From: Duje Mihanović Date: Sun, 10 Sep 2023 17:13:14 +0000 (+0200) Subject: Initial commit X-Git-Url: http://git.dujemihanovic.xyz/%22http:/www.sics.se/static/%7B%7B%20.Permalink%20%7D%7D?a=commitdiff_plain;h=387917135e879eefe9bc714eaba0cffd1d9b94f0;p=nixos-configuration.git Initial commit --- 387917135e879eefe9bc714eaba0cffd1d9b94f0 diff --git a/configuration.nix b/configuration.nix new file mode 100644 index 0000000..4938bdf --- /dev/null +++ b/configuration.nix @@ -0,0 +1,190 @@ +# Edit this configuration file to define what should be installed on +# your system. Help is available in the configuration.nix(5) man page +# and in the NixOS manual (accessible by running ‘nixos-help’). + +{ config, pkgs, ... }: + +{ + imports = + [ # Include the results of the hardware scan. + ./hardware-configuration.nix + ]; + + # Bootloader. + boot.loader.systemd-boot.enable = true; + boot.loader.efi.canTouchEfiVariables = true; + + boot.extraModprobeConfig = + '' + options radeon si_support=0 cik_support=0 + options amdgpu si_support=1 cik_support=1 + ''; + + networking.hostName = "elitedesk"; # Define your hostname. + # networking.wireless.enable = true; # Enables wireless support via wpa_supplicant. + networking.interfaces.eno1.wakeOnLan.enable = true; + + # Configure network proxy if necessary + # networking.proxy.default = "http://user:password@proxy:port/"; + # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain"; + + # Enable networking + networking.networkmanager.enable = true; + + # Set your time zone. + time.timeZone = "Europe/Zagreb"; + + # Select internationalisation properties. + i18n.defaultLocale = "en_US.UTF-8"; + + i18n.extraLocaleSettings = { + LC_ADDRESS = "hr_HR.UTF-8"; + LC_IDENTIFICATION = "hr_HR.UTF-8"; + LC_MEASUREMENT = "hr_HR.UTF-8"; + LC_MONETARY = "hr_HR.UTF-8"; + LC_NAME = "hr_HR.UTF-8"; + LC_NUMERIC = "hr_HR.UTF-8"; + LC_PAPER = "hr_HR.UTF-8"; + LC_TELEPHONE = "hr_HR.UTF-8"; + LC_TIME = "hr_HR.UTF-8"; + }; + + # Enable the X11 windowing system. + services.xserver.enable = true; + + # Enable the GNOME Desktop Environment. + services.xserver.displayManager.gdm.enable = true; + services.xserver.desktopManager.gnome.enable = true; + + # Configure keymap in X11 + services.xserver = { + layout = "hr"; + xkbVariant = ""; + xkbOptions = "caps:swapescape"; + }; + + # Configure console keymap + console.keyMap = "croat"; + + # Enable CUPS to print documents. + services.printing.enable = true; + + # Enable sound with pipewire. + sound.enable = true; + hardware.pulseaudio.enable = false; + security.rtkit.enable = true; + services.pipewire = { + enable = true; + alsa.enable = true; + alsa.support32Bit = true; + pulse.enable = true; + # If you want to use JACK applications, uncomment this + #jack.enable = true; + + # use the example session manager (no others are packaged yet so this is enabled by default, + # no need to redefine it in your config for now) + #media-session.enable = true; + }; + + # Enable touchpad support (enabled default in most desktopManager). + # services.xserver.libinput.enable = true; + + programs.zsh = { + enable = true; + autosuggestions.enable = true; + syntaxHighlighting.enable = true; + }; + + # Define a user account. Don't forget to set a password with ‘passwd’. + users.users.duje = { + uid = 1000; + isNormalUser = true; + description = "Duje"; + extraGroups = [ "networkmanager" "wheel" "libvirtd" ]; + packages = with pkgs; [ + librewolf + thunderbird + dino + nheko + pass + passExtensions.pass-otp + passExtensions.pass-audit + passExtensions.pass-genphrase + ]; + openssh.authorizedKeys.keys = + [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIMI2evf5v4ghSCJWacQJGMINjYW48WZYLvL6KIob1rd" ]; + shell = pkgs.zsh; + }; + + # Allow unfree packages + nixpkgs.config.allowUnfree = true; + + # List packages installed in system profile. To search, run: + # $ nix search wget + environment.systemPackages = with pkgs; [ + # vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default. + # wget + neovim + lm_sensors + brasero + ]; + + virtualisation.libvirtd.enable = true; + + # Some programs need SUID wrappers, can be configured further or are + # started in user sessions. + # programs.mtr.enable = true; + # programs.gnupg.agent = { + # enable = true; + # enableSSHSupport = true; + # }; + + # List services that you want to enable: + + # Enable the OpenSSH daemon. + services.openssh.enable = true; + + services.smartd.enable = true; + programs.msmtp = { + enable = true; + defaults = { + auth = true; + tls = true; + tls_starttls = true; + aliases = "/etc/aliases"; + }; + accounts = { + default = { + from = "duje.mihanovic@skole.hr"; + host = "smtp.skole.hr"; + port = 587; + user = "duje.mihanovic"; + passwordeval = "cat /secrets/email.txt"; + }; + }; + }; + + environment.etc."aliases" = { + text = '' + root: duje.mihanovic@skole.hr + duje: duje.mihanovic@skole.hr + mailer-daemon: duje.mihanovic@skole.hr + ''; + mode = "0644"; + }; + + # Open ports in the firewall. + # networking.firewall.allowedTCPPorts = [ ... ]; + # networking.firewall.allowedUDPPorts = [ ... ]; + # Or disable the firewall altogether. + # networking.firewall.enable = false; + + # This value determines the NixOS release from which the default + # settings for stateful data, like file locations and database versions + # on your system were taken. It‘s perfectly fine and recommended to leave + # this value at the release version of the first install of this system. + # Before changing this value read the documentation for this option + # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html). + system.stateVersion = "23.05"; # Did you read the comment? + +}