From 45174312aab944458a6177c0c7a44c4513bb6f90 Mon Sep 17 00:00:00 2001 From: Alex Stan <90788596+Ultra980@users.noreply.github.com> Date: Sat, 25 Mar 2023 09:20:16 +0200 Subject: [PATCH] initial commit Signed-off-by: Alex Stan --- cachix.nix | 13 +++ cachix/helix.nix | 13 +++ configuration.nix | 228 +++++++++++++++++++++++++++++++++++++ flake.lock | 27 +++++ flake.nix | 14 +++ hardware-configuration.nix | 39 +++++++ 6 files changed, 334 insertions(+) create mode 100644 cachix.nix create mode 100644 cachix/helix.nix create mode 100644 configuration.nix create mode 100644 flake.lock create mode 100644 flake.nix create mode 100644 hardware-configuration.nix diff --git a/cachix.nix b/cachix.nix new file mode 100644 index 0000000..ecd2d39 --- /dev/null +++ b/cachix.nix @@ -0,0 +1,13 @@ + +# WARN: this file will get overwritten by $ cachix use +{ pkgs, lib, ... }: + +let + folder = ./cachix; + toImport = name: value: folder + ("/" + name); + filterCaches = key: value: value == "regular" && lib.hasSuffix ".nix" key; + imports = lib.mapAttrsToList toImport (lib.filterAttrs filterCaches (builtins.readDir folder)); +in { + inherit imports; + nix.settings.substituters = ["https://cache.nixos.org/"]; +} diff --git a/cachix/helix.nix b/cachix/helix.nix new file mode 100644 index 0000000..6fda109 --- /dev/null +++ b/cachix/helix.nix @@ -0,0 +1,13 @@ + +{ + nix = { + settings = { + substituters = [ + "https://helix.cachix.org" + ]; + trusted-public-keys = [ + "helix.cachix.org-1:ejp9KQpR1FBI2onstMQ34yogDm4OgU2ru6lIwPvuCVs=" + ]; + }; + }; +} diff --git a/configuration.nix b/configuration.nix new file mode 100644 index 0000000..8239d46 --- /dev/null +++ b/configuration.nix @@ -0,0 +1,228 @@ +# Edit this configuration file to define what should be installed on +# your system. Help is available in the configuration.nix(5) man page +# and in the NixOS manual (accessible by running ‘nixos-help’). + +{ config, pkgs, lib, ... }: +let + nix-software-center = import (pkgs.fetchFromGitHub { + owner = "vlinkz"; + repo = "nix-software-center"; + rev = "0.1.1"; + sha256 = "0frigabszyfkphfbsniaa1d546zm8a2gx0cqvk2fr2qfa71kd41n"; + }) {}; +in +{ + imports = + [ # Include the results of the hardware scan. + ./hardware-configuration.nix + ./cachix.nix + ]; + + nix.settings.trusted-users = [ "root" "ultra" ]; + + # Bootloader. + boot.loader.systemd-boot.enable = true; + boot.loader.efi.canTouchEfiVariables = true; + boot.loader.efi.efiSysMountPoint = "/boot/efi"; + + networking.hostName = "ultrapc"; # Define your hostname. + # networking.wireless.enable = true; # Enables wireless support via wpa_supplicant. + + # Configure network proxy if necessary + # networking.proxy.default = "http://user:password@proxy:port/"; + # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain"; + + # Enable networking + networking.networkmanager.enable = true; + + # Set your time zone. + time.timeZone = "Europe/Bucharest"; + + # Select internationalisation properties. + i18n.defaultLocale = "en_GB.utf8"; + + i18n.extraLocaleSettings = { + LC_ADDRESS = "ro_RO.utf8"; + LC_IDENTIFICATION = "ro_RO.utf8"; + LC_MEASUREMENT = "ro_RO.utf8"; + LC_MONETARY = "ro_RO.utf8"; + LC_NAME = "ro_RO.utf8"; + LC_NUMERIC = "ro_RO.utf8"; + LC_PAPER = "ro_RO.utf8"; + LC_TELEPHONE = "ro_RO.utf8"; + LC_TIME = "ro_RO.utf8"; + }; + + # Enable the X11 windowing system. + services.xserver.enable = true; + + # Enable the KDE Plasma Desktop Environment. + services.xserver.displayManager.sddm.enable = true; + services.xserver.desktopManager.plasma5.enable = true; + + # Configure keymap in X11 + services.xserver = { + layout = "ro"; + xkbVariant = ""; + }; + + # Enable CUPS to print documents. + services.printing.enable = true; + + # Enable sound with pipewire. + sound.enable = true; + hardware.pulseaudio.enable = false; + security.rtkit.enable = true; + services.pipewire = { + enable = true; + alsa.enable = true; + alsa.support32Bit = true; + pulse.enable = true; + # If you want to use JACK applications, uncomment this + #jack.enable = true; + + # use the example session manager (no others are packaged yet so this is enabled by default, + # no need to redefine it in your config for now) + #media-session.enable = true; + }; + + # Enable touchpad support (enabled default in most desktopManager). + # services.xserver.libinput.enable = true; + + # Define a user account. Don't forget to set a password with ‘passwd’. + users.users.ultra = { + isNormalUser = true; + description = "Alex S."; + extraGroups = [ "networkmanager" "wheel" ]; + packages = with pkgs; [ + firefox + kate + # thunderbird + distrobox + fish + nushell + git + bat + gnupg1 + zoom-us + google-chrome + zoxide + starship + atuin + clang + # clang++ + gcc + exa + gnumake + plasma-browser-integration + libsForQt5.bismuth + whatsapp-for-linux + signal-desktop + nodejs + onlyoffice-bin + drawio + xclip + steam + packagekit + armcord + packagekit + rnote + obsidian + gnome-obfuscate + microsoft-edge + # microsoft-edge-dev # fails to build + ]; + shell = pkgs.fish; + hashedPassword = "$6$OBjnSQhhJgHsr5LE$jFtUz.2qv0l2viv86exXmfHWC0fDFXKD3rqH41NmqgkdoBrwY2rPkDBCPjdq7PSoeudYcQ0nXxJvh1N7EIUs90"; + }; + + # Enable automatic login for the user. + services.xserver.displayManager.autoLogin.enable = true; + services.xserver.displayManager.autoLogin.user = "ultra"; + + # Allow unfree packages + nixpkgs.config.allowUnfree = true; + + # List packages installed in system profile. To search, run: + # $ nix search wget + environment.systemPackages = with pkgs; [ + # vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default. + wget + neovim + neofetch + podman + distrobox + cargo + nushell + nerdfonts + steam-run + packagekit + nix-software-center + fish + libsForQt5.yakuake + ]; + programs.fish.enable = true; + # programs.nushell.enable = true; + # users.defaultUserShell = pkgs.zsh; + + # Some programs need SUID wrappers, can be configured further or are + # started in user sessions. + # programs.mtr.enable = true; + # programs.gnupg.agent = { + # enable = true; + # enableSSHSupport = true; + # }; + + # List services that you want to enable: + + # Enable the OpenSSH daemon. + # services.openssh.enable = true; + + # Open ports in the firewall. + # networking.firewall.allowedTCPPorts = [ ... ]; + # networking.firewall.allowedUDPPorts = [ ... ]; + # Or disable the firewall altogether. + # networking.firewall.enable = false; + + # This value determines the NixOS release from which the default + # settings for stateful data, like file locations and database versions + # on your system were taken. It‘s perfectly fine and recommended to leave + # this value at the release version of the first install of this system. + # Before changing this value read the documentation for this option + # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html). + system.stateVersion = "22.11"; # Did you read the comment? + + system.autoUpgrade.enable = true; + system.autoUpgrade.allowReboot = false; + + security.sudo.extraConfig = '' + Defaults insults + Defaults pwfeedback + ''; + + virtualisation.podman = { + enable = true; + dockerCompat = true; + # defaultNetwork.settings.dns_enabled = true; + }; + + services.flatpak.enable = true; + services.packagekit.enable = true; + nix.settings.experimental-features = [ "nix-command" "flakes" ]; + + +# NVIDIA config +# services.xserver.videoDrivers = [ "nvidia" ]; +# hardware = { +# opengl = { +# enable = true; +# driSupport = true; +# driSupport32Bit = true; +# }; +# nvidia = { +# package = config.boot.kernelPackages.nvidiaPackages.latest; +# modesetting.enable = true; +# }; +# }; + +} diff --git a/flake.lock b/flake.lock new file mode 100644 index 0000000..8917045 --- /dev/null +++ b/flake.lock @@ -0,0 +1,27 @@ +{ + "nodes": { + "nixpkgs": { + "locked": { + "lastModified": 1679616449, + "narHash": "sha256-E6Fvb13mDFa1ZY4lDbTpKbjvUOA4gbh23GWRf3ZzOOw=", + "owner": "NixOS", + "repo": "nixpkgs", + "rev": "a64e169e396460d6b5763a1de1dd197df8421688", + "type": "github" + }, + "original": { + "owner": "NixOS", + "ref": "nixos-unstable", + "repo": "nixpkgs", + "type": "github" + } + }, + "root": { + "inputs": { + "nixpkgs": "nixpkgs" + } + } + }, + "root": "root", + "version": 7 +} diff --git a/flake.nix b/flake.nix new file mode 100644 index 0000000..ae1b4f0 --- /dev/null +++ b/flake.nix @@ -0,0 +1,14 @@ +{ + description = "My NixOS system configuration"; + + inputs.nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable"; + + outputs = { self, nixpkgs }: { + nixosConfigurations.ultrapc = nixpkgs.lib.nixosSystem { + system = "x86_64-linux"; + modules = [ + ./configuration.nix + ]; + }; + }; +} diff --git a/hardware-configuration.nix b/hardware-configuration.nix new file mode 100644 index 0000000..55d0d06 --- /dev/null +++ b/hardware-configuration.nix @@ -0,0 +1,39 @@ +# Do not modify this file! It was generated by ‘nixos-generate-config’ +# and may be overwritten by future invocations. Please make changes +# to /etc/nixos/configuration.nix instead. +{ config, lib, pkgs, modulesPath, ... }: + +{ + imports = + [ (modulesPath + "/installer/scan/not-detected.nix") + ]; + + boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod" ]; + boot.initrd.kernelModules = [ ]; + boot.kernelModules = [ "kvm-intel" ]; + boot.extraModulePackages = [ ]; + + fileSystems."/" = + { device = "/dev/disk/by-uuid/2fe6c12f-ed04-40ce-8873-dedcac4d7e28"; + fsType = "ext4"; + }; + + fileSystems."/boot/efi" = + { device = "/dev/disk/by-uuid/C258-287E"; + fsType = "vfat"; + }; + + swapDevices = [ ]; + + # Enables DHCP on each ethernet and wireless interface. In case of scripted networking + # (the default) this is the recommended approach. When using systemd-networkd it's + # still possible to use this option, but it's recommended to use it in conjunction + # with explicit per-interface declarations with `networking.interfaces..useDHCP`. + networking.useDHCP = lib.mkDefault true; + # networking.interfaces.enp4s0.useDHCP = lib.mkDefault true; + # networking.interfaces.wlp5s0.useDHCP = lib.mkDefault true; + + nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux"; + powerManagement.cpuFreqGovernor = lib.mkDefault "powersave"; + hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware; +}