131 lines
2.7 KiB
Nix
131 lines
2.7 KiB
Nix
{
|
|
config,
|
|
lib,
|
|
pkgs,
|
|
mods,
|
|
...
|
|
}:
|
|
|
|
{
|
|
imports = [
|
|
./hardware-configuration.nix
|
|
<agenix/modules/age.nix>
|
|
./secrets.nix
|
|
# ./router.nix
|
|
];
|
|
|
|
boot.loader.systemd-boot.enable = true;
|
|
boot.loader.efi.canTouchEfiVariables = true;
|
|
boot.supportedFilesystems = [ "bcachefs" ];
|
|
boot.kernelPackages = pkgs.linuxPackages_latest;
|
|
|
|
networking.networkmanager.enable = true;
|
|
time.timeZone = "Europe/Paris";
|
|
|
|
i18n.defaultLocale = "en_US.UTF-8";
|
|
console = {
|
|
font = "Lat2-Terminus16";
|
|
keyMap = "fr";
|
|
};
|
|
|
|
nixpkgs.config.allowUnfree = true;
|
|
|
|
hardware = {
|
|
pulseaudio = {
|
|
enable = true;
|
|
package = pkgs.pulseaudioFull;
|
|
};
|
|
bluetooth = {
|
|
enable = true;
|
|
powerOnBoot = false;
|
|
};
|
|
};
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
(pkgs.callPackage <agenix/pkgs/agenix.nix> { })
|
|
wget
|
|
brightnessctl
|
|
nix-search-cli
|
|
git
|
|
btop
|
|
ranger
|
|
colmena
|
|
tree
|
|
lazygit
|
|
nix-output-monitor
|
|
ripgrep
|
|
];
|
|
fonts.packages = with pkgs; [
|
|
fira-code-nerdfont
|
|
font-awesome
|
|
];
|
|
|
|
programs.gnupg.agent = {
|
|
enable = true;
|
|
enableSSHSupport = true;
|
|
};
|
|
|
|
services.syncthing = {
|
|
enable = true;
|
|
systemService = true;
|
|
dataDir = "/home/catvayor";
|
|
user = "catvayor";
|
|
group = "users";
|
|
openDefaultPorts = true;
|
|
settings = {
|
|
folders."essentials" = {
|
|
path = "~/essentials";
|
|
id = "vgpwu-fk3ct";
|
|
devices = [
|
|
"katest"
|
|
"katel"
|
|
];
|
|
};
|
|
devices.katest.id = "UPVXT7D-ZQF4E3J-4WKLLRV-2KF7323-7VOMEJJ-4PZVXW4-UQ2YABE-G7ID4AD";
|
|
devices.katel.id = "DYOKK7J-HZAF5S7-FYTHQF5-UD5GJZ2-4JMV5I5-STUM3HG-5YM2JPR-LATJNAZ";
|
|
};
|
|
};
|
|
services.netbird.enable = true;
|
|
|
|
# boot.kernelModules = [ "kvm-intel" "kvm-amd" ];
|
|
# programs.virt-manager.enable = true;
|
|
# virtualisation.libvirtd.enable = true;
|
|
|
|
system.stateVersion = "23.11";
|
|
|
|
networking.networkmanager.ensureProfiles.profiles = {
|
|
"GPN" = {
|
|
connection = {
|
|
id = "GPN";
|
|
type = "wifi";
|
|
autoconnect = true;
|
|
interface-name = "wlp0s20f3";
|
|
};
|
|
wifi = {
|
|
mode = "infrastructure";
|
|
ssid = "GPN";
|
|
};
|
|
wifi-security = {
|
|
key-mgmt = "wpa-eap";
|
|
};
|
|
"802-1x" = {
|
|
eap = "ttls;";
|
|
identity = "gpn";
|
|
password = "gpn";
|
|
phase2-auth = "pap";
|
|
domain-suffix-match = "radius.noc.gulas.ch";
|
|
ca-cert = "${builtins.fetchurl {
|
|
url = "https://letsencrypt.org/certs/isrgrootx1.pem";
|
|
sha256 = "sha256:1la36n2f31j9s03v847ig6ny9lr875q3g7smnq33dcsmf2i5gd92";
|
|
}}";
|
|
};
|
|
ipv4 = {
|
|
method = "auto";
|
|
};
|
|
ipv6 = {
|
|
addr-gen-mode = "stable-privacy";
|
|
method = "auto";
|
|
};
|
|
};
|
|
};
|
|
}
|