Init yoga with secure boot

nki-yoga-g8/configuration.nix

@@ -0,0 +1,93 @@
+# Edit this configuration file to define what should be installed on
+# your system.  Help is available in the configuration.nix(5) man page
+# and in the NixOS manual (accessible by running ‘nixos-help’).
+
+{ config, pkgs, lib, ... }:
+
+{
+  imports =
+    [
+      # Include the results of the hardware scan.
+      ./hardware-configuration.nix
+      # Fonts
+      ../modules/personal/fonts
+      # Encrypted DNS
+      ../modules/services/edns
+    ];
+
+  services.xserver.desktopManager.plasma5.enable = true;
+
+  # Power Management
+  services.upower = {
+    enable = true;
+    criticalPowerAction = "PowerOff";
+
+    usePercentageForPolicy = true;
+    percentageCritical = 3;
+    percentageLow = 10;
+  };
+  services.logind.lidSwitch = "suspend";
+
+  # Printing
+  services.printing.drivers = with pkgs; [ epfl-cups-drivers ];
+
+  # Enable touchpad support (enabled default in most desktopManager).
+  services.xserver.libinput.enable = true;
+  # Keyboard
+  services.input-remapper.enable = true;
+  services.input-remapper.serviceWantedBy = [ "multi-user.target" ];
+  hardware.uinput.enable = true;
+
+  # Define a user account. Don't forget to set a password with ‘passwd’.
+  common.linux.username = "nki";
+
+  # Networking
+  common.linux.networking = {
+    hostname = "nki-yoga-g8";
+    networks."10-wired".match = "enp*";
+    networks."20-wireless".match = "wlan*";
+    dnsServers = [ "127.0.0.1" ];
+  };
+  nki.services.edns.enable = true;
+  nki.services.edns.ipv6 = true;
+
+  # Secrets
+  # sops.defaultSopsFile = ./secrets.yaml;
+  # sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
+
+  ## tinc
+  # sops.secrets."tinc/ed25519-private-key" = { };
+  # services.my-tinc = {
+  #   enable = true;
+  #   hostName = "macbooknix";
+  #   ed25519PrivateKey = config.sops.secrets."tinc/ed25519-private-key".path;
+  #   bindPort = 6565;
+  # };
+
+  services.dbus.packages = with pkgs; [ gcr ];
+
+  # Power Management
+  powerManagement = {
+    enable = true;
+  };
+
+  # Open ports in the firewall.
+  # networking.firewall.allowedTCPPorts = [ ... ];
+  # networking.firewall.allowedUDPPorts = [ ... ];
+  # Or disable the firewall altogether.
+  # networking.firewall.enable = false;
+
+  # Copy the NixOS configuration file and link it from the resulting system
+  # (/run/current-system/configuration.nix). This is useful in case you
+  # accidentally delete configuration.nix.
+  # system.copySystemConfiguration = true;
+
+  # This value determines the NixOS release from which the default
+  # settings for stateful data, like file locations and database versions
+  # on your system were taken. It‘s perfectly fine and recommended to leave
+  # this value at the release version of the first install of this system.
+  # Before changing this value read the documentation for this option
+  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
+  system.stateVersion = "22.05"; # Did you read the comment?
+}
+

nki-yoga-g8/hardware-configuration.nix

@@ -0,0 +1,48 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports =
+    [
+      (modulesPath + "/installer/scan/not-detected.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "xhci_pci" "thunderbolt" "nvme" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ "kvm-intel" ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" =
+    {
+      device = "/dev/disk/by-uuid/b32d27bf-9df6-43c1-8b93-c0693811bf5b";
+      fsType = "btrfs";
+    };
+
+  common.linux.luksDevices."nixroot" = "/dev/disk/by-uuid/09114015-79bc-4a40-bf60-b4022e969acb";
+
+  fileSystems."/boot" =
+    {
+      device = "/dev/disk/by-uuid/E820-D6C7";
+      fsType = "vfat";
+    };
+
+  swapDevices = [
+    { device = "/var/swapfile"; size = 32 * 1024; }
+  ];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp0s20f0u1c4i2.useDHCP = lib.mkDefault true;
+  # networking.interfaces.tailscale0.useDHCP = lib.mkDefault true;
+  # networking.interfaces.wlan0.useDHCP = lib.mkDefault true;
+  # networking.interfaces.wwan0.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  powerManagement.cpuFreqGovernor = lib.mkDefault "powersave";
+  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}