96 lines
2.7 KiB
Nix
96 lines
2.7 KiB
Nix
{ pkgs, inputs, config, lib, ... }:
|
|
|
|
let
|
|
nfs_opts = [ "x-systemd.automount" "noauto" "x-systemd.idle-timeout=600" ];
|
|
hdd_opts = [ "nosuid" "nodev" "nofail" ];
|
|
in
|
|
|
|
{
|
|
|
|
imports =
|
|
[
|
|
./boot.nix
|
|
./hardware.nix
|
|
./kvm.nix
|
|
./desk_apps.nix
|
|
../../modules/common/default.nix
|
|
../../modules/common/system-d_boot.nix
|
|
../../modules/networking/ssh.nix
|
|
../../modules/networking/hosts.nix
|
|
../../modules/user
|
|
../../modules/apps/99_i3_config.nix
|
|
../../modules/dev/docker.nix
|
|
../../modules/dev/ruby.nix
|
|
../../modules/dev/utils.nix
|
|
../../modules/misc/polkit.nix
|
|
inputs.home-manager.nixosModules.default
|
|
inputs.sops-nix.nixosModules.sops
|
|
];
|
|
|
|
|
|
config = {
|
|
user = "fred";
|
|
host = "desk";
|
|
sops_file = "home.yaml";
|
|
rootless_docker = true;
|
|
|
|
time.timeZone = "America/Los_Angeles";
|
|
i18n.defaultLocale = "en_US.UTF-8";
|
|
|
|
environment.systemPackages = with pkgs; [ nfs-utils ddcutil input-remapper ];
|
|
|
|
#### NFS's ###
|
|
services.autofs = {
|
|
enable = true;
|
|
timeout = 60;
|
|
autoMaster = ''
|
|
/- /etc/autofs/auto.nfs_server --timeout=60
|
|
'';
|
|
};
|
|
environment.etc."autofs/auto.nfs_server" = {
|
|
text = ''
|
|
/nfs -rw,soft,rsize=8192,wsize=8192 nfs:/nfs
|
|
/solid -rw,soft,rsize=8192,wsize=8192 nfs:/solid
|
|
/docker -rw,soft,rsize=8192,wsize=8192 nfs:/docker
|
|
'';
|
|
mode = "0644";
|
|
};
|
|
|
|
### HDD's ###
|
|
environment.etc.crypttab = {
|
|
mode = "0600";
|
|
text = ''
|
|
# <volume-name> <encrypted-device> [key-file] [options]
|
|
8tb UUID=72edb411-1740-43e0-81ba-084374bb2b78 /dev/disk/by-id/usb-Generic_Flash_Disk_CE8AD7705 keyfile-size=4096,nofail
|
|
'';
|
|
};
|
|
|
|
fileSystems."/run/media/fred/8tb" =
|
|
{ device = "/dev/mapper/8tb";
|
|
fsType = "ext4";
|
|
options = hdd_opts;
|
|
};
|
|
|
|
# ddcutil detect # get I2C bus #
|
|
# ddcutil capabilities --bus=7
|
|
# ddcutil --bus=7 setvcp 60 0x0f
|
|
hardware.i2c.enable = true;
|
|
users.users.${config.user} = {
|
|
extraGroups = [ "i2c" ];
|
|
};
|
|
|
|
services.tcsd.enable = false; # prevent sysinit-reactiviation.target hang when rebuilding flake
|
|
services.xserver.displayManager.lightdm.extraSeatDefaults = "display-setup-script = ${pkgs.ddcutil}/bin/ddcutil --bus=8 setvcp 60 0x0f";
|
|
|
|
networking.firewall.allowedUDPPorts = [ 11357 ]; # ollama-docker
|
|
networking.firewall.allowedTCPPorts = [ 11357 ]; # ollama-docker
|
|
networking.enableIPv6 = false;
|
|
security.pki.certificates = [ (builtins.readFile ../../dotfiles/certs/mfCA.crt) ];
|
|
|
|
hardware.bluetooth.enable = true;
|
|
hardware.bluetooth.powerOnBoot = true;
|
|
services.blueman.enable = true;
|
|
|
|
system.stateVersion = "25.05";
|
|
};
|
|
}
|