{ pkgs, inputs, config, lib, ... }: let nfs_opts = [ "x-systemd.automount" "noauto" "x-systemd.idle-timeout=600" ]; hdd_opts = [ "nosuid" "nodev" "nofail" ]; in { imports = [ ./boot.nix ./hardware.nix ./kvm.nix ./desk_apps.nix ../../modules/common/default.nix ../../modules/common/system-d_boot.nix ../../modules/networking/ssh.nix ../../modules/networking/hosts.nix ../../modules/user ../../modules/apps/99_i3_config.nix ../../modules/dev/docker.nix ../../modules/dev/ruby.nix ../../modules/dev/utils.nix ../../modules/misc/polkit.nix inputs.home-manager.nixosModules.default inputs.sops-nix.nixosModules.sops ]; config = { user = "fred"; host = "desk"; sops_file = "home.yaml"; rootless_docker = true; time.timeZone = "America/Los_Angeles"; i18n.defaultLocale = "en_US.UTF-8"; environment.systemPackages = with pkgs; [ nfs-utils ddcutil input-remapper ]; #### NFS's ### services.autofs = { enable = true; timeout = 60; autoMaster = '' /- /etc/autofs/auto.nfs_server --timeout=60 ''; }; environment.etc."autofs/auto.nfs_server" = { text = '' /nfs -rw,soft,rsize=8192,wsize=8192 nfs:/nfs /solid -rw,soft,rsize=8192,wsize=8192 nfs:/solid /docker -rw,soft,rsize=8192,wsize=8192 nfs:/docker ''; mode = "0644"; }; ### HDD's ### environment.etc.crypttab = { mode = "0600"; text = '' # [key-file] [options] 8tb UUID=72edb411-1740-43e0-81ba-084374bb2b78 /dev/disk/by-id/usb-Generic_Flash_Disk_CE8AD7705 keyfile-size=4096,nofail ''; }; fileSystems."/run/media/fred/8tb" = { device = "/dev/mapper/8tb"; fsType = "ext4"; options = hdd_opts; }; # ddcutil detect # get I2C bus # # ddcutil capabilities --bus=7 # ddcutil --bus=7 setvcp 60 0x0f hardware.i2c.enable = true; users.users.${config.user} = { extraGroups = [ "i2c" ]; }; services.tcsd.enable = false; # prevent sysinit-reactiviation.target hang when rebuilding flake services.xserver.displayManager.lightdm.extraSeatDefaults = "display-setup-script = ${pkgs.ddcutil}/bin/ddcutil --bus=8 setvcp 60 0x0f"; networking.firewall.allowedUDPPorts = [ 11357 ]; # ollama-docker networking.firewall.allowedTCPPorts = [ 11357 ]; # ollama-docker networking.enableIPv6 = false; security.pki.certificates = [ (builtins.readFile ../../dotfiles/certs/mfCA.crt) ]; hardware.bluetooth.enable = true; hardware.bluetooth.powerOnBoot = true; services.blueman.enable = true; system.stateVersion = "25.05"; }; }