tristan/nix
1
0
Fork 0
Code Projects Releases Packages Activity

provisional alpine server setup

Browse source
This commit is contained in:
Tristan 2024-02-16 10:32:08 +00:00
parent 9877bc2f30
commit b1fc9f70e7
5 changed files with 102 additions and 95 deletions
Download patch file Download diff file Expand all files Collapse all files

103
nixos/default.nix
View file

@ -17,10 +17,6 @@ in {
registry.nixpkgs.flake = inputs.nixpkgs;
};
nixpkgs.config.permittedInsecurePackages = [
"electron-25.9.0"
];
boot.loader.grub = {
enable = true;
device = "nodev";
@ -29,72 +25,26 @@ in {
boot.loader.efi.canTouchEfiVariables = true;
networking.networkmanager.enable = true;
programs.nm-applet.enable = true;
services.tailscale.enable = true;
time.timeZone = "Europe/London";
time.timeZone = lib.mkDefault "Europe/London";
console = {
font = "Lat2-Terminus16";
useXkbConfig = true;
};
# use pipewire
hardware.pulseaudio.enable = false;
security.rtkit.enable = true;
services.pipewire = {
enable = true;
alsa.enable = true;
alsa.support32Bit = true;
pulse.enable = true;
jack.enable = true;
};
# pipewire raop
networking.firewall.allowedUDPPorts = [6002 6001];
# network streaming
networking.firewall.allowedTCPPorts = [4713];
# kde connect
networking.firewall.allowedTCPPortRanges = [
{
from = 1714;
to = 1764;
}
];
networking.firewall.allowedUDPPortRanges = [
{
from = 1714;
to = 1764;
}
];
networking.firewall.interfaces.tailscale0 = {
allowedTCPPortRanges = [
{
from = 0;
to = 65535;
}
];
};
# networking.firewall.interfaces.tailscale0 = {
# allowedTCPPortRanges = [
# {
# from = 0;
# to = 65535;
# }
# ];
# };
services.avahi.enable = true;
security.pam.services.swaylock = {};
security.polkit.enable = true;
systemd.user.services.polkit-gnome-authentication-agent-1 = {
description = "polkit-gnome-authentication-agent-1";
wantedBy = ["graphical-session.target"];
wants = ["graphical-session.target"];
after = ["graphical-session.target"];
serviceConfig = {
Type = "simple";
ExecStart = "${pkgs.polkit_gnome}/libexec/polkit-gnome-authentication-agent-1";
Restart = "on-failure";
RestartSec = 1;
TimeoutStopSec = 10;
};
};
i18n.defaultLocale = lib.mkDefault "en_GB.UTF-8";
services.xserver.xkb = {
@ -106,10 +56,6 @@ in {
pkgs.lib.mkIf (inputs.self ? rev)
inputs.self.rev;
hardware.opentabletdriver.enable = true;
services.printing.enable = true;
users.users.${user} = {
isNormalUser = true;
extraGroups = ["wheel" "video" "networkmanager" "kvm"];
@ -125,6 +71,7 @@ in {
environment.pathsToLink = ["/share/zsh"];
services.gvfs.enable = true;
environment.systemPackages = with pkgs; [
tealdeer
alsa-utils
@ -134,10 +81,6 @@ in {
fzf
];
services.dbus.enable = true;
programs.light.enable = true;
programs.dconf.enable = true;
programs.tmux.enable = true;
programs.tmux.extraConfig = ''
set escape-time 0
@ -167,32 +110,6 @@ in {
"net.ipv4.ip_unprivileged_port_start" = 53;
};
services.tlp.enable = true;
hardware.bluetooth.enable = true;
services.blueman.enable = true;
services.prometheus.exporters.node.enable = true;
stylix = {
image = ../images/demonslayer.png;
base16Scheme = "${pkgs.base16-schemes}/share/themes/onedark.yaml";
opacity = {
terminal = 0.9;
applications = 0.9;
desktop = 0.9;
popups = 0.9;
};
};
nixpkgs.overlays = [
(final: prev: {
interalia = prev.callPackage ../pkgs/interalia.nix {};
})
];
fonts.packages = with pkgs; [
nerdfonts
interalia
];
}

83
nixos/workstation.nix Normal file
View file

@ -0,0 +1,83 @@
{
inputs,
config,
pkgs,
lib,
...
}: let
user = config.user;
in {
imports = [
inputs.stylix.nixosModules.stylix
];
nixpkgs.config.permittedInsecurePackages = [
"electron-25.9.0"
];
# use pipewire
hardware.pulseaudio.enable = false;
security.rtkit.enable = true;
services.pipewire = {
enable = true;
alsa.enable = true;
alsa.support32Bit = true;
pulse.enable = true;
jack.enable = true;
};
# pipewire raop
networking.firewall.allowedUDPPorts = [6002 6001];
# network streaming
networking.firewall.allowedTCPPorts = [4713];
security.pam.services.swaylock = {};
security.polkit.enable = true;
systemd.user.services.polkit-gnome-authentication-agent-1 = {
description = "polkit-gnome-authentication-agent-1";
wantedBy = ["graphical-session.target"];
wants = ["graphical-session.target"];
after = ["graphical-session.target"];
serviceConfig = {
Type = "simple";
ExecStart = "${pkgs.polkit_gnome}/libexec/polkit-gnome-authentication-agent-1";
Restart = "on-failure";
RestartSec = 1;
TimeoutStopSec = 10;
};
};
hardware.opentabletdriver.enable = true;
programs.nm-applet.enable = true;
services.printing.enable = true;
services.dbus.enable = true;
programs.light.enable = true;
programs.dconf.enable = true;
hardware.bluetooth.enable = true;
services.blueman.enable = true;
stylix = {
image = ../images/nix-soft.png;
base16Scheme = "${pkgs.base16-schemes}/share/themes/onedark.yaml";
opacity = {
terminal = 0.9;
applications = 0.9;
desktop = 0.9;
popups = 0.9;
};
};
nixpkgs.overlays = [
(final: prev: {
interalia = prev.callPackage ../pkgs/interalia.nix {};
})
];
fonts.packages = with pkgs; [
nerdfonts
interalia
];
}