This commit is contained in:
2025-08-03 20:35:48 +02:00
parent ffc78043e6
commit 2ddffc74c9
17 changed files with 476 additions and 333 deletions

View File

@@ -1,6 +1,13 @@
{ agenix, config, pkgs, ... }:
{
agenix,
config,
pkgs,
...
}:
let user = "cschmatzler"; in
let
user = "cschmatzler";
in
{
imports = [
@@ -13,13 +20,23 @@ let user = "cschmatzler"; in
nix = {
package = pkgs.nix;
settings = {
trusted-users = [ "@admin" "${user}" ];
substituters = [ "https://nix-community.cachix.org" "https://cache.nixos.org" ];
trusted-users = [
"@admin"
"${user}"
];
substituters = [
"https://nix-community.cachix.org"
"https://cache.nixos.org"
];
trusted-public-keys = [ "cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=" ];
};
gc = {
automatic = true;
interval = { Weekday = 0; Hour = 2; Minute = 0; };
interval = {
Weekday = 0;
Hour = 2;
Minute = 0;
};
options = "--delete-older-than 30d";
};
extraOptions = ''
@@ -27,9 +44,12 @@ let user = "cschmatzler"; in
'';
};
environment.systemPackages = with pkgs; [
agenix.packages."${pkgs.system}".default
] ++ (import ../../modules/shared/packages.nix { inherit pkgs; });
environment.systemPackages =
with pkgs;
[
agenix.packages."${pkgs.system}".default
]
++ (import ../../modules/shared/packages.nix { inherit pkgs; });
system = {
checks.verifyNixPath = false;

View File

@@ -1,7 +1,15 @@
{ config, inputs, pkgs, agenix, ... }:
{
config,
inputs,
pkgs,
agenix,
...
}:
let user = "cschmatzler";
keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOk8iAnIaa1deoc7jw8YACPNVka1ZFJxhnU4G74TmS+p" ]; in
let
user = "cschmatzler";
keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOk8iAnIaa1deoc7jw8YACPNVka1ZFJxhnU4G74TmS+p" ];
in
{
imports = [
../../modules/nixos/secrets.nix
@@ -19,7 +27,14 @@ let user = "cschmatzler";
};
efi.canTouchEfiVariables = true;
};
initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod" ];
initrd.availableKernelModules = [
"xhci_pci"
"ahci"
"nvme"
"usbhid"
"usb_storage"
"sd_mod"
];
# Uncomment for AMD GPU
# initrd.kernelModules = [ "amdgpu" ];
kernelPackages = pkgs.linuxPackages_latest;
@@ -42,8 +57,14 @@ let user = "cschmatzler";
nixPath = [ "nixos-config=/home/${user}/.local/share/src/nixos-config:/etc/nixos" ];
settings = {
allowed-users = [ "${user}" ];
trusted-users = [ "@admin" "${user}" ];
substituters = [ "https://nix-community.cachix.org" "https://cache.nixos.org" ];
trusted-users = [
"@admin"
"${user}"
];
substituters = [
"https://nix-community.cachix.org"
"https://cache.nixos.org"
];
trusted-public-keys = [ "cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=" ];
};
@@ -120,7 +141,7 @@ let user = "cschmatzler";
overrideDevices = true;
settings = {
devices = {};
devices = { };
options.globalAnnounceEnabled = false; # Only sync on LAN
};
};
@@ -154,8 +175,8 @@ let user = "cschmatzler";
"class_g = 'i3lock'"
];
round-borders = 3;
round-borders-exclude = [];
round-borders-rule = [];
round-borders-exclude = [ ];
round-borders-rule = [ ];
shadow = true;
shadow-radius = 8;
shadow-opacity = 0.4;
@@ -206,12 +227,29 @@ let user = "cschmatzler";
log-level = "info";
wintypes = {
normal = { fade = true; shadow = false; };
tooltip = { fade = true; shadow = false; opacity = 0.75; focus = true; full-shadow = false; };
dock = { shadow = false; };
dnd = { shadow = false; };
popup_menu = { opacity = 1.0; };
dropdown_menu = { opacity = 1.0; };
normal = {
fade = true;
shadow = false;
};
tooltip = {
fade = true;
shadow = false;
opacity = 0.75;
focus = true;
full-shadow = false;
};
dock = {
shadow = false;
};
dnd = {
shadow = false;
};
popup_menu = {
opacity = 1.0;
};
dropdown_menu = {
opacity = 1.0;
};
};
};
};
@@ -241,8 +279,7 @@ let user = "cschmatzler";
ledger.enable = true;
};
# Add docker daemon
# Add docker daemon
virtualisation.docker.enable = true;
virtualisation.docker.logDriver = "json-file";
@@ -266,15 +303,17 @@ let user = "cschmatzler";
# Don't require password for users in `wheel` group for these commands
security.sudo = {
enable = true;
extraRules = [{
commands = [
{
command = "${pkgs.systemd}/bin/reboot";
options = [ "NOPASSWD" ];
}
];
groups = [ "wheel" ];
}];
extraRules = [
{
commands = [
{
command = "${pkgs.systemd}/bin/reboot";
options = [ "NOPASSWD" ];
}
];
groups = [ "wheel" ];
}
];
};
fonts.packages = with pkgs; [