148 lines
3.3 KiB
Nix
148 lines
3.3 KiB
Nix
|
# Edit this configuration file to define what should be installed on
|
|||
|
|
# your system. Help is available in the configuration.nix(5) man page
|
|||
|
|
# and in the NixOS manual (accessible by running ‘nixos-help’).
|
|||
|
|
|
|||
|
|
{
|
|||
|
|
headless,
|
|||
|
|
hostname,
|
|||
|
|
inputs,
|
|||
|
|
outputs,
|
|||
|
|
pkgs,
|
|||
|
|
self,
|
|||
|
|
system,
|
|||
|
|
username,
|
|||
|
|
...
|
|||
|
|
}:
|
|||
|
|
|
|||
|
|
{
|
|||
|
|
imports = [
|
|||
|
|
# Include the results of the hardware scan.
|
|||
|
|
./hardware-configuration.nix
|
|||
|
|
];
|
|||
|
|
|
|||
|
|
# home-manager.backupFileExtension
|
|||
|
|
home-manager = {
|
|||
|
|
backupFileExtension = "bak2";
|
|||
|
|
extraSpecialArgs = {
|
|||
|
|
inherit
|
|||
|
|
hostname
|
|||
|
|
inputs
|
|||
|
|
outputs
|
|||
|
|
headless
|
|||
|
|
self
|
|||
|
|
system
|
|||
|
|
username
|
|||
|
|
;
|
|||
|
|
};
|
|||
|
|
useGlobalPkgs = true;
|
|||
|
|
useUserPackages = true;
|
|||
|
|
|
|||
|
|
users."${username}" = import "${self}/nix/home/${username}";
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
nixpkgs = {
|
|||
|
|
config = {
|
|||
|
|
allowUnfree = true;
|
|||
|
|
|
|||
|
|
permittedInsecurePackages = [ "electron-27.3.11" ];
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
overlays = [
|
|||
|
|
outputs.overlays.additions
|
|||
|
|
outputs.overlays.modifications
|
|||
|
|
outputs.overlays.stable-packages
|
|||
|
|
];
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
nix.nixPath = [ "nixpkgs=${inputs.nixpkgs}" ];
|
|||
|
|
|
|||
|
|
# Bootloader.
|
|||
|
|
boot.loader.systemd-boot.enable = true;
|
|||
|
|
boot.loader.efi.canTouchEfiVariables = true;
|
|||
|
|
boot.loader.efi.efiSysMountPoint = "/boot/efi";
|
|||
|
|
|
|||
|
|
# networking.wireless.enable = true; # Enables wireless support via wpa_supplicant.
|
|||
|
|
|
|||
|
|
# Configure network proxy if necessary
|
|||
|
|
# networking.proxy.default = "http://user:password@proxy:port/";
|
|||
|
|
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
|
|||
|
|
|
|||
|
|
# Enable networking
|
|||
|
|
networking.networkmanager.enable = true;
|
|||
|
|
|
|||
|
|
# Set your time zone.
|
|||
|
|
time.timeZone = "Europe/London";
|
|||
|
|
|
|||
|
|
# Select internationalisation properties.
|
|||
|
|
i18n.defaultLocale = "en_GB.UTF-8";
|
|||
|
|
|
|||
|
|
i18n.extraLocaleSettings = {
|
|||
|
|
LC_ADDRESS = "en_GB.UTF-8";
|
|||
|
|
LC_IDENTIFICATION = "en_GB.UTF-8";
|
|||
|
|
LC_MEASUREMENT = "en_GB.UTF-8";
|
|||
|
|
LC_MONETARY = "en_GB.UTF-8";
|
|||
|
|
LC_NAME = "en_GB.UTF-8";
|
|||
|
|
LC_NUMERIC = "en_GB.UTF-8";
|
|||
|
|
LC_PAPER = "en_GB.UTF-8";
|
|||
|
|
LC_TELEPHONE = "en_GB.UTF-8";
|
|||
|
|
LC_TIME = "en_GB.UTF-8";
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
# Configure keymap in X11
|
|||
|
|
services.xserver.xkb = {
|
|||
|
|
layout = "gb";
|
|||
|
|
variant = "";
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
# Configure console keymap
|
|||
|
|
console.keyMap = "uk";
|
|||
|
|
|
|||
|
|
# Define a user account. Don't forget to set a password with ‘passwd’.
|
|||
|
|
users.users.opdavies = {
|
|||
|
|
isNormalUser = true;
|
|||
|
|
description = "Oliver Davies";
|
|||
|
|
extraGroups = [
|
|||
|
|
"docker"
|
|||
|
|
"media"
|
|||
|
|
"networkmanager"
|
|||
|
|
"wheel"
|
|||
|
|
];
|
|||
|
|
packages = with pkgs; [
|
|||
|
|
cryptsetup
|
|||
|
|
];
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
users.groups.media = { };
|
|||
|
|
|
|||
|
|
# List packages installed in system profile. To search, run:
|
|||
|
|
# $ nix search wget
|
|||
|
|
environment.systemPackages = with pkgs; [
|
|||
|
|
# vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
|
|||
|
|
# wget
|
|||
|
|
];
|
|||
|
|
|
|||
|
|
# Some programs need SUID wrappers, can be configured further or are
|
|||
|
|
# started in user sessions.
|
|||
|
|
# programs.mtr.enable = true;
|
|||
|
|
# programs.gnupg.agent = {
|
|||
|
|
# enable = true;
|
|||
|
|
# enableSSHSupport = true;
|
|||
|
|
# };
|
|||
|
|
|
|||
|
|
# List services that you want to enable:
|
|||
|
|
|
|||
|
|
# Enable the OpenSSH daemon.
|
|||
|
|
services.openssh.enable = true;
|
|||
|
|
|
|||
|
|
# Open ports in the firewall.
|
|||
|
|
networking.firewall.allowedTCPPorts = [
|
|||
|
|
80
|
|||
|
|
443
|
|||
|
|
];
|
|||
|
|
# networking.firewall.allowedUDPPorts = [ ... ];
|
|||
|
|
# Or disable the firewall altogether.
|
|||
|
|
# networking.firewall.enable = false;
|
|||
|
|
|
|||
|
|
system.stateVersion = "24.11";
|
|||
|
|
}
|