2023-06-30 04:39:01 +02:00
|
|
|
|
# Nix Reference Manual:
|
|
|
|
|
# https://nixos.org/manual/nix/stable/
|
|
|
|
|
# NixOS Packages / Options:
|
|
|
|
|
# https://search.nixos.org/packages?
|
|
|
|
|
|
2023-06-30 07:08:28 +02:00
|
|
|
|
|
2023-07-01 10:23:32 +02:00
|
|
|
|
{ lib, config, pkgs, ... }: {
|
2023-06-29 14:00:39 +02:00
|
|
|
|
imports =
|
|
|
|
|
[
|
2023-07-04 08:37:53 +02:00
|
|
|
|
# Desktop Environments
|
2023-07-05 14:58:58 +02:00
|
|
|
|
./desktops/common.nix
|
2023-07-01 09:48:31 +02:00
|
|
|
|
./desktops/gnome.nix
|
2023-07-04 08:37:53 +02:00
|
|
|
|
|
|
|
|
|
# Services
|
2023-07-04 07:44:25 +02:00
|
|
|
|
./services/openssh.nix
|
|
|
|
|
./services/promtail.nix
|
2023-07-04 08:37:53 +02:00
|
|
|
|
./services/fail2ban.nix
|
2023-07-05 12:51:30 +02:00
|
|
|
|
./services/telegraf.nix
|
2023-06-29 14:00:39 +02:00
|
|
|
|
];
|
2023-06-29 08:32:19 +02:00
|
|
|
|
|
2023-07-05 06:33:40 +02:00
|
|
|
|
# Define the default sops file:
|
2023-07-05 06:33:57 +02:00
|
|
|
|
sops.defaultSopsFile = ./secrets/secrets.yaml;
|
2023-07-05 06:30:20 +02:00
|
|
|
|
|
2023-06-29 14:40:55 +02:00
|
|
|
|
# Keep the system up-to-date automatically
|
|
|
|
|
system = {
|
|
|
|
|
autoUpgrade = {
|
|
|
|
|
enable = true;
|
|
|
|
|
allowReboot = false;
|
2023-06-29 14:44:24 +02:00
|
|
|
|
channel = https://channels.nixos.org/nixos-23.05;
|
2023-06-29 14:40:55 +02:00
|
|
|
|
};
|
|
|
|
|
};
|
|
|
|
|
|
2023-06-30 16:22:59 +02:00
|
|
|
|
# Bootloader
|
2023-06-29 14:00:39 +02:00
|
|
|
|
boot.loader.efi.canTouchEfiVariables = true;
|
2023-06-29 15:01:32 +02:00
|
|
|
|
boot.tmp.cleanOnBoot = true;
|
2023-07-02 11:14:32 +02:00
|
|
|
|
|
2023-06-29 14:00:39 +02:00
|
|
|
|
# Plymouth splash screen
|
|
|
|
|
boot.plymouth.enable = true;
|
2023-06-29 14:16:58 +02:00
|
|
|
|
boot.initrd.systemd.enable = true;
|
|
|
|
|
boot.kernelParams = ["quiet"];
|
2023-07-01 01:53:34 +02:00
|
|
|
|
|
2023-06-30 12:57:39 +02:00
|
|
|
|
# SecureBoot
|
|
|
|
|
boot.loader.systemd-boot.enable = lib.mkForce false;
|
|
|
|
|
boot.lanzaboote.enable = true;
|
2023-06-30 13:03:44 +02:00
|
|
|
|
boot.lanzaboote.pkiBundle = "/etc/secureboot";
|
2023-06-30 12:57:39 +02:00
|
|
|
|
|
2023-06-29 14:00:39 +02:00
|
|
|
|
# Enable networking
|
2023-06-29 08:32:19 +02:00
|
|
|
|
networking = {
|
2023-06-29 14:00:39 +02:00
|
|
|
|
networkmanager = {
|
2023-06-29 08:32:19 +02:00
|
|
|
|
enable = true;
|
|
|
|
|
};
|
2023-07-02 10:12:20 +02:00
|
|
|
|
|
2023-06-29 14:00:39 +02:00
|
|
|
|
enableIPv6 = false;
|
|
|
|
|
firewall = {
|
2023-06-29 08:32:19 +02:00
|
|
|
|
enable = true;
|
2023-07-02 09:56:44 +02:00
|
|
|
|
allowedTCPPorts = [ ];
|
2023-06-29 14:00:39 +02:00
|
|
|
|
allowedUDPPorts = [ ];
|
2023-07-02 10:14:19 +02:00
|
|
|
|
trustedInterfaces = [ "tailscale0" ];
|
2023-06-29 08:32:19 +02:00
|
|
|
|
};
|
|
|
|
|
};
|
|
|
|
|
|
2023-06-29 14:00:39 +02:00
|
|
|
|
# Set your time zone.
|
|
|
|
|
time.timeZone = "Asia/Tokyo";
|
|
|
|
|
|
|
|
|
|
# Select internationalisation properties.
|
|
|
|
|
i18n.defaultLocale = "en_US.UTF-8";
|
|
|
|
|
|
|
|
|
|
i18n.extraLocaleSettings = {
|
|
|
|
|
LC_ADDRESS = "en_US.UTF-8";
|
|
|
|
|
LC_IDENTIFICATION = "en_US.UTF-8";
|
|
|
|
|
LC_MEASUREMENT = "en_US.UTF-8";
|
|
|
|
|
LC_MONETARY = "en_US.UTF-8";
|
|
|
|
|
LC_NAME = "en_US.UTF-8";
|
|
|
|
|
LC_NUMERIC = "en_US.UTF-8";
|
|
|
|
|
LC_PAPER = "en_US.UTF-8";
|
|
|
|
|
LC_TELEPHONE = "en_US.UTF-8";
|
|
|
|
|
LC_TIME = "en_US.UTF-8";
|
2023-06-29 08:32:19 +02:00
|
|
|
|
};
|
|
|
|
|
|
2023-06-29 14:00:39 +02:00
|
|
|
|
# Define a user account. Don't forget to set a password with ‘passwd’.
|
|
|
|
|
users.users.albert = {
|
|
|
|
|
isNormalUser = true;
|
|
|
|
|
description = "Albert J. Copeland";
|
|
|
|
|
extraGroups = [ "networkmanager" "wheel" ];
|
2023-06-29 08:32:19 +02:00
|
|
|
|
};
|
|
|
|
|
|
2023-06-30 07:08:28 +02:00
|
|
|
|
# Enable flakes: https://nixos.wiki/wiki/Flakes
|
2023-06-30 11:30:55 +02:00
|
|
|
|
nix.settings.experimental-features = [ "nix-command" "flakes" ];
|
|
|
|
|
|
2023-07-02 11:14:32 +02:00
|
|
|
|
# List packages installed in system profile
|
2023-06-29 14:00:39 +02:00
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
|
|
|
# Secureboot
|
|
|
|
|
sbctl
|
2023-06-30 16:22:59 +02:00
|
|
|
|
|
2023-07-01 12:15:17 +02:00
|
|
|
|
# Bash powerline
|
|
|
|
|
powerline-go
|
|
|
|
|
|
2023-06-29 14:00:39 +02:00
|
|
|
|
# General packages
|
2023-06-30 01:13:12 +02:00
|
|
|
|
# https://github.com/gvolpe/dconf2nix
|
|
|
|
|
dconf2nix
|
2023-06-29 14:00:39 +02:00
|
|
|
|
wget
|
2023-07-01 14:21:31 +02:00
|
|
|
|
neovim
|
2023-06-29 14:00:39 +02:00
|
|
|
|
git
|
|
|
|
|
curl
|
|
|
|
|
htop
|
|
|
|
|
iftop
|
|
|
|
|
nload
|
|
|
|
|
iotop
|
|
|
|
|
glxinfo
|
|
|
|
|
tailscale
|
2023-06-30 15:51:09 +02:00
|
|
|
|
neofetch
|
2023-07-03 10:17:57 +02:00
|
|
|
|
gnupg
|
2023-07-04 08:37:53 +02:00
|
|
|
|
fail2ban
|
2023-06-29 14:00:39 +02:00
|
|
|
|
];
|
|
|
|
|
|
2023-07-02 11:14:32 +02:00
|
|
|
|
# Enable various system services
|
2023-07-02 11:27:23 +02:00
|
|
|
|
services = {
|
2023-07-02 11:14:32 +02:00
|
|
|
|
tailscale.enable = true;
|
|
|
|
|
};
|
2023-06-29 14:00:39 +02:00
|
|
|
|
|
2023-06-29 14:16:58 +02:00
|
|
|
|
# Garbage collection -- Keep the system clean
|
2023-06-29 14:24:22 +02:00
|
|
|
|
nix.gc = {
|
2023-07-02 09:56:44 +02:00
|
|
|
|
automatic = true;
|
|
|
|
|
dates = "daily";
|
|
|
|
|
options = "--delete-older-than 7d";
|
2023-06-29 08:32:19 +02:00
|
|
|
|
};
|
2023-06-29 14:00:39 +02:00
|
|
|
|
|
2023-07-02 09:39:12 +02:00
|
|
|
|
# Fonts
|
2023-07-02 09:50:31 +02:00
|
|
|
|
fonts = {
|
|
|
|
|
fontconfig = {
|
|
|
|
|
defaultFonts = {
|
2023-07-02 09:56:44 +02:00
|
|
|
|
emoji = [ "Noto Color Emoji" ];
|
2023-07-02 09:50:31 +02:00
|
|
|
|
monospace = [ "JetBrainsMono Nerd Font" "Cascadia Code" "Sarasa Mono SC" ];
|
|
|
|
|
sansSerif = [ "Arimo Nerd Font" "Sarasa Gothic SC" ];
|
2023-07-02 09:56:44 +02:00
|
|
|
|
serif = [ "Arimo Nerd Font" "Sarasa Gothic SC" ];
|
2023-07-02 09:50:31 +02:00
|
|
|
|
};
|
|
|
|
|
includeUserConf = false;
|
2023-07-02 09:39:12 +02:00
|
|
|
|
};
|
2023-07-02 09:50:31 +02:00
|
|
|
|
|
|
|
|
|
fonts = with pkgs; [
|
|
|
|
|
cascadia-code
|
|
|
|
|
(nerdfonts.override { fonts = [ "Arimo" "JetBrainsMono" ]; })
|
|
|
|
|
noto-fonts-emoji
|
|
|
|
|
sarasa-gothic
|
|
|
|
|
];
|
2023-07-02 09:39:12 +02:00
|
|
|
|
};
|
|
|
|
|
|
2023-06-29 14:00:39 +02:00
|
|
|
|
# This value determines the NixOS release from which the default
|
|
|
|
|
# settings for stateful data, like file locations and database versions
|
|
|
|
|
# on your system were taken. It‘s perfectly fine and recommended to leave
|
|
|
|
|
# this value at the release version of the first install of this system.
|
|
|
|
|
# Before changing this value read the documentation for this option
|
|
|
|
|
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
|
2023-06-29 14:25:10 +02:00
|
|
|
|
system.stateVersion = "23.05"; # Did you read the comment?
|
2023-07-02 15:46:14 +02:00
|
|
|
|
}
|