217 lines
6.6 KiB
Nix
217 lines
6.6 KiB
Nix
|
# Edit this configuration file to define what should be installed on
|
|||
|
# your system. Help is available in the configuration.nix(5) man page
|
|||
|
# and in the NixOS manual (accessible by running ‘nixos-help’).
|
|||
|
|
|||
|
{ pkgs, inputs, system, ... }:
|
|||
|
{
|
|||
|
imports = [
|
|||
|
./hardware-configuration.nix
|
|||
|
];
|
|||
|
|
|||
|
fileSystems."/mnt/arch" = {
|
|||
|
device = "/dev/mapper/arch";
|
|||
|
fsType = "btrfs";
|
|||
|
encrypted = {
|
|||
|
enable = true;
|
|||
|
blkDev = "/dev/disk/by-uuid/60b6f21d-85b2-4d4b-90f4-38612138eeec";
|
|||
|
keyFile = "/sysroot/root/keyfiles/arch.key";
|
|||
|
label = "arch";
|
|||
|
};
|
|||
|
};
|
|||
|
|
|||
|
# Bootloader.
|
|||
|
boot = {
|
|||
|
loader = {
|
|||
|
grub = {
|
|||
|
enable = true;
|
|||
|
useOSProber = false;
|
|||
|
devices = [ "nodev" ];
|
|||
|
efiSupport = true;
|
|||
|
extraEntries = ''
|
|||
|
menuentry "Poweroff" {
|
|||
|
halt
|
|||
|
}
|
|||
|
menuentry "Reboot" {
|
|||
|
reboot
|
|||
|
}
|
|||
|
'';
|
|||
|
theme = inputs.nixos-grub-themes.packages."${system}".hyperfluent;
|
|||
|
};
|
|||
|
efi.canTouchEfiVariables = true;
|
|||
|
};
|
|||
|
|
|||
|
plymouth = {
|
|||
|
enable = true;
|
|||
|
theme = "bgrt";
|
|||
|
};
|
|||
|
|
|||
|
consoleLogLevel = 0;
|
|||
|
initrd.verbose = false;
|
|||
|
kernelParams = [
|
|||
|
"quiet"
|
|||
|
"splash"
|
|||
|
"boot.shell_on_fail"
|
|||
|
"loglevel=3"
|
|||
|
"rd.systemd.show_status=false"
|
|||
|
"rd.udev.log_level=3"
|
|||
|
"udev.log_priority=3"
|
|||
|
];
|
|||
|
|
|||
|
initrd.systemd.enable = true;
|
|||
|
};
|
|||
|
|
|||
|
networking.hostName = "ty-nixos"; # Define your hostname.
|
|||
|
# networking.wireless.enable = true; # Enables wireless support via wpa_supplicant.
|
|||
|
|
|||
|
# Configure network proxy if necessary
|
|||
|
# networking.proxy.default = "http://user:password@proxy:port/";
|
|||
|
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
|
|||
|
|
|||
|
# Enable networking
|
|||
|
networking.networkmanager.enable = true;
|
|||
|
|
|||
|
# Set your time zone.
|
|||
|
time.timeZone = "America/Denver";
|
|||
|
|
|||
|
# Select internationalisation properties.
|
|||
|
i18n.defaultLocale = "en_US.UTF-8";
|
|||
|
|
|||
|
i18n.extraLocaleSettings = {
|
|||
|
LC_ADDRESS = "en_US.UTF-8";
|
|||
|
LC_IDENTIFICATION = "en_US.UTF-8";
|
|||
|
LC_MEASUREMENT = "en_US.UTF-8";
|
|||
|
LC_MONETARY = "en_US.UTF-8";
|
|||
|
LC_NAME = "en_US.UTF-8";
|
|||
|
LC_NUMERIC = "en_US.UTF-8";
|
|||
|
LC_PAPER = "en_US.UTF-8";
|
|||
|
LC_TELEPHONE = "en_US.UTF-8";
|
|||
|
LC_TIME = "en_US.UTF-8";
|
|||
|
};
|
|||
|
|
|||
|
# Enable the X11 windowing system.
|
|||
|
# You can disable this if you're only using the Wayland session.
|
|||
|
services.xserver.enable = false;
|
|||
|
|
|||
|
# KDE + SDDM Configuration
|
|||
|
services.desktopManager.plasma6.enable = true;
|
|||
|
services.displayManager.sddm = {
|
|||
|
enable = true;
|
|||
|
wayland.enable = true;
|
|||
|
|
|||
|
sugarCandyNix = {
|
|||
|
enable = true;
|
|||
|
settings = {
|
|||
|
HeaderText = ":3";
|
|||
|
};
|
|||
|
};
|
|||
|
};
|
|||
|
|
|||
|
# Configure keymap in X11
|
|||
|
services.xserver.xkb = {
|
|||
|
layout = "us";
|
|||
|
variant = "";
|
|||
|
};
|
|||
|
|
|||
|
# Tailscale
|
|||
|
services.tailscale = {
|
|||
|
enable = true;
|
|||
|
useRoutingFeatures = "both";
|
|||
|
openFirewall = true;
|
|||
|
};
|
|||
|
|
|||
|
# Enable CUPS to print documents.
|
|||
|
services.printing.enable = true;
|
|||
|
|
|||
|
# Enable sound with pipewire.
|
|||
|
hardware.pulseaudio.enable = false;
|
|||
|
security.rtkit.enable = true;
|
|||
|
services.pipewire = {
|
|||
|
enable = true;
|
|||
|
alsa.enable = true;
|
|||
|
alsa.support32Bit = true;
|
|||
|
pulse.enable = true;
|
|||
|
# If you want to use JACK applications, uncomment this
|
|||
|
#jack.enable = true;
|
|||
|
|
|||
|
# use the example session manager (no others are packaged yet so this is enabled by default,
|
|||
|
# no need to redefine it in your config for now)
|
|||
|
#media-session.enable = true;
|
|||
|
};
|
|||
|
|
|||
|
# Enable touchpad support (enabled default in most desktopManager).
|
|||
|
# services.xserver.libinput.enable = true;
|
|||
|
|
|||
|
users.mutableUsers = false;
|
|||
|
users.defaultUserShell = pkgs.zsh;
|
|||
|
users.users.ty = {
|
|||
|
isNormalUser = true;
|
|||
|
shell = pkgs.zsh;
|
|||
|
description = "Tyler Beckman";
|
|||
|
extraGroups = [ "networkmanager" "wheel" ];
|
|||
|
hashedPassword = "$y$j9T$XCQtsX/NObNFzrYu7JcJe/$HHgvh4Re6UjKvxMz.XuHw7dwNecnMP8je.4AHUjHnsB";
|
|||
|
};
|
|||
|
|
|||
|
# Install firefox.
|
|||
|
programs.firefox = {
|
|||
|
enable = true;
|
|||
|
preferences = {
|
|||
|
# Disable bullshit
|
|||
|
"browser.ml.chat.enabled" = false;
|
|||
|
"browser.aboutConfig.showWarning" = false;
|
|||
|
"extensions.pocket.enabled" = false;
|
|||
|
"browser.newtabpage.activity-stream.showSponsored" = false;
|
|||
|
"browser.newtabpage.activity-stream.showSponsoredTopSites" = false;
|
|||
|
"browser.newtabpage.activity-stream.feeds.section.topstories" = false;
|
|||
|
"browser.newtabpage.activity-stream.feeds.system.topstories" = false;
|
|||
|
"browser.urlbar.suggest.quicksuggest.sponsored" = false;
|
|||
|
# Experimental prefs
|
|||
|
"image.jxl.enabled" = true;
|
|||
|
# Security
|
|||
|
"security.pki.certificate_transparency.mode" = true;
|
|||
|
};
|
|||
|
preferencesStatus = "locked";
|
|||
|
};
|
|||
|
|
|||
|
# Allow unfree packages
|
|||
|
nixpkgs.config.allowUnfree = true;
|
|||
|
|
|||
|
# List packages installed in system profile. To search, run:
|
|||
|
environment.systemPackages = with pkgs; [
|
|||
|
# Basic system packages
|
|||
|
wget
|
|||
|
curl
|
|||
|
neovim
|
|||
|
git
|
|||
|
jujutsu
|
|||
|
];
|
|||
|
programs.zsh.enable = true;
|
|||
|
|
|||
|
# Env vars
|
|||
|
environment.sessionVariables.NIXOS_OZONE_WL = "1";
|
|||
|
environment.pathsToLink = [ "/share/zsh" ];
|
|||
|
|
|||
|
# List services that you want to enable:
|
|||
|
|
|||
|
# Enable the OpenSSH daemon.
|
|||
|
# services.openssh.enable = true;
|
|||
|
|
|||
|
# Open ports in the firewall.
|
|||
|
# networking.firewall.allowedTCPPorts = [ ... ];
|
|||
|
# networking.firewall.allowedUDPPorts = [ ... ];
|
|||
|
networking.firewall.enable = true;
|
|||
|
|
|||
|
# This value determines the NixOS release from which the default
|
|||
|
# settings for stateful data, like file locations and database versions
|
|||
|
# on your system were taken. It‘s perfectly fine and recommended to leave
|
|||
|
# this value at the release version of the first install of this system.
|
|||
|
# Before changing this value read the documentation for this option
|
|||
|
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
|
|||
|
system.stateVersion = "24.05"; # Did you read the comment?
|
|||
|
|
|||
|
nix.settings.experimental-features = [ "nix-command" "flakes" ];
|
|||
|
|
|||
|
# Enable bluetooth
|
|||
|
hardware.bluetooth.enable = true;
|
|||
|
hardware.bluetooth.powerOnBoot = true;
|
|||
|
}
|