit -m "$COMMIT_MSG"
|
||||||
|
git push origin main
|
Loading…
Add table
Add a link
Reference in a new issue