Colin
d6fb2ab5b4
```
• Updated input 'nix-serve':
'github:edolstra/nix-serve/3b6d30016d910a43e0e16f94170440a3e0b8fa8d' (2023-03-07)
→ 'github:edolstra/nix-serve/e6e3d09438e803daa5374ad8edf1271289348456' (2023-05-17)
• Updated input 'nixpkgs-unpatched':
'github:nixos/nixpkgs/0470f36b02ef01d4f43c641bbf07020bcab71bf1' (2023-05-14)
→ 'github:nixos/nixpkgs/48a0fb7aab511df92a17cf239c37f2bd2ec9ae3a' (2023-05-18)
```
58 lines
1.9 KiB
Nix
58 lines
1.9 KiB
Nix
{ config, pkgs, ... }:
|
|
{
|
|
imports = [
|
|
./fs.nix
|
|
];
|
|
|
|
sops.secrets.colin-passwd.neededForUsers = true;
|
|
|
|
sane.roles.build-machine.enable = true;
|
|
sane.roles.ac = true;
|
|
sane.roles.client = true;
|
|
sane.roles.dev-machine = true;
|
|
sane.services.wg-home.enable = true;
|
|
sane.services.wg-home.ip = config.sane.hosts.by-name."desko".wg-home.ip;
|
|
sane.services.duplicity.enable = true;
|
|
sane.services.nixserve.secretKeyFile = config.sops.secrets.nix_serve_privkey.path;
|
|
|
|
sane.gui.sway.enable = true;
|
|
sane.programs.iphoneUtils.enableFor.user.colin = true;
|
|
|
|
sane.programs.guiApps.suggestedPrograms = [ "desktopGuiApps" ];
|
|
|
|
boot.loader.efi.canTouchEfiVariables = false;
|
|
sane.image.extraBootFiles = [ pkgs.bootpart-uefi-x86_64 ];
|
|
|
|
# needed to use libimobiledevice/ifuse, for iphone sync
|
|
services.usbmuxd.enable = true;
|
|
|
|
# don't enable wifi by default: it messes with connectivity.
|
|
systemd.services.iwd.enable = false;
|
|
|
|
# default config: https://man.archlinux.org/man/snapper-configs.5
|
|
# defaults to something like:
|
|
# - hourly snapshots
|
|
# - auto cleanup; keep the last 10 hourlies, last 10 daylies, last 10 monthlys.
|
|
services.snapper.configs.nix = {
|
|
# TODO: for the impermanent setup, we'd prefer to just do /nix/persist,
|
|
# but that also requires setting up the persist dir as a subvol
|
|
SUBVOLUME = "/nix";
|
|
# TODO: ALLOW_USERS doesn't seem to work. still need `sudo snapper -c nix list`
|
|
ALLOW_USERS = [ "colin" ];
|
|
};
|
|
|
|
programs.steam = {
|
|
enable = true;
|
|
# not sure if needed: stole this whole snippet from the wiki
|
|
remotePlay.openFirewall = true; # Open ports in the firewall for Steam Remote Play
|
|
dedicatedServer.openFirewall = true; # Open ports in the firewall for Source Dedicated Server
|
|
};
|
|
sane.user.persist.plaintext = [
|
|
".steam"
|
|
".local/share/Steam"
|
|
];
|
|
|
|
# docs: https://nixos.org/manual/nixos/stable/options.html#opt-system.stateVersion
|
|
system.stateVersion = "21.05";
|
|
}
|