223 lines
4.5 KiB
Nix
223 lines
4.5 KiB
Nix
{ config, lib, pkgs, ... }:
|
|
|
|
{
|
|
imports =
|
|
[
|
|
./hardware-configuration.nix
|
|
];
|
|
|
|
boot.loader.systemd-boot.enable = true;
|
|
boot.loader.efi.canTouchEfiVariables = true;
|
|
|
|
networking.hostName = "ytnix";
|
|
networking.wireless.iwd = {
|
|
enable = true;
|
|
settings = {
|
|
Rank = {
|
|
# disable 2.4 GHz cause i have a shitty wireless card
|
|
# that interferes with bluetooth otherwise
|
|
BandModifier2_4GHz = 0.0;
|
|
};
|
|
};
|
|
};
|
|
networking.networkmanager = {
|
|
enable = true;
|
|
wifi.backend = "iwd";
|
|
};
|
|
time.timeZone = "America/Toronto";
|
|
|
|
services.pipewire = {
|
|
enable = true;
|
|
pulse.enable = true;
|
|
};
|
|
|
|
services.libinput.enable = true;
|
|
|
|
users.users.yt = {
|
|
isNormalUser = true;
|
|
extraGroups = [ "wheel" "libvirtd" ];
|
|
shell = pkgs.zsh;
|
|
packages = with pkgs; [
|
|
firefox
|
|
ungoogled-chromium
|
|
librewolf
|
|
bitwarden-desktop
|
|
bitwarden-cli
|
|
aerc
|
|
delta
|
|
fzf
|
|
zoxide
|
|
eza
|
|
fastfetch
|
|
discord
|
|
nwg-look
|
|
element-desktop-wayland
|
|
kdePackages.gwenview
|
|
kdePackages.okular
|
|
kdePackages.qtwayland
|
|
mpv
|
|
yt-dlp
|
|
anki-bin
|
|
signal-desktop
|
|
cosign
|
|
azure-cli
|
|
];
|
|
};
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
tmux
|
|
vim
|
|
wget
|
|
neovim
|
|
git
|
|
python3
|
|
grim
|
|
slurp
|
|
wl-clipboard
|
|
mako
|
|
tree
|
|
kitty
|
|
rofi-wayland
|
|
rofimoji
|
|
cliphist
|
|
borgbackup
|
|
jq
|
|
brightnessctl
|
|
alsa-utils
|
|
nixd
|
|
veracrypt
|
|
bluetuith
|
|
libimobiledevice
|
|
networkmanagerapplet
|
|
pass-wayland
|
|
htop
|
|
file
|
|
dnsutils
|
|
age
|
|
compsize
|
|
wgnord
|
|
wireguard-tools
|
|
traceroute
|
|
];
|
|
|
|
system.stateVersion = "24.05";
|
|
|
|
services.gnome.gnome-keyring.enable = true;
|
|
programs.gnupg.agent.enable = true;
|
|
|
|
services.displayManager.defaultSession = "hyprland";
|
|
services.displayManager.sddm = {
|
|
enable = true;
|
|
wayland.enable = true;
|
|
};
|
|
programs.waybar.enable = true;
|
|
programs.zsh.enable = true;
|
|
# security.sudo.wheelNeedsPassword = false;
|
|
|
|
fonts.packages = with pkgs; [
|
|
nerdfonts
|
|
];
|
|
nixpkgs.config.allowUnfree = true;
|
|
|
|
hardware.bluetooth = {
|
|
enable = true;
|
|
powerOnBoot = true;
|
|
};
|
|
services.blueman.enable = true;
|
|
|
|
nix.settings.experimental-features = [ "nix-command" "flakes" ];
|
|
|
|
programs.hyprland = {
|
|
enable = true;
|
|
# withUWSM = true;
|
|
};
|
|
|
|
services.borgbackup.jobs = {
|
|
ytnixRsync = {
|
|
paths = [ "/root" "/home" "/var/lib" "/opt" "/etc" ];
|
|
exclude = [
|
|
".git"
|
|
"**/.cache"
|
|
"**/node_modules"
|
|
"**/cache"
|
|
"**/Cache"
|
|
"/var/lib/docker"
|
|
"/home/**/Downloads"
|
|
"**/.steam"
|
|
"**/.rustup"
|
|
"**/.docker"
|
|
"**/borg"
|
|
];
|
|
repo = "de3911@de3911.rsync.net:borg/yt";
|
|
encryption = {
|
|
mode = "repokey-blake2";
|
|
passCommand = "cat /root/keys/borg_yt";
|
|
};
|
|
environment = {
|
|
BORG_RSH = "ssh -i /home/yt/.ssh/id_ed25519";
|
|
BORG_REMOTE_PATH = "borg1";
|
|
};
|
|
compression = "auto,zstd";
|
|
startAt = "daily";
|
|
extraCreateArgs = [ "--stats" ];
|
|
# warnings are often not that serious
|
|
failOnWarnings = false;
|
|
};
|
|
};
|
|
services.btrbk.instances.local.settings = {
|
|
snapshot_preserve = "14d";
|
|
snapshot_preserve_min = "2d";
|
|
volume."/" = {
|
|
target = "/snapshots";
|
|
subvolume = {
|
|
home = {};
|
|
"/" = {};
|
|
};
|
|
};
|
|
};
|
|
|
|
programs.steam.enable = true;
|
|
|
|
services.logind = {
|
|
lidSwitch = "hibernate";
|
|
suspendKey = "ignore";
|
|
powerKey = "hibernate";
|
|
};
|
|
|
|
xdg.mime.defaultApplications = {
|
|
"application/pdf" = "okular.desktop";
|
|
"image/*" = "gwenview.desktop";
|
|
"*/html" = "librewolf.desktop";
|
|
};
|
|
|
|
programs.thunar = {
|
|
enable = true;
|
|
plugins = with pkgs.xfce; [
|
|
thunar-archive-plugin
|
|
thunar-volman
|
|
];
|
|
};
|
|
# preference changes don't work in thunar without this
|
|
programs.xfconf.enable = true;
|
|
# mount, trash and stuff in thunar
|
|
services.gvfs.enable = true;
|
|
# thumbnails in thunar
|
|
services.tumbler.enable =true;
|
|
|
|
virtualisation.libvirtd.enable = true;
|
|
programs.virt-manager.enable = true;
|
|
|
|
networking.wg-quick.interfaces.wgnord.configFile = "/etc/wireguard/wgnord.conf";
|
|
services.resolved.enable = true;
|
|
|
|
services.https-dns-proxy = {
|
|
enable = true;
|
|
provider = {
|
|
url = "https://dns.cy7.sh/dns-query/yt-linux";
|
|
kind = "custom";
|
|
ips = [ "1.1.1.1" "8.8.8.8" ];
|
|
};
|
|
# doesn't work otherwise :(
|
|
preferIPv4 = true;
|
|
};
|
|
}
|