144 lines
2.8 KiB
Nix
144 lines
2.8 KiB
Nix
{
|
|
self,
|
|
lib,
|
|
pkgs,
|
|
modulesPath,
|
|
...
|
|
}: {
|
|
imports = [
|
|
"${modulesPath}/profiles/all-hardware.nix"
|
|
"${modulesPath}/installer/cd-dvd/iso-image.nix"
|
|
../../modules/profiles/desktop
|
|
];
|
|
|
|
home-manager.useGlobalPkgs = true;
|
|
home-manager.users.nixos = {
|
|
#config,
|
|
pkgs,
|
|
...
|
|
}:
|
|
lib.mkMerge [
|
|
(import ../../shared/home/default.nix {
|
|
inherit lib;
|
|
inherit pkgs;
|
|
#inherit (config.mj) stateVersion;
|
|
stateVersion = "23.11";
|
|
username = "nixos";
|
|
fullDesktop = true;
|
|
hmOnly = false;
|
|
email = "motiejus@jakstys.lt";
|
|
})
|
|
{
|
|
programs.bash = {
|
|
enable = true;
|
|
shellAliases = {
|
|
"l" = "echo -n ł | xclip -selection clipboard";
|
|
"gp" = "${pkgs.git}/bin/git remote | ${pkgs.parallel}/bin/parallel --verbose git push";
|
|
};
|
|
};
|
|
}
|
|
];
|
|
|
|
mj = {
|
|
stateVersion = "23.11";
|
|
timeZone = "UTC";
|
|
desktop = {
|
|
username = "nixos";
|
|
configureDM = false;
|
|
};
|
|
};
|
|
|
|
isoImage = {
|
|
isoName = "toolshed.iso";
|
|
squashfsCompression = "zstd";
|
|
appendToMenuLabel = " Toolshed ${self.lastModifiedDate}";
|
|
makeEfiBootable = true; # EFI booting
|
|
makeUsbBootable = true; # USB booting
|
|
};
|
|
|
|
boot.kernelPackages = pkgs.zfs.latestCompatibleLinuxPackages;
|
|
|
|
swapDevices = [];
|
|
|
|
services = {
|
|
pcscd.enable = true;
|
|
udev.packages = [pkgs.yubikey-personalization];
|
|
getty.autologinUser = "nixos";
|
|
xserver = {
|
|
enable = true;
|
|
desktopManager.xfce.enable = true;
|
|
displayManager = {
|
|
lightdm.enable = true;
|
|
autoLogin = {
|
|
enable = true;
|
|
user = "nixos";
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
programs = {
|
|
ssh.startAgent = false;
|
|
gnupg.agent = {
|
|
enable = true;
|
|
enableSSHSupport = true;
|
|
};
|
|
};
|
|
|
|
users.users = {
|
|
nixos = {
|
|
isNormalUser = true;
|
|
extraGroups = ["wheel" "video"];
|
|
initialHashedPassword = "";
|
|
};
|
|
root.initialHashedPassword = "";
|
|
};
|
|
|
|
security = {
|
|
pam.services.lightdm.text = ''
|
|
auth sufficient pam_succeed_if.so user ingroup wheel
|
|
'';
|
|
sudo = {
|
|
enable = true;
|
|
wheelNeedsPassword = false;
|
|
};
|
|
};
|
|
|
|
# from yubikey-guide
|
|
environment.systemPackages = with pkgs; [
|
|
paperkey
|
|
pgpdump
|
|
parted
|
|
cryptsetup
|
|
|
|
yubikey-manager
|
|
yubikey-manager-qt
|
|
yubikey-personalization
|
|
yubikey-personalization-gui
|
|
yubico-piv-tool
|
|
yubioath-flutter
|
|
|
|
ent
|
|
haskellPackages.hopenpgp-tools
|
|
|
|
diceware
|
|
pwgen
|
|
|
|
cfssl
|
|
pcsctools
|
|
];
|
|
|
|
networking = {
|
|
hostName = "vm";
|
|
domain = "example.org";
|
|
firewall.allowedTCPPorts = [22];
|
|
};
|
|
|
|
nix = {
|
|
extraOptions = ''
|
|
experimental-features = nix-command flakes
|
|
trusted-users = vm
|
|
'';
|
|
};
|
|
}
|