parent
a8366161d4
commit
99785ac890
6 changed files with 51 additions and 75 deletions
21
flake.lock
21
flake.lock
|
|
@ -55,26 +55,6 @@
|
||||||
"type": "github"
|
"type": "github"
|
||||||
}
|
}
|
||||||
},
|
},
|
||||||
"nix-index-database": {
|
|
||||||
"inputs": {
|
|
||||||
"nixpkgs": [
|
|
||||||
"nixpkgs"
|
|
||||||
]
|
|
||||||
},
|
|
||||||
"locked": {
|
|
||||||
"lastModified": 1729394935,
|
|
||||||
"narHash": "sha256-2ntUG+NJKdfhlrh/tF+jOU0fOesO7lm5ZZVSYitsvH8=",
|
|
||||||
"owner": "nix-community",
|
|
||||||
"repo": "nix-index-database",
|
|
||||||
"rev": "04f8a11f247ba00263b060fbcdc95484fd046104",
|
|
||||||
"type": "github"
|
|
||||||
},
|
|
||||||
"original": {
|
|
||||||
"owner": "nix-community",
|
|
||||||
"repo": "nix-index-database",
|
|
||||||
"type": "github"
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"nixos-hardware": {
|
"nixos-hardware": {
|
||||||
"locked": {
|
"locked": {
|
||||||
"lastModified": 1729742320,
|
"lastModified": 1729742320,
|
||||||
|
|
@ -112,7 +92,6 @@
|
||||||
"disko": "disko",
|
"disko": "disko",
|
||||||
"home-manager": "home-manager",
|
"home-manager": "home-manager",
|
||||||
"impermanence": "impermanence",
|
"impermanence": "impermanence",
|
||||||
"nix-index-database": "nix-index-database",
|
|
||||||
"nixos-hardware": "nixos-hardware",
|
"nixos-hardware": "nixos-hardware",
|
||||||
"nixpkgs": "nixpkgs"
|
"nixpkgs": "nixpkgs"
|
||||||
}
|
}
|
||||||
|
|
|
||||||
|
|
@ -21,7 +21,7 @@
|
||||||
inherit system;
|
inherit system;
|
||||||
config.allowUnfree = true;
|
config.allowUnfree = true;
|
||||||
};
|
};
|
||||||
lib = import ./src/lib.nix {
|
lib = import ./lib.nix {
|
||||||
inherit (nixpkgs) lib;
|
inherit (nixpkgs) lib;
|
||||||
inherit pkgs;
|
inherit pkgs;
|
||||||
inherit (inputs) home-manager;
|
inherit (inputs) home-manager;
|
||||||
|
|
@ -52,7 +52,7 @@
|
||||||
in
|
in
|
||||||
{
|
{
|
||||||
inherit lib self;
|
inherit lib self;
|
||||||
nixosConfigurations = (import ./src/hosts/default.nix commonArgs);
|
nixosConfigurations = (import ./src/hosts/nixos.nix commonArgs);
|
||||||
};
|
};
|
||||||
|
|
||||||
# outputs = {nixpkgs, ...} @ inputs:
|
# outputs = {nixpkgs, ...} @ inputs:
|
||||||
|
|
|
||||||
|
|
@ -27,9 +27,10 @@ let
|
||||||
|
|
||||||
modules = [
|
modules = [
|
||||||
inputs.disko.nixosModules.default
|
inputs.disko.nixosModules.default
|
||||||
|
inputs.home-manager.nixosModules.home-manager
|
||||||
|
inputs.impermanence.nixosModules.impermanence
|
||||||
./${host}
|
./${host}
|
||||||
./${host}/hardware.nix
|
./${host}/hardware.nix
|
||||||
../nixos
|
|
||||||
{
|
{
|
||||||
home-manager = {
|
home-manager = {
|
||||||
useGlobalPkgs = true;
|
useGlobalPkgs = true;
|
||||||
|
|
@ -43,7 +44,7 @@ let
|
||||||
imports = [
|
imports = [
|
||||||
inputs.nix-index-database.hmModules.nix-index
|
inputs.nix-index-database.hmModules.nix-index
|
||||||
# ./${host}/home.nix
|
# ./${host}/home.nix
|
||||||
../home
|
../../home
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
@ -54,8 +55,6 @@ let
|
||||||
"users"
|
"users"
|
||||||
user
|
user
|
||||||
])
|
])
|
||||||
inputs.home-manager.nixosModules.home-manager
|
|
||||||
inputs.impermanence.nixosModules.impermanence
|
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
in
|
in
|
||||||
|
|
|
||||||
|
|
@ -1,15 +1,17 @@
|
||||||
{ config, lib, pkgs, inputs, ... }:
|
{ config, lib, pkgs, inputs, ... }:
|
||||||
|
|
||||||
{
|
{
|
||||||
imports = [];
|
imports = [
|
||||||
|
];
|
||||||
|
|
||||||
|
nixpkgs.config.allowUnfree = true;
|
||||||
|
|
||||||
boot.kernelParams = [ "resume_offset=533760" ];
|
boot.kernelParams = [ "resume_offset=533760" ];
|
||||||
# boot.resumeDevice = "/dev/pool/root";
|
boot.resumeDevice = "/dev/pool/root";
|
||||||
boot.loader.systemd-boot.enable = true;
|
boot.loader.systemd-boot.enable = true;
|
||||||
boot.loader.efi.canTouchEfiVariables = true;
|
boot.loader.efi.canTouchEfiVariables = true;
|
||||||
|
|
||||||
networking.hostName = "pickwick";
|
networking.hostName = "pickwick";
|
||||||
networking.hostId = builtins.substring 0 8 (builtins.hashString "md5" config.networking.hostName);
|
|
||||||
networking.networkmanager.enable = true;
|
networking.networkmanager.enable = true;
|
||||||
|
|
||||||
time.timeZone = "America/Chicago";
|
time.timeZone = "America/Chicago";
|
||||||
|
|
@ -22,6 +24,7 @@
|
||||||
services.xserver.desktopManager.gnome.enable = true;
|
services.xserver.desktopManager.gnome.enable = true;
|
||||||
services.xserver.xkb.layout = "us";
|
services.xserver.xkb.layout = "us";
|
||||||
|
|
||||||
|
security.sudo.extraConfig = "Defaults lecture=never";
|
||||||
security.pam.services.login.fprintAuth = false;
|
security.pam.services.login.fprintAuth = false;
|
||||||
security.pam.services.sudo.fprintAuth = false;
|
security.pam.services.sudo.fprintAuth = false;
|
||||||
|
|
||||||
|
|
@ -44,17 +47,17 @@
|
||||||
services.libinput.enable = true;
|
services.libinput.enable = true;
|
||||||
|
|
||||||
|
|
||||||
# users.users.root.hashedPasswordFile = "/persist/passwords/root";
|
users.users.root.hashedPasswordFile = "/persist/passwords/root";
|
||||||
# users.users.rayandrew = {
|
users.users.rayandrew = {
|
||||||
# isNormalUser = true;
|
isNormalUser = true;
|
||||||
# # initialPassword = "12345";
|
# initialPassword = "12345";
|
||||||
# hashedPasswordFile = "/persist/passwords/rayandrew";
|
hashedPasswordFile = "/persist/passwords/rayandrew";
|
||||||
# extraGroups = [ "wheel" "audio" "keyd" ];
|
extraGroups = [ "wheel" "audio" "keyd" ];
|
||||||
# packages = with pkgs; [
|
packages = with pkgs; [
|
||||||
# firefox
|
firefox
|
||||||
# tree
|
tree
|
||||||
# ];
|
];
|
||||||
# };
|
};
|
||||||
users.groups.keyd = {};
|
users.groups.keyd = {};
|
||||||
|
|
||||||
environment.systemPackages = with pkgs; [
|
environment.systemPackages = with pkgs; [
|
||||||
|
|
@ -96,31 +99,32 @@
|
||||||
|
|
||||||
programs.dconf.enable = true;
|
programs.dconf.enable = true;
|
||||||
|
|
||||||
# environment.persistence."/persist/system" = {
|
fileSystems."/persist".neededForBoot = true;
|
||||||
# hideMounts = true;
|
environment.persistence."/persist/system" = {
|
||||||
# directories = [
|
hideMounts = true;
|
||||||
# "/var/log"
|
directories = [
|
||||||
# "/var/lib/fprint"
|
"/var/log"
|
||||||
# "/var/lib/nixos"
|
"/var/lib/fprint"
|
||||||
# "/var/lib/bluetooth"
|
"/var/lib/nixos"
|
||||||
# "/var/lib/systemd/coredump"
|
"/var/lib/bluetooth"
|
||||||
# "/etc/NetworkManager/system-connections"
|
"/var/lib/systemd/coredump"
|
||||||
# { directory = "/var/lib/colord"; user = "colord"; group = "colord"; mode = "u=rwx,g=rx,o="; }
|
"/etc/NetworkManager/system-connections"
|
||||||
# ];
|
{ directory = "/var/lib/colord"; user = "colord"; group = "colord"; mode = "u=rwx,g=rx,o="; }
|
||||||
# files = [
|
];
|
||||||
# "/etc/machine-id"
|
files = [
|
||||||
# ];
|
"/etc/machine-id"
|
||||||
# };
|
];
|
||||||
|
};
|
||||||
|
|
||||||
programs.fuse.userAllowOther = true;
|
programs.fuse.userAllowOther = true;
|
||||||
# home-manager = {
|
home-manager = {
|
||||||
# extraSpecialArgs = {inherit inputs pkgs;};
|
extraSpecialArgs = {inherit inputs pkgs;};
|
||||||
# users = {
|
users = {
|
||||||
# "rayandrew" = import ./home.nix;
|
"rayandrew" = import ./home.nix;
|
||||||
# };
|
};
|
||||||
# useGlobalPkgs = true;
|
useGlobalPkgs = true;
|
||||||
# useUserPackages = true;
|
useUserPackages = true;
|
||||||
# };
|
};
|
||||||
|
|
||||||
services.keyd = {
|
services.keyd = {
|
||||||
enable = true;
|
enable = true;
|
||||||
|
|
|
||||||
|
|
@ -71,24 +71,23 @@
|
||||||
zpool = {
|
zpool = {
|
||||||
zroot = {
|
zroot = {
|
||||||
type = "zpool";
|
type = "zpool";
|
||||||
# mode = "mirror";
|
mode = "mirror";
|
||||||
options = {
|
options = {
|
||||||
cachefile = "none";
|
cachefile = "none";
|
||||||
ashift = "12";
|
ashift = 12;
|
||||||
autotrim = "on";
|
autotrim = "on";
|
||||||
};
|
};
|
||||||
rootFsOptions = {
|
rootFsOptions = {
|
||||||
compression = "zstd";
|
compression = "zstd";
|
||||||
acltype = "posixacl";
|
acltype = "posixacl";
|
||||||
xattr = "sa";
|
xattr = "sa";
|
||||||
|
"com.sun:auto-snapshot" = "false";
|
||||||
mountpoint = "none";
|
mountpoint = "none";
|
||||||
encryption = "aes-256-gcm";
|
encryption = "aes-256-gcm";
|
||||||
keyformat = "passphrase";
|
keyformat = "passphrase";
|
||||||
keylocation = "prompt";
|
keylocation = "prompt";
|
||||||
normalization = "formD";
|
|
||||||
"com.sun:auto-snapshot" = "false";
|
|
||||||
};
|
};
|
||||||
mountpoint = null;
|
mountpoint = "none";
|
||||||
postCreateHook = "zfs list -t snapshot -H -o name | grep -E '^zroot@blank$' || zfs snapshot zroot@blank";
|
postCreateHook = "zfs list -t snapshot -H -o name | grep -E '^zroot@blank$' || zfs snapshot zroot@blank";
|
||||||
datasets = {
|
datasets = {
|
||||||
nix = {
|
nix = {
|
||||||
|
|
|
||||||
|
|
@ -1,7 +1,7 @@
|
||||||
# Do not modify this file! It was generated by ‘nixos-generate-config’
|
# Do not modify this file! It was generated by ‘nixos-generate-config’
|
||||||
# and may be overwritten by future invocations. Please make changes
|
# and may be overwritten by future invocations. Please make changes
|
||||||
# to /etc/nixos/configuration.nix instead.
|
# to /etc/nixos/configuration.nix instead.
|
||||||
{ inputs, config, lib, pkgs, modulesPath, ... }:
|
{ input, config, lib, pkgs, modulesPath, ... }:
|
||||||
|
|
||||||
{
|
{
|
||||||
imports = [
|
imports = [
|
||||||
|
|
@ -25,9 +25,4 @@
|
||||||
|
|
||||||
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
|
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
|
||||||
hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
|
hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
|
||||||
|
|
||||||
# filesystems
|
|
||||||
fileSystems."/cache".neededForBoot = true;
|
|
||||||
fileSystems."/persist".neededForBoot = true;
|
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue