commit d9d75bb3bff058630b7ea37112a582f958e1cd54 · dunkirk.sh/dots

+1 -1

flake.nix

···

       138
        
                   inputs.disko.nixosModules.disko

     

       139
        
                   { disko.devices.disk.disk1.device = "/dev/vda"; }

     

       140
        
                   agenix.nixosModules.default

     

       141
       -
                   ./moonlark/configuration.nix

     

       142
        
                   unstable-overlays

     

       143
        
                 ];

     

       144
        
               };

···

       138
        
                   inputs.disko.nixosModules.disko

     

       139
        
                   { disko.devices.disk.disk1.device = "/dev/vda"; }

     

       140
        
                   agenix.nixosModules.default

     

       141
       +
                   ./nixos/machines/moonlark/configuration.nix

     

       142
        
                   unstable-overlays

     

       143
        
                 ];

     

       144
        
               };

-796

moonlark/configuration.nix

···

       1
       -
       # This is your system's configuration file.

     

       2
       -
       # Use this to configure your system environment (it replaces /etc/nixos/configuration.nix)

     

       3
       -
       {

     

       4
       -
         inputs,

     

       5
       -
         lib,

     

       6
       -
         config,

     

       7
       -
         pkgs,

     

       8
       -
         ...

     

       9
       -
       }:

     

       10
       -
       {

     

       11
       -
         # You can import other NixOS modules here

     

       12
       -
         imports = [

     

       13
       -
           # If you want to use modules from other flakes (such as nixos-hardware):

     

       14
       -
           inputs.hardware.nixosModules.framework-11th-gen-intel

     

       15
       -
       

     

       16
       -
           # Import your generated (nixos-generate-config) hardware configuration

     

       17
       -
           ./hardware-configuration.nix

     

       18
       -
       

     

       19
       -
           # Import home-manager's configuration

     

       20
       -
           ./home-manager.nix

     

       21
       -
       

     

       22
       -
           # Import disko's configuration

     

       23
       -
           ./disk-config.nix

     

       24
       -
       

     

       25
       -
           ./pam.nix

     

       26
       -
       

     

       27
       -
           # tuigreet

     

       28
       -
           ./greetd.nix

     

       29
       -
         ];

     

       30
       -
       

     

       31
       -
         nixpkgs = {

     

       32
       -
           # Configure your nixpkgs instance

     

       33
       -
           config = {

     

       34
       -
             # Disable if you don't want unfree packages

     

       35
       -
             allowUnfree = true;

     

       36
       -
           };

     

       37
       -
         };

     

       38
       -
       

     

       39
       -
         nix =

     

       40
       -
           let

     

       41
       -
             flakeInputs = lib.filterAttrs (_: lib.isType "flake") inputs;

     

       42
       -
           in

     

       43
       -
           {

     

       44
       -
             settings = {

     

       45
       -
               # Enable flakes and new 'nix' command

     

       46
       -
               experimental-features = "nix-command flakes";

     

       47
       -
               # Opinionated: disable global registry

     

       48
       -
               flake-registry = "";

     

       49
       -
               # Workaround for https://github.com/NixOS/nix/issues/9574

     

       50
       -
               nix-path = config.nix.nixPath;

     

       51
       -
               trusted-users = [

     

       52
       -
                 "kierank"

     

       53
       -
               ];

     

       54
       -
             };

     

       55
       -
             # Opinionated: disable channels

     

       56
       -
             channel.enable = false;

     

       57
       -
       

     

       58
       -
             optimise.automatic = true;

     

       59
       -
       

     

       60
       -
             # Opinionated: make flake registry and nix path match flake inputs

     

       61
       -
             registry = lib.mapAttrs (_: flake: { inherit flake; }) flakeInputs;

     

       62
       -
             nixPath = lib.mapAttrsToList (n: _: "${n}=flake:${n}") flakeInputs;

     

       63
       -
           };

     

       64
       -
       

     

       65
       -
         time.timeZone = "America/New_York";

     

       66
       -
       

     

       67
       -
         environment.systemPackages = map lib.lowPrio [

     

       68
       -
           pkgs.curl

     

       69
       -
           pkgs.wget

     

       70
       -
           pkgs.dogdns

     

       71
       -
           inputs.agenix.packages.x86_64-linux.default

     

       72
       -
           pkgs.overskride

     

       73
       -
           pkgs.alacritty

     

       74
       -
           pkgs.zsh

     

       75
       -
           pkgs.starship

     

       76
       -
           pkgs.gh

     

       77
       -
           pkgs.swww

     

       78
       -
           pkgs.wluma

     

       79
       -
           pkgs.brightnessctl

     

       80
       -
           inputs.hyprland-contrib.packages.${pkgs.system}.grimblast

     

       81
       -
           pkgs.mako

     

       82
       -
           pkgs.unstable.hyprpicker

     

       83
       -
           pkgs.notify-desktop

     

       84
       -
           pkgs.bc

     

       85
       -
           pkgs.wl-clipboard

     

       86
       -
           pkgs.psmisc

     

       87
       -
           pkgs.jq

     

       88
       -
           pkgs.playerctl

     

       89
       -
           pkgs.firefox

     

       90
       -
           pkgs.slack

     

       91
       -
           pkgs.nautilus

     

       92
       -
           pkgs.totem

     

       93
       -
           pkgs.loupe

     

       94
       -
           pkgs.simple-scan

     

       95
       -
           pkgs.file-roller

     

       96
       -
           pkgs.polkit_gnome

     

       97
       -
           pkgs.fprintd

     

       98
       -
           pkgs.gitMinimal

     

       99
       -
           pkgs.udiskie

     

       100
       -
           pkgs.neofetch

     

       101
       -
           pkgs.cava

     

       102
       -
           pkgs.go

     

       103
       -
           pkgs.gopls

     

       104
       -
           pkgs.gotools

     

       105
       -
           pkgs.go-tools

     

       106
       -
           pkgs.unstable.bun

     

       107
       -
           pkgs.pitivi

     

       108
       -
           pkgs.unstable.arduino-ide

     

       109
       -
           pkgs.unstable.arduino-cli

     

       110
       -
           pkgs.gitui

     

       111
       -
           pkgs.vhs

     

       112
       -
           pkgs.video-trimmer

     

       113
       -
           pkgs.ffmpeg

     

       114
       -
           pkgs.ngrok

     

       115
       -
           pkgs.openssl

     

       116
       -
           pkgs.nodePackages_latest.prisma

     

       117
       -
           pkgs.nodejs_22

     

       118
       -
           pkgs.invoice

     

       119
       -
           pkgs.pop

     

       120
       -
           pkgs.gum

     

       121
       -
           pkgs.unstable.kicad-testing

     

       122
       -
           pkgs.unstable.mitmproxy

     

       123
       -
           pkgs.glow

     

       124
       -
           pkgs.gnome-online-accounts

     

       125
       -
           pkgs.gnome-online-accounts-gtk

     

       126
       -
           pkgs.zoom-us

     

       127
       -
           pkgs.mods

     

       128
       -
           (pkgs.chromium.override { enableWideVine = true; })

     

       129
       -
           pkgs.python3

     

       130
       -
           pkgs.qflipper

     

       131
       -
           pkgs.inkscape

     

       132
       -
           pkgs.jdk23

     

       133
       -
           pkgs.unstable.zed-editor

     

       134
       -
           pkgs.gnome-disk-utility

     

       135
       -
           pkgs.torrential

     

       136
       -
           pkgs.unstable.zola

     

       137
       -
           pkgs.unstable.amberol

     

       138
       -
           pkgs.unstable.apktool

     

       139
       -
           pkgs.unstable.biome

     

       140
       -
           pkgs.gcc

     

       141
       -
           pkgs.love

     

       142
       -
           pkgs.unstable.aseprite

     

       143
       -
           pkgs.audacity

     

       144
       -
           pkgs.imagemagick

     

       145
       -
           pkgs.wtype

     

       146
       -
           pkgs.rustc

     

       147
       -
           pkgs.cargo

     

       148
       -
           pkgs.gobang

     

       149
       -
           pkgs.caido

     

       150
       -
           inputs.ghostty.packages.x86_64-linux.default

     

       151
       -
           pkgs.baobab

     

       152
       -
           pkgs.nix-prefetch

     

       153
       -
           inputs.frc-nix.packages.${pkgs.system}.elastic-dashboard

     

       154
       -
           inputs.frc-nix.packages.${pkgs.system}.pathplanner

     

       155
       -
           inputs.frc-nix.packages.${pkgs.system}.roborioteamnumbersetter

     

       156
       -
           inputs.frc-nix.packages.${pkgs.system}.sysid

     

       157
       -
           inputs.frc-nix.packages.${pkgs.system}.wpilib-utility

     

       158
       -
           inputs.frc-nix.packages.${pkgs.system}.advantagescope

     

       159
       -
           pkgs.hyprpaper

     

       160
       -
           pkgs.lxde.lxsession

     

       161
       -
           pkgs.godot_4

     

       162
       -
           pkgs.bambu-studio

     

       163
       -
           pkgs.unstable.orca-slicer

     

       164
       -
           pkgs.exiftool

     

       165
       -
           pkgs.zenity

     

       166
       -
           pkgs.iodine

     

       167
       -
           pkgs.libreoffice

     

       168
       -
           pkgs.blender

     

       169
       -
           pkgs.screen

     

       170
       -
           pkgs.font-manager

     

       171
       -
           pkgs.prismlauncher

     

       172
       -
           pkgs.openboardview

     

       173
       -
           pkgs.unstable.claude-code

     

       174
       -
           pkgs.ruby

     

       175
       -
           pkgs.unstable.kikit

     

       176
       -
           pkgs.cmake

     

       177
       -
           pkgs.unstable.zotero

     

       178
       -
           pkgs.wl-screenrec

     

       179
       -
           pkgs.libnotify

     

       180
       -
           pkgs.coreutils

     

       181
       -
           pkgs.grim

     

       182
       -
           pkgs.jq

     

       183
       -
           pkgs.slurp

     

       184
       -
           pkgs.xdg-user-dirs

     

       185
       -
           pkgs.hyprsunset

     

       186
       -
           inputs.nixvim.packages.x86_64-linux.default

     

       187
       -
           inputs.zed.packages.x86_64-linux.default

     

       188
       -
           pkgs.unstable.ollama

     

       189
       -
           pkgs.unstable.code-cursor

     

       190
       -
           pkgs.direnv

     

       191
       -
           pkgs.gpgme

     

       192
       -
           pkgs.gnupg

     

       193
       -
           pkgs.bat

     

       194
       -
           pkgs.fd

     

       195
       -
           pkgs.eza

     

       196
       -
           pkgs.xh

     

       197
       -
           pkgs.dust

     

       198
       -
           pkgs.ripgrep-all

     

       199
       -
           pkgs.ripgrep

     

       200
       -
           inputs.terminal-wakatime.packages.x86_64-linux.default

     

       201
       -
           pkgs.unstable.metasploit

     

       202
       -
           pkgs.unstable.wakatime-cli

     

       203
       -
           pkgs.nixd

     

       204
       -
           pkgs.nil

     

       205
       -
           pkgs.nixfmt-rfc-style

     

       206
       -
           pkgs.networkmanagerapplet

     

       207
       -
           pkgs.networkmanager-iodine

     

       208
       -
           pkgs.mosh

     

       209
       -
           pkgs.clipse

     

       210
       -
           pkgs.lazygit

     

       211
       -
           pkgs.gh-dash

     

       212
       -
           pkgs.vesktop

     

       213
       -
           pkgs.inetutils

     

       214
       -
           pkgs.calc

     

       215
       -
           pkgs.nix-output-monitor

     

       216
       -
           pkgs.nixpkgs-review

     

       217
       -
           inputs.flare.packages.x86_64-linux.default

     

       218
       -
         ];

     

       219
       -
       

     

       220
       -
         programs.nh = {

     

       221
       -
           enable = true;

     

       222
       -
           clean.enable = true;

     

       223
       -
           clean.extraArgs = "--keep-since 4d --keep 3";

     

       224
       -
           flake = "/home/kierank/dots";

     

       225
       -
         };

     

       226
       -
       

     

       227
       -
         services.gnome.gnome-keyring.enable = true;

     

       228
       -
         programs.dconf.enable = true;

     

       229
       -
       

     

       230
       -
         systemd = {

     

       231
       -
           user.services.polkit-gnome-authentication-agent-1 = {

     

       232
       -
             description = "polkit-gnome-authentication-agent-1";

     

       233
       -
             wantedBy = [ "graphical-session.target" ];

     

       234
       -
             wants = [ "graphical-session.target" ];

     

       235
       -
             after = [ "graphical-session.target" ];

     

       236
       -
             serviceConfig = {

     

       237
       -
               Type = "simple";

     

       238
       -
               ExecStart = "${pkgs.polkit_gnome}/libexec/polkit-gnome-authentication-agent-1";

     

       239
       -
               Restart = "on-failure";

     

       240
       -
               RestartSec = 1;

     

       241
       -
               TimeoutStopSec = 10;

     

       242
       -
             };

     

       243
       -
           };

     

       244
       -
         };

     

       245
       -
       

     

       246
       -
         fonts.packages =

     

       247
       -
           with pkgs;

     

       248
       -
           [

     

       249
       -
             fira

     

       250
       -
             comic-neue

     

       251
       -
           ]

     

       252
       -
           ++ builtins.filter lib.attrsets.isDerivation (builtins.attrValues pkgs.nerd-fonts);

     

       253
       -
       

     

       254
       -
         # import the secret

     

       255
       -
         age.identityPaths = [

     

       256
       -
           "/home/kierank/.ssh/id_rsa"

     

       257
       -
           "/etc/ssh/id_rsa"

     

       258
       -
           "/mnt/etc/ssh/id_rsa"

     

       259
       -
         ];

     

       260
       -
         age.secrets = {

     

       261
       -
           wifi = {

     

       262
       -
             file = ../secrets/wifi.age;

     

       263
       -
             owner = "kierank";

     

       264
       -
           };

     

       265
       -
           resend = {

     

       266
       -
             file = ../secrets/resend.age;

     

       267
       -
             owner = "kierank";

     

       268
       -
           };

     

       269
       -
           wakatime = {

     

       270
       -
             file = ../secrets/wakatime.age;

     

       271
       -
             path = "/home/kierank/.wakatime.cfg";

     

       272
       -
             owner = "kierank";

     

       273
       -
           };

     

       274
       -
           bluesky = {

     

       275
       -
             file = ../secrets/bluesky.age;

     

       276
       -
             owner = "kierank";

     

       277
       -
           };

     

       278
       -
           iodine = {

     

       279
       -
             file = ../secrets/iodine.age;

     

       280
       -
             owner = "kierank";

     

       281
       -
           };

     

       282
       -
         };

     

       283
       -
       

     

       284
       -
         environment.sessionVariables = {

     

       285
       -
           XDG_CACHE_HOME = "$HOME/.cache";

     

       286
       -
           XDG_CONFIG_HOME = "$HOME/.config";

     

       287
       -
           XDG_DATA_HOME = "$HOME/.local/share";

     

       288
       -
           XDG_STATE_HOME = "$HOME/.local/state";

     

       289
       -
           NIXOS_OZONE_WL = "1";

     

       290
       -
           PRISMA_QUERY_ENGINE_LIBRARY = "${pkgs.prisma-engines}/lib/libquery_engine.node";

     

       291
       -
           PRISMA_QUERY_ENGINE_BINARY = "${pkgs.prisma-engines}/bin/query-engine";

     

       292
       -
           PRISMA_SCHEMA_ENGINE_BINARY = "${pkgs.prisma-engines}/bin/schema-engine";

     

       293
       -
           RESEND_API_KEY = "$(${pkgs.coreutils}/bin/cat ${config.age.secrets.resend.path})";

     

       294
       -
           POP_FROM = "me@dunkirk.sh";

     

       295
       -
           EDITOR = "nvim";

     

       296
       -
           SYSTEMD_EDITOR = "nvim";

     

       297
       -
           VISUAL = "nvim";

     

       298
       -
         };

     

       299
       -
       

     

       300
       -
         # setup the network

     

       301
       -
         networking = {

     

       302
       -
           networkmanager = {

     

       303
       -
             enable = true;

     

       304
       -
             dns = "none";

     

       305
       -
             ensureProfiles = {

     

       306
       -
               environmentFiles = [ config.age.secrets.wifi.path ];

     

       307
       -
               profiles = {

     

       308
       -
                 "KlukasNet" = {

     

       309
       -
                   connection = {

     

       310
       -
                     id = "KlukasNet";

     

       311
       -
                     type = "wifi";

     

       312
       -
                   };

     

       313
       -
                   ipv4 = {

     

       314
       -
                     method = "auto";

     

       315
       -
                   };

     

       316
       -
                   ipv6 = {

     

       317
       -
                     addr-gen-mode = "stable-privacy";

     

       318
       -
                     method = "auto";

     

       319
       -
                   };

     

       320
       -
                   wifi = {

     

       321
       -
                     mode = "infrastructure";

     

       322
       -
                     ssid = "KlukasNet";

     

       323
       -
                   };

     

       324
       -
                   wifi-security = {

     

       325
       -
                     key-mgmt = "wpa-psk";

     

       326
       -
                     psk = "$psk_home";

     

       327
       -
                   };

     

       328
       -
                 };

     

       329
       -
                 "Everseen" = {

     

       330
       -
                   connection = {

     

       331
       -
                     id = "Everseen";

     

       332
       -
                     type = "wifi";

     

       333
       -
                   };

     

       334
       -
                   ipv4 = {

     

       335
       -
                     method = "auto";

     

       336
       -
                   };

     

       337
       -
                   ipv6 = {

     

       338
       -
                     addr-gen-mode = "stable-privacy";

     

       339
       -
                     method = "auto";

     

       340
       -
                   };

     

       341
       -
                   wifi = {

     

       342
       -
                     mode = "infrastructure";

     

       343
       -
                     ssid = "Everseen";

     

       344
       -
                   };

     

       345
       -
                   wifi-security = {

     

       346
       -
                     key-mgmt = "wpa-psk";

     

       347
       -
                     psk = "$psk_hotspot";

     

       348
       -
                   };

     

       349
       -
                 };

     

       350
       -
                 "SAAC Sanctuary" = {

     

       351
       -
                   connection = {

     

       352
       -
                     id = "SAAC Sanctuary";

     

       353
       -
                     type = "wifi";

     

       354
       -
                   };

     

       355
       -
                   ipv4 = {

     

       356
       -
                     method = "auto";

     

       357
       -
                   };

     

       358
       -
                   ipv6 = {

     

       359
       -
                     addr-gen-mode = "stable-privacy";

     

       360
       -
                     method = "auto";

     

       361
       -
                   };

     

       362
       -
                   wifi = {

     

       363
       -
                     mode = "infrastructure";

     

       364
       -
                     ssid = "SAAC Sanctuary";

     

       365
       -
                   };

     

       366
       -
                   wifi-security = {

     

       367
       -
                     key-mgmt = "wpa-psk";

     

       368
       -
                     psk = "$psk_church";

     

       369
       -
                   };

     

       370
       -
                 };

     

       371
       -
                 "MVNU-student" = {

     

       372
       -
                   connection = {

     

       373
       -
                     id = "MVNU-student";

     

       374
       -
                     type = "wifi";

     

       375
       -
                   };

     

       376
       -
                   ipv4 = {

     

       377
       -
                     method = "auto";

     

       378
       -
                   };

     

       379
       -
                   ipv6 = {

     

       380
       -
                     addr-gen-mode = "stable-privacy";

     

       381
       -
                     method = "auto";

     

       382
       -
                   };

     

       383
       -
                   wifi = {

     

       384
       -
                     mode = "infrastructure";

     

       385
       -
                     ssid = "MVNU-student";

     

       386
       -
                   };

     

       387
       -
                 };

     

       388
       -
                 "Status Solutions Guest" = {

     

       389
       -
                   connection = {

     

       390
       -
                     id = "Status Solutions Guest";

     

       391
       -
                     type = "wifi";

     

       392
       -
                   };

     

       393
       -
                   ipv4 = {

     

       394
       -
                     method = "auto";

     

       395
       -
                   };

     

       396
       -
                   ipv6 = {

     

       397
       -
                     addr-gen-mode = "stable-privacy";

     

       398
       -
                     method = "auto";

     

       399
       -
                   };

     

       400
       -
                   wifi = {

     

       401
       -
                     mode = "infrastructure";

     

       402
       -
                     ssid = "Status Solutions Guest";

     

       403
       -
                   };

     

       404
       -
                   wifi-security = {

     

       405
       -
                     key-mgmt = "wpa-psk";

     

       406
       -
                     psk = "$psk_robotics";

     

       407
       -
                   };

     

       408
       -
                 };

     

       409
       -
                 "FRC-1317-CECE" = {

     

       410
       -
                   connection = {

     

       411
       -
                     id = "FRC-1317-CECE";

     

       412
       -
                     type = "wifi";

     

       413
       -
                   };

     

       414
       -
                   ipv4 = {

     

       415
       -
                     method = "auto";

     

       416
       -
                   };

     

       417
       -
                   ipv6 = {

     

       418
       -
                     addr-gen-mode = "stable-privacy";

     

       419
       -
                     method = "auto";

     

       420
       -
                   };

     

       421
       -
                   wifi = {

     

       422
       -
                     mode = "infrastructure";

     

       423
       -
                     ssid = "FRC-1317-CECE";

     

       424
       -
                   };

     

       425
       -
                   wifi-security = {

     

       426
       -
                     key-mgmt = "wpa-psk";

     

       427
       -
                     psk = "digitalfusion";

     

       428
       -
                   };

     

       429
       -
                 };

     

       430
       -
                 "1317-fortress-of-awesomeness" = {

     

       431
       -
                   connection = {

     

       432
       -
                     id = "1317-fortress-of-awesomeness";

     

       433
       -
                     type = "wifi";

     

       434
       -
                   };

     

       435
       -
                   ipv4 = {

     

       436
       -
                     method = "auto";

     

       437
       -
                   };

     

       438
       -
                   ipv6 = {

     

       439
       -
                     addr-gen-mode = "stable-privacy";

     

       440
       -
                     method = "auto";

     

       441
       -
                   };

     

       442
       -
                   wifi = {

     

       443
       -
                     mode = "infrastructure";

     

       444
       -
                     ssid = "1317-fortress-of-awesomeness";

     

       445
       -
                   };

     

       446
       -
                 };

     

       447
       -
                 "PAST PD" = {

     

       448
       -
                   connection = {

     

       449
       -
                     id = "PAST PD";

     

       450
       -
                     type = "wifi";

     

       451
       -
                   };

     

       452
       -
                   ipv4 = {

     

       453
       -
                     method = "auto";

     

       454
       -
                   };

     

       455
       -
                   ipv6 = {

     

       456
       -
                     addr-gen-mode = "stable-privacy";

     

       457
       -
                     method = "auto";

     

       458
       -
                   };

     

       459
       -
                   wifi = {

     

       460
       -
                     mode = "infrastructure";

     

       461
       -
                     ssid = "PAST PD";

     

       462
       -
                   };

     

       463
       -
                   wifi-security = {

     

       464
       -
                     key-mgmt = "wpa-psk";

     

       465
       -
                     psk = "$psk_past";

     

       466
       -
                   };

     

       467
       -
                 };

     

       468
       -
                 "Heartland" = {

     

       469
       -
                   connection = {

     

       470
       -
                     id = "Heartland";

     

       471
       -
                     type = "wifi";

     

       472
       -
                   };

     

       473
       -
                   ipv4 = {

     

       474
       -
                     method = "auto";

     

       475
       -
                   };

     

       476
       -
                   ipv6 = {

     

       477
       -
                     addr-gen-mode = "stable-privacy";

     

       478
       -
                     method = "auto";

     

       479
       -
                   };

     

       480
       -
                   wifi = {

     

       481
       -
                     mode = "infrastructure";

     

       482
       -
                     ssid = "Heartland";

     

       483
       -
                   };

     

       484
       -
                   wifi-security = {

     

       485
       -
                     key-mgmt = "wpa-psk";

     

       486
       -
                     psk = "beourguest";

     

       487
       -
                   };

     

       488
       -
                 };

     

       489
       -
                 "WPL_Public_AccessII" = {

     

       490
       -
                   connection = {

     

       491
       -
                     id = "WPL_Public_AccessII";

     

       492
       -
                     type = "wifi";

     

       493
       -
                   };

     

       494
       -
                   ipv4 = {

     

       495
       -
                     method = "auto";

     

       496
       -
                   };

     

       497
       -
                   ipv6 = {

     

       498
       -
                     addr-gen-mode = "stable-privacy";

     

       499
       -
                     method = "auto";

     

       500
       -
                   };

     

       501
       -
                   wifi = {

     

       502
       -
                     mode = "infrastructure";

     

       503
       -
                     ssid = "WPL_Public_AccessII";

     

       504
       -
                   };

     

       505
       -
                 };

     

       506
       -
                 "Yowzaford" = {

     

       507
       -
                   connection = {

     

       508
       -
                     id = "Yowzaford";

     

       509
       -
                     type = "wifi";

     

       510
       -
                   };

     

       511
       -
                   ipv4 = {

     

       512
       -
                     method = "auto";

     

       513
       -
                   };

     

       514
       -
                   ipv6 = {

     

       515
       -
                     addr-gen-mode = "stable-privacy";

     

       516
       -
                     method = "auto";

     

       517
       -
                   };

     

       518
       -
                   wifi = {

     

       519
       -
                     mode = "infrastructure";

     

       520
       -
                     ssid = "Yowzaford";

     

       521
       -
                   };

     

       522
       -
                   wifi-security = {

     

       523
       -
                     key-mgmt = "wpa-psk";

     

       524
       -
                     psk = "$psk_rhoda";

     

       525
       -
                   };

     

       526
       -
                 };

     

       527
       -
                 "cu-events" = {

     

       528
       -
                   connection = {

     

       529
       -
                     id = "cu-events";

     

       530
       -
                     type = "wifi";

     

       531
       -
                   };

     

       532
       -
                   ipv4 = {

     

       533
       -
                     method = "auto";

     

       534
       -
                   };

     

       535
       -
                   ipv6 = {

     

       536
       -
                     addr-gen-mode = "stable-privacy";

     

       537
       -
                     method = "auto";

     

       538
       -
                   };

     

       539
       -
                   wifi = {

     

       540
       -
                     mode = "infrastructure";

     

       541
       -
                     ssid = "cu-events";

     

       542
       -
                   };

     

       543
       -
                   wifi-security = {

     

       544
       -
                     key-mgmt = "wpa-psk";

     

       545
       -
                     psk = "freesmile82";

     

       546
       -
                   };

     

       547
       -
                 };

     

       548
       -
                 "QargoCoffee-Guest" = {

     

       549
       -
                   connection = {

     

       550
       -
                     id = "QargoCoffee-Guest";

     

       551
       -
                     type = "wifi";

     

       552
       -
                   };

     

       553
       -
                   ipv4 = {

     

       554
       -
                     method = "auto";

     

       555
       -
                   };

     

       556
       -
                   ipv6 = {

     

       557
       -
                     addr-gen-mode = "stable-privacy";

     

       558
       -
                     method = "auto";

     

       559
       -
                   };

     

       560
       -
                   wifi = {

     

       561
       -
                     mode = "infrastructure";

     

       562
       -
                     ssid = "QargoCoffee-Guest";

     

       563
       -
                   };

     

       564
       -
                   wifi-security = {

     

       565
       -
                     key-mgmt = "wpa-psk";

     

       566
       -
                     psk = "Lavazza@7";

     

       567
       -
                   };

     

       568
       -
                 };

     

       569
       -
                 "Fulton" = {

     

       570
       -
                   connection = {

     

       571
       -
                     id = "Fulton";

     

       572
       -
                     type = "wifi";

     

       573
       -
                   };

     

       574
       -
                   ipv4 = {

     

       575
       -
                     method = "auto";

     

       576
       -
                   };

     

       577
       -
                   ipv6 = {

     

       578
       -
                     addr-gen-mode = "stable-privacy";

     

       579
       -
                     method = "auto";

     

       580
       -
                   };

     

       581
       -
                   wifi = {

     

       582
       -
                     mode = "infrastructure";

     

       583
       -
                     ssid = "Fulton";

     

       584
       -
                   };

     

       585
       -
                   wifi-security = {

     

       586
       -
                     key-mgmt = "wpa-psk";

     

       587
       -
                     psk = "9064405930";

     

       588
       -
                   };

     

       589
       -
                 };

     

       590
       -
                 "TP-LINK_ECF0" = {

     

       591
       -
                   connection = {

     

       592
       -
                     id = "TP-LINK_ECF0";

     

       593
       -
                     type = "wifi";

     

       594
       -
                   };

     

       595
       -
                   ipv4 = {

     

       596
       -
                     method = "auto";

     

       597
       -
                   };

     

       598
       -
                   ipv6 = {

     

       599
       -
                     addr-gen-mode = "stable-privacy";

     

       600
       -
                     method = "auto";

     

       601
       -
                   };

     

       602
       -
                   wifi = {

     

       603
       -
                     mode = "infrastructure";

     

       604
       -
                     ssid = "TP-LINK_ECF0";

     

       605
       -
                   };

     

       606
       -
                   wifi-security = {

     

       607
       -
                     key-mgmt = "wpa-psk";

     

       608
       -
                     psk = "ad1066AD!";

     

       609
       -
                   };

     

       610
       -
                 };

     

       611
       -
               };

     

       612
       -
             };

     

       613
       -
           };

     

       614
       -
           hostName = "moonlark";

     

       615
       -
           nameservers = [

     

       616
       -
             "1.1.1.1"

     

       617
       -
             "1.0.0.1"

     

       618
       -
             "8.8.8.8"

     

       619
       -
             "9.9.9.9"

     

       620
       -
           ];

     

       621
       -
           useDHCP = false;

     

       622
       -
           dhcpcd.enable = false;

     

       623
       -
         };

     

       624
       -
       

     

       625
       -
         services.iodine.clients = {

     

       626
       -
           t1 = {

     

       627
       -
             server = "t1.dunkirk.sh";

     

       628
       -
             passwordFile = config.age.secrets.iodine.path;

     

       629
       -
           };

     

       630
       -
         };

     

       631
       -
       

     

       632
       -
         virtualisation.libvirtd.enable = true;

     

       633
       -
         virtualisation.virtualbox.host.enable = true;

     

       634
       -
         virtualisation.virtualbox.host.enableExtensionPack = true;

     

       635
       -
         virtualisation.docker.enable = true;

     

       636
       -
       

     

       637
       -
         programs.nix-ld.enable = true;

     

       638
       -
       

     

       639
       -
         programs.zsh.enable = true;

     

       640
       -
       

     

       641
       -
         programs.direnv.enable = true;

     

       642
       -
       

     

       643
       -
         services.postgresql = {

     

       644
       -
           enable = true;

     

       645
       -
           enableTCPIP = true;

     

       646
       -
           authentication = pkgs.lib.mkOverride 10 ''

     

       647
       -
             #type database DBuser origin-address auth-method

     

       648
       -
             local all      all     trust

     

       649
       -
             # ... other auth rules ...

     

       650
       -
       

     

       651
       -
             # ipv4

     

       652
       -
             host  all      all     127.0.0.1/32   trust

     

       653
       -
             # ipv6

     

       654
       -
             host  all      all     ::1/128        trust

     

       655
       -
           '';

     

       656
       -
         };

     

       657
       -
       

     

       658
       -
         # TODO: Configure your system-wide user settings (groups, etc), add more users as needed.

     

       659
       -
         users.users = {

     

       660
       -
           kierank = {

     

       661
       -
             # You can skip setting a root password by passing '--no-root-passwd' to nixos-install.

     

       662
       -
             # Be sure to change it (using passwd) after rebooting!

     

       663
       -
             initialPassword = "lolzthisaintsecure!";

     

       664
       -
             isNormalUser = true;

     

       665
       -
             shell = pkgs.zsh;

     

       666
       -
             openssh.authorizedKeys.keys = [

     

       667
       -
               "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCzEEjvbL/ttqmYoDjxYQmDIq36BabROJoXgQKeh9liBxApwp+2PmgxROzTg42UrRc9pyrkq5kVfxG5hvkqCinhL1fMiowCSEs2L2/Cwi40g5ZU+QwdcwI8a4969kkI46PyB19RHkxg54OUORiIiso/WHGmqQsP+5wbV0+4riSnxwn/JXN4pmnE//stnyAyoiEZkPvBtwJjKb3Ni9n3eNLNs6gnaXrCtaygEZdebikr9kS2g9mM696HvIFgM6cdR/wZ7DcLbG3IdTXuHN7PC3xxL+Y4ek5iMreQIPmuvs4qslbthPGYoYbYLUQiRa9XO5s/ksIj5Z14f7anHE6cuTQVpvNWdGDOigyIVS5qU+4ZF7j+rifzOXVL48gmcAvw/uV68m5Wl/p0qsC/d8vI3GYwEsWG/EzpAlc07l8BU2LxWgN+d7uwBFaJV9VtmUDs5dcslsh8IbzmtC9gq3OLGjklxTfIl6qPiL8U33oc/UwqzvZUrI2BlbagvIZYy6rP+q0= kierank@mockingjay"

     

       668
       -
             ];

     

       669
       -
             extraGroups = [

     

       670
       -
               "wheel"

     

       671
       -
               "networkmanager"

     

       672
       -
               "audio"

     

       673
       -
               "video"

     

       674
       -
               "docker"

     

       675
       -
               "plugdev"

     

       676
       -
               "input"

     

       677
       -
               "dialout"

     

       678
       -
               "docker"

     

       679
       -
               "libvirtd"

     

       680
       -
               "vboxusers"

     

       681
       -
             ];

     

       682
       -
           };

     

       683
       -
           root.openssh.authorizedKeys.keys = [

     

       684
       -
             "ssh-rsa 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 kierank@mockingjay"

     

       685
       -
           ];

     

       686
       -
         };

     

       687
       -
       

     

       688
       -
         programs.steam = {

     

       689
       -
           enable = true;

     

       690
       -
           remotePlay.openFirewall = true; # Open ports in the firewall for Steam Remote Play

     

       691
       -
           dedicatedServer.openFirewall = true; # Open ports in the firewall for Source Dedicated Server

     

       692
       -
           localNetworkGameTransfers.openFirewall = true; # Open ports in the firewall for Steam Local Network Game Transfers

     

       693
       -
         };

     

       694
       -
       

     

       695
       -
         programs.hyprland.enable = true;

     

       696
       -
         services.hypridle.enable = true;

     

       697
       -
       

     

       698
       -
         programs.niri = {

     

       699
       -
           enable = true;

     

       700
       -
         };

     

       701
       -
       

     

       702
       -
         programs.xwayland.enable = lib.mkForce true;

     

       703
       -
       

     

       704
       -
         services.udev.packages = [

     

       705
       -
           pkgs.qFlipper

     

       706
       -
           pkgs.via

     

       707
       -
         ];

     

       708
       -
       

     

       709
       -
         security.polkit.enable = true;

     

       710
       -
       

     

       711
       -
         # enable cups

     

       712
       -
         services.printing.enable = true;

     

       713
       -
         services.avahi = {

     

       714
       -
           enable = true;

     

       715
       -
           nssmdns4 = true;

     

       716
       -
           openFirewall = true;

     

       717
       -
         };

     

       718
       -
       

     

       719
       -
         # enable bluetooth

     

       720
       -
         hardware.bluetooth.enable = true;

     

       721
       -
       

     

       722
       -
         # enable pipewire

     

       723
       -
         # rtkit is optional but recommended

     

       724
       -
         security.rtkit.enable = true;

     

       725
       -
         services.pipewire = {

     

       726
       -
           enable = true;

     

       727
       -
           alsa.enable = true;

     

       728
       -
           alsa.support32Bit = true;

     

       729
       -
           pulse.enable = true;

     

       730
       -
           # If you want to use JACK applications, uncomment this

     

       731
       -
           jack.enable = true;

     

       732
       -
         };

     

       733
       -
       

     

       734
       -
         # This setups a SSH server. Very important if you're setting up a headless system.

     

       735
       -
         # Feel free to remove if you don't need it.

     

       736
       -
         services.openssh = {

     

       737
       -
           enable = true;

     

       738
       -
           settings = {

     

       739
       -
             # Opinionated: forbid root login through SSH.

     

       740
       -
             PermitRootLogin = "no";

     

       741
       -
             # Opinionated: use keys only.

     

       742
       -
             # Remove if you want to SSH using passwords

     

       743
       -
             PasswordAuthentication = false;

     

       744
       -
           };

     

       745
       -
         };

     

       746
       -
       

     

       747
       -
         networking.firewall = {

     

       748
       -
           enable = true;

     

       749
       -
           allowedTCPPorts = [

     

       750
       -
             4455

     

       751
       -
             51820

     

       752
       -
           ];

     

       753
       -
           allowedUDPPorts = [

     

       754
       -
             4455

     

       755
       -
             51820

     

       756
       -
           ];

     

       757
       -
         };

     

       758
       -
       

     

       759
       -
         services.tailscale = {

     

       760
       -
           enable = true;

     

       761
       -
           useRoutingFeatures = "client";

     

       762
       -
         };

     

       763
       -
       

     

       764
       -
         services.devmon.enable = true;

     

       765
       -
         services.gvfs.enable = true;

     

       766
       -
         services.udisks2.enable = true;

     

       767
       -
       

     

       768
       -
         services.logind.extraConfig = ''

     

       769
       -
           # don't shutdown when power button is short-pressed

     

       770
       -
           HandlePowerKey=ignore

     

       771
       -
           HandlePowerKeyLongPress=poweroff

     

       772
       -
         '';

     

       773
       -
       

     

       774
       -
         # Requires at least 5.16 for working wi-fi and bluetooth.

     

       775
       -
         # https://community.frame.work/t/using-the-ax210-with-linux-on-the-framework-laptop/1844/89

     

       776
       -
         boot = {

     

       777
       -
           kernelPackages = lib.mkIf (lib.versionOlder pkgs.linux.version "5.16") (

     

       778
       -
             lib.mkDefault pkgs.linuxPackages_latest

     

       779
       -
           );

     

       780
       -
           loader.grub = {

     

       781
       -
             # no need to set devices, disko will add all devices that have a EF02 partition to the list already

     

       782
       -
             device = "nodev";

     

       783
       -
             efiSupport = true;

     

       784
       -
             efiInstallAsRemovable = true;

     

       785
       -
           };

     

       786
       -
           supportedFilesystems = [ "ntfs" ];

     

       787
       -
           extraModprobeConfig = ''

     

       788
       -
             options kvm_intel nested=1

     

       789
       -
             options kvm_intel emulate_invalid_guest_state=0

     

       790
       -
             options kvm ignore_msrs=1

     

       791
       -
           '';

     

       792
       -
         };

     

       793
       -
       

     

       794
       -
         # https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion

     

       795
       -
         system.stateVersion = "23.05";

     

       796
       -
       }

moonlark/disk-config.nix nixos/machines/moonlark/disk-config.nix

-30

moonlark/greetd.nix

···

       1
       -
       { pkgs, ... }:

     

       2
       -
       let

     

       3
       -
         tuigreet = "${pkgs.greetd.tuigreet}/bin/tuigreet";

     

       4
       -
       in

     

       5
       -
       {

     

       6
       -
         services.greetd = {

     

       7
       -
           enable = true;

     

       8
       -
           settings = {

     

       9
       -
             default_session = {

     

       10
       -
               command = "${tuigreet} --time -g 'WARNING: UNAUTHORIZED ACCESS WILL RESULT IN TERMINATION OF SESSION. IDENTIFY YOURSELF' --remember --cmd Hyprland";

     

       11
       -
               user = "greeter";

     

       12
       -
             };

     

       13
       -
           };

     

       14
       -
         };

     

       15
       -
       

     

       16
       -
         # this is a life saver.

     

       17
       -
         # literally no documentation about this anywhere.

     

       18
       -
         # might be good to write about this...

     

       19
       -
         # https://www.reddit.com/r/NixOS/comments/u0cdpi/tuigreet_with_xmonad_how/

     

       20
       -
         systemd.services.greetd.serviceConfig = {

     

       21
       -
           Type = "idle";

     

       22
       -
           StandardInput = "tty";

     

       23
       -
           StandardOutput = "tty";

     

       24
       -
           StandardError = "journal"; # Without this errors will spam on screen

     

       25
       -
           # Without these bootlogs will spam on screen

     

       26
       -
           TTYReset = true;

     

       27
       -
           TTYVHangup = true;

     

       28
       -
           TTYVTDisallocate = true;

     

       29
       -
         };

     

       30
       -
       }

moonlark/hardware-configuration.nix nixos/machines/moonlark/hardware-configuration.nix

+4 -2

moonlark/home-manager.nix nixos/machines/moonlark/home-manager.nix

···

       6
        
         ];

     

       7
        
       

     

       8
        
         home-manager = {

     

       9
       -
           extraSpecialArgs = { inherit inputs outputs; };

     

       0
        
       
     

       0
        
       
     

       10
        
           users = {

     

       11
        
             # Import your home-manager configuration

     

       12
       -
             kierank = import ../home-manager/machines/moonlark;

     

       13
        
           };

     

       14
        
         };

     

       15
        
       }

···

       6
        
         ];

     

       7
        
       

     

       8
        
         home-manager = {

     

       9
       +
           extraSpecialArgs = {

     

       10
       +
             inherit inputs outputs;

     

       11
       +
           };

     

       12
        
           users = {

     

       13
        
             # Import your home-manager configuration

     

       14
       +
             kierank = import ../../../home-manager/machines/moonlark;

     

       15
        
           };

     

       16
        
         };

     

       17
        
       }

-69

moonlark/pam.nix

···

       1
       -
       {

     

       2
       -
         lib,

     

       3
       -
         config,

     

       4
       -
         pkgs,

     

       5
       -
         ...

     

       6
       -
       }:

     

       7
       -
       {

     

       8
       -
         services.fprintd.enable = true;

     

       9
       -
         security.pam.services.hyprlock = lib.mkIf (config.services.fprintd.enable) {

     

       10
       -
           text = ''

     

       11
       -
             # Account management.

     

       12
       -
             account required pam_unix.so # unix (order 10900)

     

       13
       -
       

     

       14
       -
             # Authentication management.

     

       15
       -
             auth sufficient pam_unix.so try_first_pass likeauth nullok

     

       16
       -
             auth sufficient ${pkgs.fprintd}/lib/security/pam_fprintd.so

     

       17
       -
             auth required pam_deny.so # deny

     

       18
       -
       

     

       19
       -
             # Password management.

     

       20
       -
             password sufficient pam_unix.so nullok yescrypt # unix

     

       21
       -
       

     

       22
       -
             # Session management.

     

       23
       -
             session required pam_env.so conffile=/etc/pam/environment readenv=0 # env (order 10100)

     

       24
       -
             session required pam_unix.so # unix (order 10200)

     

       25
       -
           '';

     

       26
       -
         };

     

       27
       -
       

     

       28
       -
         security.pam.services.sudo = lib.mkIf (config.services.fprintd.enable) {

     

       29
       -
           text = ''

     

       30
       -
             # Account management.

     

       31
       -
             account required pam_unix.so # unix (order 10900)

     

       32
       -
       

     

       33
       -
             # Authentication management.

     

       34
       -
             auth sufficient pam_unix.so try_first_pass likeauth nullok

     

       35
       -
             auth sufficient ${pkgs.fprintd}/lib/security/pam_fprintd.so

     

       36
       -
             auth required pam_deny.so # deny

     

       37
       -
       

     

       38
       -
             # Password management.

     

       39
       -
             password sufficient pam_unix.so nullok yescrypt # unix

     

       40
       -
       

     

       41
       -
             # Session management.

     

       42
       -
             session required pam_env.so conffile=/etc/pam/environment readenv=0 # env (order 10100)

     

       43
       -
             session required pam_unix.so # unix (order 10200)

     

       44
       -
           '';

     

       45
       -
         };

     

       46
       -
       

     

       47
       -
         security.pam.services.su = lib.mkIf (config.services.fprintd.enable) {

     

       48
       -
           text = ''

     

       49
       -
             # Account management.

     

       50
       -
             account required pam_unix.so # unix (order 10900)

     

       51
       -
       

     

       52
       -
             # Authentication management.

     

       53
       -
             auth sufficient pam_rootok.so # rootok (order 10200)

     

       54
       -
             auth required pam_faillock.so # faillock (order 10400)

     

       55
       -
             auth sufficient pam_unix.so try_first_pass likeauth nullok

     

       56
       -
             auth sufficient ${pkgs.fprintd}/lib/security/pam_fprintd.so

     

       57
       -
             auth required pam_deny.so # deny

     

       58
       -
       

     

       59
       -
             # Password management.

     

       60
       -
             password sufficient pam_unix.so nullok yescrypt # unix

     

       61
       -
       

     

       62
       -
             # Session management.

     

       63
       -
             session required pam_env.so conffile=/etc/pam/environment readenv=0 # env (order 10100)

     

       64
       -
             session required pam_unix.so # unix (order 10200)

     

       65
       -
             session required pam_unix.so # unix (order 10200)

     

       66
       -
             session optional pam_xauth.so systemuser=99 xauthpath=${pkgs.xorg.xauth}/bin/xauth # xauth (order 12100)

     

       67
       -
           '';

     

       68
       -
         };

     

       69
       -
       }

+506

nixos/machines/moonlark/configuration.nix

···

       1
       +
       # This is your system's configuration file.

     

       2
       +
       # Use this to configure your system environment (it replaces /etc/nixos/configuration.nix)

     

       3
       +
       {

     

       4
       +
         inputs,

     

       5
       +
         lib,

     

       6
       +
         config,

     

       7
       +
         pkgs,

     

       8
       +
         ...

     

       9
       +
       }:

     

       10
       +
       {

     

       11
       +
         imports = [

     

       12
       +
           inputs.hardware.nixosModules.framework-11th-gen-intel

     

       13
       +
       

     

       14
       +
           ./hardware-configuration.nix

     

       15
       +
           ./home-manager.nix

     

       16
       +
           ./disk-config.nix

     

       17
       +
       

     

       18
       +
           ../../modules

     

       19
       +
         ];

     

       20
       +
       

     

       21
       +
         nixpkgs = {

     

       22
       +
           config = {

     

       23
       +
             allowUnfree = true;

     

       24
       +
           };

     

       25
       +
         };

     

       26
       +
       

     

       27
       +
         nix =

     

       28
       +
           let

     

       29
       +
             flakeInputs = lib.filterAttrs (_: lib.isType "flake") inputs;

     

       30
       +
           in

     

       31
       +
           {

     

       32
       +
             settings = {

     

       33
       +
               # Enable flakes and new 'nix' command

     

       34
       +
               experimental-features = "nix-command flakes";

     

       35
       +
               # Opinionated: disable global registry

     

       36
       +
               flake-registry = "";

     

       37
       +
               # Workaround for https://github.com/NixOS/nix/issues/9574

     

       38
       +
               nix-path = config.nix.nixPath;

     

       39
       +
               trusted-users = [

     

       40
       +
                 "kierank"

     

       41
       +
               ];

     

       42
       +
             };

     

       43
       +
             # Opinionated: disable channels

     

       44
       +
             channel.enable = false;

     

       45
       +
       

     

       46
       +
             optimise.automatic = true;

     

       47
       +
       

     

       48
       +
             # Opinionated: make flake registry and nix path match flake inputs

     

       49
       +
             registry = lib.mapAttrs (_: flake: { inherit flake; }) flakeInputs;

     

       50
       +
             nixPath = lib.mapAttrsToList (n: _: "${n}=flake:${n}") flakeInputs;

     

       51
       +
           };

     

       52
       +
       

     

       53
       +
         time.timeZone = "America/New_York";

     

       54
       +
       

     

       55
       +
         # grouped for readability

     

       56
       +
         environment.systemPackages = map lib.lowPrio (

     

       57
       +
           let

     

       58
       +
             core = [

     

       59
       +
               pkgs.coreutils

     

       60
       +
               pkgs.calc

     

       61
       +
               pkgs.screen

     

       62
       +
               pkgs.xdg-user-dirs

     

       63
       +
               pkgs.libnotify

     

       64
       +
               pkgs.notify-desktop

     

       65
       +
               pkgs.bc

     

       66
       +
               pkgs.jq

     

       67
       +
               pkgs.psmisc

     

       68
       +
             ];

     

       69
       +
             terminals = [

     

       70
       +
               pkgs.alacritty

     

       71
       +
               inputs.ghostty.packages.x86_64-linux.default

     

       72
       +
             ];

     

       73
       +
             cli_utils = [

     

       74
       +
               pkgs.bat

     

       75
       +
               pkgs.fd

     

       76
       +
               pkgs.eza

     

       77
       +
               pkgs.xh

     

       78
       +
               pkgs.dust

     

       79
       +
               pkgs.ripgrep

     

       80
       +
               pkgs.ripgrep-all

     

       81
       +
               pkgs.glow

     

       82
       +
               pkgs.gitui

     

       83
       +
               pkgs.lazygit

     

       84
       +
               pkgs.clipse

     

       85
       +
               pkgs.direnv

     

       86
       +
               pkgs.nix-output-monitor

     

       87
       +
               pkgs.nixpkgs-review

     

       88
       +
               pkgs.nix-prefetch

     

       89
       +
               pkgs.arduino-cli

     

       90
       +
               pkgs.zsh

     

       91
       +
               pkgs.starship

     

       92
       +
               pkgs.gum

     

       93
       +
               pkgs.unstable.wakatime-cli

     

       94
       +
               inputs.terminal-wakatime.packages.x86_64-linux.default

     

       95
       +
             ];

     

       96
       +
             networking = [

     

       97
       +
               pkgs.curl

     

       98
       +
               pkgs.wget

     

       99
       +
               pkgs.dogdns

     

       100
       +
               pkgs.inetutils

     

       101
       +
               pkgs.mosh

     

       102
       +
               pkgs.ngrok

     

       103
       +
               pkgs.networkmanagerapplet

     

       104
       +
               pkgs.networkmanager-iodine

     

       105
       +
               pkgs.iodine

     

       106
       +
             ];

     

       107
       +
             nix_tools = [

     

       108
       +
               inputs.nixvim.packages.x86_64-linux.default

     

       109
       +
               pkgs.nixd

     

       110
       +
               pkgs.nil

     

       111
       +
               pkgs.nixfmt-rfc-style

     

       112
       +
               inputs.agenix.packages.x86_64-linux.default

     

       113
       +
             ];

     

       114
       +
             security = [

     

       115
       +
               pkgs.openssl

     

       116
       +
               pkgs.gpgme

     

       117
       +
               pkgs.gnupg

     

       118
       +
               pkgs.unstable.mitmproxy

     

       119
       +
               pkgs.caido

     

       120
       +
             ];

     

       121
       +
             editors = [

     

       122
       +
               inputs.zed.packages.x86_64-linux.default

     

       123
       +
               pkgs.unstable.zed-editor

     

       124
       +
               pkgs.arduino-ide

     

       125
       +
             ];

     

       126
       +
             browsers = [

     

       127
       +
               pkgs.firefox

     

       128
       +
               (pkgs.chromium.override { enableWideVine = true; })

     

       129
       +
             ];

     

       130
       +
             wayland = [

     

       131
       +
               pkgs.swww

     

       132
       +
               pkgs.wluma

     

       133
       +
               pkgs.brightnessctl

     

       134
       +
               pkgs.hyprpaper

     

       135
       +
               pkgs.hyprsunset

     

       136
       +
               pkgs.wl-clipboard

     

       137
       +
               pkgs.grim

     

       138
       +
               pkgs.slurp

     

       139
       +
               pkgs.wtype

     

       140
       +
               pkgs.mako

     

       141
       +
               pkgs.unstable.hyprpicker

     

       142
       +
               pkgs.wl-screenrec

     

       143
       +
               inputs.hyprland-contrib.packages.${pkgs.system}.grimblast

     

       144
       +
               pkgs.playerctl

     

       145
       +
               pkgs.libnotify

     

       146
       +
               pkgs.notify-desktop

     

       147
       +
               pkgs.lxde.lxsession

     

       148
       +
             ];

     

       149
       +
             gnome = [

     

       150
       +
               pkgs.gnome-online-accounts

     

       151
       +
               pkgs.gnome-online-accounts-gtk

     

       152
       +
               pkgs.gnome-disk-utility

     

       153
       +
               pkgs.baobab

     

       154
       +
               pkgs.simple-scan

     

       155
       +
               pkgs.file-roller

     

       156
       +
               pkgs.font-manager

     

       157
       +
               pkgs.nautilus

     

       158
       +
               pkgs.loupe

     

       159
       +
               pkgs.totem

     

       160
       +
               pkgs.overskride

     

       161
       +
             ];

     

       162
       +
             dev_langs = [

     

       163
       +
               pkgs.nodejs_22

     

       164
       +
               pkgs.unstable.bun

     

       165
       +
               pkgs.python3

     

       166
       +
               pkgs.go

     

       167
       +
               pkgs.gopls

     

       168
       +
               pkgs.gotools

     

       169
       +
               pkgs.go-tools

     

       170
       +
               pkgs.gcc

     

       171
       +
               pkgs.rustc

     

       172
       +
               pkgs.cargo

     

       173
       +
               pkgs.jdk23

     

       174
       +
               pkgs.ruby

     

       175
       +
               pkgs.cmake

     

       176
       +
               pkgs.unstable.biome

     

       177
       +
               pkgs.unstable.apktool

     

       178
       +
               pkgs.nodePackages_latest.prisma

     

       179
       +
               pkgs.unstable.zola

     

       180
       +
             ];

     

       181
       +
             media = [

     

       182
       +
               pkgs.ffmpeg

     

       183
       +
               pkgs.video-trimmer

     

       184
       +
               pkgs.pitivi

     

       185
       +
               pkgs.audacity

     

       186
       +
               pkgs.unstable.amberol

     

       187
       +
               pkgs.zoom-us

     

       188
       +
             ];

     

       189
       +
             graphics = [

     

       190
       +
               pkgs.imagemagick

     

       191
       +
               pkgs.inkscape

     

       192
       +
               pkgs.blender

     

       193
       +
               pkgs.exiftool

     

       194
       +
               pkgs.unstable.aseprite

     

       195
       +
               pkgs.godot_4

     

       196
       +
               pkgs.unstable.kikit

     

       197
       +
               pkgs.openboardview

     

       198
       +
               pkgs.bambu-studio

     

       199
       +
               pkgs.unstable.orca-slicer

     

       200
       +
               pkgs.qflipper

     

       201
       +
             ];

     

       202
       +
             office = [

     

       203
       +
               pkgs.slack

     

       204
       +
               pkgs.libreoffice

     

       205
       +
               pkgs.unstable.zotero

     

       206
       +
             ];

     

       207
       +
             gaming = [

     

       208
       +
               pkgs.prismlauncher

     

       209
       +
               pkgs.vesktop

     

       210
       +
               pkgs.cava

     

       211
       +
               pkgs.gobang

     

       212
       +
               pkgs.love

     

       213
       +
             ];

     

       214
       +
             frc = [

     

       215
       +
               inputs.frc-nix.packages.${pkgs.system}.elastic-dashboard

     

       216
       +
               inputs.frc-nix.packages.${pkgs.system}.pathplanner

     

       217
       +
               inputs.frc-nix.packages.${pkgs.system}.roborioteamnumbersetter

     

       218
       +
               inputs.frc-nix.packages.${pkgs.system}.sysid

     

       219
       +
               inputs.frc-nix.packages.${pkgs.system}.wpilib-utility

     

       220
       +
               inputs.frc-nix.packages.${pkgs.system}.advantagescope

     

       221
       +
             ];

     

       222
       +
             misc = [

     

       223
       +
               pkgs.invoice

     

       224
       +
               pkgs.pop

     

       225
       +
               pkgs.vhs

     

       226
       +
               pkgs.torrential

     

       227
       +
               inputs.flare.packages.x86_64-linux.default

     

       228
       +
               pkgs.unstable.ollama

     

       229
       +
               pkgs.unstable.claude-code

     

       230
       +
               pkgs.udiskie

     

       231
       +
               pkgs.neofetch

     

       232
       +
               pkgs.unstable.kicad-testing

     

       233
       +
               pkgs.zenity

     

       234
       +
             ];

     

       235
       +
           in

     

       236
       +
           core

     

       237
       +
           ++ terminals

     

       238
       +
           ++ cli_utils

     

       239
       +
           ++ networking

     

       240
       +
           ++ nix_tools

     

       241
       +
           ++ security

     

       242
       +
           ++ editors

     

       243
       +
           ++ browsers

     

       244
       +
           ++ wayland

     

       245
       +
           ++ gnome

     

       246
       +
           ++ dev_langs

     

       247
       +
           ++ media

     

       248
       +
           ++ graphics

     

       249
       +
           ++ office

     

       250
       +
           ++ gaming

     

       251
       +
           ++ frc

     

       252
       +
           ++ misc

     

       253
       +
         );

     

       254
       +
       

     

       255
       +
         programs.nh = {

     

       256
       +
           enable = true;

     

       257
       +
           clean.enable = true;

     

       258
       +
           clean.extraArgs = "--keep-since 4d --keep 3";

     

       259
       +
           flake = "/home/kierank/dots";

     

       260
       +
         };

     

       261
       +
       

     

       262
       +
         fonts.packages =

     

       263
       +
           with pkgs;

     

       264
       +
           [

     

       265
       +
             fira

     

       266
       +
             comic-neue

     

       267
       +
           ]

     

       268
       +
           ++ builtins.filter lib.attrsets.isDerivation (builtins.attrValues pkgs.nerd-fonts);

     

       269
       +
       

     

       270
       +
         # import the secret

     

       271
       +
         age.identityPaths = [

     

       272
       +
           "/home/kierank/.ssh/id_rsa"

     

       273
       +
           "/etc/ssh/id_rsa"

     

       274
       +
           "/mnt/etc/ssh/id_rsa"

     

       275
       +
         ];

     

       276
       +
         age.secrets = {

     

       277
       +
           wifi = {

     

       278
       +
             file = ../../../secrets/wifi.age;

     

       279
       +
             owner = "kierank";

     

       280
       +
           };

     

       281
       +
           resend = {

     

       282
       +
             file = ../../../secrets/resend.age;

     

       283
       +
             owner = "kierank";

     

       284
       +
           };

     

       285
       +
           wakatime = {

     

       286
       +
             file = ../../../secrets/wakatime.age;

     

       287
       +
             path = "/home/kierank/.wakatime.cfg";

     

       288
       +
             owner = "kierank";

     

       289
       +
           };

     

       290
       +
           bluesky = {

     

       291
       +
             file = ../../../secrets/bluesky.age;

     

       292
       +
             owner = "kierank";

     

       293
       +
           };

     

       294
       +
           iodine = {

     

       295
       +
             file = ../../../secrets/iodine.age;

     

       296
       +
             owner = "kierank";

     

       297
       +
           };

     

       298
       +
         };

     

       299
       +
       

     

       300
       +
         environment.sessionVariables = {

     

       301
       +
           XDG_CACHE_HOME = "$HOME/.cache";

     

       302
       +
           XDG_CONFIG_HOME = "$HOME/.config";

     

       303
       +
           XDG_DATA_HOME = "$HOME/.local/share";

     

       304
       +
           XDG_STATE_HOME = "$HOME/.local/state";

     

       305
       +
           NIXOS_OZONE_WL = "1";

     

       306
       +
           PRISMA_QUERY_ENGINE_LIBRARY = "${pkgs.prisma-engines}/lib/libquery_engine.node";

     

       307
       +
           PRISMA_QUERY_ENGINE_BINARY = "${pkgs.prisma-engines}/bin/query-engine";

     

       308
       +
           PRISMA_SCHEMA_ENGINE_BINARY = "${pkgs.prisma-engines}/bin/schema-engine";

     

       309
       +
           RESEND_API_KEY = "$(${pkgs.coreutils}/bin/cat ${config.age.secrets.resend.path})";

     

       310
       +
           POP_FROM = "me@dunkirk.sh";

     

       311
       +
           EDITOR = "nvim";

     

       312
       +
           SYSTEMD_EDITOR = "nvim";

     

       313
       +
           VISUAL = "nvim";

     

       314
       +
         };

     

       315
       +
       

     

       316
       +
         modules = {

     

       317
       +
           authentication.enable = true;

     

       318
       +
           apps.tuigreet = {

     

       319
       +
             enable = true;

     

       320
       +
             command = "Hyprland";

     

       321
       +
           };

     

       322
       +
           network.wifi = {

     

       323
       +
             enable = true;

     

       324
       +
             hostName = "moonlark";

     

       325
       +
             nameservers = [

     

       326
       +
               "1.1.1.1"

     

       327
       +
               "1.0.0.1"

     

       328
       +
               "8.8.8.8"

     

       329
       +
               "9.9.9.9"

     

       330
       +
             ];

     

       331
       +
             envFile = config.age.secrets.wifi.path;

     

       332
       +
             profiles = {

     

       333
       +
               "KlukasNet".pskVar = "psk_home";

     

       334
       +
               "Everseen".pskVar = "psk_hotspot";

     

       335
       +
               "SAAC Sanctuary".pskVar = "psk_church";

     

       336
       +
               "MVNU-student" = { };

     

       337
       +
               "Status Solutions Guest".pskVar = "psk_robotics";

     

       338
       +
               "FRC-1317-CECE".psk = "digitalfusion";

     

       339
       +
               "1317-fortress-of-awesomeness" = { };

     

       340
       +
               "PAST PD".pskVar = "psk_past";

     

       341
       +
               "Heartland".psk = "beourguest";

     

       342
       +
               "WPL_Public_AccessII" = { };

     

       343
       +
               "Yowzaford".pskVar = "psk_rhoda";

     

       344
       +
               "cu-events".psk = "freesmile82";

     

       345
       +
               "QargoCoffee-Guest".psk = "Lavazza@7";

     

       346
       +
               "Fulton".psk = "9064405930";

     

       347
       +
               "TP-LINK_ECF0".psk = "ad1066AD!";

     

       348
       +
             };

     

       349
       +
           };

     

       350
       +
         };

     

       351
       +
       

     

       352
       +
         services.iodine.clients = {

     

       353
       +
           t1 = {

     

       354
       +
             server = "t1.dunkirk.sh";

     

       355
       +
             passwordFile = config.age.secrets.iodine.path;

     

       356
       +
           };

     

       357
       +
         };

     

       358
       +
       

     

       359
       +
         virtualisation = {

     

       360
       +
           libvirtd.enable = true;

     

       361
       +
           virtualbox = {

     

       362
       +
             host.enable = true;

     

       363
       +
             host.enableExtensionPack = true;

     

       364
       +
           };

     

       365
       +
           docker.enable = true;

     

       366
       +
         };

     

       367
       +
       

     

       368
       +
         programs.nix-ld.enable = true;

     

       369
       +
       

     

       370
       +
         programs.zsh.enable = true;

     

       371
       +
       

     

       372
       +
         programs.direnv.enable = true;

     

       373
       +
       

     

       374
       +
         # TODO: Configure your system-wide user settings (groups, etc), add more users as needed.

     

       375
       +
         users.users = {

     

       376
       +
           kierank = {

     

       377
       +
             # You can skip setting a root password by passing '--no-root-passwd' to nixos-install.

     

       378
       +
             # Be sure to change it (using passwd) after rebooting!

     

       379
       +
             initialPassword = "lolzthisaintsecure!";

     

       380
       +
             isNormalUser = true;

     

       381
       +
             shell = pkgs.zsh;

     

       382
       +
             openssh.authorizedKeys.keys = [

     

       383
       +
               "ssh-rsa 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 kierank@mockingjay"

     

       384
       +
             ];

     

       385
       +
             extraGroups = [

     

       386
       +
               "wheel"

     

       387
       +
               "networkmanager"

     

       388
       +
               "audio"

     

       389
       +
               "video"

     

       390
       +
               "docker"

     

       391
       +
               "plugdev"

     

       392
       +
               "input"

     

       393
       +
               "dialout"

     

       394
       +
               "docker"

     

       395
       +
               "libvirtd"

     

       396
       +
               "vboxusers"

     

       397
       +
             ];

     

       398
       +
           };

     

       399
       +
           root.openssh.authorizedKeys.keys = [

     

       400
       +
             "ssh-rsa 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 kierank@mockingjay"

     

       401
       +
           ];

     

       402
       +
         };

     

       403
       +
       

     

       404
       +
         programs.steam = {

     

       405
       +
           enable = true;

     

       406
       +
           remotePlay.openFirewall = true; # Open ports in the firewall for Steam Remote Play

     

       407
       +
           dedicatedServer.openFirewall = true; # Open ports in the firewall for Source Dedicated Server

     

       408
       +
           localNetworkGameTransfers.openFirewall = true; # Open ports in the firewall for Steam Local Network Game Transfers

     

       409
       +
         };

     

       410
       +
       

     

       411
       +
         programs.hyprland.enable = true;

     

       412
       +
         services.hypridle.enable = true;

     

       413
       +
       

     

       414
       +
         programs.xwayland.enable = lib.mkForce true;

     

       415
       +
       

     

       416
       +
         services.udev.packages = [

     

       417
       +
           pkgs.qFlipper

     

       418
       +
           pkgs.via

     

       419
       +
         ];

     

       420
       +
       

     

       421
       +
         # enable cups

     

       422
       +
         services.printing.enable = true;

     

       423
       +
         services.avahi = {

     

       424
       +
           enable = true;

     

       425
       +
           nssmdns4 = true;

     

       426
       +
           openFirewall = true;

     

       427
       +
         };

     

       428
       +
       

     

       429
       +
         # enable bluetooth

     

       430
       +
         hardware.bluetooth.enable = true;

     

       431
       +
       

     

       432
       +
         # enable pipewire

     

       433
       +
         # rtkit is optional but recommended

     

       434
       +
         security.rtkit.enable = true;

     

       435
       +
         services.pipewire = {

     

       436
       +
           enable = true;

     

       437
       +
           alsa.enable = true;

     

       438
       +
           alsa.support32Bit = true;

     

       439
       +
           pulse.enable = true;

     

       440
       +
           # If you want to use JACK applications, uncomment this

     

       441
       +
           jack.enable = true;

     

       442
       +
         };

     

       443
       +
       

     

       444
       +
         # This setups a SSH server. Very important if you're setting up a headless system.

     

       445
       +
         # Feel free to remove if you don't need it.

     

       446
       +
         services.openssh = {

     

       447
       +
           enable = true;

     

       448
       +
           settings = {

     

       449
       +
             # Opinionated: forbid root login through SSH.

     

       450
       +
             PermitRootLogin = "no";

     

       451
       +
             # Opinionated: use keys only.

     

       452
       +
             # Remove if you want to SSH using passwords

     

       453
       +
             PasswordAuthentication = false;

     

       454
       +
           };

     

       455
       +
         };

     

       456
       +
       

     

       457
       +
         networking.firewall = {

     

       458
       +
           enable = true;

     

       459
       +
           allowedTCPPorts = [

     

       460
       +
             4455

     

       461
       +
             51820

     

       462
       +
           ];

     

       463
       +
           allowedUDPPorts = [

     

       464
       +
             4455

     

       465
       +
             51820

     

       466
       +
           ];

     

       467
       +
         };

     

       468
       +
       

     

       469
       +
         services.tailscale = {

     

       470
       +
           enable = true;

     

       471
       +
           useRoutingFeatures = "client";

     

       472
       +
         };

     

       473
       +
       

     

       474
       +
         services.devmon.enable = true;

     

       475
       +
         services.gvfs.enable = true;

     

       476
       +
         services.udisks2.enable = true;

     

       477
       +
       

     

       478
       +
         services.logind.extraConfig = ''

     

       479
       +
           # don't shutdown when power button is short-pressed

     

       480
       +
           HandlePowerKey=ignore

     

       481
       +
           HandlePowerKeyLongPress=poweroff

     

       482
       +
         '';

     

       483
       +
       

     

       484
       +
         # Requires at least 5.16 for working wi-fi and bluetooth.

     

       485
       +
         # https://community.frame.work/t/using-the-ax210-with-linux-on-the-framework-laptop/1844/89

     

       486
       +
         boot = {

     

       487
       +
           kernelPackages = lib.mkIf (lib.versionOlder pkgs.linux.version "5.16") (

     

       488
       +
             lib.mkDefault pkgs.linuxPackages_latest

     

       489
       +
           );

     

       490
       +
           loader.grub = {

     

       491
       +
             # no need to set devices, disko will add all devices that have a EF02 partition to the list already

     

       492
       +
             device = "nodev";

     

       493
       +
             efiSupport = true;

     

       494
       +
             efiInstallAsRemovable = true;

     

       495
       +
           };

     

       496
       +
           supportedFilesystems = [ "ntfs" ];

     

       497
       +
           extraModprobeConfig = ''

     

       498
       +
             options kvm_intel nested=1

     

       499
       +
             options kvm_intel emulate_invalid_guest_state=0

     

       500
       +
             options kvm ignore_msrs=1

     

       501
       +
           '';

     

       502
       +
         };

     

       503
       +
       

     

       504
       +
         # https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion

     

       505
       +
         system.stateVersion = "23.05";

     

       506
       +
       }

nixos/modules/apps/default.nix

···

       1
       +
       { ... }:

     

       2
       +
       {

     

       3
       +
         imports = [

     

       4
       +
           ./tuigreet.nix

     

       5
       +
         ];

     

       6
       +
       }

+296

nixos/modules/apps/tuigreet.nix

···

       1
       +
       {

     

       2
       +
         lib,

     

       3
       +
         config,

     

       4
       +
         pkgs,

     

       5
       +
         ...

     

       6
       +
       }:

     

       7
       +
       let

     

       8
       +
         cfg = config.modules.apps.tuigreet;

     

       9
       +
         tuigreetBin = "${pkgs.greetd.tuigreet}/bin/tuigreet";

     

       10
       +
         msg = cfg.greeting;

     

       11
       +
         baseArgs =

     

       12
       +
           [ ]

     

       13
       +
           ++ lib.optionals cfg.time [ "--time" ]

     

       14
       +
           ++ lib.optionals cfg.issue [ "--issue" ]

     

       15
       +
           ++ lib.optionals (msg != null && msg != "") [

     

       16
       +
             "-g"

     

       17
       +
             msg

     

       18
       +
           ]

     

       19
       +
           ++ lib.optionals (cfg.timeFormat != null) [

     

       20
       +
             "--time-format"

     

       21
       +
             cfg.timeFormat

     

       22
       +
           ]

     

       23
       +
           ++ lib.optionals (cfg.width != null) [

     

       24
       +
             "--width"

     

       25
       +
             (toString cfg.width)

     

       26
       +
           ]

     

       27
       +
           ++ lib.optionals (cfg.theme != null) [

     

       28
       +
             "--theme"

     

       29
       +
             cfg.theme

     

       30
       +
           ]

     

       31
       +
           ++ lib.optionals cfg.asterisks [ "--asterisks" ]

     

       32
       +
           ++ lib.optionals (cfg.asterisksChar != null) [

     

       33
       +
             "--asterisks-char"

     

       34
       +
             cfg.asterisksChar

     

       35
       +
           ]

     

       36
       +
           ++ lib.optionals (cfg.windowPadding != null) [

     

       37
       +
             "--window-padding"

     

       38
       +
             (toString cfg.windowPadding)

     

       39
       +
           ]

     

       40
       +
           ++ lib.optionals (cfg.containerPadding != null) [

     

       41
       +
             "--container-padding"

     

       42
       +
             (toString cfg.containerPadding)

     

       43
       +
           ]

     

       44
       +
           ++ lib.optionals (cfg.promptPadding != null) [

     

       45
       +
             "--prompt-padding"

     

       46
       +
             (toString cfg.promptPadding)

     

       47
       +
           ]

     

       48
       +
           ++ lib.optionals (cfg.greetAlign != null) [

     

       49
       +
             "--greet-align"

     

       50
       +
             cfg.greetAlign

     

       51
       +
           ]

     

       52
       +
           ++ lib.optionals cfg.remember [ "--remember" ]

     

       53
       +
           ++ lib.optionals cfg.rememberSession [ "--remember-session" ]

     

       54
       +
           ++ lib.optionals cfg.rememberUserSession [ "--remember-user-session" ]

     

       55
       +
           ++ lib.optionals cfg.userMenu [ "--user-menu" ]

     

       56
       +
           ++ lib.optionals (cfg.userMenuMinUid != null) [

     

       57
       +
             "--user-menu-min-uid"

     

       58
       +
             (toString cfg.userMenuMinUid)

     

       59
       +
           ]

     

       60
       +
           ++ lib.optionals (cfg.userMenuMaxUid != null) [

     

       61
       +
             "--user-menu-max-uid"

     

       62
       +
             (toString cfg.userMenuMaxUid)

     

       63
       +
           ]

     

       64
       +
           ++ lib.concatMap (e: [

     

       65
       +
             "--env"

     

       66
       +
             e

     

       67
       +
           ]) cfg.env

     

       68
       +
           ++ lib.optionals (cfg.sessions != null && cfg.sessions != [ ]) [

     

       69
       +
             "--sessions"

     

       70
       +
             (lib.concatStringsSep ":" cfg.sessions)

     

       71
       +
           ]

     

       72
       +
           ++ lib.optionals (cfg.xsessions != null && cfg.xsessions != [ ]) [

     

       73
       +
             "--xsessions"

     

       74
       +
             (lib.concatStringsSep ":" cfg.xsessions)

     

       75
       +
           ]

     

       76
       +
           ++ lib.optionals (cfg.sessionWrapper != null && cfg.sessionWrapper != [ ]) [

     

       77
       +
             "--session-wrapper"

     

       78
       +
             (lib.concatStringsSep " " cfg.sessionWrapper)

     

       79
       +
           ]

     

       80
       +
           ++ lib.optionals (cfg.xsessionWrapper != null && cfg.xsessionWrapper != [ ]) [

     

       81
       +
             "--xsession-wrapper"

     

       82
       +
             (lib.concatStringsSep " " cfg.xsessionWrapper)

     

       83
       +
           ]

     

       84
       +
           ++ lib.optionals cfg.noXsessionWrapper [ "--no-xsession-wrapper" ]

     

       85
       +
           ++ lib.optionals (cfg.powerShutdown != null && cfg.powerShutdown != [ ]) [

     

       86
       +
             "--power-shutdown"

     

       87
       +
             (lib.concatStringsSep " " cfg.powerShutdown)

     

       88
       +
           ]

     

       89
       +
           ++ lib.optionals (cfg.powerReboot != null && cfg.powerReboot != [ ]) [

     

       90
       +
             "--power-reboot"

     

       91
       +
             (lib.concatStringsSep " " cfg.powerReboot)

     

       92
       +
           ]

     

       93
       +
           ++ lib.optionals cfg.powerNoSetsid [ "--power-no-setsid" ]

     

       94
       +
           ++ lib.optionals (cfg.kbCommand != null) [

     

       95
       +
             "--kb-command"

     

       96
       +
             (toString cfg.kbCommand)

     

       97
       +
           ]

     

       98
       +
           ++ lib.optionals (cfg.kbSessions != null) [

     

       99
       +
             "--kb-sessions"

     

       100
       +
             (toString cfg.kbSessions)

     

       101
       +
           ]

     

       102
       +
           ++ lib.optionals (cfg.kbPower != null) [

     

       103
       +
             "--kb-power"

     

       104
       +
             (toString cfg.kbPower)

     

       105
       +
           ]

     

       106
       +
           ++ cfg.extraArgs;

     

       107
       +
         cmd = lib.concatStringsSep " " (

     

       108
       +
           [ tuigreetBin ]

     

       109
       +
           ++ baseArgs

     

       110
       +
           ++ [

     

       111
       +
             "--cmd"

     

       112
       +
             cfg.command

     

       113
       +
           ]

     

       114
       +
           ++ lib.optional (cfg.debugFile != null) ("--debug " + cfg.debugFile)

     

       115
       +
         );

     

       116
       +
       in

     

       117
       +
       {

     

       118
       +
         options.modules.apps.tuigreet = {

     

       119
       +
           enable = lib.mkEnableOption "Enable greetd with tuigreet";

     

       120
       +
       

     

       121
       +
           command = lib.mkOption {

     

       122
       +
             type = lib.types.str;

     

       123
       +
             default = "Hyprland";

     

       124
       +
             description = "Command to launch after login (e.g., Hyprland, niri, sway, etc.)";

     

       125
       +
           };

     

       126
       +
       

     

       127
       +
           extraArgs = lib.mkOption {

     

       128
       +
             type = lib.types.listOf lib.types.str;

     

       129
       +
             default = [ ];

     

       130
       +
             description = "Extra arguments passed to tuigreet (appended).";

     

       131
       +
           };

     

       132
       +
       

     

       133
       +
           greeting = lib.mkOption {

     

       134
       +
             type = lib.types.nullOr lib.types.str;

     

       135
       +
             default = "WARNING: UNAUTHORIZED ACCESS WILL RESULT IN TERMINATION OF SESSION. IDENTIFY YOURSELF";

     

       136
       +
             description = "Greeting text shown above login prompt (-g/--greeting).";

     

       137
       +
           };

     

       138
       +
       

     

       139
       +
           time = lib.mkOption {

     

       140
       +
             type = lib.types.bool;

     

       141
       +
             default = true;

     

       142
       +
             description = "Show time";

     

       143
       +
           };

     

       144
       +
           issue = lib.mkOption {

     

       145
       +
             type = lib.types.bool;

     

       146
       +
             default = false;

     

       147
       +
             description = "Show /etc/issue";

     

       148
       +
           };

     

       149
       +
           timeFormat = lib.mkOption {

     

       150
       +
             type = lib.types.nullOr lib.types.str;

     

       151
       +
             default = null;

     

       152
       +
           };

     

       153
       +
           width = lib.mkOption {

     

       154
       +
             type = lib.types.nullOr lib.types.ints.positive;

     

       155
       +
             default = null;

     

       156
       +
           };

     

       157
       +
           theme = lib.mkOption {

     

       158
       +
             type = lib.types.nullOr lib.types.str;

     

       159
       +
             default = null;

     

       160
       +
           };

     

       161
       +
           asterisks = lib.mkOption {

     

       162
       +
             type = lib.types.bool;

     

       163
       +
             default = false;

     

       164
       +
           };

     

       165
       +
           asterisksChar = lib.mkOption {

     

       166
       +
             type = lib.types.nullOr lib.types.str;

     

       167
       +
             default = null;

     

       168
       +
           };

     

       169
       +
           windowPadding = lib.mkOption {

     

       170
       +
             type = lib.types.nullOr lib.types.ints.unsigned;

     

       171
       +
             default = null;

     

       172
       +
           };

     

       173
       +
           containerPadding = lib.mkOption {

     

       174
       +
             type = lib.types.nullOr lib.types.ints.unsigned;

     

       175
       +
             default = null;

     

       176
       +
           };

     

       177
       +
           promptPadding = lib.mkOption {

     

       178
       +
             type = lib.types.nullOr lib.types.ints.unsigned;

     

       179
       +
             default = null;

     

       180
       +
           };

     

       181
       +
           greetAlign = lib.mkOption {

     

       182
       +
             type = lib.types.nullOr (

     

       183
       +
               lib.types.enum [

     

       184
       +
                 "left"

     

       185
       +
                 "center"

     

       186
       +
                 "right"

     

       187
       +
               ]

     

       188
       +
             );

     

       189
       +
             default = null;

     

       190
       +
           };

     

       191
       +
       

     

       192
       +
           remember = lib.mkOption {

     

       193
       +
             type = lib.types.bool;

     

       194
       +
             default = true;

     

       195
       +
           };

     

       196
       +
           rememberSession = lib.mkOption {

     

       197
       +
             type = lib.types.bool;

     

       198
       +
             default = false;

     

       199
       +
           };

     

       200
       +
           rememberUserSession = lib.mkOption {

     

       201
       +
             type = lib.types.bool;

     

       202
       +
             default = false;

     

       203
       +
           };

     

       204
       +
           userMenu = lib.mkOption {

     

       205
       +
             type = lib.types.bool;

     

       206
       +
             default = false;

     

       207
       +
           };

     

       208
       +
           userMenuMinUid = lib.mkOption {

     

       209
       +
             type = lib.types.nullOr lib.types.ints.positive;

     

       210
       +
             default = null;

     

       211
       +
           };

     

       212
       +
           userMenuMaxUid = lib.mkOption {

     

       213
       +
             type = lib.types.nullOr lib.types.ints.positive;

     

       214
       +
             default = null;

     

       215
       +
           };

     

       216
       +
       

     

       217
       +
           env = lib.mkOption {

     

       218
       +
             type = lib.types.listOf lib.types.str;

     

       219
       +
             default = [ ];

     

       220
       +
           };

     

       221
       +
           sessions = lib.mkOption {

     

       222
       +
             type = lib.types.listOf lib.types.str;

     

       223
       +
             default = [ ];

     

       224
       +
           };

     

       225
       +
           xsessions = lib.mkOption {

     

       226
       +
             type = lib.types.listOf lib.types.str;

     

       227
       +
             default = [ ];

     

       228
       +
           };

     

       229
       +
       

     

       230
       +
           sessionWrapper = lib.mkOption {

     

       231
       +
             type = lib.types.listOf lib.types.str;

     

       232
       +
             default = [ ];

     

       233
       +
           };

     

       234
       +
           xsessionWrapper = lib.mkOption {

     

       235
       +
             type = lib.types.listOf lib.types.str;

     

       236
       +
             default = [ ];

     

       237
       +
           };

     

       238
       +
           noXsessionWrapper = lib.mkOption {

     

       239
       +
             type = lib.types.bool;

     

       240
       +
             default = false;

     

       241
       +
           };

     

       242
       +
       

     

       243
       +
           powerShutdown = lib.mkOption {

     

       244
       +
             type = lib.types.listOf lib.types.str;

     

       245
       +
             default = [ ];

     

       246
       +
           };

     

       247
       +
           powerReboot = lib.mkOption {

     

       248
       +
             type = lib.types.listOf lib.types.str;

     

       249
       +
             default = [ ];

     

       250
       +
           };

     

       251
       +
           powerNoSetsid = lib.mkOption {

     

       252
       +
             type = lib.types.bool;

     

       253
       +
             default = false;

     

       254
       +
           };

     

       255
       +
       

     

       256
       +
           kbCommand = lib.mkOption {

     

       257
       +
             type = lib.types.nullOr (lib.types.ints.between 1 12);

     

       258
       +
             default = null;

     

       259
       +
           };

     

       260
       +
           kbSessions = lib.mkOption {

     

       261
       +
             type = lib.types.nullOr (lib.types.ints.between 1 12);

     

       262
       +
             default = null;

     

       263
       +
           };

     

       264
       +
           kbPower = lib.mkOption {

     

       265
       +
             type = lib.types.nullOr (lib.types.ints.between 1 12);

     

       266
       +
             default = null;

     

       267
       +
           };

     

       268
       +
       

     

       269
       +
           debugFile = lib.mkOption {

     

       270
       +
             type = lib.types.nullOr lib.types.str;

     

       271
       +
             default = null;

     

       272
       +
           };

     

       273
       +
         };

     

       274
       +
       

     

       275
       +
         config = lib.mkIf cfg.enable {

     

       276
       +
           services.greetd = {

     

       277
       +
             enable = true;

     

       278
       +
             settings = {

     

       279
       +
               default_session = {

     

       280
       +
                 command = cmd;

     

       281
       +
                 user = "greeter";

     

       282
       +
               };

     

       283
       +
             };

     

       284
       +
           };

     

       285
       +
       

     

       286
       +
           systemd.services.greetd.serviceConfig = {

     

       287
       +
             Type = "idle";

     

       288
       +
             StandardInput = "tty";

     

       289
       +
             StandardOutput = "tty";

     

       290
       +
             StandardError = "journal";

     

       291
       +
             TTYReset = true;

     

       292
       +
             TTYVHangup = true;

     

       293
       +
             TTYVTDisallocate = true;

     

       294
       +
           };

     

       295
       +
         };

     

       296
       +
       }

+99

nixos/modules/authentication.nix

···

       1
       +
       {

     

       2
       +
         lib,

     

       3
       +
         config,

     

       4
       +
         pkgs,

     

       5
       +
         ...

     

       6
       +
       }:

     

       7
       +
       let

     

       8
       +
         cfg = config.modules.authentication;

     

       9
       +
       in

     

       10
       +
       {

     

       11
       +
         options.modules.authentication.enable = lib.mkEnableOption "Enable authentication stack (polkit, keyring, PAM with fprintd)";

     

       12
       +
       

     

       13
       +
         config = lib.mkIf cfg.enable {

     

       14
       +
           services.fprintd.enable = true;

     

       15
       +
           security.polkit.enable = true;

     

       16
       +
           services.gnome.gnome-keyring.enable = true;

     

       17
       +
           programs.dconf.enable = true;

     

       18
       +
       

     

       19
       +
           environment.systemPackages = [

     

       20
       +
             pkgs.polkit_gnome

     

       21
       +
             pkgs.fprintd

     

       22
       +
           ];

     

       23
       +
       

     

       24
       +
           systemd.user.services.polkit-gnome-authentication-agent-1 = {

     

       25
       +
             description = "polkit-gnome-authentication-agent-1";

     

       26
       +
             wantedBy = [ "graphical-session.target" ];

     

       27
       +
             wants = [ "graphical-session.target" ];

     

       28
       +
             after = [ "graphical-session.target" ];

     

       29
       +
             serviceConfig = {

     

       30
       +
               Type = "simple";

     

       31
       +
               ExecStart = "${pkgs.polkit_gnome}/libexec/polkit-gnome-authentication-agent-1";

     

       32
       +
               Restart = "on-failure";

     

       33
       +
               RestartSec = 1;

     

       34
       +
               TimeoutStopSec = 10;

     

       35
       +
             };

     

       36
       +
           };

     

       37
       +
       

     

       38
       +
           security.pam.services.hyprlock = lib.mkIf (config.services.fprintd.enable) {

     

       39
       +
             text = ''

     

       40
       +
               # Account management.

     

       41
       +
               account required pam_unix.so # unix (order 10900)

     

       42
       +
       

     

       43
       +
               # Authentication management.

     

       44
       +
               auth sufficient pam_unix.so try_first_pass likeauth nullok

     

       45
       +
               auth sufficient ${pkgs.fprintd}/lib/security/pam_fprintd.so

     

       46
       +
               auth required pam_deny.so # deny

     

       47
       +
       

     

       48
       +
               # Password management.

     

       49
       +
               password sufficient pam_unix.so nullok yescrypt # unix

     

       50
       +
       

     

       51
       +
               # Session management.

     

       52
       +
               session required pam_env.so conffile=/etc/pam/environment readenv=0 # env (order 10100)

     

       53
       +
               session required pam_unix.so # unix (order 10200)

     

       54
       +
             '';

     

       55
       +
           };

     

       56
       +
       

     

       57
       +
           security.pam.services.sudo = lib.mkIf (config.services.fprintd.enable) {

     

       58
       +
             text = ''

     

       59
       +
               # Account management.

     

       60
       +
               account required pam_unix.so # unix (order 10900)

     

       61
       +
       

     

       62
       +
               # Authentication management.

     

       63
       +
               auth sufficient pam_unix.so try_first_pass likeauth nullok

     

       64
       +
               auth sufficient ${pkgs.fprintd}/lib/security/pam_fprintd.so

     

       65
       +
               auth required pam_deny.so # deny

     

       66
       +
       

     

       67
       +
               # Password management.

     

       68
       +
               password sufficient pam_unix.so nullok yescrypt # unix

     

       69
       +
       

     

       70
       +
               # Session management.

     

       71
       +
               session required pam_env.so conffile=/etc/pam/environment readenv=0 # env (order 10100)

     

       72
       +
               session required pam_unix.so # unix (order 10200)

     

       73
       +
             '';

     

       74
       +
           };

     

       75
       +
       

     

       76
       +
           security.pam.services.su = lib.mkIf (config.services.fprintd.enable) {

     

       77
       +
             text = ''

     

       78
       +
               # Account management.

     

       79
       +
               account required pam_unix.so # unix (order 10900)

     

       80
       +
       

     

       81
       +
               # Authentication management.

     

       82
       +
               auth sufficient pam_rootok.so # rootok (order 10200)

     

       83
       +
               auth required pam_faillock.so # faillock (order 10400)

     

       84
       +
               auth sufficient pam_unix.so try_first_pass likeauth nullok

     

       85
       +
               auth sufficient ${pkgs.fprintd}/lib/security/pam_fprintd.so

     

       86
       +
               auth required pam_deny.so # deny

     

       87
       +
       

     

       88
       +
               # Password management.

     

       89
       +
               password sufficient pam_unix.so nullok yescrypt # unix

     

       90
       +
       

     

       91
       +
               # Session management.

     

       92
       +
               session required pam_env.so conffile=/etc/pam/environment readenv=0 # env (order 10100)

     

       93
       +
               session required pam_unix.so # unix (order 10200)

     

       94
       +
               session required pam_unix.so # unix (order 10200)

     

       95
       +
               session optional pam_xauth.so systemuser=99 xauthpath=${pkgs.xorg.xauth}/bin/xauth # xauth (order 12100)

     

       96
       +
             '';

     

       97
       +
           };

     

       98
       +
         };

     

       99
       +
       }

nixos/modules/default.nix

···

       1
       +
       { ... }:

     

       2
       +
       {

     

       3
       +
         imports = [

     

       4
       +
           ./authentication.nix

     

       5
       +
           ./apps

     

       6
       +
           ./network/wifi.nix

     

       7
       +
         ];

     

       8
       +
       }

+59

nixos/modules/network/wifi.nix

···

       1
       +
       { lib, config, pkgs, ... }:

     

       2
       +
       let

     

       3
       +
         cfg = config.modules.network.wifi;

     

       4
       +
         mkProfile = name: p:

     

       5
       +
           let

     

       6
       +
             base = {

     

       7
       +
               connection = { id = name; type = "wifi"; };

     

       8
       +
               ipv4.method = "auto";

     

       9
       +
               ipv6 = { addr-gen-mode = "stable-privacy"; method = "auto"; };

     

       10
       +
               wifi = { mode = "infrastructure"; ssid = name; };

     

       11
       +
             };

     

       12
       +
             sec =

     

       13
       +
               if (p ? pskVar && p.pskVar != null) then { wifi-security = { key-mgmt = "wpa-psk"; psk = "$${" + p.pskVar + "}"; }; }

     

       14
       +
               else if (p ? psk && p.psk != null) then { wifi-security = { key-mgmt = "wpa-psk"; psk = p.psk; }; }

     

       15
       +
               else if (p ? pskFile && p.pskFile != null) then { wifi-security = { key-mgmt = "wpa-psk"; psk = "$(" + pkgs.coreutils + "/bin/cat " + p.pskFile + ")"; }; }

     

       16
       +
               else {};

     

       17
       +
           in base // sec;

     

       18
       +
       in

     

       19
       +
       {

     

       20
       +
         options.modules.network.wifi = {

     

       21
       +
           enable = lib.mkEnableOption "Enable NetworkManager with simplified Wi-Fi profiles";

     

       22
       +
           hostName = lib.mkOption { type = lib.types.str; default = config.networking.hostName or ""; };

     

       23
       +
           nameservers = lib.mkOption { type = lib.types.listOf lib.types.str; default = []; };

     

       24
       +
           envFile = lib.mkOption {

     

       25
       +
             type = lib.types.nullOr lib.types.path;

     

       26
       +
             default = null;

     

       27
       +
             description = "Single environment file with PSK variables (used once).";

     

       28
       +
           };

     

       29
       +
       

     

       30
       +
           profiles = lib.mkOption {

     

       31
       +
             type = lib.types.attrsOf (lib.types.submodule ({ name, ... }: {

     

       32
       +
               options = {

     

       33
       +
                 pskVar = lib.mkOption { type = lib.types.nullOr lib.types.str; default = null; description = "Variable name in envFile providing PSK"; };

     

       34
       +
                 psk = lib.mkOption { type = lib.types.nullOr lib.types.str; default = null; };

     

       35
       +
                 pskFile = lib.mkOption { type = lib.types.nullOr lib.types.path; default = null; };

     

       36
       +
               };

     

       37
       +
             }));

     

       38
       +
             default = {};

     

       39
       +
             description = "Map of SSID -> { pskVar | psk | pskFile }.";

     

       40
       +
           };

     

       41
       +
         };

     

       42
       +
       

     

       43
       +
         config = lib.mkIf cfg.enable {

     

       44
       +
           networking = {

     

       45
       +
             hostName = lib.mkIf (cfg.hostName != "") cfg.hostName;

     

       46
       +
             nameservers = lib.mkIf (cfg.nameservers != []) cfg.nameservers;

     

       47
       +
             useDHCP = false;

     

       48
       +
             dhcpcd.enable = false;

     

       49
       +
             networkmanager = {

     

       50
       +
               enable = true;

     

       51
       +
               dns = "none";

     

       52
       +
               ensureProfiles = {

     

       53
       +
                 environmentFiles = lib.optional (cfg.envFile != null) cfg.envFile;

     

       54
       +
                 profiles = lib.mapAttrs mkProfile cfg.profiles;

     

       55
       +
               };

     

       56
       +
             };

     

       57
       +
           };

     

       58
       +
         };

     

       59
       +
       }