-
Notifications
You must be signed in to change notification settings - Fork 1
/
main.nix
77 lines (77 loc) · 1.74 KB
/
main.nix
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
{ config, pkgs, lib, trunk, home-manager, self, inputs, ... }:
{
nixpkgs.config.allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) [
"steam"
"steam-original"
"steam-run"
];
imports = [
### Basic Settings and Config
### You Know
### unixStuff
./unixStuff/users.nix
./unixStuff/environment.nix
./unixStuff/extraHardware.nix
./unixStuff/networking.nix
###
### Programs, it's in the name
###
./programs/cyberSecurity.nix
./programs/desktop/main.nix
### These Programs run for longer
### Thus wanted a special dir
###
./services/services.nix
### I Would Tell You Whats in Here
### But it's a Secret
###
./secrets/secrets.nix
];
environment.systemPackages = with pkgs; [
inputs.ags.packages.x86_64-linux.default
sshfs
nodejs_18
alsa-utils
tree
hugo
gcc
jq
pandoc
tokei
age
ssh-to-age
sops
nix-alien
nix-index
];
security.rtkit.enable = true;
nix = {
extraOptions = ''
experimental-features = nix-command flakes
restrict-eval = false
access-tokens = github.com !include ${config.sops.secrets.nixAccessTokens.path}
'';
};
time.timeZone = "America/New_York";
virtualisation = {
docker = {
enable = true;
daemon.settings = {
data-root = "/home/dockerFolder/";
};
};
waydroid.enable = false;
lxd.enable = false;
};
boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true;
# amd gpu
boot = {
initrd.kernelModules = [ "amdgpu" ];
};
sops.secrets.wyattPassword.neededForUsers = true;
nixpkgs.overlays = [
self.inputs.nix-alien.overlays.default
];
system.stateVersion = "23.05";
}