···

       
1
       
1
       
-
       
# Do not edit this file.  To specify the files to encrypt, create your own

     

       
2
       
2
       
-
       
# .gitattributes file in the directory where your files are.

     

       
3
       
3
       
-
       
* !filter !diff

     

       
4
       
4
       
-
       
*.gpg binary

     

This is a binary file and will not be displayed.

···

       
1
       
1
       
-
       
*.cry filter=git-crypt diff=git-crypt

     

···

       
1
       
1
       
 
       
{pkgs, ...}: {

     

       
2
       
2
       
 
       
  imports = [

     

       
3
       
3
       
 
       
    ./upgrade-diff.nix

     

       
4
       
4
       
+
       
    ./system

     

       
4
       
5
       
 
       
  ];

     

       
5
       
6
       
 
       
  # Set default i18n configuration

     

       
6
       
7
       
 
       
  i18n.defaultLocale = "en_US.UTF-8";

     
···

       
8
       
9
       
 
       
    font = "Lat2-Terminus16";

     

       
9
       
10
       
 
       
    keyMap = "us";

     

       
10
       
11
       
 
       
  };

     

       
11
       
11
       
-
       


     

       
12
       
12
       
-
       
  hardware.enableRedistributableFirmware = true;

     

       
13
       
13
       
-
       
  services.fwupd.enable = true;

     

       
14
       
14
       
-
       


     

       
15
       
15
       
-
       
  # # Enable crash dumps globally

     

       
16
       
16
       
-
       
  # boot.crashDump = {

     

       
17
       
17
       
-
       
  #   enable = true;

     

       
18
       
18
       
-
       
  #   reservedMemory = "128M";

     

       
19
       
19
       
-
       
  # };

     

       
20
       
12
       
 
       


     

       
21
       
13
       
 
       
  time.timeZone = "Asia/Hong_Kong";

     

       
22
       
14
       
 
       


     

···

       
5
       
5
       
 
       
    experimental-features = [

     

       
6
       
6
       
 
       
      "nix-command"

     

       
7
       
7
       
 
       
      "flakes"

     

       
8
       
8
       
+
       
      "repl-flake"

     

       
8
       
9
       
 
       
    ];

     

       
9
       
10
       
 
       


     

       
10
       
11
       
 
       
    substituters = [

     

···

       
1
       
1
       
+
       
{...}: {

     

       
2
       
2
       
+
       
  imports = [

     

       
3
       
3
       
+
       
    ./firmware.nix

     

       
4
       
4
       
+
       
  ];

     

       
5
       
5
       
+
       
}

     

···

       
1
       
1
       
+
       
{...}: {

     

       
2
       
2
       
+
       
  hardware.enableRedistributableFirmware = true;

     

       
3
       
3
       
+
       
  services.fwupd.enable = true;

     

       
4
       
4
       
+
       
}
     

···

       
1
       
1
       
 
       
{...}: {

     

       
2
       
2
       
-
       
  networking.networkmanager.ethernet.macAddress = builtins.readFile ./nma.cry;

     

       
2
       
2
       
+
       
  networking.networkmanager.ethernet.macAddress = "stable";

     

       
3
       
3
       
 
       
}

     

This is a binary file and will not be displayed.

···

       
1
       
1
       
 
       
{...}: {

     

       
2
       
2
       
 
       
  security.pam.yubico = {

     

       
3
       
3
       
 
       
    enable = true;

     

       
4
       
4
       
-
       
    id = builtins.readFile ./ykid.cry;

     

       
4
       
4
       
+
       
    id = "91582";

     

       
5
       
5
       
 
       
    mode = "client";

     

       
6
       
6
       
 
       
    control = "requisite";

     

       
7
       
7
       
 
       
  };

     

This is a binary file and will not be displayed.