dunkirk.sh / dots
Kieran's opinionated (and probably slightly dumb) nix config
fork atom

feat: move to nixos module config

dunkirk.sh d9d75bb3 fb529424

verified
options
unified split
Changed files
+979 -898
flake.nix
moonlark
configuration.nix
greetd.nix
pam.nix
nixos
machines
moonlark
configuration.nix
disk-config.nix
hardware-configuration.nix
home-manager.nix
modules
apps
default.nix
tuigreet.nix
authentication.nix
default.nix
network
wifi.nix
+1 -1
flake.nix 
···

       
138

       
138

       
 

       
            inputs.disko.nixosModules.disko


     

       
139

       
139

       
 

       
            { disko.devices.disk.disk1.device = "/dev/vda"; }


     

       
140

       
140

       
 

       
            agenix.nixosModules.default


     

       
141

       

       
-

       
            ./moonlark/configuration.nix


     

       

       
141

       
+

       
            ./nixos/machines/moonlark/configuration.nix


     

       
142

       
142

       
 

       
            unstable-overlays


     

       
143

       
143

       
 

       
          ];


     

       
144

       
144

       
 

       
        };
-796
moonlark/configuration.nix 
···

       
1

       

       
-

       
# This is your system's configuration file.


     

       
2

       

       
-

       
# Use this to configure your system environment (it replaces /etc/nixos/configuration.nix)


     

       
3

       

       
-

       
{


     

       
4

       

       
-

       
  inputs,


     

       
5

       

       
-

       
  lib,


     

       
6

       

       
-

       
  config,


     

       
7

       

       
-

       
  pkgs,


     

       
8

       

       
-

       
  ...


     

       
9

       

       
-

       
}:


     

       
10

       

       
-

       
{


     

       
11

       

       
-

       
  # You can import other NixOS modules here


     

       
12

       

       
-

       
  imports = [


     

       
13

       

       
-

       
    # If you want to use modules from other flakes (such as nixos-hardware):


     

       
14

       

       
-

       
    inputs.hardware.nixosModules.framework-11th-gen-intel


     

       
15

       

       
-

       



     

       
16

       

       
-

       
    # Import your generated (nixos-generate-config) hardware configuration


     

       
17

       

       
-

       
    ./hardware-configuration.nix


     

       
18

       

       
-

       



     

       
19

       

       
-

       
    # Import home-manager's configuration


     

       
20

       

       
-

       
    ./home-manager.nix


     

       
21

       

       
-

       



     

       
22

       

       
-

       
    # Import disko's configuration


     

       
23

       

       
-

       
    ./disk-config.nix


     

       
24

       

       
-

       



     

       
25

       

       
-

       
    ./pam.nix


     

       
26

       

       
-

       



     

       
27

       

       
-

       
    # tuigreet


     

       
28

       

       
-

       
    ./greetd.nix


     

       
29

       

       
-

       
  ];


     

       
30

       

       
-

       



     

       
31

       

       
-

       
  nixpkgs = {


     

       
32

       

       
-

       
    # Configure your nixpkgs instance


     

       
33

       

       
-

       
    config = {


     

       
34

       

       
-

       
      # Disable if you don't want unfree packages


     

       
35

       

       
-

       
      allowUnfree = true;


     

       
36

       

       
-

       
    };


     

       
37

       

       
-

       
  };


     

       
38

       

       
-

       



     

       
39

       

       
-

       
  nix =


     

       
40

       

       
-

       
    let


     

       
41

       

       
-

       
      flakeInputs = lib.filterAttrs (_: lib.isType "flake") inputs;


     

       
42

       

       
-

       
    in


     

       
43

       

       
-

       
    {


     

       
44

       

       
-

       
      settings = {


     

       
45

       

       
-

       
        # Enable flakes and new 'nix' command


     

       
46

       

       
-

       
        experimental-features = "nix-command flakes";


     

       
47

       

       
-

       
        # Opinionated: disable global registry


     

       
48

       

       
-

       
        flake-registry = "";


     

       
49

       

       
-

       
        # Workaround for https://github.com/NixOS/nix/issues/9574


     

       
50

       

       
-

       
        nix-path = config.nix.nixPath;


     

       
51

       

       
-

       
        trusted-users = [


     

       
52

       

       
-

       
          "kierank"


     

       
53

       

       
-

       
        ];


     

       
54

       

       
-

       
      };


     

       
55

       

       
-

       
      # Opinionated: disable channels


     

       
56

       

       
-

       
      channel.enable = false;


     

       
57

       

       
-

       



     

       
58

       

       
-

       
      optimise.automatic = true;


     

       
59

       

       
-

       



     

       
60

       

       
-

       
      # Opinionated: make flake registry and nix path match flake inputs


     

       
61

       

       
-

       
      registry = lib.mapAttrs (_: flake: { inherit flake; }) flakeInputs;


     

       
62

       

       
-

       
      nixPath = lib.mapAttrsToList (n: _: "${n}=flake:${n}") flakeInputs;


     

       
63

       

       
-

       
    };


     

       
64

       

       
-

       



     

       
65

       

       
-

       
  time.timeZone = "America/New_York";


     

       
66

       

       
-

       



     

       
67

       

       
-

       
  environment.systemPackages = map lib.lowPrio [


     

       
68

       

       
-

       
    pkgs.curl


     

       
69

       

       
-

       
    pkgs.wget


     

       
70

       

       
-

       
    pkgs.dogdns


     

       
71

       

       
-

       
    inputs.agenix.packages.x86_64-linux.default


     

       
72

       

       
-

       
    pkgs.overskride


     

       
73

       

       
-

       
    pkgs.alacritty


     

       
74

       

       
-

       
    pkgs.zsh


     

       
75

       

       
-

       
    pkgs.starship


     

       
76

       

       
-

       
    pkgs.gh


     

       
77

       

       
-

       
    pkgs.swww


     

       
78

       

       
-

       
    pkgs.wluma


     

       
79

       

       
-

       
    pkgs.brightnessctl


     

       
80

       

       
-

       
    inputs.hyprland-contrib.packages.${pkgs.system}.grimblast


     

       
81

       

       
-

       
    pkgs.mako


     

       
82

       

       
-

       
    pkgs.unstable.hyprpicker


     

       
83

       

       
-

       
    pkgs.notify-desktop


     

       
84

       

       
-

       
    pkgs.bc


     

       
85

       

       
-

       
    pkgs.wl-clipboard


     

       
86

       

       
-

       
    pkgs.psmisc


     

       
87

       

       
-

       
    pkgs.jq


     

       
88

       

       
-

       
    pkgs.playerctl


     

       
89

       

       
-

       
    pkgs.firefox


     

       
90

       

       
-

       
    pkgs.slack


     

       
91

       

       
-

       
    pkgs.nautilus


     

       
92

       

       
-

       
    pkgs.totem


     

       
93

       

       
-

       
    pkgs.loupe


     

       
94

       

       
-

       
    pkgs.simple-scan


     

       
95

       

       
-

       
    pkgs.file-roller


     

       
96

       

       
-

       
    pkgs.polkit_gnome


     

       
97

       

       
-

       
    pkgs.fprintd


     

       
98

       

       
-

       
    pkgs.gitMinimal


     

       
99

       

       
-

       
    pkgs.udiskie


     

       
100

       

       
-

       
    pkgs.neofetch


     

       
101

       

       
-

       
    pkgs.cava


     

       
102

       

       
-

       
    pkgs.go


     

       
103

       

       
-

       
    pkgs.gopls


     

       
104

       

       
-

       
    pkgs.gotools


     

       
105

       

       
-

       
    pkgs.go-tools


     

       
106

       

       
-

       
    pkgs.unstable.bun


     

       
107

       

       
-

       
    pkgs.pitivi


     

       
108

       

       
-

       
    pkgs.unstable.arduino-ide


     

       
109

       

       
-

       
    pkgs.unstable.arduino-cli


     

       
110

       

       
-

       
    pkgs.gitui


     

       
111

       

       
-

       
    pkgs.vhs


     

       
112

       

       
-

       
    pkgs.video-trimmer


     

       
113

       

       
-

       
    pkgs.ffmpeg


     

       
114

       

       
-

       
    pkgs.ngrok


     

       
115

       

       
-

       
    pkgs.openssl


     

       
116

       

       
-

       
    pkgs.nodePackages_latest.prisma


     

       
117

       

       
-

       
    pkgs.nodejs_22


     

       
118

       

       
-

       
    pkgs.invoice


     

       
119

       

       
-

       
    pkgs.pop


     

       
120

       

       
-

       
    pkgs.gum


     

       
121

       

       
-

       
    pkgs.unstable.kicad-testing


     

       
122

       

       
-

       
    pkgs.unstable.mitmproxy


     

       
123

       

       
-

       
    pkgs.glow


     

       
124

       

       
-

       
    pkgs.gnome-online-accounts


     

       
125

       

       
-

       
    pkgs.gnome-online-accounts-gtk


     

       
126

       

       
-

       
    pkgs.zoom-us


     

       
127

       

       
-

       
    pkgs.mods


     

       
128

       

       
-

       
    (pkgs.chromium.override { enableWideVine = true; })


     

       
129

       

       
-

       
    pkgs.python3


     

       
130

       

       
-

       
    pkgs.qflipper


     

       
131

       

       
-

       
    pkgs.inkscape


     

       
132

       

       
-

       
    pkgs.jdk23


     

       
133

       

       
-

       
    pkgs.unstable.zed-editor


     

       
134

       

       
-

       
    pkgs.gnome-disk-utility


     

       
135

       

       
-

       
    pkgs.torrential


     

       
136

       

       
-

       
    pkgs.unstable.zola


     

       
137

       

       
-

       
    pkgs.unstable.amberol


     

       
138

       

       
-

       
    pkgs.unstable.apktool


     

       
139

       

       
-

       
    pkgs.unstable.biome


     

       
140

       

       
-

       
    pkgs.gcc


     

       
141

       

       
-

       
    pkgs.love


     

       
142

       

       
-

       
    pkgs.unstable.aseprite


     

       
143

       

       
-

       
    pkgs.audacity


     

       
144

       

       
-

       
    pkgs.imagemagick


     

       
145

       

       
-

       
    pkgs.wtype


     

       
146

       

       
-

       
    pkgs.rustc


     

       
147

       

       
-

       
    pkgs.cargo


     

       
148

       

       
-

       
    pkgs.gobang


     

       
149

       

       
-

       
    pkgs.caido


     

       
150

       

       
-

       
    inputs.ghostty.packages.x86_64-linux.default


     

       
151

       

       
-

       
    pkgs.baobab


     

       
152

       

       
-

       
    pkgs.nix-prefetch


     

       
153

       

       
-

       
    inputs.frc-nix.packages.${pkgs.system}.elastic-dashboard


     

       
154

       

       
-

       
    inputs.frc-nix.packages.${pkgs.system}.pathplanner


     

       
155

       

       
-

       
    inputs.frc-nix.packages.${pkgs.system}.roborioteamnumbersetter


     

       
156

       

       
-

       
    inputs.frc-nix.packages.${pkgs.system}.sysid


     

       
157

       

       
-

       
    inputs.frc-nix.packages.${pkgs.system}.wpilib-utility


     

       
158

       

       
-

       
    inputs.frc-nix.packages.${pkgs.system}.advantagescope


     

       
159

       

       
-

       
    pkgs.hyprpaper


     

       
160

       

       
-

       
    pkgs.lxde.lxsession


     

       
161

       

       
-

       
    pkgs.godot_4


     

       
162

       

       
-

       
    pkgs.bambu-studio


     

       
163

       

       
-

       
    pkgs.unstable.orca-slicer


     

       
164

       

       
-

       
    pkgs.exiftool


     

       
165

       

       
-

       
    pkgs.zenity


     

       
166

       

       
-

       
    pkgs.iodine


     

       
167

       

       
-

       
    pkgs.libreoffice


     

       
168

       

       
-

       
    pkgs.blender


     

       
169

       

       
-

       
    pkgs.screen


     

       
170

       

       
-

       
    pkgs.font-manager


     

       
171

       

       
-

       
    pkgs.prismlauncher


     

       
172

       

       
-

       
    pkgs.openboardview


     

       
173

       

       
-

       
    pkgs.unstable.claude-code


     

       
174

       

       
-

       
    pkgs.ruby


     

       
175

       

       
-

       
    pkgs.unstable.kikit


     

       
176

       

       
-

       
    pkgs.cmake


     

       
177

       

       
-

       
    pkgs.unstable.zotero


     

       
178

       

       
-

       
    pkgs.wl-screenrec


     

       
179

       

       
-

       
    pkgs.libnotify


     

       
180

       

       
-

       
    pkgs.coreutils


     

       
181

       

       
-

       
    pkgs.grim


     

       
182

       

       
-

       
    pkgs.jq


     

       
183

       

       
-

       
    pkgs.slurp


     

       
184

       

       
-

       
    pkgs.xdg-user-dirs


     

       
185

       

       
-

       
    pkgs.hyprsunset


     

       
186

       

       
-

       
    inputs.nixvim.packages.x86_64-linux.default


     

       
187

       

       
-

       
    inputs.zed.packages.x86_64-linux.default


     

       
188

       

       
-

       
    pkgs.unstable.ollama


     

       
189

       

       
-

       
    pkgs.unstable.code-cursor


     

       
190

       

       
-

       
    pkgs.direnv


     

       
191

       

       
-

       
    pkgs.gpgme


     

       
192

       

       
-

       
    pkgs.gnupg


     

       
193

       

       
-

       
    pkgs.bat


     

       
194

       

       
-

       
    pkgs.fd


     

       
195

       

       
-

       
    pkgs.eza


     

       
196

       

       
-

       
    pkgs.xh


     

       
197

       

       
-

       
    pkgs.dust


     

       
198

       

       
-

       
    pkgs.ripgrep-all


     

       
199

       

       
-

       
    pkgs.ripgrep


     

       
200

       

       
-

       
    inputs.terminal-wakatime.packages.x86_64-linux.default


     

       
201

       

       
-

       
    pkgs.unstable.metasploit


     

       
202

       

       
-

       
    pkgs.unstable.wakatime-cli


     

       
203

       

       
-

       
    pkgs.nixd


     

       
204

       

       
-

       
    pkgs.nil


     

       
205

       

       
-

       
    pkgs.nixfmt-rfc-style


     

       
206

       

       
-

       
    pkgs.networkmanagerapplet


     

       
207

       

       
-

       
    pkgs.networkmanager-iodine


     

       
208

       

       
-

       
    pkgs.mosh


     

       
209

       

       
-

       
    pkgs.clipse


     

       
210

       

       
-

       
    pkgs.lazygit


     

       
211

       

       
-

       
    pkgs.gh-dash


     

       
212

       

       
-

       
    pkgs.vesktop


     

       
213

       

       
-

       
    pkgs.inetutils


     

       
214

       

       
-

       
    pkgs.calc


     

       
215

       

       
-

       
    pkgs.nix-output-monitor


     

       
216

       

       
-

       
    pkgs.nixpkgs-review


     

       
217

       

       
-

       
    inputs.flare.packages.x86_64-linux.default


     

       
218

       

       
-

       
  ];


     

       
219

       

       
-

       



     

       
220

       

       
-

       
  programs.nh = {


     

       
221

       

       
-

       
    enable = true;


     

       
222

       

       
-

       
    clean.enable = true;


     

       
223

       

       
-

       
    clean.extraArgs = "--keep-since 4d --keep 3";


     

       
224

       

       
-

       
    flake = "/home/kierank/dots";


     

       
225

       

       
-

       
  };


     

       
226

       

       
-

       



     

       
227

       

       
-

       
  services.gnome.gnome-keyring.enable = true;


     

       
228

       

       
-

       
  programs.dconf.enable = true;


     

       
229

       

       
-

       



     

       
230

       

       
-

       
  systemd = {


     

       
231

       

       
-

       
    user.services.polkit-gnome-authentication-agent-1 = {


     

       
232

       

       
-

       
      description = "polkit-gnome-authentication-agent-1";


     

       
233

       

       
-

       
      wantedBy = [ "graphical-session.target" ];


     

       
234

       

       
-

       
      wants = [ "graphical-session.target" ];


     

       
235

       

       
-

       
      after = [ "graphical-session.target" ];


     

       
236

       

       
-

       
      serviceConfig = {


     

       
237

       

       
-

       
        Type = "simple";


     

       
238

       

       
-

       
        ExecStart = "${pkgs.polkit_gnome}/libexec/polkit-gnome-authentication-agent-1";


     

       
239

       

       
-

       
        Restart = "on-failure";


     

       
240

       

       
-

       
        RestartSec = 1;


     

       
241

       

       
-

       
        TimeoutStopSec = 10;


     

       
242

       

       
-

       
      };


     

       
243

       

       
-

       
    };


     

       
244

       

       
-

       
  };


     

       
245

       

       
-

       



     

       
246

       

       
-

       
  fonts.packages =


     

       
247

       

       
-

       
    with pkgs;


     

       
248

       

       
-

       
    [


     

       
249

       

       
-

       
      fira


     

       
250

       

       
-

       
      comic-neue


     

       
251

       

       
-

       
    ]


     

       
252

       

       
-

       
    ++ builtins.filter lib.attrsets.isDerivation (builtins.attrValues pkgs.nerd-fonts);


     

       
253

       

       
-

       



     

       
254

       

       
-

       
  # import the secret


     

       
255

       

       
-

       
  age.identityPaths = [


     

       
256

       

       
-

       
    "/home/kierank/.ssh/id_rsa"


     

       
257

       

       
-

       
    "/etc/ssh/id_rsa"


     

       
258

       

       
-

       
    "/mnt/etc/ssh/id_rsa"


     

       
259

       

       
-

       
  ];


     

       
260

       

       
-

       
  age.secrets = {


     

       
261

       

       
-

       
    wifi = {


     

       
262

       

       
-

       
      file = ../secrets/wifi.age;


     

       
263

       

       
-

       
      owner = "kierank";


     

       
264

       

       
-

       
    };


     

       
265

       

       
-

       
    resend = {


     

       
266

       

       
-

       
      file = ../secrets/resend.age;


     

       
267

       

       
-

       
      owner = "kierank";


     

       
268

       

       
-

       
    };


     

       
269

       

       
-

       
    wakatime = {


     

       
270

       

       
-

       
      file = ../secrets/wakatime.age;


     

       
271

       

       
-

       
      path = "/home/kierank/.wakatime.cfg";


     

       
272

       

       
-

       
      owner = "kierank";


     

       
273

       

       
-

       
    };


     

       
274

       

       
-

       
    bluesky = {


     

       
275

       

       
-

       
      file = ../secrets/bluesky.age;


     

       
276

       

       
-

       
      owner = "kierank";


     

       
277

       

       
-

       
    };


     

       
278

       

       
-

       
    iodine = {


     

       
279

       

       
-

       
      file = ../secrets/iodine.age;


     

       
280

       

       
-

       
      owner = "kierank";


     

       
281

       

       
-

       
    };


     

       
282

       

       
-

       
  };


     

       
283

       

       
-

       



     

       
284

       

       
-

       
  environment.sessionVariables = {


     

       
285

       

       
-

       
    XDG_CACHE_HOME = "$HOME/.cache";


     

       
286

       

       
-

       
    XDG_CONFIG_HOME = "$HOME/.config";


     

       
287

       

       
-

       
    XDG_DATA_HOME = "$HOME/.local/share";


     

       
288

       

       
-

       
    XDG_STATE_HOME = "$HOME/.local/state";


     

       
289

       

       
-

       
    NIXOS_OZONE_WL = "1";


     

       
290

       

       
-

       
    PRISMA_QUERY_ENGINE_LIBRARY = "${pkgs.prisma-engines}/lib/libquery_engine.node";


     

       
291

       

       
-

       
    PRISMA_QUERY_ENGINE_BINARY = "${pkgs.prisma-engines}/bin/query-engine";


     

       
292

       

       
-

       
    PRISMA_SCHEMA_ENGINE_BINARY = "${pkgs.prisma-engines}/bin/schema-engine";


     

       
293

       

       
-

       
    RESEND_API_KEY = "$(${pkgs.coreutils}/bin/cat ${config.age.secrets.resend.path})";


     

       
294

       

       
-

       
    POP_FROM = "me@dunkirk.sh";


     

       
295

       

       
-

       
    EDITOR = "nvim";


     

       
296

       

       
-

       
    SYSTEMD_EDITOR = "nvim";


     

       
297

       

       
-

       
    VISUAL = "nvim";


     

       
298

       

       
-

       
  };


     

       
299

       

       
-

       



     

       
300

       

       
-

       
  # setup the network


     

       
301

       

       
-

       
  networking = {


     

       
302

       

       
-

       
    networkmanager = {


     

       
303

       

       
-

       
      enable = true;


     

       
304

       

       
-

       
      dns = "none";


     

       
305

       

       
-

       
      ensureProfiles = {


     

       
306

       

       
-

       
        environmentFiles = [ config.age.secrets.wifi.path ];


     

       
307

       

       
-

       
        profiles = {


     

       
308

       

       
-

       
          "KlukasNet" = {


     

       
309

       

       
-

       
            connection = {


     

       
310

       

       
-

       
              id = "KlukasNet";


     

       
311

       

       
-

       
              type = "wifi";


     

       
312

       

       
-

       
            };


     

       
313

       

       
-

       
            ipv4 = {


     

       
314

       

       
-

       
              method = "auto";


     

       
315

       

       
-

       
            };


     

       
316

       

       
-

       
            ipv6 = {


     

       
317

       

       
-

       
              addr-gen-mode = "stable-privacy";


     

       
318

       

       
-

       
              method = "auto";


     

       
319

       

       
-

       
            };


     

       
320

       

       
-

       
            wifi = {


     

       
321

       

       
-

       
              mode = "infrastructure";


     

       
322

       

       
-

       
              ssid = "KlukasNet";


     

       
323

       

       
-

       
            };


     

       
324

       

       
-

       
            wifi-security = {


     

       
325

       

       
-

       
              key-mgmt = "wpa-psk";


     

       
326

       

       
-

       
              psk = "$psk_home";


     

       
327

       

       
-

       
            };


     

       
328

       

       
-

       
          };


     

       
329

       

       
-

       
          "Everseen" = {


     

       
330

       

       
-

       
            connection = {


     

       
331

       

       
-

       
              id = "Everseen";


     

       
332

       

       
-

       
              type = "wifi";


     

       
333

       

       
-

       
            };


     

       
334

       

       
-

       
            ipv4 = {


     

       
335

       

       
-

       
              method = "auto";


     

       
336

       

       
-

       
            };


     

       
337

       

       
-

       
            ipv6 = {


     

       
338

       

       
-

       
              addr-gen-mode = "stable-privacy";


     

       
339

       

       
-

       
              method = "auto";


     

       
340

       

       
-

       
            };


     

       
341

       

       
-

       
            wifi = {


     

       
342

       

       
-

       
              mode = "infrastructure";


     

       
343

       

       
-

       
              ssid = "Everseen";


     

       
344

       

       
-

       
            };


     

       
345

       

       
-

       
            wifi-security = {


     

       
346

       

       
-

       
              key-mgmt = "wpa-psk";


     

       
347

       

       
-

       
              psk = "$psk_hotspot";


     

       
348

       

       
-

       
            };


     

       
349

       

       
-

       
          };


     

       
350

       

       
-

       
          "SAAC Sanctuary" = {


     

       
351

       

       
-

       
            connection = {


     

       
352

       

       
-

       
              id = "SAAC Sanctuary";


     

       
353

       

       
-

       
              type = "wifi";


     

       
354

       

       
-

       
            };


     

       
355

       

       
-

       
            ipv4 = {


     

       
356

       

       
-

       
              method = "auto";


     

       
357

       

       
-

       
            };


     

       
358

       

       
-

       
            ipv6 = {


     

       
359

       

       
-

       
              addr-gen-mode = "stable-privacy";


     

       
360

       

       
-

       
              method = "auto";


     

       
361

       

       
-

       
            };


     

       
362

       

       
-

       
            wifi = {


     

       
363

       

       
-

       
              mode = "infrastructure";


     

       
364

       

       
-

       
              ssid = "SAAC Sanctuary";


     

       
365

       

       
-

       
            };


     

       
366

       

       
-

       
            wifi-security = {


     

       
367

       

       
-

       
              key-mgmt = "wpa-psk";


     

       
368

       

       
-

       
              psk = "$psk_church";


     

       
369

       

       
-

       
            };


     

       
370

       

       
-

       
          };


     

       
371

       

       
-

       
          "MVNU-student" = {


     

       
372

       

       
-

       
            connection = {


     

       
373

       

       
-

       
              id = "MVNU-student";


     

       
374

       

       
-

       
              type = "wifi";


     

       
375

       

       
-

       
            };


     

       
376

       

       
-

       
            ipv4 = {


     

       
377

       

       
-

       
              method = "auto";


     

       
378

       

       
-

       
            };


     

       
379

       

       
-

       
            ipv6 = {


     

       
380

       

       
-

       
              addr-gen-mode = "stable-privacy";


     

       
381

       

       
-

       
              method = "auto";


     

       
382

       

       
-

       
            };


     

       
383

       

       
-

       
            wifi = {


     

       
384

       

       
-

       
              mode = "infrastructure";


     

       
385

       

       
-

       
              ssid = "MVNU-student";


     

       
386

       

       
-

       
            };


     

       
387

       

       
-

       
          };


     

       
388

       

       
-

       
          "Status Solutions Guest" = {


     

       
389

       

       
-

       
            connection = {


     

       
390

       

       
-

       
              id = "Status Solutions Guest";


     

       
391

       

       
-

       
              type = "wifi";


     

       
392

       

       
-

       
            };


     

       
393

       

       
-

       
            ipv4 = {


     

       
394

       

       
-

       
              method = "auto";


     

       
395

       

       
-

       
            };


     

       
396

       

       
-

       
            ipv6 = {


     

       
397

       

       
-

       
              addr-gen-mode = "stable-privacy";


     

       
398

       

       
-

       
              method = "auto";


     

       
399

       

       
-

       
            };


     

       
400

       

       
-

       
            wifi = {


     

       
401

       

       
-

       
              mode = "infrastructure";


     

       
402

       

       
-

       
              ssid = "Status Solutions Guest";


     

       
403

       

       
-

       
            };


     

       
404

       

       
-

       
            wifi-security = {


     

       
405

       

       
-

       
              key-mgmt = "wpa-psk";


     

       
406

       

       
-

       
              psk = "$psk_robotics";


     

       
407

       

       
-

       
            };


     

       
408

       

       
-

       
          };


     

       
409

       

       
-

       
          "FRC-1317-CECE" = {


     

       
410

       

       
-

       
            connection = {


     

       
411

       

       
-

       
              id = "FRC-1317-CECE";


     

       
412

       

       
-

       
              type = "wifi";


     

       
413

       

       
-

       
            };


     

       
414

       

       
-

       
            ipv4 = {


     

       
415

       

       
-

       
              method = "auto";


     

       
416

       

       
-

       
            };


     

       
417

       

       
-

       
            ipv6 = {


     

       
418

       

       
-

       
              addr-gen-mode = "stable-privacy";


     

       
419

       

       
-

       
              method = "auto";


     

       
420

       

       
-

       
            };


     

       
421

       

       
-

       
            wifi = {


     

       
422

       

       
-

       
              mode = "infrastructure";


     

       
423

       

       
-

       
              ssid = "FRC-1317-CECE";


     

       
424

       

       
-

       
            };


     

       
425

       

       
-

       
            wifi-security = {


     

       
426

       

       
-

       
              key-mgmt = "wpa-psk";


     

       
427

       

       
-

       
              psk = "digitalfusion";


     

       
428

       

       
-

       
            };


     

       
429

       

       
-

       
          };


     

       
430

       

       
-

       
          "1317-fortress-of-awesomeness" = {


     

       
431

       

       
-

       
            connection = {


     

       
432

       

       
-

       
              id = "1317-fortress-of-awesomeness";


     

       
433

       

       
-

       
              type = "wifi";


     

       
434

       

       
-

       
            };


     

       
435

       

       
-

       
            ipv4 = {


     

       
436

       

       
-

       
              method = "auto";


     

       
437

       

       
-

       
            };


     

       
438

       

       
-

       
            ipv6 = {


     

       
439

       

       
-

       
              addr-gen-mode = "stable-privacy";


     

       
440

       

       
-

       
              method = "auto";


     

       
441

       

       
-

       
            };


     

       
442

       

       
-

       
            wifi = {


     

       
443

       

       
-

       
              mode = "infrastructure";


     

       
444

       

       
-

       
              ssid = "1317-fortress-of-awesomeness";


     

       
445

       

       
-

       
            };


     

       
446

       

       
-

       
          };


     

       
447

       

       
-

       
          "PAST PD" = {


     

       
448

       

       
-

       
            connection = {


     

       
449

       

       
-

       
              id = "PAST PD";


     

       
450

       

       
-

       
              type = "wifi";


     

       
451

       

       
-

       
            };


     

       
452

       

       
-

       
            ipv4 = {


     

       
453

       

       
-

       
              method = "auto";


     

       
454

       

       
-

       
            };


     

       
455

       

       
-

       
            ipv6 = {


     

       
456

       

       
-

       
              addr-gen-mode = "stable-privacy";


     

       
457

       

       
-

       
              method = "auto";


     

       
458

       

       
-

       
            };


     

       
459

       

       
-

       
            wifi = {


     

       
460

       

       
-

       
              mode = "infrastructure";


     

       
461

       

       
-

       
              ssid = "PAST PD";


     

       
462

       

       
-

       
            };


     

       
463

       

       
-

       
            wifi-security = {


     

       
464

       

       
-

       
              key-mgmt = "wpa-psk";


     

       
465

       

       
-

       
              psk = "$psk_past";


     

       
466

       

       
-

       
            };


     

       
467

       

       
-

       
          };


     

       
468

       

       
-

       
          "Heartland" = {


     

       
469

       

       
-

       
            connection = {


     

       
470

       

       
-

       
              id = "Heartland";


     

       
471

       

       
-

       
              type = "wifi";


     

       
472

       

       
-

       
            };


     

       
473

       

       
-

       
            ipv4 = {


     

       
474

       

       
-

       
              method = "auto";


     

       
475

       

       
-

       
            };


     

       
476

       

       
-

       
            ipv6 = {


     

       
477

       

       
-

       
              addr-gen-mode = "stable-privacy";


     

       
478

       

       
-

       
              method = "auto";


     

       
479

       

       
-

       
            };


     

       
480

       

       
-

       
            wifi = {


     

       
481

       

       
-

       
              mode = "infrastructure";


     

       
482

       

       
-

       
              ssid = "Heartland";


     

       
483

       

       
-

       
            };


     

       
484

       

       
-

       
            wifi-security = {


     

       
485

       

       
-

       
              key-mgmt = "wpa-psk";


     

       
486

       

       
-

       
              psk = "beourguest";


     

       
487

       

       
-

       
            };


     

       
488

       

       
-

       
          };


     

       
489

       

       
-

       
          "WPL_Public_AccessII" = {


     

       
490

       

       
-

       
            connection = {


     

       
491

       

       
-

       
              id = "WPL_Public_AccessII";


     

       
492

       

       
-

       
              type = "wifi";


     

       
493

       

       
-

       
            };


     

       
494

       

       
-

       
            ipv4 = {


     

       
495

       

       
-

       
              method = "auto";


     

       
496

       

       
-

       
            };


     

       
497

       

       
-

       
            ipv6 = {


     

       
498

       

       
-

       
              addr-gen-mode = "stable-privacy";


     

       
499

       

       
-

       
              method = "auto";


     

       
500

       

       
-

       
            };


     

       
501

       

       
-

       
            wifi = {


     

       
502

       

       
-

       
              mode = "infrastructure";


     

       
503

       

       
-

       
              ssid = "WPL_Public_AccessII";


     

       
504

       

       
-

       
            };


     

       
505

       

       
-

       
          };


     

       
506

       

       
-

       
          "Yowzaford" = {


     

       
507

       

       
-

       
            connection = {


     

       
508

       

       
-

       
              id = "Yowzaford";


     

       
509

       

       
-

       
              type = "wifi";


     

       
510

       

       
-

       
            };


     

       
511

       

       
-

       
            ipv4 = {


     

       
512

       

       
-

       
              method = "auto";


     

       
513

       

       
-

       
            };


     

       
514

       

       
-

       
            ipv6 = {


     

       
515

       

       
-

       
              addr-gen-mode = "stable-privacy";


     

       
516

       

       
-

       
              method = "auto";


     

       
517

       

       
-

       
            };


     

       
518

       

       
-

       
            wifi = {


     

       
519

       

       
-

       
              mode = "infrastructure";


     

       
520

       

       
-

       
              ssid = "Yowzaford";


     

       
521

       

       
-

       
            };


     

       
522

       

       
-

       
            wifi-security = {


     

       
523

       

       
-

       
              key-mgmt = "wpa-psk";


     

       
524

       

       
-

       
              psk = "$psk_rhoda";


     

       
525

       

       
-

       
            };


     

       
526

       

       
-

       
          };


     

       
527

       

       
-

       
          "cu-events" = {


     

       
528

       

       
-

       
            connection = {


     

       
529

       

       
-

       
              id = "cu-events";


     

       
530

       

       
-

       
              type = "wifi";


     

       
531

       

       
-

       
            };


     

       
532

       

       
-

       
            ipv4 = {


     

       
533

       

       
-

       
              method = "auto";


     

       
534

       

       
-

       
            };


     

       
535

       

       
-

       
            ipv6 = {


     

       
536

       

       
-

       
              addr-gen-mode = "stable-privacy";


     

       
537

       

       
-

       
              method = "auto";


     

       
538

       

       
-

       
            };


     

       
539

       

       
-

       
            wifi = {


     

       
540

       

       
-

       
              mode = "infrastructure";


     

       
541

       

       
-

       
              ssid = "cu-events";


     

       
542

       

       
-

       
            };


     

       
543

       

       
-

       
            wifi-security = {


     

       
544

       

       
-

       
              key-mgmt = "wpa-psk";


     

       
545

       

       
-

       
              psk = "freesmile82";


     

       
546

       

       
-

       
            };


     

       
547

       

       
-

       
          };


     

       
548

       

       
-

       
          "QargoCoffee-Guest" = {


     

       
549

       

       
-

       
            connection = {


     

       
550

       

       
-

       
              id = "QargoCoffee-Guest";


     

       
551

       

       
-

       
              type = "wifi";


     

       
552

       

       
-

       
            };


     

       
553

       

       
-

       
            ipv4 = {


     

       
554

       

       
-

       
              method = "auto";


     

       
555

       

       
-

       
            };


     

       
556

       

       
-

       
            ipv6 = {


     

       
557

       

       
-

       
              addr-gen-mode = "stable-privacy";


     

       
558

       

       
-

       
              method = "auto";


     

       
559

       

       
-

       
            };


     

       
560

       

       
-

       
            wifi = {


     

       
561

       

       
-

       
              mode = "infrastructure";


     

       
562

       

       
-

       
              ssid = "QargoCoffee-Guest";


     

       
563

       

       
-

       
            };


     

       
564

       

       
-

       
            wifi-security = {


     

       
565

       

       
-

       
              key-mgmt = "wpa-psk";


     

       
566

       

       
-

       
              psk = "Lavazza@7";


     

       
567

       

       
-

       
            };


     

       
568

       

       
-

       
          };


     

       
569

       

       
-

       
          "Fulton" = {


     

       
570

       

       
-

       
            connection = {


     

       
571

       

       
-

       
              id = "Fulton";


     

       
572

       

       
-

       
              type = "wifi";


     

       
573

       

       
-

       
            };


     

       
574

       

       
-

       
            ipv4 = {


     

       
575

       

       
-

       
              method = "auto";


     

       
576

       

       
-

       
            };


     

       
577

       

       
-

       
            ipv6 = {


     

       
578

       

       
-

       
              addr-gen-mode = "stable-privacy";


     

       
579

       

       
-

       
              method = "auto";


     

       
580

       

       
-

       
            };


     

       
581

       

       
-

       
            wifi = {


     

       
582

       

       
-

       
              mode = "infrastructure";


     

       
583

       

       
-

       
              ssid = "Fulton";


     

       
584

       

       
-

       
            };


     

       
585

       

       
-

       
            wifi-security = {


     

       
586

       

       
-

       
              key-mgmt = "wpa-psk";


     

       
587

       

       
-

       
              psk = "9064405930";


     

       
588

       

       
-

       
            };


     

       
589

       

       
-

       
          };


     

       
590

       

       
-

       
          "TP-LINK_ECF0" = {


     

       
591

       

       
-

       
            connection = {


     

       
592

       

       
-

       
              id = "TP-LINK_ECF0";


     

       
593

       

       
-

       
              type = "wifi";


     

       
594

       

       
-

       
            };


     

       
595

       

       
-

       
            ipv4 = {


     

       
596

       

       
-

       
              method = "auto";


     

       
597

       

       
-

       
            };


     

       
598

       

       
-

       
            ipv6 = {


     

       
599

       

       
-

       
              addr-gen-mode = "stable-privacy";


     

       
600

       

       
-

       
              method = "auto";


     

       
601

       

       
-

       
            };


     

       
602

       

       
-

       
            wifi = {


     

       
603

       

       
-

       
              mode = "infrastructure";


     

       
604

       

       
-

       
              ssid = "TP-LINK_ECF0";


     

       
605

       

       
-

       
            };


     

       
606

       

       
-

       
            wifi-security = {


     

       
607

       

       
-

       
              key-mgmt = "wpa-psk";


     

       
608

       

       
-

       
              psk = "ad1066AD!";


     

       
609

       

       
-

       
            };


     

       
610

       

       
-

       
          };


     

       
611

       

       
-

       
        };


     

       
612

       

       
-

       
      };


     

       
613

       

       
-

       
    };


     

       
614

       

       
-

       
    hostName = "moonlark";


     

       
615

       

       
-

       
    nameservers = [


     

       
616

       

       
-

       
      "1.1.1.1"


     

       
617

       

       
-

       
      "1.0.0.1"


     

       
618

       

       
-

       
      "8.8.8.8"


     

       
619

       

       
-

       
      "9.9.9.9"


     

       
620

       

       
-

       
    ];


     

       
621

       

       
-

       
    useDHCP = false;


     

       
622

       

       
-

       
    dhcpcd.enable = false;


     

       
623

       

       
-

       
  };


     

       
624

       

       
-

       



     

       
625

       

       
-

       
  services.iodine.clients = {


     

       
626

       

       
-

       
    t1 = {


     

       
627

       

       
-

       
      server = "t1.dunkirk.sh";


     

       
628

       

       
-

       
      passwordFile = config.age.secrets.iodine.path;


     

       
629

       

       
-

       
    };


     

       
630

       

       
-

       
  };


     

       
631

       

       
-

       



     

       
632

       

       
-

       
  virtualisation.libvirtd.enable = true;


     

       
633

       

       
-

       
  virtualisation.virtualbox.host.enable = true;


     

       
634

       

       
-

       
  virtualisation.virtualbox.host.enableExtensionPack = true;


     

       
635

       

       
-

       
  virtualisation.docker.enable = true;


     

       
636

       

       
-

       



     

       
637

       

       
-

       
  programs.nix-ld.enable = true;


     

       
638

       

       
-

       



     

       
639

       

       
-

       
  programs.zsh.enable = true;


     

       
640

       

       
-

       



     

       
641

       

       
-

       
  programs.direnv.enable = true;


     

       
642

       

       
-

       



     

       
643

       

       
-

       
  services.postgresql = {


     

       
644

       

       
-

       
    enable = true;


     

       
645

       

       
-

       
    enableTCPIP = true;


     

       
646

       

       
-

       
    authentication = pkgs.lib.mkOverride 10 ''


     

       
647

       

       
-

       
      #type database DBuser origin-address auth-method


     

       
648

       

       
-

       
      local all      all     trust


     

       
649

       

       
-

       
      # ... other auth rules ...


     

       
650

       

       
-

       



     

       
651

       

       
-

       
      # ipv4


     

       
652

       

       
-

       
      host  all      all     127.0.0.1/32   trust


     

       
653

       

       
-

       
      # ipv6


     

       
654

       

       
-

       
      host  all      all     ::1/128        trust


     

       
655

       

       
-

       
    '';


     

       
656

       

       
-

       
  };


     

       
657

       

       
-

       



     

       
658

       

       
-

       
  # TODO: Configure your system-wide user settings (groups, etc), add more users as needed.


     

       
659

       

       
-

       
  users.users = {


     

       
660

       

       
-

       
    kierank = {


     

       
661

       

       
-

       
      # You can skip setting a root password by passing '--no-root-passwd' to nixos-install.


     

       
662

       

       
-

       
      # Be sure to change it (using passwd) after rebooting!


     

       
663

       

       
-

       
      initialPassword = "lolzthisaintsecure!";


     

       
664

       

       
-

       
      isNormalUser = true;


     

       
665

       

       
-

       
      shell = pkgs.zsh;


     

       
666

       

       
-

       
      openssh.authorizedKeys.keys = [


     

       
667

       

       
-

       
        "ssh-rsa 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 kierank@mockingjay"


     

       
668

       

       
-

       
      ];


     

       
669

       

       
-

       
      extraGroups = [


     

       
670

       

       
-

       
        "wheel"


     

       
671

       

       
-

       
        "networkmanager"


     

       
672

       

       
-

       
        "audio"


     

       
673

       

       
-

       
        "video"


     

       
674

       

       
-

       
        "docker"


     

       
675

       

       
-

       
        "plugdev"


     

       
676

       

       
-

       
        "input"


     

       
677

       

       
-

       
        "dialout"


     

       
678

       

       
-

       
        "docker"


     

       
679

       

       
-

       
        "libvirtd"


     

       
680

       

       
-

       
        "vboxusers"


     

       
681

       

       
-

       
      ];


     

       
682

       

       
-

       
    };


     

       
683

       

       
-

       
    root.openssh.authorizedKeys.keys = [


     

       
684

       

       
-

       
      "ssh-rsa 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 kierank@mockingjay"


     

       
685

       

       
-

       
    ];


     

       
686

       

       
-

       
  };


     

       
687

       

       
-

       



     

       
688

       

       
-

       
  programs.steam = {


     

       
689

       

       
-

       
    enable = true;


     

       
690

       

       
-

       
    remotePlay.openFirewall = true; # Open ports in the firewall for Steam Remote Play


     

       
691

       

       
-

       
    dedicatedServer.openFirewall = true; # Open ports in the firewall for Source Dedicated Server


     

       
692

       

       
-

       
    localNetworkGameTransfers.openFirewall = true; # Open ports in the firewall for Steam Local Network Game Transfers


     

       
693

       

       
-

       
  };


     

       
694

       

       
-

       



     

       
695

       

       
-

       
  programs.hyprland.enable = true;


     

       
696

       

       
-

       
  services.hypridle.enable = true;


     

       
697

       

       
-

       



     

       
698

       

       
-

       
  programs.niri = {


     

       
699

       

       
-

       
    enable = true;


     

       
700

       

       
-

       
  };


     

       
701

       

       
-

       



     

       
702

       

       
-

       
  programs.xwayland.enable = lib.mkForce true;


     

       
703

       

       
-

       



     

       
704

       

       
-

       
  services.udev.packages = [


     

       
705

       

       
-

       
    pkgs.qFlipper


     

       
706

       

       
-

       
    pkgs.via


     

       
707

       

       
-

       
  ];


     

       
708

       

       
-

       



     

       
709

       

       
-

       
  security.polkit.enable = true;


     

       
710

       

       
-

       



     

       
711

       

       
-

       
  # enable cups


     

       
712

       

       
-

       
  services.printing.enable = true;


     

       
713

       

       
-

       
  services.avahi = {


     

       
714

       

       
-

       
    enable = true;


     

       
715

       

       
-

       
    nssmdns4 = true;


     

       
716

       

       
-

       
    openFirewall = true;


     

       
717

       

       
-

       
  };


     

       
718

       

       
-

       



     

       
719

       

       
-

       
  # enable bluetooth


     

       
720

       

       
-

       
  hardware.bluetooth.enable = true;


     

       
721

       

       
-

       



     

       
722

       

       
-

       
  # enable pipewire


     

       
723

       

       
-

       
  # rtkit is optional but recommended


     

       
724

       

       
-

       
  security.rtkit.enable = true;


     

       
725

       

       
-

       
  services.pipewire = {


     

       
726

       

       
-

       
    enable = true;


     

       
727

       

       
-

       
    alsa.enable = true;


     

       
728

       

       
-

       
    alsa.support32Bit = true;


     

       
729

       

       
-

       
    pulse.enable = true;


     

       
730

       

       
-

       
    # If you want to use JACK applications, uncomment this


     

       
731

       

       
-

       
    jack.enable = true;


     

       
732

       

       
-

       
  };


     

       
733

       

       
-

       



     

       
734

       

       
-

       
  # This setups a SSH server. Very important if you're setting up a headless system.


     

       
735

       

       
-

       
  # Feel free to remove if you don't need it.


     

       
736

       

       
-

       
  services.openssh = {


     

       
737

       

       
-

       
    enable = true;


     

       
738

       

       
-

       
    settings = {


     

       
739

       

       
-

       
      # Opinionated: forbid root login through SSH.


     

       
740

       

       
-

       
      PermitRootLogin = "no";


     

       
741

       

       
-

       
      # Opinionated: use keys only.


     

       
742

       

       
-

       
      # Remove if you want to SSH using passwords


     

       
743

       

       
-

       
      PasswordAuthentication = false;


     

       
744

       

       
-

       
    };


     

       
745

       

       
-

       
  };


     

       
746

       

       
-

       



     

       
747

       

       
-

       
  networking.firewall = {


     

       
748

       

       
-

       
    enable = true;


     

       
749

       

       
-

       
    allowedTCPPorts = [


     

       
750

       

       
-

       
      4455


     

       
751

       

       
-

       
      51820


     

       
752

       

       
-

       
    ];


     

       
753

       

       
-

       
    allowedUDPPorts = [


     

       
754

       

       
-

       
      4455


     

       
755

       

       
-

       
      51820


     

       
756

       

       
-

       
    ];


     

       
757

       

       
-

       
  };


     

       
758

       

       
-

       



     

       
759

       

       
-

       
  services.tailscale = {


     

       
760

       

       
-

       
    enable = true;


     

       
761

       

       
-

       
    useRoutingFeatures = "client";


     

       
762

       

       
-

       
  };


     

       
763

       

       
-

       



     

       
764

       

       
-

       
  services.devmon.enable = true;


     

       
765

       

       
-

       
  services.gvfs.enable = true;


     

       
766

       

       
-

       
  services.udisks2.enable = true;


     

       
767

       

       
-

       



     

       
768

       

       
-

       
  services.logind.extraConfig = ''


     

       
769

       

       
-

       
    # don't shutdown when power button is short-pressed


     

       
770

       

       
-

       
    HandlePowerKey=ignore


     

       
771

       

       
-

       
    HandlePowerKeyLongPress=poweroff


     

       
772

       

       
-

       
  '';


     

       
773

       

       
-

       



     

       
774

       

       
-

       
  # Requires at least 5.16 for working wi-fi and bluetooth.


     

       
775

       

       
-

       
  # https://community.frame.work/t/using-the-ax210-with-linux-on-the-framework-laptop/1844/89


     

       
776

       

       
-

       
  boot = {


     

       
777

       

       
-

       
    kernelPackages = lib.mkIf (lib.versionOlder pkgs.linux.version "5.16") (


     

       
778

       

       
-

       
      lib.mkDefault pkgs.linuxPackages_latest


     

       
779

       

       
-

       
    );


     

       
780

       

       
-

       
    loader.grub = {


     

       
781

       

       
-

       
      # no need to set devices, disko will add all devices that have a EF02 partition to the list already


     

       
782

       

       
-

       
      device = "nodev";


     

       
783

       

       
-

       
      efiSupport = true;


     

       
784

       

       
-

       
      efiInstallAsRemovable = true;


     

       
785

       

       
-

       
    };


     

       
786

       

       
-

       
    supportedFilesystems = [ "ntfs" ];


     

       
787

       

       
-

       
    extraModprobeConfig = ''


     

       
788

       

       
-

       
      options kvm_intel nested=1


     

       
789

       

       
-

       
      options kvm_intel emulate_invalid_guest_state=0


     

       
790

       

       
-

       
      options kvm ignore_msrs=1


     

       
791

       

       
-

       
    '';


     

       
792

       

       
-

       
  };


     

       
793

       

       
-

       



     

       
794

       

       
-

       
  # https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion


     

       
795

       

       
-

       
  system.stateVersion = "23.05";


     

       
796

       

       
-

       
}
moonlark/disk-config.nix nixos/machines/moonlark/disk-config.nix
-30
moonlark/greetd.nix 
···

       
1

       

       
-

       
{ pkgs, ... }:


     

       
2

       

       
-

       
let


     

       
3

       

       
-

       
  tuigreet = "${pkgs.greetd.tuigreet}/bin/tuigreet";


     

       
4

       

       
-

       
in


     

       
5

       

       
-

       
{


     

       
6

       

       
-

       
  services.greetd = {


     

       
7

       

       
-

       
    enable = true;


     

       
8

       

       
-

       
    settings = {


     

       
9

       

       
-

       
      default_session = {


     

       
10

       

       
-

       
        command = "${tuigreet} --time -g 'WARNING: UNAUTHORIZED ACCESS WILL RESULT IN TERMINATION OF SESSION. IDENTIFY YOURSELF' --remember --cmd Hyprland";


     

       
11

       

       
-

       
        user = "greeter";


     

       
12

       

       
-

       
      };


     

       
13

       

       
-

       
    };


     

       
14

       

       
-

       
  };


     

       
15

       

       
-

       



     

       
16

       

       
-

       
  # this is a life saver.


     

       
17

       

       
-

       
  # literally no documentation about this anywhere.


     

       
18

       

       
-

       
  # might be good to write about this...


     

       
19

       

       
-

       
  # https://www.reddit.com/r/NixOS/comments/u0cdpi/tuigreet_with_xmonad_how/


     

       
20

       

       
-

       
  systemd.services.greetd.serviceConfig = {


     

       
21

       

       
-

       
    Type = "idle";


     

       
22

       

       
-

       
    StandardInput = "tty";


     

       
23

       

       
-

       
    StandardOutput = "tty";


     

       
24

       

       
-

       
    StandardError = "journal"; # Without this errors will spam on screen


     

       
25

       

       
-

       
    # Without these bootlogs will spam on screen


     

       
26

       

       
-

       
    TTYReset = true;


     

       
27

       

       
-

       
    TTYVHangup = true;


     

       
28

       

       
-

       
    TTYVTDisallocate = true;


     

       
29

       

       
-

       
  };


     

       
30

       

       
-

       
}
moonlark/hardware-configuration.nix nixos/machines/moonlark/hardware-configuration.nix
+4 -2
moonlark/home-manager.nix nixos/machines/moonlark/home-manager.nix 
···

       
6

       
6

       
 

       
  ];


     

       
7

       
7

       
 

       



     

       
8

       
8

       
 

       
  home-manager = {


     

       
9

       

       
-

       
    extraSpecialArgs = { inherit inputs outputs; };


     

       

       
9

       
+

       
    extraSpecialArgs = {


     

       

       
10

       
+

       
      inherit inputs outputs;


     

       

       
11

       
+

       
    };


     

       
10

       
12

       
 

       
    users = {


     

       
11

       
13

       
 

       
      # Import your home-manager configuration


     

       
12

       

       
-

       
      kierank = import ../home-manager/machines/moonlark;


     

       

       
14

       
+

       
      kierank = import ../../../home-manager/machines/moonlark;


     

       
13

       
15

       
 

       
    };


     

       
14

       
16

       
 

       
  };


     

       
15

       
17

       
 

       
}
-69
moonlark/pam.nix 
···

       
1

       

       
-

       
{


     

       
2

       

       
-

       
  lib,


     

       
3

       

       
-

       
  config,


     

       
4

       

       
-

       
  pkgs,


     

       
5

       

       
-

       
  ...


     

       
6

       

       
-

       
}:


     

       
7

       

       
-

       
{


     

       
8

       

       
-

       
  services.fprintd.enable = true;


     

       
9

       

       
-

       
  security.pam.services.hyprlock = lib.mkIf (config.services.fprintd.enable) {


     

       
10

       

       
-

       
    text = ''


     

       
11

       

       
-

       
      # Account management.


     

       
12

       

       
-

       
      account required pam_unix.so # unix (order 10900)


     

       
13

       

       
-

       



     

       
14

       

       
-

       
      # Authentication management.


     

       
15

       

       
-

       
      auth sufficient pam_unix.so try_first_pass likeauth nullok


     

       
16

       

       
-

       
      auth sufficient ${pkgs.fprintd}/lib/security/pam_fprintd.so


     

       
17

       

       
-

       
      auth required pam_deny.so # deny


     

       
18

       

       
-

       



     

       
19

       

       
-

       
      # Password management.


     

       
20

       

       
-

       
      password sufficient pam_unix.so nullok yescrypt # unix


     

       
21

       

       
-

       



     

       
22

       

       
-

       
      # Session management.


     

       
23

       

       
-

       
      session required pam_env.so conffile=/etc/pam/environment readenv=0 # env (order 10100)


     

       
24

       

       
-

       
      session required pam_unix.so # unix (order 10200)


     

       
25

       

       
-

       
    '';


     

       
26

       

       
-

       
  };


     

       
27

       

       
-

       



     

       
28

       

       
-

       
  security.pam.services.sudo = lib.mkIf (config.services.fprintd.enable) {


     

       
29

       

       
-

       
    text = ''


     

       
30

       

       
-

       
      # Account management.


     

       
31

       

       
-

       
      account required pam_unix.so # unix (order 10900)


     

       
32

       

       
-

       



     

       
33

       

       
-

       
      # Authentication management.


     

       
34

       

       
-

       
      auth sufficient pam_unix.so try_first_pass likeauth nullok


     

       
35

       

       
-

       
      auth sufficient ${pkgs.fprintd}/lib/security/pam_fprintd.so


     

       
36

       

       
-

       
      auth required pam_deny.so # deny


     

       
37

       

       
-

       



     

       
38

       

       
-

       
      # Password management.


     

       
39

       

       
-

       
      password sufficient pam_unix.so nullok yescrypt # unix


     

       
40

       

       
-

       



     

       
41

       

       
-

       
      # Session management.


     

       
42

       

       
-

       
      session required pam_env.so conffile=/etc/pam/environment readenv=0 # env (order 10100)


     

       
43

       

       
-

       
      session required pam_unix.so # unix (order 10200)


     

       
44

       

       
-

       
    '';


     

       
45

       

       
-

       
  };


     

       
46

       

       
-

       



     

       
47

       

       
-

       
  security.pam.services.su = lib.mkIf (config.services.fprintd.enable) {


     

       
48

       

       
-

       
    text = ''


     

       
49

       

       
-

       
      # Account management.


     

       
50

       

       
-

       
      account required pam_unix.so # unix (order 10900)


     

       
51

       

       
-

       



     

       
52

       

       
-

       
      # Authentication management.


     

       
53

       

       
-

       
      auth sufficient pam_rootok.so # rootok (order 10200)


     

       
54

       

       
-

       
      auth required pam_faillock.so # faillock (order 10400)


     

       
55

       

       
-

       
      auth sufficient pam_unix.so try_first_pass likeauth nullok


     

       
56

       

       
-

       
      auth sufficient ${pkgs.fprintd}/lib/security/pam_fprintd.so


     

       
57

       

       
-

       
      auth required pam_deny.so # deny


     

       
58

       

       
-

       



     

       
59

       

       
-

       
      # Password management.


     

       
60

       

       
-

       
      password sufficient pam_unix.so nullok yescrypt # unix


     

       
61

       

       
-

       



     

       
62

       

       
-

       
      # Session management.


     

       
63

       

       
-

       
      session required pam_env.so conffile=/etc/pam/environment readenv=0 # env (order 10100)


     

       
64

       

       
-

       
      session required pam_unix.so # unix (order 10200)


     

       
65

       

       
-

       
      session required pam_unix.so # unix (order 10200)


     

       
66

       

       
-

       
      session optional pam_xauth.so systemuser=99 xauthpath=${pkgs.xorg.xauth}/bin/xauth # xauth (order 12100)


     

       
67

       

       
-

       
    '';


     

       
68

       

       
-

       
  };


     

       
69

       

       
-

       
}
+506
nixos/machines/moonlark/configuration.nix 
···

       

       
1

       
+

       
# This is your system's configuration file.


     

       

       
2

       
+

       
# Use this to configure your system environment (it replaces /etc/nixos/configuration.nix)


     

       

       
3

       
+

       
{


     

       

       
4

       
+

       
  inputs,


     

       

       
5

       
+

       
  lib,


     

       

       
6

       
+

       
  config,


     

       

       
7

       
+

       
  pkgs,


     

       

       
8

       
+

       
  ...


     

       

       
9

       
+

       
}:


     

       

       
10

       
+

       
{


     

       

       
11

       
+

       
  imports = [


     

       

       
12

       
+

       
    inputs.hardware.nixosModules.framework-11th-gen-intel


     

       

       
13

       
+

       



     

       

       
14

       
+

       
    ./hardware-configuration.nix


     

       

       
15

       
+

       
    ./home-manager.nix


     

       

       
16

       
+

       
    ./disk-config.nix


     

       

       
17

       
+

       



     

       

       
18

       
+

       
    ../../modules


     

       

       
19

       
+

       
  ];


     

       

       
20

       
+

       



     

       

       
21

       
+

       
  nixpkgs = {


     

       

       
22

       
+

       
    config = {


     

       

       
23

       
+

       
      allowUnfree = true;


     

       

       
24

       
+

       
    };


     

       

       
25

       
+

       
  };


     

       

       
26

       
+

       



     

       

       
27

       
+

       
  nix =


     

       

       
28

       
+

       
    let


     

       

       
29

       
+

       
      flakeInputs = lib.filterAttrs (_: lib.isType "flake") inputs;


     

       

       
30

       
+

       
    in


     

       

       
31

       
+

       
    {


     

       

       
32

       
+

       
      settings = {


     

       

       
33

       
+

       
        # Enable flakes and new 'nix' command


     

       

       
34

       
+

       
        experimental-features = "nix-command flakes";


     

       

       
35

       
+

       
        # Opinionated: disable global registry


     

       

       
36

       
+

       
        flake-registry = "";


     

       

       
37

       
+

       
        # Workaround for https://github.com/NixOS/nix/issues/9574


     

       

       
38

       
+

       
        nix-path = config.nix.nixPath;


     

       

       
39

       
+

       
        trusted-users = [


     

       

       
40

       
+

       
          "kierank"


     

       

       
41

       
+

       
        ];


     

       

       
42

       
+

       
      };


     

       

       
43

       
+

       
      # Opinionated: disable channels


     

       

       
44

       
+

       
      channel.enable = false;


     

       

       
45

       
+

       



     

       

       
46

       
+

       
      optimise.automatic = true;


     

       

       
47

       
+

       



     

       

       
48

       
+

       
      # Opinionated: make flake registry and nix path match flake inputs


     

       

       
49

       
+

       
      registry = lib.mapAttrs (_: flake: { inherit flake; }) flakeInputs;


     

       

       
50

       
+

       
      nixPath = lib.mapAttrsToList (n: _: "${n}=flake:${n}") flakeInputs;


     

       

       
51

       
+

       
    };


     

       

       
52

       
+

       



     

       

       
53

       
+

       
  time.timeZone = "America/New_York";


     

       

       
54

       
+

       



     

       

       
55

       
+

       
  # grouped for readability


     

       

       
56

       
+

       
  environment.systemPackages = map lib.lowPrio (


     

       

       
57

       
+

       
    let


     

       

       
58

       
+

       
      core = [


     

       

       
59

       
+

       
        pkgs.coreutils


     

       

       
60

       
+

       
        pkgs.calc


     

       

       
61

       
+

       
        pkgs.screen


     

       

       
62

       
+

       
        pkgs.xdg-user-dirs


     

       

       
63

       
+

       
        pkgs.libnotify


     

       

       
64

       
+

       
        pkgs.notify-desktop


     

       

       
65

       
+

       
        pkgs.bc


     

       

       
66

       
+

       
        pkgs.jq


     

       

       
67

       
+

       
        pkgs.psmisc


     

       

       
68

       
+

       
      ];


     

       

       
69

       
+

       
      terminals = [


     

       

       
70

       
+

       
        pkgs.alacritty


     

       

       
71

       
+

       
        inputs.ghostty.packages.x86_64-linux.default


     

       

       
72

       
+

       
      ];


     

       

       
73

       
+

       
      cli_utils = [


     

       

       
74

       
+

       
        pkgs.bat


     

       

       
75

       
+

       
        pkgs.fd


     

       

       
76

       
+

       
        pkgs.eza


     

       

       
77

       
+

       
        pkgs.xh


     

       

       
78

       
+

       
        pkgs.dust


     

       

       
79

       
+

       
        pkgs.ripgrep


     

       

       
80

       
+

       
        pkgs.ripgrep-all


     

       

       
81

       
+

       
        pkgs.glow


     

       

       
82

       
+

       
        pkgs.gitui


     

       

       
83

       
+

       
        pkgs.lazygit


     

       

       
84

       
+

       
        pkgs.clipse


     

       

       
85

       
+

       
        pkgs.direnv


     

       

       
86

       
+

       
        pkgs.nix-output-monitor


     

       

       
87

       
+

       
        pkgs.nixpkgs-review


     

       

       
88

       
+

       
        pkgs.nix-prefetch


     

       

       
89

       
+

       
        pkgs.arduino-cli


     

       

       
90

       
+

       
        pkgs.zsh


     

       

       
91

       
+

       
        pkgs.starship


     

       

       
92

       
+

       
        pkgs.gum


     

       

       
93

       
+

       
        pkgs.unstable.wakatime-cli


     

       

       
94

       
+

       
        inputs.terminal-wakatime.packages.x86_64-linux.default


     

       

       
95

       
+

       
      ];


     

       

       
96

       
+

       
      networking = [


     

       

       
97

       
+

       
        pkgs.curl


     

       

       
98

       
+

       
        pkgs.wget


     

       

       
99

       
+

       
        pkgs.dogdns


     

       

       
100

       
+

       
        pkgs.inetutils


     

       

       
101

       
+

       
        pkgs.mosh


     

       

       
102

       
+

       
        pkgs.ngrok


     

       

       
103

       
+

       
        pkgs.networkmanagerapplet


     

       

       
104

       
+

       
        pkgs.networkmanager-iodine


     

       

       
105

       
+

       
        pkgs.iodine


     

       

       
106

       
+

       
      ];


     

       

       
107

       
+

       
      nix_tools = [


     

       

       
108

       
+

       
        inputs.nixvim.packages.x86_64-linux.default


     

       

       
109

       
+

       
        pkgs.nixd


     

       

       
110

       
+

       
        pkgs.nil


     

       

       
111

       
+

       
        pkgs.nixfmt-rfc-style


     

       

       
112

       
+

       
        inputs.agenix.packages.x86_64-linux.default


     

       

       
113

       
+

       
      ];


     

       

       
114

       
+

       
      security = [


     

       

       
115

       
+

       
        pkgs.openssl


     

       

       
116

       
+

       
        pkgs.gpgme


     

       

       
117

       
+

       
        pkgs.gnupg


     

       

       
118

       
+

       
        pkgs.unstable.mitmproxy


     

       

       
119

       
+

       
        pkgs.caido


     

       

       
120

       
+

       
      ];


     

       

       
121

       
+

       
      editors = [


     

       

       
122

       
+

       
        inputs.zed.packages.x86_64-linux.default


     

       

       
123

       
+

       
        pkgs.unstable.zed-editor


     

       

       
124

       
+

       
        pkgs.arduino-ide


     

       

       
125

       
+

       
      ];


     

       

       
126

       
+

       
      browsers = [


     

       

       
127

       
+

       
        pkgs.firefox


     

       

       
128

       
+

       
        (pkgs.chromium.override { enableWideVine = true; })


     

       

       
129

       
+

       
      ];


     

       

       
130

       
+

       
      wayland = [


     

       

       
131

       
+

       
        pkgs.swww


     

       

       
132

       
+

       
        pkgs.wluma


     

       

       
133

       
+

       
        pkgs.brightnessctl


     

       

       
134

       
+

       
        pkgs.hyprpaper


     

       

       
135

       
+

       
        pkgs.hyprsunset


     

       

       
136

       
+

       
        pkgs.wl-clipboard


     

       

       
137

       
+

       
        pkgs.grim


     

       

       
138

       
+

       
        pkgs.slurp


     

       

       
139

       
+

       
        pkgs.wtype


     

       

       
140

       
+

       
        pkgs.mako


     

       

       
141

       
+

       
        pkgs.unstable.hyprpicker


     

       

       
142

       
+

       
        pkgs.wl-screenrec


     

       

       
143

       
+

       
        inputs.hyprland-contrib.packages.${pkgs.system}.grimblast


     

       

       
144

       
+

       
        pkgs.playerctl


     

       

       
145

       
+

       
        pkgs.libnotify


     

       

       
146

       
+

       
        pkgs.notify-desktop


     

       

       
147

       
+

       
        pkgs.lxde.lxsession


     

       

       
148

       
+

       
      ];


     

       

       
149

       
+

       
      gnome = [


     

       

       
150

       
+

       
        pkgs.gnome-online-accounts


     

       

       
151

       
+

       
        pkgs.gnome-online-accounts-gtk


     

       

       
152

       
+

       
        pkgs.gnome-disk-utility


     

       

       
153

       
+

       
        pkgs.baobab


     

       

       
154

       
+

       
        pkgs.simple-scan


     

       

       
155

       
+

       
        pkgs.file-roller


     

       

       
156

       
+

       
        pkgs.font-manager


     

       

       
157

       
+

       
        pkgs.nautilus


     

       

       
158

       
+

       
        pkgs.loupe


     

       

       
159

       
+

       
        pkgs.totem


     

       

       
160

       
+

       
        pkgs.overskride


     

       

       
161

       
+

       
      ];


     

       

       
162

       
+

       
      dev_langs = [


     

       

       
163

       
+

       
        pkgs.nodejs_22


     

       

       
164

       
+

       
        pkgs.unstable.bun


     

       

       
165

       
+

       
        pkgs.python3


     

       

       
166

       
+

       
        pkgs.go


     

       

       
167

       
+

       
        pkgs.gopls


     

       

       
168

       
+

       
        pkgs.gotools


     

       

       
169

       
+

       
        pkgs.go-tools


     

       

       
170

       
+

       
        pkgs.gcc


     

       

       
171

       
+

       
        pkgs.rustc


     

       

       
172

       
+

       
        pkgs.cargo


     

       

       
173

       
+

       
        pkgs.jdk23


     

       

       
174

       
+

       
        pkgs.ruby


     

       

       
175

       
+

       
        pkgs.cmake


     

       

       
176

       
+

       
        pkgs.unstable.biome


     

       

       
177

       
+

       
        pkgs.unstable.apktool


     

       

       
178

       
+

       
        pkgs.nodePackages_latest.prisma


     

       

       
179

       
+

       
        pkgs.unstable.zola


     

       

       
180

       
+

       
      ];


     

       

       
181

       
+

       
      media = [


     

       

       
182

       
+

       
        pkgs.ffmpeg


     

       

       
183

       
+

       
        pkgs.video-trimmer


     

       

       
184

       
+

       
        pkgs.pitivi


     

       

       
185

       
+

       
        pkgs.audacity


     

       

       
186

       
+

       
        pkgs.unstable.amberol


     

       

       
187

       
+

       
        pkgs.zoom-us


     

       

       
188

       
+

       
      ];


     

       

       
189

       
+

       
      graphics = [


     

       

       
190

       
+

       
        pkgs.imagemagick


     

       

       
191

       
+

       
        pkgs.inkscape


     

       

       
192

       
+

       
        pkgs.blender


     

       

       
193

       
+

       
        pkgs.exiftool


     

       

       
194

       
+

       
        pkgs.unstable.aseprite


     

       

       
195

       
+

       
        pkgs.godot_4


     

       

       
196

       
+

       
        pkgs.unstable.kikit


     

       

       
197

       
+

       
        pkgs.openboardview


     

       

       
198

       
+

       
        pkgs.bambu-studio


     

       

       
199

       
+

       
        pkgs.unstable.orca-slicer


     

       

       
200

       
+

       
        pkgs.qflipper


     

       

       
201

       
+

       
      ];


     

       

       
202

       
+

       
      office = [


     

       

       
203

       
+

       
        pkgs.slack


     

       

       
204

       
+

       
        pkgs.libreoffice


     

       

       
205

       
+

       
        pkgs.unstable.zotero


     

       

       
206

       
+

       
      ];


     

       

       
207

       
+

       
      gaming = [


     

       

       
208

       
+

       
        pkgs.prismlauncher


     

       

       
209

       
+

       
        pkgs.vesktop


     

       

       
210

       
+

       
        pkgs.cava


     

       

       
211

       
+

       
        pkgs.gobang


     

       

       
212

       
+

       
        pkgs.love


     

       

       
213

       
+

       
      ];


     

       

       
214

       
+

       
      frc = [


     

       

       
215

       
+

       
        inputs.frc-nix.packages.${pkgs.system}.elastic-dashboard


     

       

       
216

       
+

       
        inputs.frc-nix.packages.${pkgs.system}.pathplanner


     

       

       
217

       
+

       
        inputs.frc-nix.packages.${pkgs.system}.roborioteamnumbersetter


     

       

       
218

       
+

       
        inputs.frc-nix.packages.${pkgs.system}.sysid


     

       

       
219

       
+

       
        inputs.frc-nix.packages.${pkgs.system}.wpilib-utility


     

       

       
220

       
+

       
        inputs.frc-nix.packages.${pkgs.system}.advantagescope


     

       

       
221

       
+

       
      ];


     

       

       
222

       
+

       
      misc = [


     

       

       
223

       
+

       
        pkgs.invoice


     

       

       
224

       
+

       
        pkgs.pop


     

       

       
225

       
+

       
        pkgs.vhs


     

       

       
226

       
+

       
        pkgs.torrential


     

       

       
227

       
+

       
        inputs.flare.packages.x86_64-linux.default


     

       

       
228

       
+

       
        pkgs.unstable.ollama


     

       

       
229

       
+

       
        pkgs.unstable.claude-code


     

       

       
230

       
+

       
        pkgs.udiskie


     

       

       
231

       
+

       
        pkgs.neofetch


     

       

       
232

       
+

       
        pkgs.unstable.kicad-testing


     

       

       
233

       
+

       
        pkgs.zenity


     

       

       
234

       
+

       
      ];


     

       

       
235

       
+

       
    in


     

       

       
236

       
+

       
    core


     

       

       
237

       
+

       
    ++ terminals


     

       

       
238

       
+

       
    ++ cli_utils


     

       

       
239

       
+

       
    ++ networking


     

       

       
240

       
+

       
    ++ nix_tools


     

       

       
241

       
+

       
    ++ security


     

       

       
242

       
+

       
    ++ editors


     

       

       
243

       
+

       
    ++ browsers


     

       

       
244

       
+

       
    ++ wayland


     

       

       
245

       
+

       
    ++ gnome


     

       

       
246

       
+

       
    ++ dev_langs


     

       

       
247

       
+

       
    ++ media


     

       

       
248

       
+

       
    ++ graphics


     

       

       
249

       
+

       
    ++ office


     

       

       
250

       
+

       
    ++ gaming


     

       

       
251

       
+

       
    ++ frc


     

       

       
252

       
+

       
    ++ misc


     

       

       
253

       
+

       
  );


     

       

       
254

       
+

       



     

       

       
255

       
+

       
  programs.nh = {


     

       

       
256

       
+

       
    enable = true;


     

       

       
257

       
+

       
    clean.enable = true;


     

       

       
258

       
+

       
    clean.extraArgs = "--keep-since 4d --keep 3";


     

       

       
259

       
+

       
    flake = "/home/kierank/dots";


     

       

       
260

       
+

       
  };


     

       

       
261

       
+

       



     

       

       
262

       
+

       
  fonts.packages =


     

       

       
263

       
+

       
    with pkgs;


     

       

       
264

       
+

       
    [


     

       

       
265

       
+

       
      fira


     

       

       
266

       
+

       
      comic-neue


     

       

       
267

       
+

       
    ]


     

       

       
268

       
+

       
    ++ builtins.filter lib.attrsets.isDerivation (builtins.attrValues pkgs.nerd-fonts);


     

       

       
269

       
+

       



     

       

       
270

       
+

       
  # import the secret


     

       

       
271

       
+

       
  age.identityPaths = [


     

       

       
272

       
+

       
    "/home/kierank/.ssh/id_rsa"


     

       

       
273

       
+

       
    "/etc/ssh/id_rsa"


     

       

       
274

       
+

       
    "/mnt/etc/ssh/id_rsa"


     

       

       
275

       
+

       
  ];


     

       

       
276

       
+

       
  age.secrets = {


     

       

       
277

       
+

       
    wifi = {


     

       

       
278

       
+

       
      file = ../../../secrets/wifi.age;


     

       

       
279

       
+

       
      owner = "kierank";


     

       

       
280

       
+

       
    };


     

       

       
281

       
+

       
    resend = {


     

       

       
282

       
+

       
      file = ../../../secrets/resend.age;


     

       

       
283

       
+

       
      owner = "kierank";


     

       

       
284

       
+

       
    };


     

       

       
285

       
+

       
    wakatime = {


     

       

       
286

       
+

       
      file = ../../../secrets/wakatime.age;


     

       

       
287

       
+

       
      path = "/home/kierank/.wakatime.cfg";


     

       

       
288

       
+

       
      owner = "kierank";


     

       

       
289

       
+

       
    };


     

       

       
290

       
+

       
    bluesky = {


     

       

       
291

       
+

       
      file = ../../../secrets/bluesky.age;


     

       

       
292

       
+

       
      owner = "kierank";


     

       

       
293

       
+

       
    };


     

       

       
294

       
+

       
    iodine = {


     

       

       
295

       
+

       
      file = ../../../secrets/iodine.age;


     

       

       
296

       
+

       
      owner = "kierank";


     

       

       
297

       
+

       
    };


     

       

       
298

       
+

       
  };


     

       

       
299

       
+

       



     

       

       
300

       
+

       
  environment.sessionVariables = {


     

       

       
301

       
+

       
    XDG_CACHE_HOME = "$HOME/.cache";


     

       

       
302

       
+

       
    XDG_CONFIG_HOME = "$HOME/.config";


     

       

       
303

       
+

       
    XDG_DATA_HOME = "$HOME/.local/share";


     

       

       
304

       
+

       
    XDG_STATE_HOME = "$HOME/.local/state";


     

       

       
305

       
+

       
    NIXOS_OZONE_WL = "1";


     

       

       
306

       
+

       
    PRISMA_QUERY_ENGINE_LIBRARY = "${pkgs.prisma-engines}/lib/libquery_engine.node";


     

       

       
307

       
+

       
    PRISMA_QUERY_ENGINE_BINARY = "${pkgs.prisma-engines}/bin/query-engine";


     

       

       
308

       
+

       
    PRISMA_SCHEMA_ENGINE_BINARY = "${pkgs.prisma-engines}/bin/schema-engine";


     

       

       
309

       
+

       
    RESEND_API_KEY = "$(${pkgs.coreutils}/bin/cat ${config.age.secrets.resend.path})";


     

       

       
310

       
+

       
    POP_FROM = "me@dunkirk.sh";


     

       

       
311

       
+

       
    EDITOR = "nvim";


     

       

       
312

       
+

       
    SYSTEMD_EDITOR = "nvim";


     

       

       
313

       
+

       
    VISUAL = "nvim";


     

       

       
314

       
+

       
  };


     

       

       
315

       
+

       



     

       

       
316

       
+

       
  modules = {


     

       

       
317

       
+

       
    authentication.enable = true;


     

       

       
318

       
+

       
    apps.tuigreet = {


     

       

       
319

       
+

       
      enable = true;


     

       

       
320

       
+

       
      command = "Hyprland";


     

       

       
321

       
+

       
    };


     

       

       
322

       
+

       
    network.wifi = {


     

       

       
323

       
+

       
      enable = true;


     

       

       
324

       
+

       
      hostName = "moonlark";


     

       

       
325

       
+

       
      nameservers = [


     

       

       
326

       
+

       
        "1.1.1.1"


     

       

       
327

       
+

       
        "1.0.0.1"


     

       

       
328

       
+

       
        "8.8.8.8"


     

       

       
329

       
+

       
        "9.9.9.9"


     

       

       
330

       
+

       
      ];


     

       

       
331

       
+

       
      envFile = config.age.secrets.wifi.path;


     

       

       
332

       
+

       
      profiles = {


     

       

       
333

       
+

       
        "KlukasNet".pskVar = "psk_home";


     

       

       
334

       
+

       
        "Everseen".pskVar = "psk_hotspot";


     

       

       
335

       
+

       
        "SAAC Sanctuary".pskVar = "psk_church";


     

       

       
336

       
+

       
        "MVNU-student" = { };


     

       

       
337

       
+

       
        "Status Solutions Guest".pskVar = "psk_robotics";


     

       

       
338

       
+

       
        "FRC-1317-CECE".psk = "digitalfusion";


     

       

       
339

       
+

       
        "1317-fortress-of-awesomeness" = { };


     

       

       
340

       
+

       
        "PAST PD".pskVar = "psk_past";


     

       

       
341

       
+

       
        "Heartland".psk = "beourguest";


     

       

       
342

       
+

       
        "WPL_Public_AccessII" = { };


     

       

       
343

       
+

       
        "Yowzaford".pskVar = "psk_rhoda";


     

       

       
344

       
+

       
        "cu-events".psk = "freesmile82";


     

       

       
345

       
+

       
        "QargoCoffee-Guest".psk = "Lavazza@7";


     

       

       
346

       
+

       
        "Fulton".psk = "9064405930";


     

       

       
347

       
+

       
        "TP-LINK_ECF0".psk = "ad1066AD!";


     

       

       
348

       
+

       
      };


     

       

       
349

       
+

       
    };


     

       

       
350

       
+

       
  };


     

       

       
351

       
+

       



     

       

       
352

       
+

       
  services.iodine.clients = {


     

       

       
353

       
+

       
    t1 = {


     

       

       
354

       
+

       
      server = "t1.dunkirk.sh";


     

       

       
355

       
+

       
      passwordFile = config.age.secrets.iodine.path;


     

       

       
356

       
+

       
    };


     

       

       
357

       
+

       
  };


     

       

       
358

       
+

       



     

       

       
359

       
+

       
  virtualisation = {


     

       

       
360

       
+

       
    libvirtd.enable = true;


     

       

       
361

       
+

       
    virtualbox = {


     

       

       
362

       
+

       
      host.enable = true;


     

       

       
363

       
+

       
      host.enableExtensionPack = true;


     

       

       
364

       
+

       
    };


     

       

       
365

       
+

       
    docker.enable = true;


     

       

       
366

       
+

       
  };


     

       

       
367

       
+

       



     

       

       
368

       
+

       
  programs.nix-ld.enable = true;


     

       

       
369

       
+

       



     

       

       
370

       
+

       
  programs.zsh.enable = true;


     

       

       
371

       
+

       



     

       

       
372

       
+

       
  programs.direnv.enable = true;


     

       

       
373

       
+

       



     

       

       
374

       
+

       
  # TODO: Configure your system-wide user settings (groups, etc), add more users as needed.


     

       

       
375

       
+

       
  users.users = {


     

       

       
376

       
+

       
    kierank = {


     

       

       
377

       
+

       
      # You can skip setting a root password by passing '--no-root-passwd' to nixos-install.


     

       

       
378

       
+

       
      # Be sure to change it (using passwd) after rebooting!


     

       

       
379

       
+

       
      initialPassword = "lolzthisaintsecure!";


     

       

       
380

       
+

       
      isNormalUser = true;


     

       

       
381

       
+

       
      shell = pkgs.zsh;


     

       

       
382

       
+

       
      openssh.authorizedKeys.keys = [


     

       

       
383

       
+

       
        "ssh-rsa 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 kierank@mockingjay"


     

       

       
384

       
+

       
      ];


     

       

       
385

       
+

       
      extraGroups = [


     

       

       
386

       
+

       
        "wheel"


     

       

       
387

       
+

       
        "networkmanager"


     

       

       
388

       
+

       
        "audio"


     

       

       
389

       
+

       
        "video"


     

       

       
390

       
+

       
        "docker"


     

       

       
391

       
+

       
        "plugdev"


     

       

       
392

       
+

       
        "input"


     

       

       
393

       
+

       
        "dialout"


     

       

       
394

       
+

       
        "docker"


     

       

       
395

       
+

       
        "libvirtd"


     

       

       
396

       
+

       
        "vboxusers"


     

       

       
397

       
+

       
      ];


     

       

       
398

       
+

       
    };


     

       

       
399

       
+

       
    root.openssh.authorizedKeys.keys = [


     

       

       
400

       
+

       
      "ssh-rsa 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 kierank@mockingjay"


     

       

       
401

       
+

       
    ];


     

       

       
402

       
+

       
  };


     

       

       
403

       
+

       



     

       

       
404

       
+

       
  programs.steam = {


     

       

       
405

       
+

       
    enable = true;


     

       

       
406

       
+

       
    remotePlay.openFirewall = true; # Open ports in the firewall for Steam Remote Play


     

       

       
407

       
+

       
    dedicatedServer.openFirewall = true; # Open ports in the firewall for Source Dedicated Server


     

       

       
408

       
+

       
    localNetworkGameTransfers.openFirewall = true; # Open ports in the firewall for Steam Local Network Game Transfers


     

       

       
409

       
+

       
  };


     

       

       
410

       
+

       



     

       

       
411

       
+

       
  programs.hyprland.enable = true;


     

       

       
412

       
+

       
  services.hypridle.enable = true;


     

       

       
413

       
+

       



     

       

       
414

       
+

       
  programs.xwayland.enable = lib.mkForce true;


     

       

       
415

       
+

       



     

       

       
416

       
+

       
  services.udev.packages = [


     

       

       
417

       
+

       
    pkgs.qFlipper


     

       

       
418

       
+

       
    pkgs.via


     

       

       
419

       
+

       
  ];


     

       

       
420

       
+

       



     

       

       
421

       
+

       
  # enable cups


     

       

       
422

       
+

       
  services.printing.enable = true;


     

       

       
423

       
+

       
  services.avahi = {


     

       

       
424

       
+

       
    enable = true;


     

       

       
425

       
+

       
    nssmdns4 = true;


     

       

       
426

       
+

       
    openFirewall = true;


     

       

       
427

       
+

       
  };


     

       

       
428

       
+

       



     

       

       
429

       
+

       
  # enable bluetooth


     

       

       
430

       
+

       
  hardware.bluetooth.enable = true;


     

       

       
431

       
+

       



     

       

       
432

       
+

       
  # enable pipewire


     

       

       
433

       
+

       
  # rtkit is optional but recommended


     

       

       
434

       
+

       
  security.rtkit.enable = true;


     

       

       
435

       
+

       
  services.pipewire = {


     

       

       
436

       
+

       
    enable = true;


     

       

       
437

       
+

       
    alsa.enable = true;


     

       

       
438

       
+

       
    alsa.support32Bit = true;


     

       

       
439

       
+

       
    pulse.enable = true;


     

       

       
440

       
+

       
    # If you want to use JACK applications, uncomment this


     

       

       
441

       
+

       
    jack.enable = true;


     

       

       
442

       
+

       
  };


     

       

       
443

       
+

       



     

       

       
444

       
+

       
  # This setups a SSH server. Very important if you're setting up a headless system.


     

       

       
445

       
+

       
  # Feel free to remove if you don't need it.


     

       

       
446

       
+

       
  services.openssh = {


     

       

       
447

       
+

       
    enable = true;


     

       

       
448

       
+

       
    settings = {


     

       

       
449

       
+

       
      # Opinionated: forbid root login through SSH.


     

       

       
450

       
+

       
      PermitRootLogin = "no";


     

       

       
451

       
+

       
      # Opinionated: use keys only.


     

       

       
452

       
+

       
      # Remove if you want to SSH using passwords


     

       

       
453

       
+

       
      PasswordAuthentication = false;


     

       

       
454

       
+

       
    };


     

       

       
455

       
+

       
  };


     

       

       
456

       
+

       



     

       

       
457

       
+

       
  networking.firewall = {


     

       

       
458

       
+

       
    enable = true;


     

       

       
459

       
+

       
    allowedTCPPorts = [


     

       

       
460

       
+

       
      4455


     

       

       
461

       
+

       
      51820


     

       

       
462

       
+

       
    ];


     

       

       
463

       
+

       
    allowedUDPPorts = [


     

       

       
464

       
+

       
      4455


     

       

       
465

       
+

       
      51820


     

       

       
466

       
+

       
    ];


     

       

       
467

       
+

       
  };


     

       

       
468

       
+

       



     

       

       
469

       
+

       
  services.tailscale = {


     

       

       
470

       
+

       
    enable = true;


     

       

       
471

       
+

       
    useRoutingFeatures = "client";


     

       

       
472

       
+

       
  };


     

       

       
473

       
+

       



     

       

       
474

       
+

       
  services.devmon.enable = true;


     

       

       
475

       
+

       
  services.gvfs.enable = true;


     

       

       
476

       
+

       
  services.udisks2.enable = true;


     

       

       
477

       
+

       



     

       

       
478

       
+

       
  services.logind.extraConfig = ''


     

       

       
479

       
+

       
    # don't shutdown when power button is short-pressed


     

       

       
480

       
+

       
    HandlePowerKey=ignore


     

       

       
481

       
+

       
    HandlePowerKeyLongPress=poweroff


     

       

       
482

       
+

       
  '';


     

       

       
483

       
+

       



     

       

       
484

       
+

       
  # Requires at least 5.16 for working wi-fi and bluetooth.


     

       

       
485

       
+

       
  # https://community.frame.work/t/using-the-ax210-with-linux-on-the-framework-laptop/1844/89


     

       

       
486

       
+

       
  boot = {


     

       

       
487

       
+

       
    kernelPackages = lib.mkIf (lib.versionOlder pkgs.linux.version "5.16") (


     

       

       
488

       
+

       
      lib.mkDefault pkgs.linuxPackages_latest


     

       

       
489

       
+

       
    );


     

       

       
490

       
+

       
    loader.grub = {


     

       

       
491

       
+

       
      # no need to set devices, disko will add all devices that have a EF02 partition to the list already


     

       

       
492

       
+

       
      device = "nodev";


     

       

       
493

       
+

       
      efiSupport = true;


     

       

       
494

       
+

       
      efiInstallAsRemovable = true;


     

       

       
495

       
+

       
    };


     

       

       
496

       
+

       
    supportedFilesystems = [ "ntfs" ];


     

       

       
497

       
+

       
    extraModprobeConfig = ''


     

       

       
498

       
+

       
      options kvm_intel nested=1


     

       

       
499

       
+

       
      options kvm_intel emulate_invalid_guest_state=0


     

       

       
500

       
+

       
      options kvm ignore_msrs=1


     

       

       
501

       
+

       
    '';


     

       

       
502

       
+

       
  };


     

       

       
503

       
+

       



     

       

       
504

       
+

       
  # https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion


     

       

       
505

       
+

       
  system.stateVersion = "23.05";


     

       

       
506

       
+

       
}
+6
nixos/modules/apps/default.nix 
···

       

       
1

       
+

       
{ ... }:


     

       

       
2

       
+

       
{


     

       

       
3

       
+

       
  imports = [


     

       

       
4

       
+

       
    ./tuigreet.nix


     

       

       
5

       
+

       
  ];


     

       

       
6

       
+

       
}
+296
nixos/modules/apps/tuigreet.nix 
···

       

       
1

       
+

       
{


     

       

       
2

       
+

       
  lib,


     

       

       
3

       
+

       
  config,


     

       

       
4

       
+

       
  pkgs,


     

       

       
5

       
+

       
  ...


     

       

       
6

       
+

       
}:


     

       

       
7

       
+

       
let


     

       

       
8

       
+

       
  cfg = config.modules.apps.tuigreet;


     

       

       
9

       
+

       
  tuigreetBin = "${pkgs.greetd.tuigreet}/bin/tuigreet";


     

       

       
10

       
+

       
  msg = cfg.greeting;


     

       

       
11

       
+

       
  baseArgs =


     

       

       
12

       
+

       
    [ ]


     

       

       
13

       
+

       
    ++ lib.optionals cfg.time [ "--time" ]


     

       

       
14

       
+

       
    ++ lib.optionals cfg.issue [ "--issue" ]


     

       

       
15

       
+

       
    ++ lib.optionals (msg != null && msg != "") [


     

       

       
16

       
+

       
      "-g"


     

       

       
17

       
+

       
      msg


     

       

       
18

       
+

       
    ]


     

       

       
19

       
+

       
    ++ lib.optionals (cfg.timeFormat != null) [


     

       

       
20

       
+

       
      "--time-format"


     

       

       
21

       
+

       
      cfg.timeFormat


     

       

       
22

       
+

       
    ]


     

       

       
23

       
+

       
    ++ lib.optionals (cfg.width != null) [


     

       

       
24

       
+

       
      "--width"


     

       

       
25

       
+

       
      (toString cfg.width)


     

       

       
26

       
+

       
    ]


     

       

       
27

       
+

       
    ++ lib.optionals (cfg.theme != null) [


     

       

       
28

       
+

       
      "--theme"


     

       

       
29

       
+

       
      cfg.theme


     

       

       
30

       
+

       
    ]


     

       

       
31

       
+

       
    ++ lib.optionals cfg.asterisks [ "--asterisks" ]


     

       

       
32

       
+

       
    ++ lib.optionals (cfg.asterisksChar != null) [


     

       

       
33

       
+

       
      "--asterisks-char"


     

       

       
34

       
+

       
      cfg.asterisksChar


     

       

       
35

       
+

       
    ]


     

       

       
36

       
+

       
    ++ lib.optionals (cfg.windowPadding != null) [


     

       

       
37

       
+

       
      "--window-padding"


     

       

       
38

       
+

       
      (toString cfg.windowPadding)


     

       

       
39

       
+

       
    ]


     

       

       
40

       
+

       
    ++ lib.optionals (cfg.containerPadding != null) [


     

       

       
41

       
+

       
      "--container-padding"


     

       

       
42

       
+

       
      (toString cfg.containerPadding)


     

       

       
43

       
+

       
    ]


     

       

       
44

       
+

       
    ++ lib.optionals (cfg.promptPadding != null) [


     

       

       
45

       
+

       
      "--prompt-padding"


     

       

       
46

       
+

       
      (toString cfg.promptPadding)


     

       

       
47

       
+

       
    ]


     

       

       
48

       
+

       
    ++ lib.optionals (cfg.greetAlign != null) [


     

       

       
49

       
+

       
      "--greet-align"


     

       

       
50

       
+

       
      cfg.greetAlign


     

       

       
51

       
+

       
    ]


     

       

       
52

       
+

       
    ++ lib.optionals cfg.remember [ "--remember" ]


     

       

       
53

       
+

       
    ++ lib.optionals cfg.rememberSession [ "--remember-session" ]


     

       

       
54

       
+

       
    ++ lib.optionals cfg.rememberUserSession [ "--remember-user-session" ]


     

       

       
55

       
+

       
    ++ lib.optionals cfg.userMenu [ "--user-menu" ]


     

       

       
56

       
+

       
    ++ lib.optionals (cfg.userMenuMinUid != null) [


     

       

       
57

       
+

       
      "--user-menu-min-uid"


     

       

       
58

       
+

       
      (toString cfg.userMenuMinUid)


     

       

       
59

       
+

       
    ]


     

       

       
60

       
+

       
    ++ lib.optionals (cfg.userMenuMaxUid != null) [


     

       

       
61

       
+

       
      "--user-menu-max-uid"


     

       

       
62

       
+

       
      (toString cfg.userMenuMaxUid)


     

       

       
63

       
+

       
    ]


     

       

       
64

       
+

       
    ++ lib.concatMap (e: [


     

       

       
65

       
+

       
      "--env"


     

       

       
66

       
+

       
      e


     

       

       
67

       
+

       
    ]) cfg.env


     

       

       
68

       
+

       
    ++ lib.optionals (cfg.sessions != null && cfg.sessions != [ ]) [


     

       

       
69

       
+

       
      "--sessions"


     

       

       
70

       
+

       
      (lib.concatStringsSep ":" cfg.sessions)


     

       

       
71

       
+

       
    ]


     

       

       
72

       
+

       
    ++ lib.optionals (cfg.xsessions != null && cfg.xsessions != [ ]) [


     

       

       
73

       
+

       
      "--xsessions"


     

       

       
74

       
+

       
      (lib.concatStringsSep ":" cfg.xsessions)


     

       

       
75

       
+

       
    ]


     

       

       
76

       
+

       
    ++ lib.optionals (cfg.sessionWrapper != null && cfg.sessionWrapper != [ ]) [


     

       

       
77

       
+

       
      "--session-wrapper"


     

       

       
78

       
+

       
      (lib.concatStringsSep " " cfg.sessionWrapper)


     

       

       
79

       
+

       
    ]


     

       

       
80

       
+

       
    ++ lib.optionals (cfg.xsessionWrapper != null && cfg.xsessionWrapper != [ ]) [


     

       

       
81

       
+

       
      "--xsession-wrapper"


     

       

       
82

       
+

       
      (lib.concatStringsSep " " cfg.xsessionWrapper)


     

       

       
83

       
+

       
    ]


     

       

       
84

       
+

       
    ++ lib.optionals cfg.noXsessionWrapper [ "--no-xsession-wrapper" ]


     

       

       
85

       
+

       
    ++ lib.optionals (cfg.powerShutdown != null && cfg.powerShutdown != [ ]) [


     

       

       
86

       
+

       
      "--power-shutdown"


     

       

       
87

       
+

       
      (lib.concatStringsSep " " cfg.powerShutdown)


     

       

       
88

       
+

       
    ]


     

       

       
89

       
+

       
    ++ lib.optionals (cfg.powerReboot != null && cfg.powerReboot != [ ]) [


     

       

       
90

       
+

       
      "--power-reboot"


     

       

       
91

       
+

       
      (lib.concatStringsSep " " cfg.powerReboot)


     

       

       
92

       
+

       
    ]


     

       

       
93

       
+

       
    ++ lib.optionals cfg.powerNoSetsid [ "--power-no-setsid" ]


     

       

       
94

       
+

       
    ++ lib.optionals (cfg.kbCommand != null) [


     

       

       
95

       
+

       
      "--kb-command"


     

       

       
96

       
+

       
      (toString cfg.kbCommand)


     

       

       
97

       
+

       
    ]


     

       

       
98

       
+

       
    ++ lib.optionals (cfg.kbSessions != null) [


     

       

       
99

       
+

       
      "--kb-sessions"


     

       

       
100

       
+

       
      (toString cfg.kbSessions)


     

       

       
101

       
+

       
    ]


     

       

       
102

       
+

       
    ++ lib.optionals (cfg.kbPower != null) [


     

       

       
103

       
+

       
      "--kb-power"


     

       

       
104

       
+

       
      (toString cfg.kbPower)


     

       

       
105

       
+

       
    ]


     

       

       
106

       
+

       
    ++ cfg.extraArgs;


     

       

       
107

       
+

       
  cmd = lib.concatStringsSep " " (


     

       

       
108

       
+

       
    [ tuigreetBin ]


     

       

       
109

       
+

       
    ++ baseArgs


     

       

       
110

       
+

       
    ++ [


     

       

       
111

       
+

       
      "--cmd"


     

       

       
112

       
+

       
      cfg.command


     

       

       
113

       
+

       
    ]


     

       

       
114

       
+

       
    ++ lib.optional (cfg.debugFile != null) ("--debug " + cfg.debugFile)


     

       

       
115

       
+

       
  );


     

       

       
116

       
+

       
in


     

       

       
117

       
+

       
{


     

       

       
118

       
+

       
  options.modules.apps.tuigreet = {


     

       

       
119

       
+

       
    enable = lib.mkEnableOption "Enable greetd with tuigreet";


     

       

       
120

       
+

       



     

       

       
121

       
+

       
    command = lib.mkOption {


     

       

       
122

       
+

       
      type = lib.types.str;


     

       

       
123

       
+

       
      default = "Hyprland";


     

       

       
124

       
+

       
      description = "Command to launch after login (e.g., Hyprland, niri, sway, etc.)";


     

       

       
125

       
+

       
    };


     

       

       
126

       
+

       



     

       

       
127

       
+

       
    extraArgs = lib.mkOption {


     

       

       
128

       
+

       
      type = lib.types.listOf lib.types.str;


     

       

       
129

       
+

       
      default = [ ];


     

       

       
130

       
+

       
      description = "Extra arguments passed to tuigreet (appended).";


     

       

       
131

       
+

       
    };


     

       

       
132

       
+

       



     

       

       
133

       
+

       
    greeting = lib.mkOption {


     

       

       
134

       
+

       
      type = lib.types.nullOr lib.types.str;


     

       

       
135

       
+

       
      default = "WARNING: UNAUTHORIZED ACCESS WILL RESULT IN TERMINATION OF SESSION. IDENTIFY YOURSELF";


     

       

       
136

       
+

       
      description = "Greeting text shown above login prompt (-g/--greeting).";


     

       

       
137

       
+

       
    };


     

       

       
138

       
+

       



     

       

       
139

       
+

       
    time = lib.mkOption {


     

       

       
140

       
+

       
      type = lib.types.bool;


     

       

       
141

       
+

       
      default = true;


     

       

       
142

       
+

       
      description = "Show time";


     

       

       
143

       
+

       
    };


     

       

       
144

       
+

       
    issue = lib.mkOption {


     

       

       
145

       
+

       
      type = lib.types.bool;


     

       

       
146

       
+

       
      default = false;


     

       

       
147

       
+

       
      description = "Show /etc/issue";


     

       

       
148

       
+

       
    };


     

       

       
149

       
+

       
    timeFormat = lib.mkOption {


     

       

       
150

       
+

       
      type = lib.types.nullOr lib.types.str;


     

       

       
151

       
+

       
      default = null;


     

       

       
152

       
+

       
    };


     

       

       
153

       
+

       
    width = lib.mkOption {


     

       

       
154

       
+

       
      type = lib.types.nullOr lib.types.ints.positive;


     

       

       
155

       
+

       
      default = null;


     

       

       
156

       
+

       
    };


     

       

       
157

       
+

       
    theme = lib.mkOption {


     

       

       
158

       
+

       
      type = lib.types.nullOr lib.types.str;


     

       

       
159

       
+

       
      default = null;


     

       

       
160

       
+

       
    };


     

       

       
161

       
+

       
    asterisks = lib.mkOption {


     

       

       
162

       
+

       
      type = lib.types.bool;


     

       

       
163

       
+

       
      default = false;


     

       

       
164

       
+

       
    };


     

       

       
165

       
+

       
    asterisksChar = lib.mkOption {


     

       

       
166

       
+

       
      type = lib.types.nullOr lib.types.str;


     

       

       
167

       
+

       
      default = null;


     

       

       
168

       
+

       
    };


     

       

       
169

       
+

       
    windowPadding = lib.mkOption {


     

       

       
170

       
+

       
      type = lib.types.nullOr lib.types.ints.unsigned;


     

       

       
171

       
+

       
      default = null;


     

       

       
172

       
+

       
    };


     

       

       
173

       
+

       
    containerPadding = lib.mkOption {


     

       

       
174

       
+

       
      type = lib.types.nullOr lib.types.ints.unsigned;


     

       

       
175

       
+

       
      default = null;


     

       

       
176

       
+

       
    };


     

       

       
177

       
+

       
    promptPadding = lib.mkOption {


     

       

       
178

       
+

       
      type = lib.types.nullOr lib.types.ints.unsigned;


     

       

       
179

       
+

       
      default = null;


     

       

       
180

       
+

       
    };


     

       

       
181

       
+

       
    greetAlign = lib.mkOption {


     

       

       
182

       
+

       
      type = lib.types.nullOr (


     

       

       
183

       
+

       
        lib.types.enum [


     

       

       
184

       
+

       
          "left"


     

       

       
185

       
+

       
          "center"


     

       

       
186

       
+

       
          "right"


     

       

       
187

       
+

       
        ]


     

       

       
188

       
+

       
      );


     

       

       
189

       
+

       
      default = null;


     

       

       
190

       
+

       
    };


     

       

       
191

       
+

       



     

       

       
192

       
+

       
    remember = lib.mkOption {


     

       

       
193

       
+

       
      type = lib.types.bool;


     

       

       
194

       
+

       
      default = true;


     

       

       
195

       
+

       
    };


     

       

       
196

       
+

       
    rememberSession = lib.mkOption {


     

       

       
197

       
+

       
      type = lib.types.bool;


     

       

       
198

       
+

       
      default = false;


     

       

       
199

       
+

       
    };


     

       

       
200

       
+

       
    rememberUserSession = lib.mkOption {


     

       

       
201

       
+

       
      type = lib.types.bool;


     

       

       
202

       
+

       
      default = false;


     

       

       
203

       
+

       
    };


     

       

       
204

       
+

       
    userMenu = lib.mkOption {


     

       

       
205

       
+

       
      type = lib.types.bool;


     

       

       
206

       
+

       
      default = false;


     

       

       
207

       
+

       
    };


     

       

       
208

       
+

       
    userMenuMinUid = lib.mkOption {


     

       

       
209

       
+

       
      type = lib.types.nullOr lib.types.ints.positive;


     

       

       
210

       
+

       
      default = null;


     

       

       
211

       
+

       
    };


     

       

       
212

       
+

       
    userMenuMaxUid = lib.mkOption {


     

       

       
213

       
+

       
      type = lib.types.nullOr lib.types.ints.positive;


     

       

       
214

       
+

       
      default = null;


     

       

       
215

       
+

       
    };


     

       

       
216

       
+

       



     

       

       
217

       
+

       
    env = lib.mkOption {


     

       

       
218

       
+

       
      type = lib.types.listOf lib.types.str;


     

       

       
219

       
+

       
      default = [ ];


     

       

       
220

       
+

       
    };


     

       

       
221

       
+

       
    sessions = lib.mkOption {


     

       

       
222

       
+

       
      type = lib.types.listOf lib.types.str;


     

       

       
223

       
+

       
      default = [ ];


     

       

       
224

       
+

       
    };


     

       

       
225

       
+

       
    xsessions = lib.mkOption {


     

       

       
226

       
+

       
      type = lib.types.listOf lib.types.str;


     

       

       
227

       
+

       
      default = [ ];


     

       

       
228

       
+

       
    };


     

       

       
229

       
+

       



     

       

       
230

       
+

       
    sessionWrapper = lib.mkOption {


     

       

       
231

       
+

       
      type = lib.types.listOf lib.types.str;


     

       

       
232

       
+

       
      default = [ ];


     

       

       
233

       
+

       
    };


     

       

       
234

       
+

       
    xsessionWrapper = lib.mkOption {


     

       

       
235

       
+

       
      type = lib.types.listOf lib.types.str;


     

       

       
236

       
+

       
      default = [ ];


     

       

       
237

       
+

       
    };


     

       

       
238

       
+

       
    noXsessionWrapper = lib.mkOption {


     

       

       
239

       
+

       
      type = lib.types.bool;


     

       

       
240

       
+

       
      default = false;


     

       

       
241

       
+

       
    };


     

       

       
242

       
+

       



     

       

       
243

       
+

       
    powerShutdown = lib.mkOption {


     

       

       
244

       
+

       
      type = lib.types.listOf lib.types.str;


     

       

       
245

       
+

       
      default = [ ];


     

       

       
246

       
+

       
    };


     

       

       
247

       
+

       
    powerReboot = lib.mkOption {


     

       

       
248

       
+

       
      type = lib.types.listOf lib.types.str;


     

       

       
249

       
+

       
      default = [ ];


     

       

       
250

       
+

       
    };


     

       

       
251

       
+

       
    powerNoSetsid = lib.mkOption {


     

       

       
252

       
+

       
      type = lib.types.bool;


     

       

       
253

       
+

       
      default = false;


     

       

       
254

       
+

       
    };


     

       

       
255

       
+

       



     

       

       
256

       
+

       
    kbCommand = lib.mkOption {


     

       

       
257

       
+

       
      type = lib.types.nullOr (lib.types.ints.between 1 12);


     

       

       
258

       
+

       
      default = null;


     

       

       
259

       
+

       
    };


     

       

       
260

       
+

       
    kbSessions = lib.mkOption {


     

       

       
261

       
+

       
      type = lib.types.nullOr (lib.types.ints.between 1 12);


     

       

       
262

       
+

       
      default = null;


     

       

       
263

       
+

       
    };


     

       

       
264

       
+

       
    kbPower = lib.mkOption {


     

       

       
265

       
+

       
      type = lib.types.nullOr (lib.types.ints.between 1 12);


     

       

       
266

       
+

       
      default = null;


     

       

       
267

       
+

       
    };


     

       

       
268

       
+

       



     

       

       
269

       
+

       
    debugFile = lib.mkOption {


     

       

       
270

       
+

       
      type = lib.types.nullOr lib.types.str;


     

       

       
271

       
+

       
      default = null;


     

       

       
272

       
+

       
    };


     

       

       
273

       
+

       
  };


     

       

       
274

       
+

       



     

       

       
275

       
+

       
  config = lib.mkIf cfg.enable {


     

       

       
276

       
+

       
    services.greetd = {


     

       

       
277

       
+

       
      enable = true;


     

       

       
278

       
+

       
      settings = {


     

       

       
279

       
+

       
        default_session = {


     

       

       
280

       
+

       
          command = cmd;


     

       

       
281

       
+

       
          user = "greeter";


     

       

       
282

       
+

       
        };


     

       

       
283

       
+

       
      };


     

       

       
284

       
+

       
    };


     

       

       
285

       
+

       



     

       

       
286

       
+

       
    systemd.services.greetd.serviceConfig = {


     

       

       
287

       
+

       
      Type = "idle";


     

       

       
288

       
+

       
      StandardInput = "tty";


     

       

       
289

       
+

       
      StandardOutput = "tty";


     

       

       
290

       
+

       
      StandardError = "journal";


     

       

       
291

       
+

       
      TTYReset = true;


     

       

       
292

       
+

       
      TTYVHangup = true;


     

       

       
293

       
+

       
      TTYVTDisallocate = true;


     

       

       
294

       
+

       
    };


     

       

       
295

       
+

       
  };


     

       

       
296

       
+

       
}
+99
nixos/modules/authentication.nix 
···

       

       
1

       
+

       
{


     

       

       
2

       
+

       
  lib,


     

       

       
3

       
+

       
  config,


     

       

       
4

       
+

       
  pkgs,


     

       

       
5

       
+

       
  ...


     

       

       
6

       
+

       
}:


     

       

       
7

       
+

       
let


     

       

       
8

       
+

       
  cfg = config.modules.authentication;


     

       

       
9

       
+

       
in


     

       

       
10

       
+

       
{


     

       

       
11

       
+

       
  options.modules.authentication.enable = lib.mkEnableOption "Enable authentication stack (polkit, keyring, PAM with fprintd)";


     

       

       
12

       
+

       



     

       

       
13

       
+

       
  config = lib.mkIf cfg.enable {


     

       

       
14

       
+

       
    services.fprintd.enable = true;


     

       

       
15

       
+

       
    security.polkit.enable = true;


     

       

       
16

       
+

       
    services.gnome.gnome-keyring.enable = true;


     

       

       
17

       
+

       
    programs.dconf.enable = true;


     

       

       
18

       
+

       



     

       

       
19

       
+

       
    environment.systemPackages = [


     

       

       
20

       
+

       
      pkgs.polkit_gnome


     

       

       
21

       
+

       
      pkgs.fprintd


     

       

       
22

       
+

       
    ];


     

       

       
23

       
+

       



     

       

       
24

       
+

       
    systemd.user.services.polkit-gnome-authentication-agent-1 = {


     

       

       
25

       
+

       
      description = "polkit-gnome-authentication-agent-1";


     

       

       
26

       
+

       
      wantedBy = [ "graphical-session.target" ];


     

       

       
27

       
+

       
      wants = [ "graphical-session.target" ];


     

       

       
28

       
+

       
      after = [ "graphical-session.target" ];


     

       

       
29

       
+

       
      serviceConfig = {


     

       

       
30

       
+

       
        Type = "simple";


     

       

       
31

       
+

       
        ExecStart = "${pkgs.polkit_gnome}/libexec/polkit-gnome-authentication-agent-1";


     

       

       
32

       
+

       
        Restart = "on-failure";


     

       

       
33

       
+

       
        RestartSec = 1;


     

       

       
34

       
+

       
        TimeoutStopSec = 10;


     

       

       
35

       
+

       
      };


     

       

       
36

       
+

       
    };


     

       

       
37

       
+

       



     

       

       
38

       
+

       
    security.pam.services.hyprlock = lib.mkIf (config.services.fprintd.enable) {


     

       

       
39

       
+

       
      text = ''


     

       

       
40

       
+

       
        # Account management.


     

       

       
41

       
+

       
        account required pam_unix.so # unix (order 10900)


     

       

       
42

       
+

       



     

       

       
43

       
+

       
        # Authentication management.


     

       

       
44

       
+

       
        auth sufficient pam_unix.so try_first_pass likeauth nullok


     

       

       
45

       
+

       
        auth sufficient ${pkgs.fprintd}/lib/security/pam_fprintd.so


     

       

       
46

       
+

       
        auth required pam_deny.so # deny


     

       

       
47

       
+

       



     

       

       
48

       
+

       
        # Password management.


     

       

       
49

       
+

       
        password sufficient pam_unix.so nullok yescrypt # unix


     

       

       
50

       
+

       



     

       

       
51

       
+

       
        # Session management.


     

       

       
52

       
+

       
        session required pam_env.so conffile=/etc/pam/environment readenv=0 # env (order 10100)


     

       

       
53

       
+

       
        session required pam_unix.so # unix (order 10200)


     

       

       
54

       
+

       
      '';


     

       

       
55

       
+

       
    };


     

       

       
56

       
+

       



     

       

       
57

       
+

       
    security.pam.services.sudo = lib.mkIf (config.services.fprintd.enable) {


     

       

       
58

       
+

       
      text = ''


     

       

       
59

       
+

       
        # Account management.


     

       

       
60

       
+

       
        account required pam_unix.so # unix (order 10900)


     

       

       
61

       
+

       



     

       

       
62

       
+

       
        # Authentication management.


     

       

       
63

       
+

       
        auth sufficient pam_unix.so try_first_pass likeauth nullok


     

       

       
64

       
+

       
        auth sufficient ${pkgs.fprintd}/lib/security/pam_fprintd.so


     

       

       
65

       
+

       
        auth required pam_deny.so # deny


     

       

       
66

       
+

       



     

       

       
67

       
+

       
        # Password management.


     

       

       
68

       
+

       
        password sufficient pam_unix.so nullok yescrypt # unix


     

       

       
69

       
+

       



     

       

       
70

       
+

       
        # Session management.


     

       

       
71

       
+

       
        session required pam_env.so conffile=/etc/pam/environment readenv=0 # env (order 10100)


     

       

       
72

       
+

       
        session required pam_unix.so # unix (order 10200)


     

       

       
73

       
+

       
      '';


     

       

       
74

       
+

       
    };


     

       

       
75

       
+

       



     

       

       
76

       
+

       
    security.pam.services.su = lib.mkIf (config.services.fprintd.enable) {


     

       

       
77

       
+

       
      text = ''


     

       

       
78

       
+

       
        # Account management.


     

       

       
79

       
+

       
        account required pam_unix.so # unix (order 10900)


     

       

       
80

       
+

       



     

       

       
81

       
+

       
        # Authentication management.


     

       

       
82

       
+

       
        auth sufficient pam_rootok.so # rootok (order 10200)


     

       

       
83

       
+

       
        auth required pam_faillock.so # faillock (order 10400)


     

       

       
84

       
+

       
        auth sufficient pam_unix.so try_first_pass likeauth nullok


     

       

       
85

       
+

       
        auth sufficient ${pkgs.fprintd}/lib/security/pam_fprintd.so


     

       

       
86

       
+

       
        auth required pam_deny.so # deny


     

       

       
87

       
+

       



     

       

       
88

       
+

       
        # Password management.


     

       

       
89

       
+

       
        password sufficient pam_unix.so nullok yescrypt # unix


     

       

       
90

       
+

       



     

       

       
91

       
+

       
        # Session management.


     

       

       
92

       
+

       
        session required pam_env.so conffile=/etc/pam/environment readenv=0 # env (order 10100)


     

       

       
93

       
+

       
        session required pam_unix.so # unix (order 10200)


     

       

       
94

       
+

       
        session required pam_unix.so # unix (order 10200)


     

       

       
95

       
+

       
        session optional pam_xauth.so systemuser=99 xauthpath=${pkgs.xorg.xauth}/bin/xauth # xauth (order 12100)


     

       

       
96

       
+

       
      '';


     

       

       
97

       
+

       
    };


     

       

       
98

       
+

       
  };


     

       

       
99

       
+

       
}
+8
nixos/modules/default.nix 
···

       

       
1

       
+

       
{ ... }:


     

       

       
2

       
+

       
{


     

       

       
3

       
+

       
  imports = [


     

       

       
4

       
+

       
    ./authentication.nix


     

       

       
5

       
+

       
    ./apps


     

       

       
6

       
+

       
    ./network/wifi.nix


     

       

       
7

       
+

       
  ];


     

       

       
8

       
+

       
}
+59
nixos/modules/network/wifi.nix 
···

       

       
1

       
+

       
{ lib, config, pkgs, ... }:


     

       

       
2

       
+

       
let


     

       

       
3

       
+

       
  cfg = config.modules.network.wifi;


     

       

       
4

       
+

       
  mkProfile = name: p:


     

       

       
5

       
+

       
    let


     

       

       
6

       
+

       
      base = {


     

       

       
7

       
+

       
        connection = { id = name; type = "wifi"; };


     

       

       
8

       
+

       
        ipv4.method = "auto";


     

       

       
9

       
+

       
        ipv6 = { addr-gen-mode = "stable-privacy"; method = "auto"; };


     

       

       
10

       
+

       
        wifi = { mode = "infrastructure"; ssid = name; };


     

       

       
11

       
+

       
      };


     

       

       
12

       
+

       
      sec =


     

       

       
13

       
+

       
        if (p ? pskVar && p.pskVar != null) then { wifi-security = { key-mgmt = "wpa-psk"; psk = "$${" + p.pskVar + "}"; }; }


     

       

       
14

       
+

       
        else if (p ? psk && p.psk != null) then { wifi-security = { key-mgmt = "wpa-psk"; psk = p.psk; }; }


     

       

       
15

       
+

       
        else if (p ? pskFile && p.pskFile != null) then { wifi-security = { key-mgmt = "wpa-psk"; psk = "$(" + pkgs.coreutils + "/bin/cat " + p.pskFile + ")"; }; }


     

       

       
16

       
+

       
        else {};


     

       

       
17

       
+

       
    in base // sec;


     

       

       
18

       
+

       
in


     

       

       
19

       
+

       
{


     

       

       
20

       
+

       
  options.modules.network.wifi = {


     

       

       
21

       
+

       
    enable = lib.mkEnableOption "Enable NetworkManager with simplified Wi-Fi profiles";


     

       

       
22

       
+

       
    hostName = lib.mkOption { type = lib.types.str; default = config.networking.hostName or ""; };


     

       

       
23

       
+

       
    nameservers = lib.mkOption { type = lib.types.listOf lib.types.str; default = []; };


     

       

       
24

       
+

       
    envFile = lib.mkOption {


     

       

       
25

       
+

       
      type = lib.types.nullOr lib.types.path;


     

       

       
26

       
+

       
      default = null;


     

       

       
27

       
+

       
      description = "Single environment file with PSK variables (used once).";


     

       

       
28

       
+

       
    };


     

       

       
29

       
+

       



     

       

       
30

       
+

       
    profiles = lib.mkOption {


     

       

       
31

       
+

       
      type = lib.types.attrsOf (lib.types.submodule ({ name, ... }: {


     

       

       
32

       
+

       
        options = {


     

       

       
33

       
+

       
          pskVar = lib.mkOption { type = lib.types.nullOr lib.types.str; default = null; description = "Variable name in envFile providing PSK"; };


     

       

       
34

       
+

       
          psk = lib.mkOption { type = lib.types.nullOr lib.types.str; default = null; };


     

       

       
35

       
+

       
          pskFile = lib.mkOption { type = lib.types.nullOr lib.types.path; default = null; };


     

       

       
36

       
+

       
        };


     

       

       
37

       
+

       
      }));


     

       

       
38

       
+

       
      default = {};


     

       

       
39

       
+

       
      description = "Map of SSID -> { pskVar | psk | pskFile }.";


     

       

       
40

       
+

       
    };


     

       

       
41

       
+

       
  };


     

       

       
42

       
+

       



     

       

       
43

       
+

       
  config = lib.mkIf cfg.enable {


     

       

       
44

       
+

       
    networking = {


     

       

       
45

       
+

       
      hostName = lib.mkIf (cfg.hostName != "") cfg.hostName;


     

       

       
46

       
+

       
      nameservers = lib.mkIf (cfg.nameservers != []) cfg.nameservers;


     

       

       
47

       
+

       
      useDHCP = false;


     

       

       
48

       
+

       
      dhcpcd.enable = false;


     

       

       
49

       
+

       
      networkmanager = {


     

       

       
50

       
+

       
        enable = true;


     

       

       
51

       
+

       
        dns = "none";


     

       

       
52

       
+

       
        ensureProfiles = {


     

       

       
53

       
+

       
          environmentFiles = lib.optional (cfg.envFile != null) cfg.envFile;


     

       

       
54

       
+

       
          profiles = lib.mapAttrs mkProfile cfg.profiles;


     

       

       
55

       
+

       
        };


     

       

       
56

       
+

       
      };


     

       

       
57

       
+

       
    };


     

       

       
58

       
+

       
  };


     

       

       
59

       
+

       
}