128 lines
2.9 KiB
Nix
128 lines
2.9 KiB
Nix
with import ./lib;
|
|
{ config, pkgs, ... }: {
|
|
imports = [
|
|
<stockholm/tv>
|
|
<stockholm/tv/2configs/br.nix>
|
|
<stockholm/tv/2configs/exim-retiolum.nix>
|
|
<stockholm/tv/2configs/hw/x220.nix>
|
|
<stockholm/tv/2configs/retiolum.nix>
|
|
];
|
|
|
|
krebs.build.host = config.krebs.hosts.mu;
|
|
krebs.build.user = mkForce config.krebs.users.vv;
|
|
|
|
tv.x0vncserver.enable = true;
|
|
|
|
boot.initrd.luks.devices.muca.device = "/dev/sda2";
|
|
boot.initrd.availableKernelModules = [ "ahci" ];
|
|
boot.kernelModules = [ "fbcon" "kvm-intel" ];
|
|
boot.kernelParams = [ "fsck.repair=yes" ];
|
|
boot.extraModulePackages = [ ];
|
|
|
|
fileSystems = {
|
|
"/" = {
|
|
device = "/dev/mapper/muvga-root";
|
|
fsType = "ext4";
|
|
options = [ "defaults" "discard" ];
|
|
};
|
|
"/home" = {
|
|
device = "/dev/mapper/muvga-home";
|
|
fsType = "ext4";
|
|
options = [ "defaults" "discard" ];
|
|
};
|
|
"/boot" = {
|
|
device = "/dev/sda1";
|
|
fsType = "vfat";
|
|
};
|
|
};
|
|
|
|
nixpkgs.config.allowUnfree = true;
|
|
hardware.opengl.driSupport32Bit = true;
|
|
|
|
hardware.pulseaudio.enable = true;
|
|
|
|
hardware.enableRedistributableFirmware = true;
|
|
|
|
boot.loader.efi.canTouchEfiVariables = true;
|
|
boot.loader.systemd-boot.enable = true;
|
|
|
|
networking.networkmanager.enable = true;
|
|
|
|
# XXX reload to work around occasional "Failed to load firmware chunk!"
|
|
# TODO only do this if firmware is actually broken(?)
|
|
system.activationScripts.reload-iwlwifi = /* sh */ ''
|
|
${pkgs.kmod}/bin/modprobe -vr iwlwifi
|
|
${pkgs.kmod}/bin/modprobe -v iwlwifi
|
|
'';
|
|
|
|
environment.systemPackages = [
|
|
pkgs.chromium
|
|
pkgs.firefox
|
|
pkgs.gimp
|
|
pkgs.iptables
|
|
pkgs.libreoffice
|
|
pkgs.plasma-pa
|
|
(pkgs.pidgin.override {
|
|
plugins = [ pkgs.pidgin-otr ];
|
|
})
|
|
pkgs.skypeforlinux
|
|
pkgs.slock
|
|
pkgs.tinc_pre
|
|
pkgs.vim
|
|
pkgs.xsane
|
|
|
|
#pkgs.foomatic_filters
|
|
#pkgs.gutenprint
|
|
#pkgs.cups_pdf_filter
|
|
#pkgs.ghostscript
|
|
];
|
|
|
|
|
|
i18n.defaultLocale = "de_DE.UTF-8";
|
|
|
|
programs.ssh.startAgent = false;
|
|
|
|
krebs.setuid = {
|
|
slock = {
|
|
filename = "${pkgs.slock}/bin/slock";
|
|
mode = "4111";
|
|
};
|
|
};
|
|
|
|
security.pam.loginLimits = [
|
|
# for jack
|
|
{ domain = "@audio"; item = "memlock"; type = "-"; value = "unlimited"; }
|
|
{ domain = "@audio"; item = "rtprio"; type = "-"; value = "99"; }
|
|
];
|
|
|
|
fonts.fonts = [
|
|
pkgs.xorg.fontschumachermisc
|
|
];
|
|
|
|
services.xserver.enable = true;
|
|
services.xserver.layout = "de";
|
|
services.xserver.xkbOptions = "eurosign:e";
|
|
|
|
# TODO this is host specific
|
|
services.xserver.libinput.enable = false;
|
|
services.xserver.synaptics = {
|
|
enable = true;
|
|
twoFingerScroll = true;
|
|
};
|
|
|
|
services.xserver.desktopManager.plasma5.enable = true;
|
|
|
|
services.xserver.displayManager.autoLogin.enable = true;
|
|
services.xserver.displayManager.autoLogin.user = "vv";
|
|
|
|
users.users.vv = {
|
|
inherit (config.krebs.users.vv) home uid;
|
|
isNormalUser = true;
|
|
extraGroups = [
|
|
"audio"
|
|
"video"
|
|
"networkmanager"
|
|
];
|
|
};
|
|
}
|