stockholm/tv/1systems/mu/config.nix

129 lines
2.9 KiB
Nix
Raw Normal View History

2016-10-20 18:54:38 +00:00
with import <stockholm/lib>;
2017-08-01 20:37:41 +00:00
{ config, pkgs, ... }: {
2016-03-31 01:48:43 +00:00
imports = [
2018-09-16 19:31:14 +00:00
<stockholm/tv>
2018-10-03 08:14:20 +00:00
<stockholm/tv/2configs/br.nix>
<stockholm/tv/2configs/exim-retiolum.nix>
2018-12-17 16:11:31 +00:00
<stockholm/tv/2configs/hw/x220.nix>
<stockholm/tv/2configs/retiolum.nix>
2016-03-31 01:48:43 +00:00
];
krebs.build.host = config.krebs.hosts.mu;
krebs.build.user = mkForce config.krebs.users.vv;
2017-08-02 00:14:49 +00:00
tv.x0vncserver.enable = true;
boot.initrd.luks.devices.muca.device = "/dev/sda2";
2016-03-31 01:48:43 +00:00
boot.initrd.luks.cryptoModules = [ "aes" "sha512" "xts" ];
boot.initrd.availableKernelModules = [ "ahci" ];
boot.kernelModules = [ "fbcon" "kvm-intel" ];
boot.extraModulePackages = [ ];
fileSystems = {
"/" = {
2017-08-18 07:06:27 +00:00
device = "/dev/mapper/muvga-root";
2018-11-08 18:25:24 +00:00
fsType = "ext4";
options = [ "defaults" "discard" ];
2016-03-31 01:48:43 +00:00
};
"/home" = {
2017-08-18 07:06:27 +00:00
device = "/dev/mapper/muvga-home";
2018-11-08 18:25:24 +00:00
fsType = "ext4";
options = [ "defaults" "discard" ];
2016-03-31 01:48:43 +00:00
};
"/boot" = {
device = "/dev/sda1";
2018-11-08 18:25:24 +00:00
fsType = "vfat";
2016-03-31 01:48:43 +00:00
};
};
nixpkgs.config.allowUnfree = true;
hardware.opengl.driSupport32Bit = true;
hardware.pulseaudio.enable = true;
hardware.enableRedistributableFirmware = true;
2016-03-31 01:48:43 +00:00
boot.loader.efi.canTouchEfiVariables = true;
boot.loader.systemd-boot.enable = true;
2016-03-31 01:48:43 +00:00
networking.networkmanager.enable = true;
2019-08-02 15:03:12 +00:00
# XXX reload to work around occasional "Failed to load firmware chunk!"
# TODO only do this if firmware is actually broken(?)
system.activationScripts.reload-iwlwifi = /* sh */ ''
${pkgs.kmod}/bin/modprobe -vr iwlwifi
${pkgs.kmod}/bin/modprobe -v iwlwifi
'';
2016-03-31 01:48:43 +00:00
environment.systemPackages = with pkgs; [
2017-08-31 20:02:52 +00:00
chromium
firefoxWrapper
gimp
iptables
libreoffice
2018-09-16 20:02:16 +00:00
plasma-pa
2017-11-02 20:13:00 +00:00
(pkgs.pidgin-with-plugins.override {
plugins = [ pkgs.pidginotr ];
})
2017-08-31 20:02:52 +00:00
skype
2016-03-31 01:48:43 +00:00
slock
2016-06-29 23:05:21 +00:00
tinc_pre
2016-03-31 01:48:43 +00:00
vim
xsane
#foomatic_filters
#gutenprint
#cups_pdf_filter
#ghostscript
];
i18n.defaultLocale = "de_DE.UTF-8";
programs.ssh.startAgent = false;
security.wrappers = {
slock.source = "${pkgs.slock}/bin/slock";
};
2016-03-31 01:48:43 +00:00
security.pam.loginLimits = [
# for jack
{ domain = "@audio"; item = "memlock"; type = "-"; value = "unlimited"; }
{ domain = "@audio"; item = "rtprio"; type = "-"; value = "99"; }
];
fonts.fonts = [
pkgs.xlibs.fontschumachermisc
];
services.xserver.enable = true;
services.xserver.layout = "de";
services.xserver.xkbOptions = "eurosign:e";
# TODO this is host specific
2019-10-16 07:21:17 +00:00
services.xserver.libinput.enable = false;
2016-03-31 01:48:43 +00:00
services.xserver.synaptics = {
enable = true;
twoFingerScroll = true;
};
2017-06-27 19:30:22 +00:00
services.xserver.desktopManager.plasma5 = {
enable = true;
};
2016-03-31 01:48:43 +00:00
services.xserver.displayManager.auto = {
enable = true;
user = "vv";
};
users.users.vv = {
inherit (config.krebs.users.vv) home uid;
isNormalUser = true;
extraGroups = [
"audio"
"video"
"networkmanager"
];
};
}