Honey wake up, a documentation update just dropped.

This commit is contained in:
Dmitry Voronin 2024-05-04 23:15:57 +03:00
parent 6236a8e65b
commit 97559710c5
Signed by: voronind
SSH key fingerprint: SHA256:3kBb4iV2ahufEBNq+vFbUe4QYfHt98DHQjN7QaptY9k
98 changed files with 711 additions and 426 deletions

53
Readme.md Normal file
View file

@ -0,0 +1,53 @@
# Voronind NixOS configuration.
## Screenshot.
![Screenshot](https://i.imgur.com/aGmmVJa.png)
[Wallpaper link](https://git.voronind.com/voronind/nixos/src/branch/main/part/Wallpaper.nix#L2)
## What is NixOS?
NixOS allows you to manage your systems declaratively. Which means that nothing happens outside the centralized config. System handles all the mutations when your config changes - even without reboot!
The core of the system is a thing called Nixpkgs. Nix is not your regular package manager. Smart people simplified all the complicated installation and configuration to a single generalized way of writing configuration.
This repository uses flakes for configuration. I really recomend you to start with flakes and skip channels entirely. Flakes give you one killer feature called version locking. This means that unless you update your .lock file, you'll have all the same binary versions across all the hosts. This makes thing very consistent across all your hosts. And it allows for easy rollback just by dropping .lock file update commit.
NixOS also scales well. You can have a single configuration file just for your host locally. Or, like me, you can have an online repository for any amount of hosts. All my hosts pull changes every hour from this repo. They are *not* all running the same configuration, which is a very common misconception. Here I have a bunch of "modules" like Bash, Gnome, Sway, Gaming etc. For example, I want to do heavy gaming on my desktop, so I enable Gnome+Gaming. But my laptop has *smol (kitten sized)* RAM and I go with just Sway and no Gaming :sad:.
For power users it has a heck load of goodies! For example, if you have a home server or just a powerful machine, you can use it as a cache and/or a build server. In my setup it works like this: when any of my hosts updates, builds any development shell or temporarily loads any package - it caches everything on my home lab. This means that after each flake lock update (package versions) I download everything over the Internet only once - other local hosts pull from my homelab over the fast local connection. Also if I need to build a heavy development environment i.e. for Android project - it will be built once, cached the result on homelab and then other hosts will pull the prebuild environment. You can also create Live ISO installations from your config, run in impermanence mode and so much more!
Outside of NixOS you also get things like Dev Shells. They allow you to create reproducible environments per project. This means you can run `nix develop` on any host with Nix package manager (not limited to NixOS) and have *exact* environment. By only typing two words. This creates a consistent environment, which practically destroys *"it works on my machine!"* arguments. This said, you may actually start in softcore mode: by utilizing Nix package manager and Home Manager. They do not require NixOS and can help you get aquainted with Nix ecosystem. But if it's just so happens that you distrohop now - spin it up! Learning the Nix language may be daunting, but in the long run it will save you so much time - in shipping updates,
The project started way back in 2003 and is rock solid by now.
And no, this is by far *not* the same thing as Ansible and Docker.
## NixOS learning roadmap.
0. [Nix Pills](https://nixos.org/guides/nix-pills/). This is a bit controversial one. Try it, but if it's hard to read for you - just skip it for now.
??? Where to look for stuff.
??? Nix language.
??? Nix package manager.
??? Nixpkgs.
??? Home manager.
??? (Optional) Remote builders.
??? (Optional) Live ISO.
??? (Optional) Dev Shells.
??? (Optional) Impermanence.
## Discovering my configuration.
Even tho I've tried to document everything I can in a dum-dum way, I still highly recommend you to learn the very basics of Nix language. If you can give a basic answer to these questions, you may continue:
1. What a set is?
2. How to define a function?
3. *???*
Start from the [Flake](flake.nix) file and follow the comments. If you have any questions, get in touch using [Telegram](https://t.me/voronind_com) or [Email](mailto:hi@voronind.com).
## Configuration highlights.
* [Keyd](module/common/Keyd.nix) allows you to have QMK-like keyboard remaps. Killer-feature is the ability to have remaps per-application. I have pretty common remaps like CapsLock to Ctrl/Esc combo, Right Shift to Backspace, Backspace to Delete and overlays for System/Windows/Media/Application controls as well as Macros.

154
flake.nix
View file

@ -1,21 +1,40 @@
# This is a configuration entry-point called "Flake".
# Here you define your inputs (dependencies) and outputs (hosts).
{ {
# Those are external dependencies.
inputs = { inputs = {
# System. # Core system.
# Homepage: https://github.com/NixOS/nixpkgs
# Manual: https://nixos.org/manual/nixos/stable
# Search: https://search.nixos.org/packages and https://search.nixos.org/options
nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable"; nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
stylix.url = "github:danth/stylix";
# This thing manages user's /home directroies. Because NixOS only manages system itself.
# Homepage: https://github.com/nix-community/home-manager
# Manual: https://nix-community.github.io/home-manager
# Search: https://home-manager-options.extranix.com
home-manager = { home-manager = {
url = "github:nix-community/home-manager"; url = "github:nix-community/home-manager";
# This means that home-manager and our Flake both depend on the same nixpkgs version.
inputs.nixpkgs.follows = "nixpkgs"; inputs.nixpkgs.follows = "nixpkgs";
}; };
# Android. # This allows automatic styling based on active Wallpaper.
# Homepage: https://github.com/danth/stylix
# Manual: https://danth.github.io/stylix
stylix.url = "github:danth/stylix";
# Nix on Android (inside Termux). It has no NixOS modules, but still allows the use of Nixpkgs arm packages with Home-Manager configurations.
# Homepage: https://github.com/nix-community/nix-on-droid
# Manual: https://github.com/nix-community/nix-on-droid/blob/master/README.md
nix-on-droid = { nix-on-droid = {
url = "github:t184256/nix-on-droid/release-23.05"; url = "github:t184256/nix-on-droid/release-23.05";
inputs.nixpkgs.follows = "nixpkgs"; inputs.nixpkgs.follows = "nixpkgs";
inputs.home-manager.follows = "home-manager"; inputs.home-manager.follows = "home-manager";
}; };
# Nvim plugins. # Those are Nvim plugins. I do not use package managers like Packer or Lazy, instead I use Nix to download them and later configure in [Neovim module](module/common/Nvim.nix).
nvimAlign = { nvimAlign = {
url = "github:echasnovski/mini.align"; url = "github:echasnovski/mini.align";
flake = false; flake = false;
@ -98,6 +117,10 @@
}; };
}; };
# Those are outputs (hosts, configurations) that can be produced by this whole config.
# Here you see a set of inputs we defined above, like nixpkgs, home-manager and so on.
# `...` at the end of a set means "ignore other arguments provided to this function".
# @inputs means aliasing all the inputs to the `inputs` name, so we can pass them all at once later.
outputs = { self, nixpkgs, nix-on-droid, home-manager, stylix, ... } @inputs: { outputs = { self, nixpkgs, nix-on-droid, home-manager, stylix, ... } @inputs: {
# Constant values. # Constant values.
const = { const = {
@ -107,51 +130,78 @@
url = "https://git.voronind.com/voronind/nixos.git"; url = "https://git.voronind.com/voronind/nixos.git";
}; };
# Common modules used across all hosts. # Common modules used across all the hosts.
nixosModules.common = let nixosModules.common = let
# This function allows me to get the list of all the files from the directories I need.
# It differs from the util.ls function because it also filters out all the directories.
lsFiles = path: map (f: "${path}/${f}") ( lsFiles = path: map (f: "${path}/${f}") (
builtins.filter (i: builtins.readFileType "${path}/${i}" == "regular") ( builtins.filter (i: builtins.readFileType "${path}/${i}" == "regular") (
builtins.attrNames (builtins.readDir path) builtins.attrNames (builtins.readDir path)
) )
); );
in { in {
# Here I import everything from those directories.
imports = (lsFiles ./module/common) ++ (lsFiles ./overlay) ++ [ ./user/Root.nix ]; imports = (lsFiles ./module/common) ++ (lsFiles ./overlay) ++ [ ./user/Root.nix ];
}; };
# Function to create a host. # Function to create a host. It does basic setup, like adding common modules.
mkHost = { system, hostname, modules } @args: nixpkgs.lib.nixosSystem { mkHost = { system, hostname, modules } @args: nixpkgs.lib.nixosSystem {
# `Inherit` is just an alias for `system = system;`, which means that
# keep the `system` argument as a property in a resulting set.
inherit system; inherit system;
# List of modules to use by defualt for all the hosts.
modules = [ modules = [
./host/${hostname}/Configuration.nix # There I put host-specific configurations.
{ networking.hostName = hostname; } ./host/${hostname}
{ system.stateVersion = self.const.stateVersion; }
inputs.self.nixosModules.common
home-manager.nixosModules.home-manager
stylix.nixosModules.stylix
] ++ modules;
# Make a device hostname match the one from this config.
{ networking.hostName = hostname; }
# Specify current release version.
{ system.stateVersion = self.const.stateVersion; }
# Add common modules.
inputs.self.nixosModules.common
# Add Home Manager module.
home-manager.nixosModules.home-manager
# Add Stylix module.
stylix.nixosModules.stylix
]
# Also add host-specific modules from mkHost args.
++ modules;
# SpecialArgs allows you to pass objects down to other NixOS modules.
specialArgs = let specialArgs = let
pkgs = nixpkgs.legacyPackages.${system}.pkgs; pkgs = nixpkgs.legacyPackages.${system}.pkgs;
config = self.nixosConfigurations.${hostname}.config; config = self.nixosConfigurations.${hostname}.config;
in { in {
const = self.const; const = self.const; # Constant values.
flake = self; flake = self; # This Flake itself.
inputs = inputs; inputs = inputs; # Our dependencies.
key = import ./part/Key.nix {}; key = import ./part/Key.nix {}; # Keyboard keys config.
secret = import ./part/Secret.nix {}; secret = import ./part/Secret.nix {}; # Secrets (public keys).
setting = import ./part/Setting.nix {}; setting = import ./part/Setting.nix {}; # My own global settings.
style = import ./part/Style.nix { config = config; }; style = import ./part/Style.nix { config = config; }; # Style abstraction.
util = import ./part/Util.nix { pkgs = pkgs; }; util = import ./part/Util.nix { pkgs = pkgs; }; # Util functions.
wallpaper = import ./part/Wallpaper.nix { pkgs = pkgs; }; wallpaper = import ./part/Wallpaper.nix { pkgs = pkgs; }; # Wallpaper.
}; };
}; };
# List of all hosts bellow. # Bellow is the list of all the hosts I currently use.
# They call the `mkHost` function that I defined above
# with their specific parameters.
# You might be interested in `live` and `nixOnDroidConfiguration`
# for Live ISO and Android configurations respectively.
nixosConfigurations.basic = self.mkHost { nixosConfigurations.basic = self.mkHost {
hostname = "basic"; hostname = "basic"; # Hostname to use.
system = "x86_64-linux"; system = "x86_64-linux"; # System architecture.
# Host-specific modules.
modules = [ modules = [
# Force LTS kernel.
({ pkgs, ... }: { boot.kernelPackages = nixpkgs.lib.mkForce pkgs.linuxPackages; }) ({ pkgs, ... }: { boot.kernelPackages = nixpkgs.lib.mkForce pkgs.linuxPackages; })
]; ];
}; };
@ -161,11 +211,14 @@
system = "x86_64-linux"; system = "x86_64-linux";
modules = [ modules = [
./module/AmdGpu.nix ./module/AmdGpu.nix
./module/CapsToggle.nix
./module/Gnome.nix ./module/Gnome.nix
./module/IntelCpu.nix ./module/IntelCpu.nix
./module/PowersaveIntel.nix ./module/PowersaveIntel.nix
./module/Print.nix ./module/Print.nix
./module/RemoteBuild.nix ./module/RemoteBuild.nix
./module/StrongSwan.nix
./module/Tablet.nix
./user/Dasha.nix ./user/Dasha.nix
]; ];
}; };
@ -177,7 +230,7 @@
./module/AmdCompute.nix ./module/AmdCompute.nix
./module/AmdCpu.nix ./module/AmdCpu.nix
./module/AmdGpu.nix ./module/AmdGpu.nix
# ./module/Ollama.nix # ./module/Ollama.nix # ISSUE: Currently broken.
./module/PowersaveAmd.nix ./module/PowersaveAmd.nix
./module/Print.nix ./module/Print.nix
./module/RemoteBuild.nix ./module/RemoteBuild.nix
@ -215,26 +268,42 @@
modules = [ modules = [
./module/AmdCpu.nix ./module/AmdCpu.nix
./module/AmdGpu.nix ./module/AmdGpu.nix
./module/CapsToggle.nix
./module/Gnome.nix ./module/Gnome.nix
./module/PowersaveAmd.nix ./module/PowersaveAmd.nix
./module/Print.nix ./module/Print.nix
./module/RemoteBuild.nix ./module/RemoteBuild.nix
./module/StrongSwan.nix
./module/Tablet.nix
./user/Dasha.nix ./user/Dasha.nix
./user/Voronind.nix ./user/Voronind.nix
]; ];
}; };
# Live ISO configuration.
nixosConfigurations.live = self.mkHost { nixosConfigurations.live = self.mkHost {
hostname = "live"; hostname = "live";
system = "x86_64-linux"; system = "x86_64-linux";
modules = [ modules = [
# Those are basic modules for Live ISO image.
# You can discover other possible base images here:
# https://github.com/NixOS/nixpkgs/tree/master/nixos/modules/installer/cd-dvd
"${nixpkgs}/nixos/modules/installer/cd-dvd/installation-cd-minimal.nix" "${nixpkgs}/nixos/modules/installer/cd-dvd/installation-cd-minimal.nix"
"${nixpkgs}/nixos/modules/installer/cd-dvd/channel.nix" "${nixpkgs}/nixos/modules/installer/cd-dvd/channel.nix"
{ networking.wireless.enable = nixpkgs.lib.mkForce false; }
# This is required for Live ISO in my case because I use NetworkManager,
# but base Live images require this.
{ networking.wireless.enable = nixpkgs.lib.mkForce false; }
# Override my settings to allow SSH logins using root password.
{ services.openssh.settings.PasswordAuthentication = nixpkgs.lib.mkForce true; } { services.openssh.settings.PasswordAuthentication = nixpkgs.lib.mkForce true; }
{ services.openssh.settings.PermitRootLogin = nixpkgs.lib.mkForce "yes"; } { services.openssh.settings.PermitRootLogin = nixpkgs.lib.mkForce "yes"; }
{ system.autoUpgrade.enable = nixpkgs.lib.mkForce false; }
({ pkgs, ... }: { boot.kernelPackages = nixpkgs.lib.mkForce pkgs.linuxPackages; }) # Disable auto-updates as they are not possible for Live ISO.
{ systemd.services.autoupdate.enable = nixpkgs.lib.mkForce false; }
# Base Live images also require the LTS kernel.
({ pkgs, ... }: { boot.kernelPackages = nixpkgs.lib.mkForce pkgs.linuxPackages; })
]; ];
}; };
@ -243,8 +312,7 @@
system = "x86_64-linux"; system = "x86_64-linux";
modules = [ modules = [
./module/IntelCpu.nix ./module/IntelCpu.nix
# ./module/Ollama.nix ./module/PowerlimitThinkpad.nix
./module/Powerlimit.nix
./module/PowersaveIntel.nix ./module/PowersaveIntel.nix
./module/Print.nix ./module/Print.nix
./module/RemoteBuild.nix ./module/RemoteBuild.nix
@ -256,22 +324,28 @@
# Android. # Android.
nixOnDroidConfigurations.default = nix-on-droid.lib.nixOnDroidConfiguration { nixOnDroidConfigurations.default = nix-on-droid.lib.nixOnDroidConfiguration {
modules = [ modules = [
# Android release version.
{ system.stateVersion = inputs.self.const.droidStateVersion; } { system.stateVersion = inputs.self.const.droidStateVersion; }
./module/NixOnDroid.nix
# I put all my Android configuration there.
./module/android
]; ];
# SpecialArgs allows you to pass objects down to other configuration.
extraSpecialArgs = let extraSpecialArgs = let
# We want arm64 packages for Android.
pkgs = nixpkgs.legacyPackages."aarch64-linux".pkgs; pkgs = nixpkgs.legacyPackages."aarch64-linux".pkgs;
in { in {
const = self.const; const = self.const; # Constant values.
flake = self; flake = self; # This Flake itself.
inputs = inputs; inputs = inputs; # Our dependencies.
key = import ./part/Key.nix {}; key = import ./part/Key.nix {}; # Keyboard keys config.
secret = import ./part/Secret.nix {}; secret = import ./part/Secret.nix {}; # Secrets (public keys).
setting = import ./part/Setting.nix {}; setting = import ./part/Setting.nix {}; # My own global settings.
style = import ./part/Style.nix { config = import ./part/style/Gruvbox.nix {}; }; style = import ./part/Style.nix { config = import ./part/style/Gruvbox.nix {}; }; # Style abstraction. Stylix is not available for Android so I provide static Gruvbox style.
util = import ./part/Util.nix { pkgs = pkgs; }; util = import ./part/Util.nix { pkgs = pkgs; }; # Util functions.
}; };
}; };
}; };
} }
# That's it!

5
host/basic/default.nix Normal file
View file

@ -0,0 +1,5 @@
# Basic host is a dummy and has no specific configuration.
# I don't really need it, this is just a failsafe that I can definitely install and run.
{ ... }: {
imports = [ ];
}

View file

@ -1,7 +1,6 @@
{ lib, ... }: { { lib, ... }: {
imports = [ imports = [
./Filesystem.nix ./Filesystem.nix
../dasha/Tablet.nix
]; ];
# Disable keyd. # Disable keyd.

View file

@ -1,4 +1,5 @@
{ lib, ... }: { { lib, ... }: {
# This host is running inside BIOS VM so it needs the Grub.
boot.loader.systemd-boot.enable = lib.mkForce false; boot.loader.systemd-boot.enable = lib.mkForce false;
boot.loader.efi.canTouchEfiVariables = lib.mkForce false; boot.loader.efi.canTouchEfiVariables = lib.mkForce false;
boot.loader.grub.enable = true; boot.loader.grub.enable = true;

View file

@ -1,3 +1,8 @@
{ lib, ... }: { { lib, ... }: {
# Force specific PW for this host.
users.users.root.hashedPassword = lib.mkForce "$y$j9T$d4HfwutZr.eNHuLJYRuro/$7swZfgCNS6jEXHFCxsW5um/68jX9BRiiZD1BYcm/gD/"; users.users.root.hashedPassword = lib.mkForce "$y$j9T$d4HfwutZr.eNHuLJYRuro/$7swZfgCNS6jEXHFCxsW5um/68jX9BRiiZD1BYcm/gD/";
# Allow login with PW for others.
# services.openssh.settings.PasswordAuthentication = lib.mkForce true;
# services.openssh.settings.PermitRootLogin = lib.mkForce "yes";
} }

View file

@ -1,8 +1,6 @@
{ lib, ... }: { { lib, ... }: {
imports = [ imports = [
./Filesystem.nix ./Filesystem.nix
./Tablet.nix
./Vpn.nix
]; ];
# Disable keyd. # Disable keyd.

View file

@ -1,3 +0,0 @@
{ ... }: {
imports = [ ];
}

View file

@ -1,3 +1,4 @@
# AMD Rocm support (for Blender).
{ nixpkgs, pkgs, ... }: { { nixpkgs, pkgs, ... }: {
nixpkgs.config.rocmSupport = true; nixpkgs.config.rocmSupport = true;
systemd.tmpfiles.rules = [ systemd.tmpfiles.rules = [

View file

@ -1,3 +1,4 @@
# AMD CPU specific configuration.
{ lib, config, ... }: { { lib, config, ... }: {
boot.kernelModules = [ "kvm-amd" ]; boot.kernelModules = [ "kvm-amd" ];
hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware; hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;

View file

@ -1,3 +1,5 @@
# AMD GPU specific configuration.
# No, I do not own any Nvidia/Intel GPUs, so I have no configuration for them.
{ nixpkgs, pkgs, ... }: { { nixpkgs, pkgs, ... }: {
boot.initrd.kernelModules = [ "amdgpu" ]; boot.initrd.kernelModules = [ "amdgpu" ];
services.xserver.videoDrivers = [ "amdgpu" ]; services.xserver.videoDrivers = [ "amdgpu" ];

6
module/CapsToggle.nix Normal file
View file

@ -0,0 +1,6 @@
# Toggle language with CapsLock. My wife prefers this.
{ lib, ... }: {
services.xserver.xkb = {
options = lib.mkForce "grp:caps_toggle";
};
}

View file

@ -1,19 +0,0 @@
{ pkgs, lib, ... }: let
list = "~/.config/linux/Flatpak.txt";
in {
# Enable Flatpaks.
services.flatpak.enable = true;
# Bootstrap apps on boot.
systemd.services.flatpakinstall = {
description = "Install Flatpak apps.";
wantedBy = [ "multi-user.target" ];
wants = [ "dotfiles.service" ];
after = [ "dotfiles.service" ];
serviceConfig.Type = "oneshot";
script = ''
${lib.getExe pkgs.flatpak} remote-add --if-not-exists flathub https://dl.flathub.org/repo/flathub.flatpakrepo
[[ -f ${list} ]] && cat ${list} | cut -f2 | ${lib.getExe pkgs.parallel} -j1 -- ${lib.getExe pkgs.flatpak} install -y --system {}
'';
};
}

View file

@ -4,17 +4,15 @@
./desktop/Dconf.nix ./desktop/Dconf.nix
./desktop/DisplayManager.nix ./desktop/DisplayManager.nix
./desktop/Sound.nix ./desktop/Sound.nix
./desktop/Wayland.nix
]; ];
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
adwsteamgtk gnome.gnome-tweaks # Gnome "hidden" settings.
gnome.gnome-remote-desktop openssl # It was needed for something, can't remember.
gnome.gnome-tweaks
gradience
openssl
wl-clipboard
]; ];
# Disable some Gnome apps.
services.gnome.gnome-keyring.enable = lib.mkForce false; services.gnome.gnome-keyring.enable = lib.mkForce false;
environment.gnome.excludePackages = with pkgs.gnome; [ environment.gnome.excludePackages = with pkgs.gnome; [
# baobab # Disk usage analyzer. # baobab # Disk usage analyzer.

View file

@ -1,3 +1,4 @@
# Intel CPU specific configuration.
{ ... }: { { ... }: {
boot.kernelModules = [ "kvm-intel" ]; boot.kernelModules = [ "kvm-intel" ];
} }

View file

@ -1,120 +0,0 @@
{ pkgs, inputs, const, style, util, key, setting, secret, ... } @args: let
homePath = "/data/data/com.termux.nix/files/home";
tmux = import ./common/tmux args;
bash = import ./common/bash args;
nvim = import ./common/nvim args;
ssh = import ./common/ssh args;
font = pkgs.runCommandNoCC "font" {} ''
cp ${pkgs.nerdfonts.override { fonts = [ "Terminus" ]; }}/share/fonts/truetype/NerdFonts/TerminessNerdFontMono-Regular.ttf $out
'';
colors = ''
background=#${style.color.bg.dark}
foreground=#${style.color.fg.light}
'';
in {
time.timeZone = const.timeZone;
nix.extraOptions = ''
experimental-features = nix-command flakes
'';
home-manager.config = {
home = {
stateVersion = const.droidStateVersion;
file = {
".dotfiles".source = inputs.self;
".ssh/config".text = ssh.config;
".termux/_font.ttf".source = font;
".termux/_colors.properties".text = colors;
};
sessionVariables = {
EDITOR = "nvim";
MANPAGER = "nvim +Man!";
NIXPKGS_ALLOW_UNFREE = "1";
NIX_CURRENT_SYSTEM = "${pkgs.stdenv.system}";
TERM = "xterm-256color";
};
};
programs = {
bash = {
enable = true;
bashrcExtra = bash.config + ''
[[ -f ~/.termux/font.ttf ]] || {
cp ~/.termux/_font.ttf ~/.termux/font.ttf
cp ~/.termux/_colors.properties ~/.termux/colors.properties
_warn "Termux config installed, please restart."
};
'';
};
tmux = {
enable = true;
extraConfig = tmux.config;
};
git = {
enable = true;
extraConfig = {
credential.helper = "store";
init.defaultBranch = "main";
pull.rebase = true;
push.autoSetupRemote = true;
rebase.autoStash = true;
user.signingkey = builtins.readFile secret.crypto.sign.key;
gpg.ssh.allowedSignersFile = toString(secret.crypto.sign.allowed);
gpg.format = secret.crypto.sign.format;
};
};
neovim = {
enable = true;
viAlias = true;
vimAlias = true;
extraConfig = nvim.config;
};
gpg = {
enable = true;
publicKeys = secret.crypto.publicKeys;
};
};
};
environment.packages = with pkgs; [
android-tools
binwalk
coreutils
curl
diffutils
ffmpeg
file
findutils
gawk
gcc
gdu
git
gnugrep
gnumake
gnused
gnutar
gzip xz
hostname
imagemagick
jq
lsof
man
nmap
openssh
parallel
pv
ripgrep
rsync
sqlite
pkgs.tmux
tree
utillinux
wget
yt-dlp
zip unzip
];
}

View file

@ -1,5 +1,8 @@
{ pkgs, lib, ... }: { { pkgs, lib, ... }: {
# Add Ollama CLI app.
environment.systemPackages = with pkgs; [ ollama ]; environment.systemPackages = with pkgs; [ ollama ];
# Enable Ollama server.
systemd.services.ollama = { systemd.services.ollama = {
description = "Ollama LLM server."; description = "Ollama LLM server.";
wantedBy = [ "multi-user.target" ]; wantedBy = [ "multi-user.target" ];
@ -10,6 +13,8 @@
HOME=/root ${lib.getExe pkgs.ollama} serve HOME=/root ${lib.getExe pkgs.ollama} serve
''; '';
}; };
# Download Ollama models.
systemd.services.ollamamodel = { systemd.services.ollamamodel = {
description = "Ollama LLM model."; description = "Ollama LLM model.";
wantedBy = [ "multi-user.target" ]; wantedBy = [ "multi-user.target" ];

View file

@ -1,58 +0,0 @@
{ pkgs, lib, ... }: let
controlFileMin = "/sys/class/power_supply/BAT0/charge_control_start_threshold";
controlFileMax = "/sys/class/power_supply/BAT0/charge_control_end_threshold";
onMin = "40";
onMax = "80";
offMin = "90";
offMax = "95";
script = pkgs.writeShellScriptBin "powerlimit" ''
function toggle() {
if status; then
echo ${offMax} > ${controlFileMax}
echo ${offMin} > ${controlFileMin}
else
echo ${onMin} > ${controlFileMin}
echo ${onMax} > ${controlFileMax}
fi
true
}
function waybar() {
status || echo -n ""
}
function status() {
local current=$(cat ${controlFileMax})
local enabled="${onMax}"
[[ "''${current}" = "''${enabled}" ]]
}
''${@}
'';
in {
systemd = {
services.powerlimit = {
description = "Limit battery charge.";
enable = true;
wantedBy = [ "multi-user.target" ];
serviceConfig = {
Type = "simple";
RemainAfterExit = "yes";
ExecStart = "${lib.getExe pkgs.bash} -c 'echo 40 > ${controlFileMin}; echo 80 > ${controlFileMax};'";
ExecStop = "${lib.getExe pkgs.bash} -c 'echo 95 > ${controlFileMax}; echo 90 > ${controlFileMin};'";
};
};
# HACK: Allow user access.
tmpfiles.rules = [
"z ${controlFileMax} 0777 - - - -"
"z ${controlFileMin} 0777 - - - -"
];
};
environment.systemPackages = [ script ];
}

View file

@ -0,0 +1,32 @@
# ThinkPad charge limits.
{ pkgs, lib, ... } @args: let
controlFileMin = "/sys/class/power_supply/BAT0/charge_control_start_threshold";
controlFileMax = "/sys/class/power_supply/BAT0/charge_control_end_threshold";
onMin = "40";
onMax = "80";
offMin = "90";
offMax = "95";
script = pkgs.writeShellScriptBin "powerlimit" (import ./powerlimit/Script.nix {
inherit controlFileMax;
inherit controlFileMin;
inherit onMin;
inherit onMax;
inherit offMin;
inherit offMax;
}).script;
in {
imports = [
(import ./powerlimit ({
inherit controlFileMax;
inherit controlFileMin;
inherit onMin;
inherit onMax;
inherit offMin;
inherit offMax;
} // args))
];
environment.systemPackages = [ script ];
}

View file

@ -1,3 +1,4 @@
# AMD CPU boost control.
{ pkgs, ... } @args: let { pkgs, ... } @args: let
controlFile = "/sys/devices/system/cpu/cpufreq/boost"; controlFile = "/sys/devices/system/cpu/cpufreq/boost";
enable = "0"; enable = "0";

View file

@ -1,3 +1,4 @@
# Intel CPU boost control.
{ pkgs, ... } @args: let { pkgs, ... } @args: let
controlFile = "/sys/devices/system/cpu/intel_pstate/no_turbo"; controlFile = "/sys/devices/system/cpu/intel_pstate/no_turbo";
enable = "1"; enable = "1";

View file

@ -1,5 +1,6 @@
# Module that enables remote builds. This is a client configuration.
{ config, pkgs, ... }: { { config, pkgs, ... }: {
# NOTE: Requires key to be present in secret.ssh.builderKeys. # NOTE: Requires host private key to be present in secret.ssh.builderKeys.
nix.buildMachines = [{ nix.buildMachines = [{
hostName = "nixbuilder"; hostName = "nixbuilder";
protocol = "ssh-ng"; protocol = "ssh-ng";

View file

@ -1,6 +1,9 @@
# Module that enables remote builds. This is a server configuration.
{ pkgs, secret, lib, ... }: let { pkgs, secret, lib, ... }: let
keyPath = "/root/.nixbuilder"; keyPath = "/root/.nixbuilder";
in { in {
# Service that generates new key on boot if not present.
# Don't forget to add new key to secret.ssh.builderKeys.
systemd.services.generate-nix-cache-key = { systemd.services.generate-nix-cache-key = {
wantedBy = [ "multi-user.target" ]; wantedBy = [ "multi-user.target" ];
serviceConfig.Type = "oneshot"; serviceConfig.Type = "oneshot";
@ -13,6 +16,7 @@ in {
''; '';
}; };
# Add `nixbuilder` restricted user.
users.groups.nixbuilder = {}; users.groups.nixbuilder = {};
users.users.nixbuilder = { users.users.nixbuilder = {
openssh.authorizedKeys.keys = secret.ssh.builderKeys; openssh.authorizedKeys.keys = secret.ssh.builderKeys;
@ -24,7 +28,8 @@ in {
group = "nixbuilder"; group = "nixbuilder";
}; };
# To apply: nix store sign --all -k /path/to/secret-key-file # Sign store automatically.
# Sign existing store with: nix store sign --all -k /path/to/secret-key-file
nix.extraOptions = '' nix.extraOptions = ''
trusted-users = nixbuilder trusted-users = nixbuilder
secret-key-files = ${keyPath}/private-key secret-key-files = ${keyPath}/private-key

View file

@ -8,23 +8,20 @@ in {
./desktop/Bluetooth.nix ./desktop/Bluetooth.nix
./desktop/Brightness.nix ./desktop/Brightness.nix
./desktop/Dconf.nix ./desktop/Dconf.nix
./desktop/GnomeApps.nix
./desktop/Portal.nix ./desktop/Portal.nix
./desktop/Realtime.nix ./desktop/Realtime.nix
./desktop/Sound.nix ./desktop/Sound.nix
./desktop/Waybar.nix ./desktop/Waybar.nix
./desktop/Wayland.nix
]; ];
services.gnome.gnome-keyring.enable = lib.mkForce false; services.gnome.gnome-keyring.enable = lib.mkForce false;
systemd.services.keyd.path = [ script pkgs.sway ];
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
gnome.adwaita-icon-theme # GTK icons.
grim slurp # Screenshot. grim slurp # Screenshot.
mako # Notification system. mako # Notification system.
networkmanagerapplet # Internet configuration. networkmanagerapplet # Internet configuration.
pamixer pavucontrol pulseaudio # Audio. pamixer pavucontrol pulseaudio # Audio.
playerctl # Multimedia controls. playerctl # Multimedia controls.
wl-clipboard # Clipboard.
script script
]; ];

View file

@ -8,5 +8,4 @@
# glib # glib
gnome3.adwaita-icon-theme # default gnome cursors, gnome3.adwaita-icon-theme # default gnome cursors,
]; ];
###
} }

View file

@ -0,0 +1,9 @@
{ pkgs, ... }: {
variables = {
EDITOR = "nvim";
MANPAGER = "nvim +Man!";
NIXPKGS_ALLOW_UNFREE = "1";
NIX_CURRENT_SYSTEM = "${pkgs.stdenv.system}";
TERM = "xterm-256color";
};
}

12
module/android/Git.nix Normal file
View file

@ -0,0 +1,12 @@
{ secret, ... }: {
config = {
credential.helper = "store";
gpg.format = secret.crypto.sign.format;
gpg.ssh.allowedSignersFile = toString(secret.crypto.sign.allowed);
init.defaultBranch = "main";
pull.rebase = true;
push.autoSetupRemote = true;
rebase.autoStash = true;
user.signingkey = builtins.readFile secret.crypto.sign.key;
};
}

5
module/android/Nix.nix Normal file
View file

@ -0,0 +1,5 @@
{ ... }: {
extraOptions = ''
experimental-features = nix-command flakes
'';
}

View file

@ -0,0 +1,31 @@
{ pkgs, ... }: {
list = with pkgs; [
android-tools
binwalk
coreutils diffutils findutils utillinux
curl
ffmpeg
file
gawk gnused gnugrep gnumake ripgrep
gcc
gdu
git
gnutar gzip xz
hostname
imagemagick
jq
lsof
man
nmap
openssh
parallel
pv
rsync
sqlite
pkgs.tmux
tree
wget
yt-dlp
zip unzip
];
}

18
module/android/Termux.nix Normal file
View file

@ -0,0 +1,18 @@
{ pkgs, style, util, ... }: {
font = pkgs.runCommandNoCC "font" {} ''
cp ${pkgs.nerdfonts.override { fonts = [ "Terminus" ]; }}/share/fonts/truetype/NerdFonts/TerminessNerdFontMono-Regular.ttf $out
'';
colors = util.trimTabs ''
background=#${style.color.bg.dark}
foreground=#${style.color.fg.light}
'';
initScript = util.trimTabs ''
[[ -f ~/.termux/font.ttf ]] || {
cp ~/.termux/_font.ttf ~/.termux/font.ttf
cp ~/.termux/_colors.properties ~/.termux/colors.properties
_warn "Termux config installed, please restart."
};
'';
}

View file

@ -0,0 +1,62 @@
{ pkgs, inputs, const, style, util, key, setting, secret, ... } @args: let
# Path where Termux stores user data.
homePath = "/data/data/com.termux.nix/files/home";
# Android modules.
environment = import ./Environment.nix args;
git = import ./Git.nix args;
nix = import ./Nix.nix args;
package = import ./Package.nix args;
termux = import ./Termux.nix args;
# External modules.
bash = import ../common/bash args;
nvim = import ../common/nvim args;
ssh = import ../common/ssh args;
tmux = import ../common/tmux args;
in {
time.timeZone = const.timeZone;
nix.extraOptions = nix.extraOptions;
environment.packages = package.list;
home-manager.config = {
home = {
stateVersion = const.droidStateVersion;
sessionVariables = environment.variables;
file = {
".dotfiles".source = inputs.self;
".ssh/config".text = ssh.config;
".termux/_font.ttf".source = termux.font;
".termux/_colors.properties".text = termux.colors;
};
};
programs = {
bash = {
enable = true;
bashrcExtra = bash.config + termux.initScript;
};
tmux = {
enable = true;
extraConfig = tmux.config;
};
git = {
enable = true;
extraConfig = git.config;
};
neovim = {
enable = true;
extraConfig = nvim.config;
};
gpg = {
enable = true;
publicKeys = secret.crypto.publicKeys;
};
};
};
}

View file

@ -1,3 +1,7 @@
# System automatic updates.
# This is a systemd service that pulls updates every hour.
# Unlike system.autoUpgrade, this script also verifies my git signature
# to prevent unathorized changes to hosts.
{ const, pkgs, lib, secret, util, ... }: { { const, pkgs, lib, secret, util, ... }: {
systemd.services.autoupdate = util.mkStaticSystemdService { systemd.services.autoupdate = util.mkStaticSystemdService {
enable = true; enable = true;

View file

@ -1,9 +1,14 @@
{ lib, style, util, pkgs, ... } @args: let { lib, style, util, pkgs, ... } @args: let
bash = import ./bash args; bash = import ./bash args;
in { in {
# Add my bash configuration to all *interactive* shells.
programs.bash.interactiveShellInit = bash.config; programs.bash.interactiveShellInit = bash.config;
# Remove default aliases for `l`, `ll` etc as they break my function definitions.
environment.shellAliases = lib.mkForce {}; environment.shellAliases = lib.mkForce {};
environment.variables = { environment.variables = {
# Specify terminal mode.
TERM = "xterm-256color"; TERM = "xterm-256color";
}; };
} }

View file

@ -7,17 +7,24 @@
loader = { loader = {
efi.canTouchEfiVariables = true; efi.canTouchEfiVariables = true;
# Use systemd to boot.
systemd-boot = { systemd-boot = {
enable = true; enable = true;
# Limit the amound of generations availabe for rollback.
# This helps to save storage space.
configurationLimit = 10; configurationLimit = 10;
}; };
}; };
tmp.useTmpfs = true;
initrd = {
kernelModules = [
"dm-snapshot"
];
# Mount /tmp on tmpfs.
tmp.useTmpfs = true;
initrd = {
# Don't really know if I need it. Kept from hardware-configuration.
kernelModules = [ "dm-snapshot" ];
# Kernel modules available for all the hosts.
availableKernelModules = [ availableKernelModules = [
"ahci" "ahci"
"ata_piix" "ata_piix"

View file

@ -12,16 +12,16 @@
services.pcscd.enable = true; services.pcscd.enable = true;
# Yubikey touch notification. # Yubikey touch notification.
# ISSUE: Not working on Sway with Mako for some reason.
# programs.yubikey-touch-detector.enable = true; # programs.yubikey-touch-detector.enable = true;
# Extra packages.
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
yubikey-manager # Yubikey Manager. yubikey-manager
# yubioath-desktop # OTP. # yubioath-desktop # OTP.
]; ];
# Store GPG data on tmpfs. # Store GPG data on tmpfs.
environment.variables = { # environment.variables = {
# GNUPGHOME = "$(mktemp -d -t gnupg-$(date +%Y-%m-%d)-XXXXXXXXXX)"; # GNUPGHOME = "$(mktemp -d -t gnupg-$(date +%Y-%m-%d)-XXXXXXXXXX)";
}; # };
} }

View file

@ -1,13 +1,8 @@
{ pkgs, ... }: { { pkgs, ... }: {
# Distrobox works best with Podman, so enable it here.
imports = [ ./Podman.nix ];
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
distrobox distrobox
]; ];
virtualisation = {
podman = {
enable = true;
defaultNetwork.settings.dns_enabled = false;
dockerCompat = false;
};
};
} }

View file

@ -1,4 +1,4 @@
{ inputs, ... }: { { inputs, ... }: {
# Easy to find copy just in case. # Add a link for the active configuration to /etc/dotfiles.
environment.etc.dotfiles.source = inputs.self; environment.etc.dotfiles.source = inputs.self;
} }

View file

@ -1,9 +1,12 @@
# I use the same layout on all hosts with GPT labels.
# This way I can configure system's FS in one place here.
{ ... }: { { ... }: {
fileSystems."/" = { fileSystems."/" = {
device = "/dev/disk/by-partlabel/NIXROOT"; device = "/dev/disk/by-partlabel/NIXROOT";
fsType = "ext4"; fsType = "ext4";
options = [ "noatime" ]; options = [ "noatime" ];
}; };
fileSystems."/boot" = { fileSystems."/boot" = {
device = "/dev/disk/by-partlabel/NIXBOOT"; device = "/dev/disk/by-partlabel/NIXBOOT";
fsType = "vfat"; fsType = "vfat";

View file

@ -1,3 +1,4 @@
{ ... }: { { ... }: {
# Disable firewall as I configure firewall on my router.
networking.firewall.enable = false; networking.firewall.enable = false;
} }

View file

@ -1,7 +1,12 @@
{ pkgs, ... }: { { pkgs, ... }: {
fonts.packages = with pkgs; [ fonts.packages = with pkgs; [
# Use Apple fonts for system and text.
(pkgs.callPackage ./applefont {}) (pkgs.callPackage ./applefont {})
# Use Nerd version of Terminus for monospaced fonts.
(nerdfonts.override { fonts = [ "Terminus" ]; }) (nerdfonts.override { fonts = [ "Terminus" ]; })
# I don't use FA, but add it for compatibility.
font-awesome font-awesome
]; ];
} }

View file

@ -2,7 +2,6 @@
# Use latest kernel. # Use latest kernel.
boot.kernelPackages = pkgs.linuxPackages_latest; boot.kernelPackages = pkgs.linuxPackages_latest;
# Sysctl.
boot.kernel.sysctl = { boot.kernel.sysctl = {
# Spoof protection. # Spoof protection.
"net.ipv4.conf.default.rp_filter" = 1; "net.ipv4.conf.default.rp_filter" = 1;

View file

@ -12,11 +12,11 @@
compose = "layer(layer_macro)"; # Input macros. compose = "layer(layer_macro)"; # Input macros.
esc = "${key.sysctrl}"; # System controls. esc = "${key.sysctrl}"; # System controls.
leftcontrol = "overload(layer_alternative, leftcontrol)"; # Alternative layer for home, end etc. leftcontrol = "overload(layer_alternative, leftcontrol)"; # Alternative layer for home, end etc.
rightalt = "capslock"; # Language toggle.
rightcontrol = "layer(layer_control)"; # Media and other controls. rightcontrol = "layer(layer_control)"; # Media and other controls.
rightshift = "backspace"; # Backspace. rightshift = "backspace"; # Backspace.
}; };
# Alternative navigation.
layer_alternative = { layer_alternative = {
w = "pageup"; w = "pageup";
a = "home"; a = "home";
@ -29,9 +29,10 @@
j = "down"; j = "down";
k = "up"; k = "up";
l = "right"; l = "right";
# space = "macro2(1, 100, macro(space))"; # NOTE: Possible bhop example. # space = "macro2(1, 100, macro(space))"; # NOTE: Possible bhop example. Use in per-application, not here.
}; };
# Media controls.
layer_control = { layer_control = {
space = "playpause"; space = "playpause";
w = "volumeup"; w = "volumeup";
@ -53,5 +54,6 @@
users.groups.keyd = {}; users.groups.keyd = {};
systemd.services.keyd.serviceConfig.CapabilityBoundingSet = [ "CAP_SETGID" ]; systemd.services.keyd.serviceConfig.CapabilityBoundingSet = [ "CAP_SETGID" ];
# Debug toggle just in case I need it again.
# systemd.services.keyd.environment.KEYD_DEBUG = "1"; # systemd.services.keyd.environment.KEYD_DEBUG = "1";
} }

View file

@ -1,4 +1,7 @@
{ pkgs, ... }: { { pkgs, ... }: {
# This thing allow you to run ELF (binary) files just like in other distros.
# The only difference is that we need to specify their linking dependencies
# bellow in `libraries` section.
programs.nix-ld = { programs.nix-ld = {
enable = true; enable = true;
package = pkgs.nix-ld; package = pkgs.nix-ld;

View file

@ -1,6 +1,8 @@
{ const, ... }: { { const, ... }: {
time.timeZone = const.timeZone; time.timeZone = const.timeZone;
i18n.defaultLocale = "en_US.UTF-8"; i18n.defaultLocale = "en_US.UTF-8";
# You can customize your Locale in detail like that.
# i18n.extraLocaleSettings = { # i18n.extraLocaleSettings = {
# LC_ADDRESS = "ru_RU.UTF-8"; # LC_ADDRESS = "ru_RU.UTF-8";
# LC_IDENTIFICATION = "ru_RU.UTF-8"; # LC_IDENTIFICATION = "ru_RU.UTF-8";

View file

@ -1,10 +1,23 @@
{ pkgs, ... }: { { pkgs, ... }: {
environment.variables = { environment.variables = {
# Allow running of proprietary software.
NIXPKGS_ALLOW_UNFREE = "1"; NIXPKGS_ALLOW_UNFREE = "1";
NIX_CURRENT_SYSTEM = "${pkgs.stdenv.system}";
# I use this env variable to get currently running architecture.
NIX_CURRENT_SYSTEM = "${pkgs.stdenv.system}";
}; };
nixpkgs.config.allowUnfree = true;
# Allow installation of proprietary software.
nixpkgs.config.allowUnfree = true;
# Deduplicate store automatically. Slows down switches a bit, but saves space.
nix.settings.auto-optimise-store = true; nix.settings.auto-optimise-store = true;
# Extra configuration line-by-line:
# 1. Allow use of flakes.
# 2. When running GC, keep .drv files.
# 3. When running GC, keep build dependencies.
# 4. Run GC automatically when there's a 50 GB or less free space.
nix.extraOptions = '' nix.extraOptions = ''
experimental-features = nix-command flakes experimental-features = nix-command flakes
keep-derivations = true keep-derivations = true
@ -12,7 +25,11 @@
min-free = ${toString(50 * 1000 * 1000 * 1000)} min-free = ${toString(50 * 1000 * 1000 * 1000)}
''; '';
# max-free = ${toString(10 * 1024 * 1024 * 1024)} # NOTE: Currently I run GC completely, but this setting (put above near min-free)
# can stop GC when you hit 101 GB of free space available.
# max-free = ${toString(101 * 1024 * 1024 * 1024)}
# NOTE: Enable this if you want to run GC on schedule. I instead use `min-free`.
# nix.gc = { # nix.gc = {
# automatic = true; # automatic = true;
# dates = "weekly"; # dates = "weekly";

View file

@ -3,19 +3,16 @@
in { in {
environment = { environment = {
variables = { variables = {
EDITOR = "nvim"; EDITOR = "nvim"; # Use Nvim as a default editor.
MANPAGER = "nvim +Man!"; MANPAGER = "nvim +Man!"; # Use Nvim to read man pages.
}; };
systemPackages = with pkgs; [ systemPackages = with pkgs; [
gcc gcc # Required for Treesitter parsers.
]; ];
}; };
programs.neovim = { programs.neovim = {
enable = true; enable = true;
viAlias = true; configure.customRC = nvim.config;
vimAlias = true;
configure = {
customRC = nvim.config;
};
}; };
} }

View file

@ -1,41 +1,40 @@
{ pkgs, ... }: { { pkgs, ... }: {
# List of common packages I use.
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
binwalk binwalk # Can analyze files for other files inside them.
btop htop btop htop # System monitors.
coreutils coreutils usbutils # Common utilities.
cryptsetup cryptsetup # Filesystem encryption (LUKS).
curl curl # CLI http client.
ddrescue testdisk ddrescue testdisk # Apps to recover data from drives.
ffmpeg fastfetch # Systeminfo summary.
file ffmpeg # Video/audio converter.
gcc file # Get general info about a file.
gdu gcc # C compiler.
gnumake gdu # TUI storage analyzer.
gnused gnumake gnused # GNU utils.
gparted gparted parted # GUI/CLI disk partition tool.
imagemagick imagemagick # Image converter and transformation tool.
jdk jdk11 jdk19 jdk20 jdk # Java.
jq jq # Json parser.
lm_sensors lm_sensors # Hardware sensors, like temperature and fan speeds.
lshw lshw # Detailed hardware info tool.
lsof lsof # Find current file users.
ltex-ls ltex-ls # Latex LSP for neovim spellcheck.
neofetch nixd # Nix LSP.
nixd nmap # Network analyzer.
nmap parallel # Run programs in parallel.
parallel pv # IO progress bar.
parted ripgrep # Grep for file search.
pv scanmem # Memory edit tool.
ripgrep smartmontools # S.M.A.R.T. tools.
scanmem sqlite # Serverless file-based database engine.
smartmontools tree # Show directory stricture as a tree.
sqlite ventoy # Boot multiple ISO/images from a single USB stick.
tree wget # CLI http download tool.
universal-android-debloater zip unzip # Zip archive/unarchive tools.
usbutils
ventoy universal-android-debloater # Debloat Android devices.
wget
zip unzip
]; ];
# Special packages. # Special packages.

14
module/common/Podman.nix Normal file
View file

@ -0,0 +1,14 @@
{ ... }: {
virtualisation = {
podman = {
enable = true;
# Free the 53 port ffs.
defaultNetwork.settings.dns_enabled = false;
# Do not interfere with Docker so we can have both installed at the same time.
# Podman can't replace Docker anyway.
dockerCompat = false;
};
};
}

View file

@ -1,6 +1,8 @@
{ pkgs, util, ... } @args: let { pkgs, util, ... } @args: let
ssh = import ./ssh args; ssh = import ./ssh args;
in { in {
programs.ssh.extraConfig = ssh.config;
# Add SSHFS to mount remote filesystems over SSH.
environment.systemPackages = with pkgs; [ sshfs ]; environment.systemPackages = with pkgs; [ sshfs ];
programs.ssh.extraConfig = ssh.config;
} }

View file

@ -1,5 +1,6 @@
{ secret, ... }: { { secret, ... }: {
users.users.root.openssh.authorizedKeys.keys = secret.ssh.trustedKeys; users.users.root.openssh.authorizedKeys.keys = secret.ssh.trustedKeys;
services.openssh = { services.openssh = {
enable = true; enable = true;
allowSFTP = true; allowSFTP = true;

View file

@ -1,7 +1,11 @@
{ pkgs, config, wallpaper, ... }: let { pkgs, config, wallpaper, ... }: let
# Sometimes stylix does not generate enough contrast for text.
# This setting forces white text to ensure contrast on dark backgrounds.
forceWhiteText = false; forceWhiteText = false;
in { in {
# Add a permanent link for the wallpaper to /etc/wallpaper.
environment.etc.wallpaper.source = wallpaper.path; environment.etc.wallpaper.source = wallpaper.path;
stylix = { stylix = {
image = wallpaper.path; image = wallpaper.path;
autoEnable = true; autoEnable = true;

View file

@ -1,4 +1,3 @@
{ ... }: { { ... }: {
zramSwap.enable = true; zramSwap.enable = true;
swapDevices = [ ];
} }

View file

@ -1,4 +1,7 @@
{ ... }: { { ... }: {
# Default UMASK.
security.loginDefs.settings.UMASK = "077"; security.loginDefs.settings.UMASK = "077";
# Disallow users modification outside of this config.
users.mutableUsers = false; users.mutableUsers = false;
} }

View file

@ -1,4 +1,6 @@
{ pkgs, ... }: { { pkgs, ... }: {
# Instead of overlaying and rebuilding YtDlp I download the release from
# GitHub and patch it for Nix.
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
(pkgs.callPackage ./ytdlp {}) (pkgs.callPackage ./ytdlp {})
]; ];

View file

@ -1,3 +1,6 @@
# Apple San Francisco and New York fonts.
# They are not available in Nixpkgs repo, so this script
# downloads the fonts from Apple website and adds them to Nix store.
{ lib, stdenv, fetchurl, p7zip }: let { lib, stdenv, fetchurl, p7zip }: let
pro = fetchurl { pro = fetchurl {
url = "https://devimages-cdn.apple.com/design/resources/download/SF-Pro.dmg"; url = "https://devimages-cdn.apple.com/design/resources/download/SF-Pro.dmg";

View file

@ -4,12 +4,7 @@
in { in {
inherit modules; inherit modules;
config = util.trimTabs ('' config = modules + util.trimTabs (''
# If not running interactively, don't do anything.
# [[ "$-" != *i* ]] && return
'') + modules + util.trimTabs (''
# Find all functions. # Find all functions.
function find_function() { function find_function() {
/usr/bin/env cat ${modulesFile} | /usr/bin/env grep "^function.*()" | /usr/bin/env sed -e "s/^function //" -e "s/().*//" /usr/bin/env cat ${modulesFile} | /usr/bin/env grep "^function.*()" | /usr/bin/env sed -e "s/^function //" -e "s/().*//"

View file

@ -1,17 +1,19 @@
{ inputs, pkgs, util, key, ... } @args: let { inputs, pkgs, util, key, ... } @args: let
nvimRc = { runtimes, cfgs }: let # Create Neovim configuration.
runtimeRc = builtins.foldl' (acc: r: nvimRc = { runtimes, configs }: let
# Plugin paths to install.
runtimeRc = util.trimTabs (builtins.foldl' (acc: r:
acc + "set runtimepath+=${r}\n" acc + "set runtimepath+=${r}\n"
) "" runtimes; ) "" runtimes);
config = pkgs.writeText "nvimRc" (builtins.foldl' (acc: cfg: # My configuration files combined into one big file.
acc + (import cfg args).text config = pkgs.writeText "nvimRc" (util.catText configs args);
) "" cfgs);
cfgRc = "lua dofile(\"${config}\")"; # Tell Neovim to load this file.
in runtimeRc + cfgRc; configRc = "lua dofile(\"${config}\")";
in runtimeRc + configRc;
in { in {
config = util.trimTabs (nvimRc { config = nvimRc {
runtimes = [ runtimes = [
"~/.cache/nvim" "~/.cache/nvim"
"~/.cache/nvim/treesitter" "~/.cache/nvim/treesitter"
@ -36,7 +38,8 @@ in {
"${inputs.nvimTrouble}" "${inputs.nvimTrouble}"
"${inputs.nvimWhichKey}" "${inputs.nvimWhichKey}"
]; ];
cfgs = [
configs = [
./module/key/Rekey.nix ./module/key/Rekey.nix
./module/key/Leader.nix ./module/key/Leader.nix
./module/config/Autoread.nix ./module/config/Autoread.nix
@ -79,5 +82,5 @@ in {
./module/key/Trouble.nix ./module/key/Trouble.nix
./module/key/Whichkey.nix ./module/key/Whichkey.nix
]; ];
}); };
} }

View file

@ -1,3 +1,4 @@
# SSH client configuration.
{ util, ... }: { { util, ... }: {
config = util.trimTabs '' config = util.trimTabs ''
Host dasha Host dasha

View file

@ -1,18 +0,0 @@
scheme: "Gruvbox"
author: "voronind"
base00: "121212" # Background.
base01: "212526" # Line cursor.
base02: "38403f" # Statusline.
base03: "47433e" # Line numbers.
base04: "6e78a1" # Selected line number.
base05: "b3afaf" # Foreground.
base06: "d8a9a9" # Function.
base07: "fcf4de" # Bright yellow.
base08: "a74049" # Cyan.
base09: "d35f5a" # Blue.
base0A: "ac5d5d" # Yellow.
base0B: "9f7b7b" # String green.
base0C: "3a877e" # Comment green.
base0D: "686995" # Purple.
base0E: "84abab" # Orange.
base0F: "9e446f" # Gray.

View file

@ -2,6 +2,7 @@
mod = key.tmux.mod; mod = key.tmux.mod;
in { in {
text = '' text = ''
unbind-key C-b
bind -n ${mod}-${key.tmux.reload} source-file /etc/tmux.conf bind -n ${mod}-${key.tmux.reload} source-file /etc/tmux.conf
''; '';
} }

View file

@ -30,21 +30,28 @@ in {
environment = { environment = {
systemPackages = with pkgs; [ systemPackages = with pkgs; [
android-studio jetbrains.idea-community adwsteamgtk # Steam GTK theme. Need to run the app to apply.
appimage-run appimage-run # Tool to run .AppImage files in NixOS.
aseprite aseprite # Pixel Art draw app. WARNING: Always builds from source.
blender-hip blender-hip # Blender with HiP support.
bottles dxvk gamescope pkgs.mangohud vkd3d wine64 calibre # Book library manager.
calibre evince # Document viewer.
gimp gimp # Image manipulation program.
godot_4 gnome.adwaita-icon-theme # GTK icons.
jellyfin-media-player gnome.gnome-calculator # Calculator.
(mpv.override {scripts = [mpvScripts.mpris];}) gnome.gnome-font-viewer # Font viewer.
obs-studio gnome.nautilus # File manager.
onlyoffice-bin godot_4 # Game development engine.
scanmem jellyfin-media-player # Jellyfin client (self-hosted Netflix).
steam-run loupe # Image viewer.
tor-browser obs-studio # Streaming/recording app.
onlyoffice-bin # Office documents app suite.
steam-run # Run native apps in Steam environment, like Minecraft. For Windows games use Bottles.
tor-browser # Privacy browser.
android-studio jetbrains.idea-community # JetBrans IDEs.
bottles dxvk gamescope pkgs.mangohud vkd3d wine64 # Gaming!
(mpv.override {scripts = [mpvScripts.mpris];}) # Media player.
]; ];
variables = { variables = {
@ -58,6 +65,12 @@ in {
}; };
}; };
# File manager file previews.
services.gnome.sushi.enable = true;
# File manager network features.
services.gvfs.enable = true;
# Special packages. # Special packages.
programs.steam.enable = true; programs.steam.enable = true;
} }

View file

@ -1,6 +1,7 @@
{ lib, key, ... }: let { lib, key, ... }: let
mod = key.gnome.mod; mod = key.gnome.mod;
in { in {
# Gnome DE and GTK apps configuration.
programs.dconf.enable = true; programs.dconf.enable = true;
programs.dconf.profiles.user = { programs.dconf.profiles.user = {
enableUserDb = true; # Delete `~/.config/dconf/user` to reset user settings. enableUserDb = true; # Delete `~/.config/dconf/user` to reset user settings.

View file

@ -4,6 +4,6 @@
services.xserver.desktopManager.gnome.enable = true; services.xserver.desktopManager.gnome.enable = true;
services.xserver.xkb = { services.xserver.xkb = {
layout = "us,ru"; layout = "us,ru";
options = "grp:caps_toggle,lv3:ralt_switch"; options = "grp:toggle";
}; };
} }

View file

@ -1,18 +0,0 @@
{ pkgs, ... }: {
environment.systemPackages = with pkgs; [
adwsteamgtk
evince
gnome.adwaita-icon-theme
gnome.gnome-calculator
gnome.nautilus
loupe
gnome.gnome-font-viewer
# gnome.gnome-keyring
];
# Nautilus previews.
services.gnome.sushi.enable = true;
# Nautilus network.
services.gvfs.enable = true;
}

View file

@ -1,3 +1,4 @@
# Polkit agent is used by apps to ask for Root password with a popup.
{ pkgs, lib, ... }: { { pkgs, lib, ... }: {
security.polkit.enable = true; security.polkit.enable = true;
systemd = { systemd = {

View file

@ -1,3 +1,4 @@
# Portals are needed for Wayland apps to select files, screen shares etc.
{ pkgs, ... }: { { pkgs, ... }: {
xdg.portal = { xdg.portal = {
enable = true; enable = true;

View file

@ -1,3 +1,4 @@
# Improve DE performance.
{ ... }: { { ... }: {
security.pam.loginLimits = [ security.pam.loginLimits = [
{ domain = "@users"; item = "rtprio"; type = "-"; value = 1; } { domain = "@users"; item = "rtprio"; type = "-"; value = 1; }

View file

@ -1,4 +1,5 @@
{ ... }: { { ... }: {
# Systemd custom target for Sway.
systemd.user.targets.gui-session = { systemd.user.targets.gui-session = {
after = [ "graphical-session-pre.target" ]; after = [ "graphical-session-pre.target" ];
bindsTo = [ "graphical-session.target" ]; bindsTo = [ "graphical-session.target" ];

View file

@ -2,6 +2,9 @@
waybar = import ./waybar args; waybar = import ./waybar args;
in { in {
programs.waybar.enable = true; programs.waybar.enable = true;
environment.variables.WAYBAR_CONFIG = pkgs.writeText "waybarConfig" waybar.config;
environment.variables.WAYBAR_STYLE = pkgs.writeText "waybarStyle" waybar.style; environment.variables = {
WAYBAR_CONFIG = pkgs.writeText "waybarConfig" waybar.config;
WAYBAR_STYLE = pkgs.writeText "waybarStyle" waybar.style;
};
} }

View file

@ -0,0 +1,5 @@
{ pkgs, ... }: {
environment.systemPackages = with pkgs; [
wl-clipboard
];
}

View file

@ -35,6 +35,7 @@ in {
]; ];
ExtensionUpdate = true; ExtensionUpdate = true;
ExtensionSettings = { ExtensionSettings = {
# Block extension installation outside of this config.
"*" = { "*" = {
install_sources = [ "*" ]; install_sources = [ "*" ];
installation_mode = "blocked"; installation_mode = "blocked";
@ -45,9 +46,11 @@ in {
"{446900e4-71c2-419f-a6a7-df9c091e268b}" = mkExtension "https://addons.mozilla.org/firefox/downloads/latest/bitwarden-password-manager/latest.xpi"; "{446900e4-71c2-419f-a6a7-df9c091e268b}" = mkExtension "https://addons.mozilla.org/firefox/downloads/latest/bitwarden-password-manager/latest.xpi";
"{d7742d87-e61d-4b78-b8a1-b469842139fa}" = mkExtension "https://addons.mozilla.org/firefox/downloads/latest/vimium-ff/latest.xpi"; "{d7742d87-e61d-4b78-b8a1-b469842139fa}" = mkExtension "https://addons.mozilla.org/firefox/downloads/latest/vimium-ff/latest.xpi";
"{e7625f06-e252-479d-ac7a-db68aeaff2cb}" = mkExtension "https://addons.mozilla.org/firefox/downloads/latest/togglefonts/latest.xpi"; "{e7625f06-e252-479d-ac7a-db68aeaff2cb}" = mkExtension "https://addons.mozilla.org/firefox/downloads/latest/togglefonts/latest.xpi";
# NOTE: This extension is helpful to find the required parameters for this config.
# Or find them yourself inside the `about:support`.
# "queryamoid@kaply.com" = mkExtension "https://github.com/mkaply/queryamoid/releases/download/v0.1/query_amo_addon_id-0.1-fx.xpi"; # "queryamoid@kaply.com" = mkExtension "https://github.com/mkaply/queryamoid/releases/download/v0.1/query_amo_addon_id-0.1-fx.xpi";
# "{08d5243b-4236-4a27-984b-1ded22ce01c3}" = mkExtension "https://addons.mozilla.org/firefox/downloads/latest/gruvboxgruvboxgruvboxgruvboxgr/latest.xpi";
}; };
# NOTE: `firefox-esr` edition is required to change default search engine.
SearchEngines = { SearchEngines = {
Default = "Whoogle"; Default = "Whoogle";
Add = [ Add = [

View file

@ -1,17 +0,0 @@
{ ... }: {
text = ''
button {
/* Use box-shadow instead of border so the text isn't offset */
box-shadow: inset 0 -3px transparent;
/* Avoid rounded borders under each button name */
border: none;
border-radius: 0;
}
/* https://github.com/Alexays/Waybar/wiki/FAQ#the-workspace-buttons-have-a-strange-hover-effect */
button:hover {
background: inherit;
box-shadow: inset 0 -3px #ffffff;
}
'';
}

View file

@ -1,7 +1,6 @@
{ style, ... }: { { style, ... }: {
text = '' text = ''
* { * {
/* `otf-font-awesome` is required to be installed for icons */
font-family: "${style.font.serif.name}", "Terminess Nerd Font Propo"; font-family: "${style.font.serif.name}", "Terminess Nerd Font Propo";
font-size: ${toString(style.font.size.desktop)}px; font-size: ${toString(style.font.size.desktop)}px;
} }

View file

@ -0,0 +1,34 @@
{ controlFileMax
, controlFileMin
, onMax
, onMin
, offMax
, offMin
, ... }: {
script = ''
function toggle() {
if status; then
echo ${offMax} > ${controlFileMax}
echo ${offMin} > ${controlFileMin}
else
echo ${onMin} > ${controlFileMin}
echo ${onMax} > ${controlFileMax}
fi
true
}
function waybar() {
status || echo -n ""
}
function status() {
local current=$(cat ${controlFileMax})
local enabled="${onMax}"
[[ "''${current}" = "''${enabled}" ]]
}
''${@}
'';
}

View file

@ -0,0 +1,31 @@
# Control battery charge limits. Control with `powerlimit` script.
{ pkgs
, lib
, controlFileMax
, controlFileMin
, onMax
, onMin
, offMax
, offMin
, ... }: {
systemd = {
services.powerlimit = {
description = "Limit battery charge.";
enable = true;
wantedBy = [ "multi-user.target" ];
serviceConfig = {
Type = "simple";
RemainAfterExit = "yes";
ExecStart = "${lib.getExe pkgs.bash} -c 'echo ${onMin} > ${controlFileMin}; echo ${onMax} > ${controlFileMax};'";
ExecStop = "${lib.getExe pkgs.bash} -c 'echo ${offMax} > ${controlFileMax}; echo ${offMin} > ${controlFileMin};'";
};
};
# HACK: Allow user access.
tmpfiles.rules = [
"z ${controlFileMax} 0777 - - - -"
"z ${controlFileMin} 0777 - - - -"
];
};
}

View file

@ -1,3 +1,4 @@
# Script to control CPU boost.
{ controlFile, enable, disable, ... }: { { controlFile, enable, disable, ... }: {
script = '' script = ''
function toggle() { function toggle() {

View file

@ -1,3 +1,4 @@
# Disable CPU boost after boot. Control with `powersave` script.
{ lib, pkgs, controlFile, enable, disable, ... }: { { lib, pkgs, controlFile, enable, disable, ... }: {
systemd = { systemd = {
services.powersave = { services.powersave = {

View file

@ -1,4 +1,5 @@
{ pkgs, wallpaper, style, util, setting, ... } @args: let { pkgs, wallpaper, style, util, setting, ... } @args: let
# Order is required for Sway configuration.
swayRc = util.catText [ swayRc = util.catText [
./module/Style.nix ./module/Style.nix
./module/Display.nix ./module/Display.nix

View file

@ -34,7 +34,7 @@
input type:keyboard { input type:keyboard {
xkb_layout us,ru xkb_layout us,ru
xkb_options grp:caps_toggle xkb_options grp:toggle
} }
# Hide mouse cursor after a period of inactivity. # Hide mouse cursor after a period of inactivity.

View file

@ -1,10 +1,17 @@
{ ... }: { { ... }: {
text = '' text = ''
export _swaymonlist=(
"ASUSTek COMPUTER INC ASUS VA24E R2LMTF127165"
"AU Optronics 0x418D Unknown"
)
# Enable monitors. # Enable monitors.
function monon() { function monon() {
on() { on() {
for mon in ''${_swaymonlist[@]}; do
swaymsg "output \"''${mon}\" power on"
done
_monstate on _monstate on
swaymsg 'output "ASUSTek COMPUTER INC ASUS VA24E R2LMTF127165" power on'
} }
_sway_iterate_sockets on _sway_iterate_sockets on
} }
@ -12,8 +19,10 @@
# Disable monitors. # Disable monitors.
function monoff() { function monoff() {
off() { off() {
for mon in ''${_swaymonlist[@]}; do
swaymsg "output \"''${mon}\" power off"
done
_monstate off _monstate off
swaymsg 'output "ASUSTek COMPUTER INC ASUS VA24E R2LMTF127165" power off'
} }
_sway_iterate_sockets off _sway_iterate_sockets off
} }

View file

@ -1,10 +1,16 @@
{ ... }: { { ... }: {
text = '' text = ''
export _swayvrrlist=(
"Huawei Technologies Co., Inc. ZQE-CBA 0xC080F622"
)
# Enable VRR. # Enable VRR.
function vrron() { function vrron() {
on() { on() {
for vrr in ''${_swayvrrlist[@]}; do
swaymsg "output \"''${vrr}\" adaptive_sync on"
done
_vrrstate on _vrrstate on
swaymsg 'output "Huawei Technologies Co., Inc. ZQE-CBA 0xC080F622" adaptive_sync on'
} }
_sway_iterate_sockets on _sway_iterate_sockets on
} }
@ -12,8 +18,10 @@
# Disable VRR. # Disable VRR.
function vrroff() { function vrroff() {
off() { off() {
for vrr in ''${_swayvrrlist[@]}; do
swaymsg "output \"''${vrr}\" adaptive_sync off"
done
_vrrstate off _vrrstate off
swaymsg 'output "Huawei Technologies Co., Inc. ZQE-CBA 0xC080F622" adaptive_sync off'
} }
_sway_iterate_sockets off _sway_iterate_sockets off
} }

View file

@ -1,3 +1,7 @@
# Example overlay file.
# Overlays can change parameters in package builds, like source version.
# This way you can change something in package without recreating the whole build process.
# More info: https://nixos.wiki/wiki/Overlays
{ ... }: { { ... }: {
# nixpkgs.overlays = [ (final: prev: { # nixpkgs.overlays = [ (final: prev: {
# yt-dlp = prev.yt-dlp.overrideAttrs (old: { # yt-dlp = prev.yt-dlp.overrideAttrs (old: {

View file

@ -1,3 +1,4 @@
# Keyboard keys configuration.
{ ... }: { { ... }: {
navigation = { navigation = {
go = { go = {

View file

@ -1,3 +1,4 @@
# Secrets configuration.
{ ... }: { { ... }: {
hashedPassword = "$y$j9T$oqCB16i5E2t1t/HAWaFd5.$tTaHtAcifXaDVpTcRv.yH2/eWKxKE9xM8KcqXHfHrD7"; # Use `mkpasswd`. hashedPassword = "$y$j9T$oqCB16i5E2t1t/HAWaFd5.$tTaHtAcifXaDVpTcRv.yH2/eWKxKE9xM8KcqXHfHrD7"; # Use `mkpasswd`.

View file

@ -1,3 +1,5 @@
# Global settings.
# Just like I can configure each package, here I configure my config! :O)
{ ... }: { { ... }: {
tmux = { tmux = {
resize.step = { resize.step = {

View file

@ -1,3 +1,4 @@
# Abstraction over Stylix.
{ config, ... }: { { config, ... }: {
color = { color = {
bg = { bg = {

View file

@ -1,3 +1,4 @@
# Collection of common functions.
{ pkgs, ... }: rec { { pkgs, ... }: rec {
# Remove tabs indentation, # Remove tabs indentation,
trimTabs = text: let trimTabs = text: let

View file

@ -1,4 +1,12 @@
{ const, util, style, pkgs, lib, setting, key, secret, ... } @args: { { const
, util
, style
, pkgs
, lib
, setting
, key
, secret
, ... } @args: {
imports = [ imports = [
(import ./common (args // { (import ./common (args // {
username = "dasha"; username = "dasha";

View file

@ -1,4 +1,11 @@
{ const, util, style, pkgs, setting, key, secret, ... } @args: { { const
, util
, style
, pkgs
, setting
, key
, secret
, ... } @args: {
imports = [ imports = [
(import ./common (args // { (import ./common (args // {
username = "root"; username = "root";

View file

@ -1,4 +1,12 @@
{ const, util, style, pkgs, lib, setting, key, secret, ... } @args: { { const
, util
, style
, pkgs
, lib
, setting
, key
, secret
, ... } @args: {
imports = [ imports = [
(import ./common (args // { (import ./common (args // {
username = "voronind"; username = "voronind";

View file

@ -1,3 +1,4 @@
# This is a common user configuration.
{ const { const
, homeDir , homeDir
, key , key
@ -8,6 +9,7 @@
, username , username
, util , util
, ... } @args: let , ... } @args: let
# Configuration modules.
btop = import ./top/btop args; btop = import ./top/btop args;
editorconfig = import ./editorconfig args; editorconfig = import ./editorconfig args;
foot = import ./foot args; foot = import ./foot args;
@ -17,6 +19,7 @@
mako = import ./mako args; mako = import ./mako args;
in { in {
home-manager = { home-manager = {
# If file exists, rename it with a new extension.
backupFileExtension = "old"; backupFileExtension = "old";
users.${username} = { users.${username} = {