blob: e6d62726b3c45e326b63e60137a583522157f695 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
|
{ pkgs, inputs, config, ... }: {
imports = [
inputs.sops-nix.nixosModules.sops
../modules/apps.nix
../modules/overrides.nix
../modules/kde.nix
../modules/networking.nix
../modules/development.nix
../modules/gaming.nix
../modules/secrets.nix
../modules/systemd.nix
inputs.home-manager.nixosModules.default
];
home-manager = {
extraSpecialArgs = { inherit inputs pkgs; };
useUserPackages = true;
useGlobalPkgs = true;
users = {
"kyren" = import ./home.nix;
};
};
users.users.kyren = {
isNormalUser = true;
description = "Kyren";
extraGroups = [ "networkmanager" "wheel" ];
shell = pkgs.zsh;
};
programs.zsh.enable = true;
# Localization
time.timeZone = "Asia/Hebron";
i18n.defaultLocale = "en_US.UTF-8";
i18n.supportedLocales = [
"en_US.UTF-8/UTF-8"
"C.UTF-8/UTF-8"
"en_IL/UTF-8"
];
# Allow sudo without a password if in "wheel" group.
security.sudo.wheelNeedsPassword = false;
# Bootloader
boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true;
boot.supportedFilesystems = [ "ntfs" ]; # for windows fs
# Nix Config
system.stateVersion = "24.05"; # DO NOT CHANGE!
nixpkgs.config.allowUnfree = true;
nix.settings.experimental-features = [ "nix-command" "flakes" ];
nix.settings.auto-optimise-store = true; # reduces nix store size
nixpkgs.config = {
packageOverrides = pkgs: {
emojipin = import <emojipin> {
config = config.nixpkgs.config;
};
};
};
# Enable dynamic linking of apps that are not in nixpkgs
programs.nix-ld.enable = true;
programs.nix-ld.libraries = with pkgs; [
stdenv.cc.cc # Fixes issues with neovim plugins not working
# Fixes issues with running games (nallo's)
wayland
libxkbcommon
libGL
noto-fonts
];
# Enable sound with pipewire.
services.pulseaudio.enable = false;
security.rtkit.enable = true;
services.pipewire = {
enable = true;
alsa.enable = true;
alsa.support32Bit = true;
pulse.enable = true;
# If you want to use JACK applications, uncomment this
jack.enable = true;
# use the example session manager (no others are packaged yet so this is enabled by default,
# no need to redefine it in your config for now)
# media-session.enable = true;
};
# ENable CUPS daemon for printing
services.printing.enable = false;
# Install Flatpak and Flathub
services.flatpak.enable = true;
# Enable openssh
services.openssh.enable = true;
services.openssh.settings.PasswordAuthentication = false;
users.users.root.openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO7P9K9D5RkBk+JCRRS6AtHuTAc6cRpXfRfRMg/Kyren"
];
# Enable KVM/QEMU virtualization
programs.virt-manager.enable = true;
users.groups.libvirtd.members = ["kyren"];
virtualisation.libvirtd.enable = true;
virtualisation.spiceUSBRedirection.enable = true;
virtualisation.libvirtd.qemu = {
runAsRoot = true;
ovmf.enable = true;
};
environment.systemPackages = [ pkgs.virtiofsd ]; # For shared fs
services.syncthing.enable = true;
services.syncthing = {
group = "users";
user = "kyren";
dataDir = "/home/kyren";
configDir = "/home/kyren/.config/syncthing";
};
systemd.tmpfiles.rules = [
"d /home/kyren/.config/syncthing 0700 kyren users"
];
}
|
