nixos-config/hosts/eddie/configuration.nix

530 lines
12 KiB
Nix

{
nix-config,
config,
pkgs,
inputs,
...
}:
{
imports = with nix-config.nixosModules; [
./hardware-configuration.nix
./razer-speaker-fix.nix
sops-config
niri
kanata
filesystems
sound
];
nixpkgs = {
config = {
allowUnfree = true;
};
overlays = builtins.attrValues nix-config.overlays ++ [
inputs.niri.overlays.niri
inputs.emacs-overlay.overlays.default
inputs.audio.overlays.default
inputs.nix-rice.overlays.default
(final: prev: {
wineWowPackages.stagingFull = nix-config.pkgs-stable.wineWowPackages.stagingFull.overrideAttrs (old: {
patches = old.patches ++ [ ../../patches/wine-6006.patch ];
waylandSupport = true;
fontconfigSupport = true;
vulkanSupport = true;
});
})
];
};
nix = {
settings = {
experimental-features = [
"nix-command"
"flakes"
];
substituters = [
"https://nix-community.cachix.org"
"https://cache.garnix.io"
];
trusted-public-keys = [
"nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
"cache.garnix.io:CTFPyKSLcx5RMJKfLo5EEPUObbA78b0YQ2DTCJXqr9g="
];
};
};
# Set your time zone.
time.timeZone = "America/Toronto";
# Select internationalisation properties.
i18n.defaultLocale = "en_CA.UTF-8";
environment.systemPackages = with pkgs; [
wget
libGL
home-manager
curl
git-lfs
tailscale
rsync
gnupg
clinfo
alsa-utils
alsa-oss
psutils
util-linux
libgtop
fontconfig
freetype
egl-wayland
glfw-wayland
openssl
appimage-run
xwayland-satellite
xwayland-run
cifs-utils
ddcutil
ddcui
];
# Bootloader.
boot = {
loader = {
systemd-boot.enable = true;
systemd-boot.configurationLimit = 8;
efi.canTouchEfiVariables = true;
};
kernelPackages = pkgs.linuxPackages_latest;
kernelModules = [ "i2c-dev" "ddcci-backlight" ];
extraModulePackages = with config.boot.kernelPackages; [ ddcci-driver ];
initrd.systemd.enable = true;
initrd.kernelModules = [
"nvidia"
"nvidia_modeset"
"nvidia_uvm"
"nvidia_drm"
"snd-virmidi"
];
kernelParams = [
"nvidia_drm.fbdev=1"
"nvidia_drm.modeset=1"
];
};
systemd.services.tailscaled.after = [ "NetworkManager-wait-online.service" ];
systemd.sleep.extraConfig = ''
HibernateDelaySec=2h
'';
documentation = {
dev.enable = true;
man.generateCaches = true;
};
hardware = {
i2c.enable = true;
openrazer = {
enable = true;
users = [ "emenel" ];
};
graphics = {
enable = true;
enable32Bit = true;
extraPackages = [
pkgs.rocmPackages.clr.icd
pkgs.amdvlk
];
extraPackages32 = [
pkgs.driversi686Linux.amdvlk
];
};
enableAllFirmware = true;
firmware = [
pkgs.sof-firmware
pkgs.alsa-firmware
];
nvidia = {
open = true;
# Modesetting is required.
modesetting.enable = true;
powerManagement.enable = true;
powerManagement.finegrained = true;
# forceFullCompositionPipeline = true;
package = config.boot.kernelPackages.nvidiaPackages.beta;
prime = {
amdgpuBusId = "PCI:101:0:0";
nvidiaBusId = "PCI:1:0:0";
offload = {
enable = true;
enableOffloadCmd = true;
};
#reverseSync.enable = true;
#sync.enable = true;
};
nvidiaSettings = true;
};
brillo.enable = true;
};
services.fstrim.enable = true;
services.logind = {
extraConfig = ''
IdleAction=lock
IdleActionSec=15m
'';
};
services.udev = {
extraRules = ''
DEVPATH=="/devices/virtual/misc/cpu_dma_latency", OWNER="root", GROUP="audio", MODE="0660"
ACTION=="add", SUBSYSTEM=="backlight", KERNEL=="ddcci*", RUN+="${pkgs.coreutils-full}/bin/chgrp video /sys/class/backlight/%k/brightness"
ACTION=="add", SUBSYSTEM=="backlight", KERNEL=="ddcci*", RUN+="${pkgs.coreutils-full}/bin/chmod a+w /sys/class/backlight/%k/brightness"
ACTION=="add", SUBSYSTEM=="i2c-dev", ATTR{name}=="AMDGPU DM*", TAG+="ddcci", TAG+="systemd", ENV{SYSTEMD_WANTS}+="ddcci@$kernel.service"
ACTION=="add", SUBSYSTEM=="i2c-dev", ATTR{name}=="NVIDIA i2c adapter*", TAG+="ddcci", TAG+="systemd", ENV{SYSTEMD_WANTS}+="ddcci@$kernel.service"
SUBSYSTEM=="i2c", ACTION=="add", ATTR{name}=="AMDGPU DM aux hw bus 3", RUN+="${pkgs.bash}/bin/bash -c 'sleep 30; printf ddcci\ 0x37 > /sys/bus/i2c/devices/i2c-17/new_device'"
'';
packages = [
pkgs.via
pkgs.vial
pkgs.ddcutil
(pkgs.writeTextFile {
name = "on-battery";
text = ''
# Rule for when switching to battery
SUBSYSTEM=="power_supply", ENV{POWER_SUPPLY_ONLINE}=="0", RUN+="${pkgs.power-profiles-daemon}/bin/powerprofilesctl set balanced"
'';
destination = "/etc/udev/rules.d/60-onbattery.rules";
})
(pkgs.writeTextFile {
name = "on-power";
text = ''
# Rule for when switching to ac
SUBSYSTEM=="power_supply", ENV{POWER_SUPPLY_ONLINE}=="1", RUN+="${pkgs.power-profiles-daemon}/bin/powerprofilesctl set performance"
'';
destination = "/etc/udev/rules.d/61-onpower.rules";
})
(pkgs.writeTextFile {
name = "hibernate-low-battery";
text = ''
# Suspend the system when battery level drops to 5% or lower
SUBSYSTEM=="power_supply", ATTR{status}=="Discharging", ATTR{capacity}=="[0-5]", RUN+="${pkgs.systemd}/bin/systemctl hibernate"
'';
destination = "/etc/udev/rules.d/99-hibernate-low-battery.rules";
})
(pkgs.writeTextFile {
name = "on-battery-power-saver";
text = ''
# Switch to power-saver when battery below 50%
SUBSYSTEM=="power_supply", ATTR{status}=="Discharging", ATTR{capacity}=="[0-5][0-9]", RUN+="${pkgs.power-profiles-daemon}/bin/powerprofilesctl set power-saver"
'';
destination = "/etc/udev/rules.d/62-power-save-battery.rules";
})
];
};
security.polkit.enable = true;
security.rtkit.enable = true;
security.pam.services.swaylock = { };
security.pam.services.hyprlock = { };
security.pam.services.greetd.enableGnomeKeyring = true;
services.xserver.videoDrivers = [
"nvidia"
"modesetting"
];
networking = {
hostName = "eddie";
domain = "local";
nameservers = [
"1.1.1.1"
"1.0.0.1"
];
networkmanager = {
enable = true;
wifi.powersave = true;
wifi.backend = "iwd";
};
wireless = {
iwd = {
enable = true;
package = pkgs.iwd;
settings = {
IPv6 = {
enabled = true;
};
Settings = {
AutoConnect = true;
};
};
};
};
};
services.resolved = {
enable = true;
extraConfig = ''
LLMNR=no
ReadEtcHosts=no
DNSSEC=no
'';
};
services.xserver.enable = true;
# Enable the GNOME Desktop Environment.
services.xserver.displayManager.gdm.enable = true;
services.xserver.desktopManager.gnome.enable = true;
services.xserver.deviceSection = ''Option "TearFree" "true"''; # For amdgpu.
# services.xserver.enableTearFree = true;
services.gnome.gnome-keyring.enable = true;
services.gnome.gnome-settings-daemon.enable = true;
services.picom = {
enable = true;
vSync = true;
};
programs.labwc.enable = true;
programs.ssh.startAgent = true;
programs.nh = {
enable = true;
clean = {
enable = true;
dates = "daily";
extraArgs = "--keep-since 4d --keep 3";
};
flake = "/home/emenel/source/nixos-config";
package = pkgs.nh;
};
programs.dconf.enable = true;
programs.gpaste.enable = true;
programs.xwayland.enable = true;
services.xserver.xkb = {
layout = "us";
variant = "";
};
services.printing = {
enable = true;
drivers = [
pkgs.epson-escpr
pkgs.epson-escpr2
];
};
services.tailscale.enable = true;
services.envfs.enable = true;
services.gnome.sushi.enable = true;
xdg.portal = {
enable = true;
xdgOpenUsePortal = true;
extraPortals = [
pkgs.xdg-desktop-portal-gnome
pkgs.xdg-desktop-portal-gtk
pkgs.xdg-desktop-portal
pkgs.xdg-desktop-portal-wlr
pkgs.gnome-keyring
];
};
programs.steam = {
enable = true;
protontricks.enable = true;
extraCompatPackages = [ pkgs.proton-ge-bin ];
};
# enable fish and launch it from bash for interactive shells
programs.fish.enable = true;
environment.pathsToLink = [ "/share/fish" ];
programs.bash = {
interactiveShellInit = ''
if [[ $(${pkgs.procps}/bin/ps --no-header --pid=$PPID --format=comm) != "fish" && -z ''${BASH_EXECUTION_STRING} ]]
then
shopt -q login_shell && LOGIN_OPTION='--login' || LOGIN_OPTION=""
exec ${pkgs.fish}/bin/fish $LOGIN_OPTION
fi
'';
};
services.flatpak.enable = true;
services.dbus.implementation = "broker";
#programs.gnupg.enable = true;
programs.git.enable = true;
environment.gnome.excludePackages = with pkgs; [
cheese
geary
gnome-music
gnome-tour
];
services.accounts-daemon.enable = true;
services.gnome.gnome-online-accounts.enable = true;
programs.virt-manager.enable = true;
virtualisation = {
libvirtd = {
enable = true;
qemu = {
package = pkgs.qemu_kvm;
swtpm.enable = true;
ovmf.enable = true;
ovmf.packages = [ pkgs.OVMFFull.fd ];
};
};
spiceUSBRedirection.enable = true;
};
services.qemuGuest.enable = true;
services.spice-vdagentd.enable = true;
programs.appimage = {
enable = true;
binfmt = true;
package = pkgs.appimage-run.override {
extraPkgs = pkgs: [ pkgs.libxcrypt.out ];
};
};
programs.nix-ld.enable = true;
programs.nix-ld.libraries = with pkgs; [
zlib
zstd
stdenv.cc.cc
curlFull
openssl.out
attr
libssh
libxcrypt.out
bzip2
libxml2
acl
libsodium
util-linux
xz
systemd
fontconfig
freetype
gnutls
util-linux
libGL.dev
psutils
egl-wayland
eglexternalplatform
glfw-wayland
glfw
libGLU.dev
libuv.out
libressl.out
libudev-zero.out
];
fonts = {
enableDefaultPackages = true;
fontDir.enable = true;
fontconfig = {
enable = true;
useEmbeddedBitmaps = true;
};
packages = with pkgs; [
fira-code
font-awesome
fira
cooper-hewitt
ibm-plex
jetbrains-mono
iosevka
spleen
fira-code-symbols
powerline-fonts
noto-fonts-color-emoji
noto-fonts
noto-fonts-cjk-sans
noto-fonts-emoji
nerd-fonts.jetbrains-mono
nerd-fonts.fira-code
nerd-fonts._0xproto
nerd-fonts.symbols-only
];
};
powerManagement = {
enable = true;
};
services.power-profiles-daemon = {
enable = true;
package = pkgs.power-profiles-daemon;
};
# enable the OpenSSH daemon.
services.openssh.enable = true;
services.avahi = {
enable = true;
publish.enable = true;
publish.userServices = true;
openFirewall = true;
nssmdns4 = true;
};
services.samba = {
enable = true;
package = pkgs.sambaFull;
openFirewall = true;
};
services.samba-wsdd = {
enable = true;
openFirewall = true;
};
# add user accounts
users.users.emenel = {
isNormalUser = true;
description = "emenel";
extraGroups = [
"networkmanager"
"network"
"wheel"
"uinput"
"uucp"
"dialout"
"input"
"audio"
"video"
"libvirtd"
"nvidia"
"cups"
"openrazer"
"plugdev"
"i2c-dev"
];
packages = with pkgs; [
git
];
};
#do not change
system.stateVersion = "24.05";
}