458 lines
11 KiB
Nix
458 lines
11 KiB
Nix
{ lib, config, pkgs, callPackage, ... }:
|
||
|
||
{
|
||
imports =
|
||
[
|
||
./hardware-configuration.nix
|
||
/etc/nixos/cachix.nix
|
||
];
|
||
nix = {
|
||
extraOptions = "experimental-features = nix-command flakes";
|
||
package = pkgs.nixVersions.unstable;
|
||
};
|
||
|
||
# Use the systemd-boot EFI boot loader.
|
||
boot.kernelPackages = pkgs.linuxPackages_zen;
|
||
boot.loader.systemd-boot.enable = true;
|
||
boot.loader.efi.canTouchEfiVariables = true;
|
||
boot.initrd.kernelModules = [ "i915" ];
|
||
|
||
nixpkgs.config.allowUnfree = true;
|
||
|
||
boot.kernelParams = [ "mem_sleep_default=deep" "nvme.noacpi=1" ];
|
||
hardware.cpu.intel.updateMicrocode =
|
||
lib.mkDefault config.hardware.enableRedistributableFirmware;
|
||
|
||
hardware.acpilight.enable = lib.mkDefault true;
|
||
|
||
networking.hostName = "syl"; # Define your hostname.
|
||
networking.networkmanager.enable = true;
|
||
# networking.wireless.enable = true; # Enables wireless support via wpa_supplicant.
|
||
|
||
# Set your time zone.
|
||
time.timeZone = "America/Chicago";
|
||
|
||
# The global useDHCP flag is deprecated, therefore explicitly set to false here.
|
||
# Per-interface useDHCP will be mandatory in the future, so this generated config
|
||
# replicates the default behaviour.
|
||
networking.useDHCP = false;
|
||
networking.interfaces.wlp170s0.useDHCP = true;
|
||
|
||
virtualisation.podman.enable = true;
|
||
virtualisation.docker.enable = true;
|
||
virtualisation.libvirtd = {
|
||
enable = true;
|
||
qemu = {
|
||
runAsRoot = false;
|
||
ovmf = {
|
||
enable = true;
|
||
packages = [
|
||
pkgs.OVMFFull.fd
|
||
pkgs.pkgsCross.aarch64-multiplatform.OVMF.fd
|
||
];
|
||
};
|
||
swtpm.enable = true;
|
||
};
|
||
};
|
||
|
||
# Select internationalisation properties.
|
||
i18n.defaultLocale = "en_US.UTF-8";
|
||
|
||
hardware.uinput.enable = true;
|
||
|
||
hardware.bluetooth.enable = true;
|
||
|
||
nixpkgs.config.packageOverrides = pkgs: {
|
||
vaapiIntel = pkgs.vaapiIntel.override { enableHybridCodec = true; };
|
||
};
|
||
|
||
hardware.opengl = {
|
||
enable = true;
|
||
extraPackages = with pkgs; [
|
||
intel-media-driver # LIBVA_DRIVER_NAME=iHD
|
||
vaapiIntel # LIBVA_DRIVER_NAME=i965 (older but works better for Firefox/Chromium)
|
||
libvdpau-va-gl
|
||
];
|
||
};
|
||
|
||
services.xserver.videoDrivers = ["intel"];
|
||
|
||
boot.supportedFilesystems = [ "ntfs" ];
|
||
services.xserver = {
|
||
enable = true;
|
||
windowManager.awesome = {
|
||
enable = true;
|
||
package = pkgs.awesome;
|
||
};
|
||
displayManager = {
|
||
startx.enable = true;
|
||
defaultSession = "plasmawayland";
|
||
sddm = {
|
||
enable = true;
|
||
enableHidpi = true;
|
||
};
|
||
};
|
||
desktopManager.plasma5 = {
|
||
enable = true;
|
||
runUsingSystemd = true;
|
||
};
|
||
# desktopManager.gnome.enable = true;
|
||
};
|
||
|
||
services.avahi = {
|
||
enable = true;
|
||
nssmdns = true;
|
||
};
|
||
|
||
# Configure keymap in X11
|
||
services.xserver.layout = "us";
|
||
# services.xserver.xkbOptions = "eurosign:e";
|
||
|
||
systemd.services.display-manager = {
|
||
wants = [ "systemd-user-sessions.service" "multi-user.target" "network-online.target" ];
|
||
after = [ "systemd-user-sessions.service" "multi-user.target" "network-online.target" ];
|
||
};
|
||
|
||
# Enable CUPS to print documents.
|
||
services.printing.enable = true;
|
||
services.printing.drivers = [ pkgs.gutenprint pkgs.gutenprintBin pkgs.hplipWithPlugin ];
|
||
|
||
# Enable fingerprint
|
||
services.fprintd.enable = true;
|
||
# programs.qt5ct.enable = true;
|
||
|
||
# Enable sound.
|
||
security.rtkit.enable = true;
|
||
services.pipewire = {
|
||
enable = true;
|
||
alsa.enable = true;
|
||
alsa.support32Bit = true;
|
||
pulse.enable = true;
|
||
wireplumber.enable = true;
|
||
};
|
||
|
||
# Needed for some pipewire progs and other gtk apps
|
||
programs.dconf.enable = true;
|
||
|
||
# Turn on flatpak
|
||
services.flatpak.enable = true;
|
||
|
||
# Some other things
|
||
services.thermald.enable = true;
|
||
services.power-profiles-daemon.enable = false;
|
||
services.tlp = {
|
||
enable = true;
|
||
settings = {
|
||
CPU_SCALING_GOVERNOR_ON_AC="performance";
|
||
CPU_SCALING_GOVERNOR_ON_BAT="powersave";
|
||
CPU_ENERGY_PERF_POLICY_ON_AC="balance_performance";
|
||
CPU_ENERGY_PERF_POLICY_ON_BAT="power";
|
||
PCIE_ASPM_ON_AC="default";
|
||
PCIE_ASPM_ON_BAT="powersupersave";
|
||
SCHED_POWERSAVE_ON_AC=0;
|
||
SCHED_POWERSAVE_ON_BAT=1;
|
||
START_CHARGE_THRESH_BAT1=70;
|
||
STOP_CHARGE_THRESH_BAT1=80;
|
||
USB_ALLOWLIST="32ac:0002";
|
||
};
|
||
};
|
||
|
||
services.usbmuxd.enable = true;
|
||
services.fstrim.enable = true;
|
||
|
||
# Enable touchpad support (enabled default in most desktopManager).
|
||
services.xserver.libinput.enable = true;
|
||
|
||
# Set default shell to be dash for speed
|
||
# Apparently this is bad because a lot of nix relies on bash
|
||
# environment.binsh = "${pkgs.dash}/bin/dash";
|
||
|
||
environment.homeBinInPath = true;
|
||
programs.fish.enable = true;
|
||
programs.zsh.enable = true;
|
||
|
||
environment.variables = {
|
||
EDITOR = "emacsclient -t -a";
|
||
VISUAL = "emacsclient -c -a";
|
||
# Fixing Qt apps in other environments
|
||
# Thought I needed this but apparently they are working fine without it.
|
||
# QT_XCB_GL_INTEGRATION = "xcb_egl";
|
||
# QT_QPA_PLATFORM_PLUGIN_PATH = "${pkgs.qt5.qtbase.bin}/lib/qt-${pkgs.qt5.qtbase.qtCompatVersion}/plugins/platforms";
|
||
VDPAU_DRIVER = lib.mkIf config.hardware.opengl.enable (lib.mkDefault "va_gl");
|
||
};
|
||
|
||
# Define a user account. Don't forget to set a password with ‘passwd’.
|
||
users.users.chris = {
|
||
isNormalUser = true;
|
||
extraGroups = [ "adbusers" "wheel" "networkmanager" "input" "uinput" ];
|
||
};
|
||
|
||
programs.adb.enable = true;
|
||
services.udev.packages = [ pkgs.android-udev-rules ];
|
||
|
||
programs.partition-manager.enable = true;
|
||
programs.kdeconnect.enable = true;
|
||
|
||
security.pam.services.kwallet = {
|
||
name = "kwallet";
|
||
enableKwallet = true;
|
||
};
|
||
security.pam.services.sddm.enableKwallet = true;
|
||
|
||
# virtualisation.waydroid.enable = true;
|
||
|
||
# nixpkgs.config.firefox.enableTridactyl = true;
|
||
|
||
# List packages installed in system profile. To search, run:
|
||
# $ nix search wget
|
||
environment.systemPackages = with pkgs; [
|
||
vim
|
||
wget
|
||
killall
|
||
git
|
||
tmux
|
||
dutree
|
||
cachix
|
||
unzip
|
||
unrar
|
||
p7zip
|
||
zip
|
||
gzip
|
||
usbutils
|
||
binutils
|
||
podman-compose
|
||
exa
|
||
# img2pdf
|
||
yt-dlp
|
||
bat
|
||
rsync
|
||
jq
|
||
ripgrep
|
||
fd
|
||
ffmpeg-full
|
||
imagemagick
|
||
libheif
|
||
trash-cli
|
||
htop
|
||
btop
|
||
bc
|
||
sysstat
|
||
procs
|
||
pandoc
|
||
samba
|
||
blesh
|
||
# OVMFFull
|
||
quickemu
|
||
discover
|
||
# kde-rounded-corners
|
||
lightly-qt
|
||
pinentry
|
||
pinentry-qt
|
||
hunspell
|
||
caffeine-ng
|
||
hunspellDicts.en_US
|
||
transmission
|
||
openssh
|
||
ark
|
||
ifuse
|
||
dash
|
||
light
|
||
ttyper
|
||
kget
|
||
audacity
|
||
krename
|
||
kwallet-pam
|
||
plasma5Packages.kwallet
|
||
sierra-breeze-enhanced
|
||
libimobiledevice
|
||
sddm-kcm
|
||
ydotool
|
||
bottles
|
||
jitsi-meet-electron
|
||
imv
|
||
feh
|
||
tagutil
|
||
python310Packages.mutagen
|
||
python310Packages.audiotools
|
||
mpv
|
||
nerdfonts
|
||
latte-dock
|
||
plasma-browser-integration
|
||
alacritty
|
||
# libsForQt5.bismuth
|
||
libnotify
|
||
rofi-wayland
|
||
waybar
|
||
eww
|
||
wlrctl
|
||
hyprpaper
|
||
swaylock-fancy
|
||
aha
|
||
glxinfo
|
||
vulkan-tools
|
||
wayland-utils
|
||
# mkchromecast
|
||
plocate
|
||
# librepresenter.libre-presenter
|
||
papirus-icon-theme
|
||
phinger-cursors
|
||
plasma-hud
|
||
kde-cli-tools
|
||
gzip
|
||
qrencode
|
||
brave
|
||
scribus
|
||
# appflowy
|
||
darktable
|
||
qutebrowser
|
||
virt-manager
|
||
virt-viewer
|
||
# firefox
|
||
kate
|
||
kdialog
|
||
plasma5Packages.khotkeys
|
||
openlp
|
||
inkscape
|
||
libreoffice-fresh
|
||
vlc
|
||
neochat
|
||
haskellPackages.greenclip
|
||
pulsemixer
|
||
any-nix-shell
|
||
wtype
|
||
xdotool
|
||
wmctrl
|
||
xcape
|
||
xclip
|
||
maim
|
||
unclutter-xfixes
|
||
bluez-tools
|
||
networkmanager_dmenu
|
||
plasma5Packages.qt5ct
|
||
lxappearance
|
||
spotdl
|
||
kdenlive
|
||
# natron
|
||
digikam
|
||
rubberband
|
||
texlive.combined.scheme-full
|
||
wlroots
|
||
picom-next
|
||
pamixer
|
||
playerctl
|
||
jellyfin-mpv-shim
|
||
pfetch
|
||
macchina
|
||
gimp
|
||
powertop
|
||
element-desktop-wayland
|
||
scrcpy
|
||
python
|
||
python3
|
||
airshipper
|
||
# hyprland
|
||
|
||
neofetch
|
||
afetch
|
||
yafetch
|
||
freshfetch
|
||
disfetch
|
||
bunnyfetch
|
||
fet-sh
|
||
macchina
|
||
# Dev tools
|
||
# android-tools
|
||
nix-index
|
||
meson
|
||
ninja
|
||
gnumake
|
||
gcc
|
||
gdb
|
||
clang
|
||
clang-tools
|
||
cmake
|
||
qtcreator
|
||
extra-cmake-modules
|
||
pkg-config
|
||
libsForQt5.wrapQtAppsHook
|
||
python310Packages.pyqt5
|
||
# LIBRARIES FOR DEV
|
||
qt5.full
|
||
qt5.qtbase
|
||
qt5.qtquickcontrols2
|
||
qt5.qtx11extras
|
||
libsForQt5.appstream-qt
|
||
libsForQt5.kdelibs4support
|
||
libsForQt5.kirigami2
|
||
libsForQt5.ki18n
|
||
libsForQt5.kcoreaddons
|
||
# plasma5Packages.kirigami2
|
||
sqlite
|
||
fennel
|
||
# (with import <nixpkgs> {}; libsForQt5.callPackage ../../LightlyShaders {})
|
||
# (with import <nixpkgs> {}; libsForQt5.callPackage /home/chris/dev/church-presenter {})
|
||
|
||
# (with import <nixpkgs> {}; libsForQt5.callPackage ../../bismuth {})
|
||
];
|
||
|
||
services.emacs = {
|
||
enable = true;
|
||
package = with pkgs; ((emacsPackagesFor emacsPgtkNativeComp).emacsWithPackages (epkgs: [ epkgs.vterm epkgs.magit epkgs.pdf-tools epkgs.languagetool pkgs.mu ]));
|
||
};
|
||
|
||
services.samba-wsdd.enable = true;
|
||
services.samba = {
|
||
enable = true;
|
||
extraConfig = ''
|
||
workgroup = WORKGROUP
|
||
server string = smbnix
|
||
netbios name = smbnix
|
||
security = user
|
||
#use sendfile = yes
|
||
#max protocol = smb2
|
||
# note: localhost is the ipv6 localhost ::1
|
||
hosts allow = 192.168.0. 127.0.0.1 localhost
|
||
hosts deny = 0.0.0.0/0
|
||
guest account = nobody
|
||
map to guest = bad user
|
||
'';
|
||
shares = {
|
||
public = {
|
||
path = "/home/chris/Public";
|
||
"read only" = false;
|
||
browsable = true;
|
||
"guest ok" = true;
|
||
comment = "Share";
|
||
};
|
||
};
|
||
};
|
||
|
||
# Some programs need SUID wrappers, can be configured further or are
|
||
# started in user sessions.
|
||
# programs.mtr.enable = true;
|
||
# programs.gnupg.agent = {
|
||
# enable = true;
|
||
# enableSSHSupport = true;
|
||
# };
|
||
|
||
# List services that you want to enable:
|
||
|
||
# Enable the OpenSSH daemon.
|
||
services.openssh.enable = true;
|
||
|
||
# Open ports in the firewall.
|
||
# networking.firewall.allowedTCPPorts = [ ... ];
|
||
# networking.firewall.allowedUDPPorts = [ ... ];
|
||
# Or disable the firewall altogether.
|
||
# networking.firewall.enable = false;
|
||
|
||
# This value determines the NixOS release from which the default
|
||
# settings for stateful data, like file locations and database versions
|
||
# on your system were taken. It‘s perfectly fine and recommended to leave
|
||
# this value at the release version of the first install of this system.
|
||
# Before changing this value read the documentation for this option
|
||
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
|
||
system.stateVersion = "21.11"; # Did you read the comment?
|
||
|
||
}
|