nix/configuration.nix

155 lines
3.7 KiB
Nix
Raw Normal View History

2023-06-30 04:39:01 +02:00
# Nix Reference Manual:
# https://nixos.org/manual/nix/stable/
# NixOS Packages / Options:
# https://search.nixos.org/packages?
2023-07-01 10:23:32 +02:00
{ lib, config, pkgs, ... }: {
2023-06-29 14:00:39 +02:00
imports =
[
2023-07-04 08:37:53 +02:00
# Desktop Environments
2023-07-05 14:58:58 +02:00
./desktops/common.nix
./desktops/gnome.nix
2023-07-04 08:37:53 +02:00
# Services
2023-07-04 07:44:25 +02:00
./services/openssh.nix
./services/promtail.nix
2023-07-04 08:37:53 +02:00
./services/fail2ban.nix
2023-07-05 12:51:30 +02:00
./services/telegraf.nix
2023-06-29 14:00:39 +02:00
];
2023-06-29 08:32:19 +02:00
2023-07-05 06:33:40 +02:00
# Define the default sops file:
2023-07-05 06:33:57 +02:00
sops.defaultSopsFile = ./secrets/secrets.yaml;
2023-07-05 06:30:20 +02:00
2023-06-29 14:40:55 +02:00
# Keep the system up-to-date automatically
system = {
autoUpgrade = {
enable = true;
allowReboot = false;
2023-06-29 14:44:24 +02:00
channel = https://channels.nixos.org/nixos-23.05;
2023-06-29 14:40:55 +02:00
};
};
2023-06-30 16:22:59 +02:00
# Bootloader
2023-06-29 14:00:39 +02:00
boot.loader.efi.canTouchEfiVariables = true;
2023-06-29 15:01:32 +02:00
boot.tmp.cleanOnBoot = true;
2023-07-02 11:14:32 +02:00
2023-06-29 14:00:39 +02:00
# Plymouth splash screen
boot.plymouth.enable = true;
2023-06-29 14:16:58 +02:00
boot.initrd.systemd.enable = true;
boot.kernelParams = ["quiet"];
2023-06-30 12:57:39 +02:00
# SecureBoot
boot.loader.systemd-boot.enable = lib.mkForce false;
boot.lanzaboote.enable = true;
2023-06-30 13:03:44 +02:00
boot.lanzaboote.pkiBundle = "/etc/secureboot";
2023-06-30 12:57:39 +02:00
2023-06-29 14:00:39 +02:00
# Enable networking
2023-06-29 08:32:19 +02:00
networking = {
2023-06-29 14:00:39 +02:00
networkmanager = {
2023-06-29 08:32:19 +02:00
enable = true;
};
2023-07-02 10:12:20 +02:00
2023-06-29 14:00:39 +02:00
enableIPv6 = false;
firewall = {
2023-06-29 08:32:19 +02:00
enable = true;
2023-07-02 09:56:44 +02:00
allowedTCPPorts = [ ];
2023-06-29 14:00:39 +02:00
allowedUDPPorts = [ ];
2023-07-02 10:14:19 +02:00
trustedInterfaces = [ "tailscale0" ];
2023-06-29 08:32:19 +02:00
};
};
2023-06-29 14:00:39 +02:00
# Set your time zone.
time.timeZone = "Asia/Tokyo";
# Select internationalisation properties.
i18n.defaultLocale = "en_US.UTF-8";
i18n.extraLocaleSettings = {
LC_ADDRESS = "en_US.UTF-8";
LC_IDENTIFICATION = "en_US.UTF-8";
LC_MEASUREMENT = "en_US.UTF-8";
LC_MONETARY = "en_US.UTF-8";
LC_NAME = "en_US.UTF-8";
LC_NUMERIC = "en_US.UTF-8";
LC_PAPER = "en_US.UTF-8";
LC_TELEPHONE = "en_US.UTF-8";
LC_TIME = "en_US.UTF-8";
2023-06-29 08:32:19 +02:00
};
2023-06-29 14:00:39 +02:00
# Define a user account. Don't forget to set a password with passwd.
users.users.albert = {
isNormalUser = true;
description = "Albert J. Copeland";
extraGroups = [ "networkmanager" "wheel" ];
2023-06-29 08:32:19 +02:00
};
2023-06-30 07:08:28 +02:00
# Enable flakes: https://nixos.wiki/wiki/Flakes
2023-06-30 11:30:55 +02:00
nix.settings.experimental-features = [ "nix-command" "flakes" ];
2023-07-02 11:14:32 +02:00
# List packages installed in system profile
2023-06-29 14:00:39 +02:00
environment.systemPackages = with pkgs; [
# Secureboot
sbctl
2023-06-30 16:22:59 +02:00
2023-07-01 12:15:17 +02:00
# Bash powerline
powerline-go
2023-06-29 14:00:39 +02:00
# General packages
2023-06-30 01:13:12 +02:00
# https://github.com/gvolpe/dconf2nix
dconf2nix
2023-06-29 14:00:39 +02:00
wget
2023-07-01 14:21:31 +02:00
neovim
2023-06-29 14:00:39 +02:00
git
curl
htop
iftop
nload
iotop
glxinfo
tailscale
2023-06-30 15:51:09 +02:00
neofetch
2023-07-03 10:17:57 +02:00
gnupg
2023-07-04 08:37:53 +02:00
fail2ban
2023-06-29 14:00:39 +02:00
];
2023-07-02 11:14:32 +02:00
# Enable various system services
2023-07-02 11:27:23 +02:00
services = {
2023-07-02 11:14:32 +02:00
tailscale.enable = true;
};
2023-06-29 14:00:39 +02:00
2023-06-29 14:16:58 +02:00
# Garbage collection -- Keep the system clean
2023-06-29 14:24:22 +02:00
nix.gc = {
2023-07-02 09:56:44 +02:00
automatic = true;
dates = "daily";
options = "--delete-older-than 7d";
2023-06-29 08:32:19 +02:00
};
2023-06-29 14:00:39 +02:00
2023-07-02 09:39:12 +02:00
# Fonts
2023-07-02 09:50:31 +02:00
fonts = {
fontconfig = {
defaultFonts = {
2023-07-02 09:56:44 +02:00
emoji = [ "Noto Color Emoji" ];
2023-07-02 09:50:31 +02:00
monospace = [ "JetBrainsMono Nerd Font" "Cascadia Code" "Sarasa Mono SC" ];
sansSerif = [ "Arimo Nerd Font" "Sarasa Gothic SC" ];
2023-07-02 09:56:44 +02:00
serif = [ "Arimo Nerd Font" "Sarasa Gothic SC" ];
2023-07-02 09:50:31 +02:00
};
includeUserConf = false;
2023-07-02 09:39:12 +02:00
};
2023-07-02 09:50:31 +02:00
fonts = with pkgs; [
cascadia-code
(nerdfonts.override { fonts = [ "Arimo" "JetBrainsMono" ]; })
noto-fonts-emoji
sarasa-gothic
];
2023-07-02 09:39:12 +02:00
};
2023-06-29 14:00:39 +02:00
# This value determines the NixOS release from which the default
# settings for stateful data, like file locations and database versions
# on your system were taken. Its perfectly fine and recommended to leave
# this value at the release version of the first install of this system.
# Before changing this value read the documentation for this option
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
2023-06-29 14:25:10 +02:00
system.stateVersion = "23.05"; # Did you read the comment?
2023-07-02 15:46:14 +02:00
}