summaryrefslogtreecommitdiffstats
path: root/systems/mu/config.nix
blob: 4c5e19e2d26e97a856a92e6471b0b7dfa86fdb72 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
{ config, lib, pkgs, ... }: {
  imports = [
    ../../configs/br.nix
    ../../configs/exim-retiolum.nix
    ../../configs/hw/x220.nix
    ../../configs/retiolum.nix
  ];

  krebs.build.host = config.krebs.hosts.mu;
  krebs.build.user = lib.mkForce config.krebs.users.vv;

  tv.x0vncserver.enable = true;

  boot.initrd.luks.devices.muca.device = "/dev/sda2";
  boot.initrd.availableKernelModules = [ "ahci" ];
  boot.kernelModules = [ "fbcon" "kvm-intel" ];
  boot.kernelParams = [ "fsck.repair=yes" ];
  boot.extraModulePackages = [ ];

  fileSystems = {
    "/" = {
      device = "/dev/mapper/muvga-root";
      fsType = "ext4";
      options = [ "defaults" "discard" ];
    };
    "/home" = {
      device = "/dev/mapper/muvga-home";
      fsType = "ext4";
      options = [ "defaults" "discard" ];
    };
    "/boot" = {
      device = "/dev/sda1";
      fsType = "vfat";
    };
  };

  nixpkgs.config.allowUnfree = true;
  hardware.opengl.driSupport32Bit = true;

  hardware.pulseaudio.enable = true;

  hardware.enableRedistributableFirmware = true;

  boot.loader.efi.canTouchEfiVariables = true;
  boot.loader.systemd-boot.enable = true;

  networking.networkmanager.enable = true;

  # XXX reload to work around occasional "Failed to load firmware chunk!"
  # TODO only do this if firmware is actually broken(?)
  system.activationScripts.reload-iwlwifi = /* sh */ ''
    ${pkgs.kmod}/bin/modprobe -vr iwlwifi
    ${pkgs.kmod}/bin/modprobe -v iwlwifi
  '';

  environment.systemPackages = [
    pkgs.chromium
    pkgs.firefox
    pkgs.gimp
    pkgs.iptables
    pkgs.libreoffice
    pkgs.plasma-pa
    (pkgs.pidgin.override {
      plugins = [ pkgs.pidgin-otr ];
    })
    pkgs.skypeforlinux
    pkgs.slock
    pkgs.tinc_pre
    pkgs.vim
    pkgs.xsane

    #pkgs.foomatic_filters
    #pkgs.gutenprint
    #pkgs.cups_pdf_filter
    #pkgs.ghostscript
  ];


  i18n.defaultLocale = "de_DE.UTF-8";

  programs.ssh.startAgent = false;

  krebs.setuid = {
    slock = {
      filename = "${pkgs.slock}/bin/slock";
      mode = "4111";
    };
  };

  security.pam.loginLimits = [
    # for jack
    { domain = "@audio"; item = "memlock"; type = "-"; value = "unlimited"; }
    { domain = "@audio"; item = "rtprio"; type = "-"; value = "99"; }
  ];

  fonts.packages = [
    pkgs.xorg.fontschumachermisc
  ];

  services.xserver.enable = true;
  services.xserver.layout = "de";
  services.xserver.xkbOptions = "eurosign:e";

  # TODO this is host specific
  services.xserver.libinput.enable = false;
  services.xserver.synaptics = {
    enable = true;
    twoFingerScroll = true;
  };

  services.xserver.desktopManager.plasma5.enable = true;

  services.xserver.displayManager.autoLogin.enable = true;
  services.xserver.displayManager.autoLogin.user = "vv";

  system.stateVersion = "23.05";

  users.users.vv = {
    inherit (config.krebs.users.vv) home uid;
    isNormalUser = true;
    extraGroups = [
      "audio"
      "video"
      "networkmanager"
    ];
  };
}