# Edit this configuration file to define what should be installed on # your system. Help is available in the configuration.nix(5) man page # and in the NixOS manual (accessible by running ‘nixos-help’). { lib, config, pkgs, ... }: { imports = [ # Include the results of the hardware scan. ./hardware-configuration.nix # secret management ./secrets # Fonts ../modules/personal/fonts # Encrypted DNS ../modules/services/edns # Other services ../modules/services/swaylock.nix ../modules/personal/u2f.nix ]; # Set kernel version to latest boot.kernelPackages = pkgs.linuxPackages_latest; # Use the systemd-boot EFI boot loader. boot = { plymouth.enable = true; loader.timeout = 60; loader.systemd-boot.enable = true; loader.efi.canTouchEfiVariables = true; supportedFilesystems = [ "ntfs" ]; }; ## Encryption # Kernel modules needed for mounting USB VFAT devices in initrd stage boot.initrd.kernelModules = [ "usb_storage" ]; boot.initrd.luks.devices = { root = { # keyFile = "/dev/disk/by-id/usb-090c___B1608112001295-0:0"; # keyFileSize = 4096; fallbackToPassword = true; device = "/dev/disk/by-uuid/7c6e40a8-900b-4f85-9712-2b872caf1892"; preLVM = true; allowDiscards = true; }; }; networking.hostName = "kagamiPC"; # Define your hostname. networking.wireless.iwd.enable = true; # Set your time zone. time.timeZone = "Europe/Zurich"; # The global useDHCP flag is deprecated, therefore explicitly set to false here. # Per-interface useDHCP will be mandatory in the future, so this generated config # replicates the default behaviour. networking.useDHCP = false; networking.interfaces.enp38s0.useDHCP = true; networking.interfaces.wlan0.useDHCP = true; # Configure network proxy if necessary # networking.proxy.default = "http://user:password@proxy:port/"; # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain"; nix = { package = pkgs.nixFlakes; extraOptions = '' experimental-features = nix-command flakes ''; }; # Select internationalisation properties. i18n.defaultLocale = "ja_JP.UTF-8"; i18n.inputMethod.enabled = "ibus"; i18n.inputMethod.ibus.engines = (with pkgs.ibus-engines; [ bamboo mozc libpinyin ]); # console = { # font = "Lat2-Terminus16"; # keyMap = "us"; # }; # Enable sway on login. environment.loginShellInit = '' if [ -z $DISPLAY ] && [ "$(tty)" = "/dev/tty1" ]; then exec sway fi ''; # Configure keymap in X11 # services.xserver.layout = "jp"; # services.xserver.xkbOptions = ""; # Enable CUPS to print documents. # services.printing.enable = true; # Enable sound. sound.enable = true; hardware.pulseaudio = { enable = true; extraModules = [ pkgs.pulseaudio-modules-bt ]; package = pkgs.pulseaudioFull; }; # Enable touchpad support (enabled default in most desktopManager). # services.xserver.libinput.enable = true; # Enable razer daemon hardware.openrazer.enable = true; hardware.openrazer.keyStatistics = true; hardware.openrazer.verboseLogging = true; # Define a user account. Don't forget to set a password with ‘passwd’. users.users.nki = { isNormalUser = true; uid = 1000; extraGroups = [ "wheel" # Enable ‘sudo’ for the user. "plugdev" # Enable openrazer-daemon privileges "adbusers" # Android ]; }; services.getty.autologinUser = "nki"; # Allow all packages nixpkgs.config.allowUnfree = true; # List packages installed in system profile. To search, run: # $ nix search wget environment.systemPackages = with pkgs; [ kakoune # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default. wget fish firefox ## System monitoring tools usbutils pciutils ## Security stuff libsForQt5.qtkeychain ## Wayland qt5.qtwayland ## Enable nix-flakes # (pkgs.writeShellScriptBin "nixFlakes" '' # exec ${pkgs.nixUnstable}/bin/nix --experimental-features "nix-command flakes" "$@" # '') ]; # Nix config nix.settings.trusted-public-keys = [ "hydra.iohk.io:f/Ea+s+dFdN+3Y/G+FDgSq+a5NEWhJGzdjvKNGv0/EQ=" ]; nix.settings.substituters = [ "https://hydra.iohk.io" ]; # Terminal programs.gnome-terminal.enable = true; # Environment variables environment.variables = { # Input method overrides GTK_IM_MODULE = "ibus"; QT_IM_MODULE = "ibus"; "XMODIFIERS=@im" = "ibus"; # Basic editor setup EDITOR = "kak"; VISUAL = "kak"; }; # Enable Desktop Environment. services.xserver.displayManager = { # lightdm.enable = true; }; # services.xserver.desktopManager.cinnamon.enable = true; # Some programs need SUID wrappers, can be configured further or are # started in user sessions. programs.mtr.enable = true; # programs.gnupg.agent = { # enable = true; # enableSSHSupport = true; # }; # List services that you want to enable: services.resolved.enable = true; services.resolved.domains = [ "127.0.0.1" ]; services.resolved.fallbackDns = [ "127.0.0.1" ]; nki.services.edns.enable = true; nki.services.edns.ipv6 = true; services.flatpak.enable = true; xdg.portal = { enable = true; wlr.enable = true; }; services.gnome.gnome-keyring.enable = true; # Enable the OpenSSH daemon. services.openssh.enable = true; # Open ports in the firewall. networking.firewall.allowedTCPPorts = [ 22 4533 ]; networking.firewall.allowedUDPPorts = [ 22 ]; # Or disable the firewall altogether. # networking.firewall.enable = false; # ## Bluetooth # hardware.bluetooth.enable = true; # Peripherals hardware.opentabletdriver.enable = true; # Mounting disks! fileSystems = let ntfsMount = path: { device = path; fsType = "ntfs"; options = [ "rw" "uid=${toString config.users.users.nki.uid}" ]; }; in { "/mnt/Data" = ntfsMount "/dev/disk/by-uuid/A90680F8BBE62FE3"; "/mnt/Windows" = ntfsMount "/dev/disk/by-uuid/F4EA78DCEA789D14"; "/mnt/Stuff" = ntfsMount "/dev/disk/by-uuid/717BF2EE20BB8A62"; "/mnt/Shared" = ntfsMount "/dev/disk/by-uuid/76AC086BAC0827E7"; }; # PAM security.pam.services.lightdm.enableKwallet = true; security.pam.services.lightdm.enableGnomeKeyring = true; services.swaylock.enable = true; personal.u2f.enable = true; # This value determines the NixOS release from which the default # settings for stateful data, like file locations and database versions # on your system were taken. It‘s perfectly fine and recommended to leave # this value at the release version of the first install of this system. # Before changing this value read the documentation for this option # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html). system.stateVersion = "21.05"; # Did you read the comment? # tinc network sops.secrets."tinc/ed25519-private-key" = { }; sops.secrets."tinc/rsa-private-key" = { }; services.my-tinc = { enable = true; hostName = "home"; rsaPrivateKey = config.sops.secrets."tinc/rsa-private-key".path; ed25519PrivateKey = config.sops.secrets."tinc/ed25519-private-key".path; bindPort = 6565; }; # Gaming! programs.steam.enable = true; hardware.opengl.driSupport = true; # For 32 bit applications hardware.opengl.driSupport32Bit = true; # Evolution wants a plugin programs.evolution = { enable = true; plugins = with pkgs; [ evolution-ews ]; }; # Android programs.adb.enable = true; # Music server services.navidrome.enable = true; services.navidrome.settings = { Address = "11.0.0.2"; MusicFolder = "/mnt/Stuff/Music"; }; systemd.services.navidrome.serviceConfig.BindReadOnlyPaths = lib.mkAfter [ "/etc" ]; # Printers services.printing.enable = true; # mpd services.mpd = { enable = true; user = "nki"; startWhenNeeded = true; extraConfig = '' audio_output { type "pipewire" name "pipewire local" dsd "yes" } ''; }; systemd.services.mpd.environment = { # https://gitlab.freedesktop.org/pipewire/pipewire/-/issues/609 XDG_RUNTIME_DIR = "/run/user/1000"; # User-id 1000 must match above user. MPD will look inside this directory for the PipeWire socket. }; sops.secrets."scrobble/lastfm" = { }; sops.secrets."scrobble/listenbrainz" = { }; services.mpdscribble = { enable = true; endpoints."last.fm" = { username = "natsukagami"; passwordFile = config.sops.secrets."scrobble/lastfm".path; }; endpoints."listenbrainz" = { username = "natsukagami"; passwordFile = config.sops.secrets."scrobble/listenbrainz".path; }; }; }