338 lines
9.9 KiB
Nix
338 lines
9.9 KiB
Nix
{ config, pkgs, ... }:
|
|
|
|
{
|
|
imports =
|
|
[
|
|
./hardware-configuration.nix
|
|
./mail.nix
|
|
./ipfs.nix
|
|
#./ipv6.nix
|
|
];
|
|
|
|
boot = {
|
|
loader = {
|
|
systemd-boot.enable = true;
|
|
efi.canTouchEfiVariables = true;
|
|
};
|
|
|
|
cleanTmpDir = true;
|
|
initrd.supportedFilesystems = [ "btrfs" ];
|
|
supportedFilesystems = [ "btrfs" ];
|
|
tmpOnTmpfs = true;
|
|
|
|
};
|
|
|
|
fonts.extraFonts = with pkgs; [
|
|
libertine
|
|
tewi-font
|
|
iosevka
|
|
inconsolata
|
|
dejavu_fonts
|
|
];
|
|
|
|
environment = {
|
|
variables.EDITOR = pkgs.lib.mkOverride 10 "vim"; # vim is my default editor
|
|
shells = [ pkgs.zsh ];
|
|
# Rule of thumb: only X utilities and pure system programs
|
|
systemPackages = with pkgs; [
|
|
(import ./vim.nix)
|
|
(pkgs.lib.mkOverride 10 st) # patched, see at the end of this file
|
|
arandr
|
|
autorandr
|
|
chromium
|
|
crda # WiFi regulatory domains
|
|
dmenu
|
|
feh
|
|
gimp
|
|
gnumeric
|
|
i3lock-fancy
|
|
inkscape
|
|
lemonbar-xft
|
|
mpv
|
|
optipng
|
|
pavucontrol
|
|
qutebrowserWE
|
|
xclip
|
|
zathura
|
|
];
|
|
};
|
|
|
|
hardware = {
|
|
bluetooth.enable = false;
|
|
cpu.intel.updateMicrocode = true;
|
|
pulseaudio = {
|
|
enable = true;
|
|
package = pkgs.pulseaudioLight;
|
|
};
|
|
trackpoint.enable = true;
|
|
opengl.extraPackages = with pkgs; [ # These are imported by ocl-icd
|
|
intel-ocl # intel cpu
|
|
#beignet # intel gpu
|
|
];
|
|
};
|
|
|
|
i18n = {
|
|
consoleFont = "Lat2-Terminus16";
|
|
consoleKeyMap = "fr-bepo";
|
|
defaultLocale = "en_US.UTF-8";
|
|
supportedLocales = [
|
|
"de_DE.UTF-8/UTF-8"
|
|
"en_US.UTF-8/UTF-8"
|
|
"fr_FR.UTF-8/UTF-8"
|
|
"fi_FI.UTF-8/UTF-8" ];
|
|
};
|
|
|
|
networking = {
|
|
firewall.enable = true;
|
|
hostName = "era";
|
|
extraHosts = ''
|
|
192.168.1.1 router
|
|
163.172.81.107 sahkopoika courriel.marvid.fr
|
|
163.172.25.159 protonpack
|
|
195.154.102.65 kromuniste
|
|
192.168.158.23 pimusicbox
|
|
2001:bc8:26b7:f001::1002 felin
|
|
'';
|
|
networkmanager.enable = false;
|
|
|
|
# wireless configs are stored in /etc/wpa_supplicant.conf
|
|
wireless = {
|
|
enable = true;
|
|
interfaces = [ "wlo1" ];
|
|
userControlled.enable = true;
|
|
};
|
|
};
|
|
|
|
# Test (can be removed)
|
|
nix.useSandbox = true;
|
|
|
|
programs = {
|
|
bash.enableCompletion = true;
|
|
zsh.enable = true;
|
|
zsh.enableCompletion = true;
|
|
adb.enable = true;
|
|
mosh.enable = true;
|
|
tmux.enable = true;
|
|
chromium = {
|
|
enable = true;
|
|
defaultSearchProviderSearchURL = "https://duckduckgo.com/?q={searchTerms}";
|
|
defaultSearchProviderSuggestURL = null;
|
|
extensions = [
|
|
"ihlenndgcmojhcghmfjfneahoeklbjjh" # cVim
|
|
"cjpalhdlnbpafiamejdnhcphjbkeiagm" # ublock origin
|
|
];
|
|
extraOpts = {
|
|
AlternateErrorPagesEnabled = false;
|
|
AlwaysOpenPdfExternally = true;
|
|
AutoFillEnabled = false;
|
|
BackgroundModeEnabled = false;
|
|
BlockThirdPartyCookies = true;
|
|
BookmarkBarEnabled = false;
|
|
BrowserAddPersonEnabled = false;
|
|
BrowserGuestModeEnabled = false;
|
|
BuiltInDnsClientEnabled = false;
|
|
CloudPrintProxyEnabled = false;
|
|
CloudPrintSubmitEnabled = false;
|
|
ContextualSearchEnabled = false;
|
|
DefaultBrowserSettingEnabled = false;
|
|
DefaultGeolocationSetting = 2;
|
|
DownloadDirectory = "/tmp";
|
|
NTPContentSuggestionsEnabled = false;
|
|
NetworkPredictionOptions = 2;
|
|
PasswordManagerEnabled = false;
|
|
SearchSuggestEnabled = false;
|
|
SpellCheckServiceEnabled = false;
|
|
TranslateEnabled = false;
|
|
};
|
|
};
|
|
};
|
|
|
|
security = {
|
|
sudo.wheelNeedsPassword = false;
|
|
pki.certificates = [
|
|
''
|
|
-----BEGIN CERTIFICATE-----
|
|
MIIDPTCCAiWgAwIBAgIJAMbx5WIu+oU+MA0GCSqGSIb3DQEBBQUAMDUxCzAJBgNV
|
|
BAYTAkZSMRUwEwYDVQQKDAxVbml0ZWQgUm9vdHMxDzANBgNVBAMMBk1hcnZpZDAe
|
|
Fw0xNDExMDMwMDI1NTNaFw0xOTExMDIwMDI1NTNaMDUxCzAJBgNVBAYTAkZSMRUw
|
|
EwYDVQQKDAxVbml0ZWQgUm9vdHMxDzANBgNVBAMMBk1hcnZpZDCCASIwDQYJKoZI
|
|
hvcNAQEBBQADggEPADCCAQoCggEBANl+Yqu63ivUX3ihurub0sreLmCKMPQg5Huh
|
|
F0kB9qJBiZZcRF92Fa12w9619AEVofRstlxB/Zj2H1HxfE1hVrHFq/5qUg9sBsYd
|
|
uXKLgjhXlUSjXDBy8qajOyoag7stQFFciglCwdMv26eEzLt0bpfNj6RjOn3MWeMj
|
|
BsYnY/U4VP1KcrlQnxHFjJtzL6uMHSvLGckUE29AvpB8B0ZADkxmQAy5HuCnPweQ
|
|
X3gNffR/niRnaIyatihI8yL5of01PJ/TiF+KAv99noaFEa3YgBIjtlego5S1lhUx
|
|
cDL4vsQ5aYvuyxmYQ/KYuNotGiSBeDNJSDV43cHujZnwqPWuUbMCAwEAAaNQME4w
|
|
HQYDVR0OBBYEFJopvu7AhwhzskjBKlrMe/NS/AqxMB8GA1UdIwQYMBaAFJopvu7A
|
|
hwhzskjBKlrMe/NS/AqxMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQADggEB
|
|
AJdtOVybiIf7IXDHO68lOe2Ob14WnAadE/FyzmWAsUbR4cVzAu6ObhcwiWWX5Ij2
|
|
aLx1hLWdIxyoxY76lCvvQ60rZ/9hbUR5n8rVNWPOqCBo7TCWpFT8KJFLpGKJkwKi
|
|
icC6dqBpjeX2hd2ahPyaaGdUnLYxY4znLz1/RgSrzzTGUmjIHN9Go4ACVimJB5IR
|
|
3paGD4ntvfuwWZevF7SFdGJiMl+yECXVO3+3fWvEJXCwq5F9eE4f2HYljgdFE4GT
|
|
X8aV5rzT5g2j9piZWLoX3wh4XwhItFT7WFtEwuoVi0jWRKpU6DRTuqAqXSbuGboo
|
|
ozM+r1wQMF2wE4aNnT+g0EQ=
|
|
-----END CERTIFICATE-----
|
|
''
|
|
''
|
|
-----BEGIN CERTIFICATE-----
|
|
MIIFODCCAyCgAwIBAgIJALKrFKLDxFUfMA0GCSqGSIb3DQEBCwUAMBcxFTATBgNV
|
|
BAMMDFVuaXRlZCBSb290czAeFw0xNzA0MTkyMjMzMTRaFw0yNzA0MTcyMjMzMTRa
|
|
MBcxFTATBgNVBAMMDFVuaXRlZCBSb290czCCAiIwDQYJKoZIhvcNAQEBBQADggIP
|
|
ADCCAgoCggIBAOCTH4sqkC6TJXqalbiALL+y8tpZF96hrZjt4o6+lJjqYqHP00E8
|
|
KliAGqyBT40oWGO/k/kmnbmSrTOQGWUujtqgSqDO9Mqyfk/orf5GLzVYu66/Wf28
|
|
Tn6rSgf/62HVQdczpgWPDkg1IvmJg0E+iA3C28/+hjVc+re0Lp1BEjEOHay2aoaS
|
|
YRwudowTvnoRyPcWzIUYOg/GbmaRE4fiwOW7ulAbK05CJSIHMzjkS5Zfegc8FDEq
|
|
B463VusW0nmUGtxA524dsmiy5KFI4GtJrQZDy4xnX7+/kefCdR1Rb6hbSpa4/7e6
|
|
FGF4R3Ll+9vsHLVgljdGjgoIEeiHAO6eq00jFkqDaM+uNPyKQSvc4pBIIo+yWXtl
|
|
B2/0XMrOFz8hzLRg8fElO0kZ0Biv+Rxr+T50EBlgdgejAJnKUaxX3ob4Z9tuNqGr
|
|
QTxiGiDC4anetmVD3bMbkwUYa8fMun2mg3Pzkw02fnxNMJ6uIlXvTLP+YRILULLb
|
|
/Os6KHoynyNn1wiTNQ6f72TV0+fMgK83JaZtjWgrPY5ap97n1phKKqgMfTgmtoMR
|
|
uaYXSVAiAE4CjyJRwiJRYiVWXW3zHnTTsJuYlEoaqsP0le67AYT8aPtCllt3i5g+
|
|
omlNgkMdIfpCMj3oreYrzdQ4Y3Qqpj+USbM/sIsdWTuiE3oYL7HI9/AtAgMBAAGj
|
|
gYYwgYMwHQYDVR0OBBYEFAI6ZBnripjC7OQ8+sVwQSRCS8OeMEcGA1UdIwRAMD6A
|
|
FAI6ZBnripjC7OQ8+sVwQSRCS8OeoRukGTAXMRUwEwYDVQQDDAxVbml0ZWQgUm9v
|
|
dHOCCQCyqxSiw8RVHzAMBgNVHRMEBTADAQH/MAsGA1UdDwQEAwIBBjANBgkqhkiG
|
|
9w0BAQsFAAOCAgEAxkaH+PUtp+38oBf6fzgBT/7nKdgWDC9saAc4XTB2zGOExE1n
|
|
03X06n/FSCefvFBPD2ReYEGe2+Xt+S6vo3gU32P4uLNsVTGCPqB1dWEWRDdNwZHn
|
|
qdNOvh2Jrvh7H7+y+lLBF8w/ypJtuHBVmQqJOBhcPqnVatTf6Ikpby+cVDiD1JUl
|
|
p9HwlCl2KTTIxY/boRWowF8AYXWTDCRMfPkPRPlmIGBTSSdWCVijXKchUxjMGKzK
|
|
pUZac3/F/GaHWg+WKLTeHBtoTMhVzPWPe8U/5QJZGuMCCS5jwbKZP96yvOQvQgQm
|
|
pIkhH8+2AZoV0F5jk/jzesg+6OeJc9wGjahbJtIXYdrmb9/hGDrZCgyO/WE1/7oZ
|
|
AViYHGfuX4jskWazVwuxKX0nMySwCRe8YsfzW3t0hEQfvQuhlXcUZ+/DN8lnVRMq
|
|
V5lJhCHckeHI1wLd+pYrW+PxASbB1wSpZVSdgE8kKKdSHJ3lcOtMJ8UhlYG/YkHM
|
|
TgtCO/zC8Suibx3Td5RWL4OrI+xep+4tj9Fg01CtIndVyVBA+FVw3dll4d5kmQhU
|
|
jEiakxnarNc6NOaZUDdA7vzPvrg3V3FoUnst9riRKRtFelCMy9xlgP1jMO8EkyJl
|
|
50QGN1dKcZejnf59ahrV5KrnSNHRBRyrCvmVM75Ke9KNrAen/R9HjVJ2CIo=
|
|
-----END CERTIFICATE-----
|
|
'' ];
|
|
};
|
|
|
|
|
|
services = {
|
|
avahi.enable = false; # for cups printer discovery
|
|
udev.packages = with pkgs; [ crda ];
|
|
peerflix = {
|
|
enable = true;
|
|
stateDir = "/tmp/peerflix";
|
|
};
|
|
cron.enable = false;
|
|
nixosManual.enable = false;
|
|
printing = {
|
|
enable = true;
|
|
drivers = with pkgs; [
|
|
dell-530cdn # dell 5130cdn (typo)
|
|
cups-toshiba-estudio # Yay, my pull request has been accepted
|
|
hplip
|
|
];
|
|
};
|
|
|
|
redshift = {
|
|
enable = true;
|
|
latitude = "48.8534100";
|
|
longitude = "2.3488000";
|
|
};
|
|
|
|
openssh = {
|
|
enable = true;
|
|
permitRootLogin = "no";
|
|
passwordAuthentication = false;
|
|
startWhenNeeded = true;
|
|
};
|
|
|
|
openvpn.servers.era = {
|
|
autoStart = false;
|
|
updateResolvConf = true;
|
|
config = builtins.readFile ./era.ovpn; # Pas top ._.
|
|
};
|
|
|
|
xserver = {
|
|
enable = true;
|
|
layout = "fr";
|
|
xkbVariant = "bepo";
|
|
autorun = true;
|
|
displayManager = {
|
|
sessionCommands = ''
|
|
xset r rate 200 75
|
|
xrandr --output eDP1 --mode 1920x1080
|
|
'';
|
|
slim.theme = pkgs.fetchurl {
|
|
url = http://marvid.fr/~eeva/mirror/slim-theme-solarized-debian.tar.bz2;
|
|
sha256 = "e792886a39b97bed0cb1022bec381806b0ca1dcc726b093187231bd1902acd49";
|
|
};
|
|
};
|
|
|
|
libinput = {
|
|
enable = true;
|
|
disableWhileTyping = true;
|
|
};
|
|
#synaptics = {
|
|
# enable = true;
|
|
# palmDetect = true;
|
|
# twoFingerScroll = true;
|
|
#};
|
|
|
|
videoDrivers = [ "intel" "modesetting" ];
|
|
#videoDrivers = [ "amdgpu" "intel" "modsetting" ]; # I wish
|
|
|
|
#windowManager.xmonad = {
|
|
# enable = true;
|
|
# enableContribAndExtras = true;
|
|
#};
|
|
desktopManager.xterm.enable = false;
|
|
};
|
|
};
|
|
|
|
|
|
systemd.mounts = [
|
|
{ what = "/dev/sdb1";
|
|
where = "/mnt/usb1";
|
|
mountConfig = {
|
|
TimeoutSec = "1";
|
|
Options = "uid=eeva";
|
|
};
|
|
}
|
|
];
|
|
systemd.automounts = [
|
|
{ where = "/mnt/usb1";
|
|
automountConfig = { TimeoutIdleSec = "1"; };
|
|
wantedBy = [ "default.target" ];
|
|
}
|
|
];
|
|
|
|
time.timeZone = "Europe/Paris";
|
|
|
|
users = {
|
|
extraUsers.eeva = {
|
|
isNormalUser = true;
|
|
home = "/home/eeva";
|
|
extraGroups = [ "wheel" ];
|
|
shell = pkgs.zsh;
|
|
uid = 1000;
|
|
};
|
|
|
|
mutableUsers = true; # Need this to change passwords.
|
|
motd = "Death to the DeathStar";
|
|
};
|
|
|
|
# Rasvaton / Fet-fri
|
|
nix.gc.automatic = true;
|
|
nix.gc.options = "--delete-older-than 1w";
|
|
nix.gc.dates = "02:22";
|
|
|
|
# Upgrade when possible
|
|
system.autoUpgrade.enable = true;
|
|
system.stateVersion = "17.03";
|
|
|
|
## Special config
|
|
nixpkgs.overlays = [ (self: super: {
|
|
st = super.callPackage ./pkgs/st.nix {};
|
|
cups-filters = super.callPackage /home/eeva/pkgs/cups-filters {};
|
|
qutebrowserWE = pkgs.qutebrowser.overrideAttrs (oldAttrs: rec {
|
|
withWebEngineDefault = true;
|
|
});
|
|
})
|
|
];
|
|
|
|
nixpkgs.config.allowUnfree = true;
|
|
|
|
}
|