renamed computers
This commit is contained in:
parent
b8b4589dca
commit
81a348a442
4
server/.gitignore
vendored
Normal file
4
server/.gitignore
vendored
Normal file
@ -0,0 +1,4 @@
|
||||
/dotfiles/*.Appimage
|
||||
/scripts/download/.direnv/
|
||||
/configuration.nix
|
||||
/scripts/PureRef-1.11.1_x64.Appimage
|
||||
1003
server/configuration.org
Executable file
1003
server/configuration.org
Executable file
File diff suppressed because it is too large
Load Diff
619
workstation/configuration.org
Executable file → Normal file
619
workstation/configuration.org
Executable file → Normal file
@ -1,15 +1,17 @@
|
||||
#+TITLE: JawZ NixOS server configuration
|
||||
#+TITLE: JawZ NixOS workstation configuration
|
||||
#+AUTHOR: Danilo Reyes
|
||||
#+PROPERTY: header-args :tangle configuration.nix
|
||||
#+auto_tangle: t
|
||||
|
||||
* TODO [0/6]
|
||||
- [ ] System configurations [0/8]
|
||||
- [ ] fail2ban
|
||||
- [ ] Bluetooth multiple devices + pass-through
|
||||
- [ ] dotfiles [0/4]
|
||||
- [ ] migrate config to home-manager
|
||||
- [ ] migrate dconf to home-manager
|
||||
- [ ] Misc [0/3]
|
||||
- [ ] Figure out how to get rid of xterm
|
||||
|
||||
|
||||
* DECLARATION
|
||||
Here I will declare the dependencies and variables that will be used multiple
|
||||
times through the config file, such as the current version of NixOS,
|
||||
@ -26,25 +28,29 @@ configurations.
|
||||
- unstable: a sort of overlay that allows to prepend "unstable" to a package,
|
||||
to pull from the unstable channel rather than precompiled binaries on a case
|
||||
by case use.
|
||||
- nixGaming: a channel containing some tweaks and optimized packages for gaming.
|
||||
- jawz*: scripts that will be reused multiple times through the config, such as
|
||||
on systemd, and as such this feels like a safe way to compile them only once.
|
||||
|
||||
|
||||
#+begin_src nix
|
||||
{ config, pkgs, lib, ... }:
|
||||
{ config, lib, pkgs, ... }:
|
||||
let
|
||||
version = "23.05";
|
||||
myEmail = "CaptainJawZ@outlook.com";
|
||||
myName = "Danilo Reyes";
|
||||
cpuArchitecture = "skylake";
|
||||
cpuArchitecture = "znver3";
|
||||
home-manager = builtins.fetchTarball
|
||||
# "https://github.com/nix-community/home-manager/archive/master.tar.gz";
|
||||
"https://github.com/nix-community/home-manager/archive/release-${version}.tar.gz";
|
||||
unstable = import
|
||||
(builtins.fetchTarball "https://github.com/nixos/nixpkgs/tarball/master") {
|
||||
(builtins.fetchTarball
|
||||
"https://github.com/nixos/nixpkgs/tarball/master") {
|
||||
config = config.nixpkgs.config;
|
||||
};
|
||||
jawzManageLibrary = pkgs.writeScriptBin
|
||||
"manage-library" (builtins.readFile ../scripts/manage-library.sh);
|
||||
nixGaming = import
|
||||
(builtins.fetchTarball
|
||||
"https://github.com/fufexan/nix-gaming/archive/master.tar.gz");
|
||||
jawzTasks = pkgs.writeScriptBin
|
||||
"tasks" (builtins.readFile ../scripts/tasks.sh);
|
||||
in
|
||||
@ -57,14 +63,15 @@ cluttered, for example, I may create a module for systemd units.
|
||||
|
||||
- agenix: an encryption system which cleans up the nix-configuration files from
|
||||
passwords and other secrets.
|
||||
- pipewireLowLatency: better sound for games, but also, music sounds a bit less
|
||||
compressed, who knows, I'm half deaf.
|
||||
|
||||
#+begin_src nix
|
||||
imports = [
|
||||
./hardware-configuration.nix
|
||||
./servers.nix
|
||||
# ./openldap.nix
|
||||
# <agenix/modules/age.nix>
|
||||
./fstab.nix
|
||||
(import "${home-manager}/nixos")
|
||||
nixGaming.nixosModules.pipewireLowLatency
|
||||
];
|
||||
#+end_src
|
||||
|
||||
@ -79,30 +86,28 @@ can not be bothered to figure out whether I need TCP or UDP so let's open both,
|
||||
and repetition is maddening.
|
||||
|
||||
#+begin_src nix
|
||||
powerManagement.cpuFreqGovernor = lib.mkDefault "performance";
|
||||
networking = {
|
||||
useDHCP = lib.mkDefault true;
|
||||
enableIPv6 = false;
|
||||
hostName = "server";
|
||||
hostName = "workstation";
|
||||
networkmanager.enable = true;
|
||||
extraHosts = ''
|
||||
192.168.1.64 workstation
|
||||
192.168.1.69 server
|
||||
'';
|
||||
firewall = let
|
||||
open_firewall_ports = [
|
||||
6969 # HentaiAtHome
|
||||
51413 # torrent sedding
|
||||
9091 # qbittorrent
|
||||
2049 # nfs
|
||||
openFirewallPorts = [
|
||||
7860 # gpt
|
||||
6674 # ns-usbloader
|
||||
];
|
||||
openFirewallPortRanges = [
|
||||
{ from = 1714; to = 1764; } # kdeconnect
|
||||
];
|
||||
open_firewall_port_ranges = [ ];
|
||||
in
|
||||
{
|
||||
enable = true;
|
||||
allowedTCPPorts = open_firewall_ports;
|
||||
allowedUDPPorts = open_firewall_ports;
|
||||
allowedTCPPortRanges = open_firewall_port_ranges;
|
||||
allowedUDPPortRanges = open_firewall_port_ranges;
|
||||
allowedTCPPorts = openFirewallPorts;
|
||||
allowedUDPPorts = openFirewallPorts;
|
||||
allowedTCPPortRanges = openFirewallPortRanges;
|
||||
allowedUDPPortRanges = openFirewallPortRanges;
|
||||
};
|
||||
};
|
||||
#+end_src
|
||||
@ -157,24 +162,24 @@ nix = let featuresList = [
|
||||
"big-parallel"
|
||||
"kvm"
|
||||
"gccarch-${cpuArchitecture}"
|
||||
"gccarch-znver3"
|
||||
"gccarch-skylake"
|
||||
];
|
||||
in {
|
||||
gc = {
|
||||
automatic = true;
|
||||
dates = "weekly";
|
||||
};
|
||||
# buildMachines = [ {
|
||||
# hostName = "workstation";
|
||||
# system = "x86_64-linux";
|
||||
# sshUser = "nixremote";
|
||||
# maxJobs = 4;
|
||||
# speedFactor = 1;
|
||||
# supportedFeatures = featuresList;
|
||||
# } ];
|
||||
buildMachines = [ {
|
||||
hostName = "server";
|
||||
system = "x86_64-linux";
|
||||
sshUser = "nixremote";
|
||||
maxJobs = 4;
|
||||
speedFactor = 1;
|
||||
supportedFeatures = featuresList;
|
||||
} ];
|
||||
distributedBuilds = true;
|
||||
settings = {
|
||||
cores = 6;
|
||||
cores = 12;
|
||||
auto-optimise-store = true;
|
||||
system-features = featuresList;
|
||||
substituters = [
|
||||
@ -193,23 +198,58 @@ nix = let featuresList = [
|
||||
};
|
||||
#+end_src
|
||||
|
||||
* DISPLAY MANAGER
|
||||
Rather than having the server be completely headless, temporarily I'm enabling
|
||||
xfce as a minimal display manager.
|
||||
* GNOME
|
||||
At the time of writing this file, I require of X11, as the NVIDIA support for
|
||||
Wayland is not perfect yet. At the time being, the ability to switch through
|
||||
GDM from Wayland to XORG, it's pretty handy, but in the future these settings
|
||||
will require an update.
|
||||
|
||||
Sets up GNOME as the default desktop environment, while excluding some
|
||||
undesirable packages from installing.
|
||||
|
||||
Lastly, since there is not a dedicated customization module per-say I setup qt
|
||||
options in here, for the sake of gnome consistency.
|
||||
|
||||
|
||||
#+begin_src nix
|
||||
services = {
|
||||
xserver = {
|
||||
enable = true;
|
||||
displayManager.defaultSession = "xfce";
|
||||
videoDrivers = [ "nvidia" ];
|
||||
enable = true;
|
||||
displayManager.gdm.enable = true;
|
||||
desktopManager = {
|
||||
xfce.enable = true;
|
||||
xterm.enable = false;
|
||||
gnome.enable = true;
|
||||
};
|
||||
layout = "us";
|
||||
libinput.enable = true;
|
||||
};
|
||||
};
|
||||
|
||||
environment.gnome.excludePackages = (with pkgs; [
|
||||
gnome-photos
|
||||
gnome-tour
|
||||
gnome-text-editor
|
||||
gnome-connections
|
||||
# gnome-shell-extensions
|
||||
baobab
|
||||
])
|
||||
++ (with pkgs.gnome; [
|
||||
# totem
|
||||
gedit
|
||||
gnome-music
|
||||
epiphany
|
||||
gnome-characters
|
||||
yelp
|
||||
gnome-font-viewer
|
||||
cheese
|
||||
]);
|
||||
|
||||
# Sets up QT to use adwaita themes.
|
||||
qt = {
|
||||
enable = true;
|
||||
# platformTheme = "gnome";
|
||||
style = "adwaita-dark";
|
||||
};
|
||||
#+end_src
|
||||
|
||||
* SOUND
|
||||
@ -217,14 +257,31 @@ In order to avoid issues with PipeWire, the wiki recommends to disable
|
||||
pulseaudio. This is a basic PipeWire configuration that can support alsa/pulse
|
||||
backends.
|
||||
|
||||
lowLatency is a module of nix-gaming, and hardware bluetooth settings are there
|
||||
to allegedly improve the quality of bluetooth in the system, to this day,
|
||||
bluetooth and I remain enemies.
|
||||
|
||||
#+begin_src nix
|
||||
hardware.pulseaudio.enable = false;
|
||||
sound.enable = false;
|
||||
services.pipewire = {
|
||||
enable = true;
|
||||
alsa.enable = true;
|
||||
alsa.support32Bit = true;
|
||||
pulse.enable = true;
|
||||
lowLatency = {
|
||||
enable = true;
|
||||
quantum = 64;
|
||||
rate = 48000;
|
||||
};
|
||||
};
|
||||
hardware = {
|
||||
pulseaudio.enable = false;
|
||||
bluetooth.enable = true;
|
||||
bluetooth.settings = {
|
||||
General = {
|
||||
Enable = "Source,Sink,Media,Socket";
|
||||
};
|
||||
};
|
||||
};
|
||||
#+end_src
|
||||
|
||||
@ -279,43 +336,23 @@ Being part of the "wheel" group, means that the user has root privileges. The
|
||||
piracy.gid is so I have read/write access permissions on all the hard drives
|
||||
split among my multiple systems, the rest of the groups are self explanatory.
|
||||
|
||||
- nixremote: is a low-privilege user set exclusively with the intention to be a
|
||||
proxy to build the nix-store remotely.
|
||||
|
||||
#+begin_src nix
|
||||
users = {
|
||||
groups.nixremote = {
|
||||
name = "nixremote";
|
||||
gid = 555;
|
||||
};
|
||||
users.nixremote = {
|
||||
isNormalUser = true;
|
||||
createHome = true;
|
||||
group = "nixremote";
|
||||
home = "/var/nixremote/";
|
||||
openssh.authorizedKeys.keys = [
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICiyTwryzw8CblPldplDpVUkXD9C1fXVgO8LeXdE5cuR root@battlestation"
|
||||
];
|
||||
};
|
||||
};
|
||||
users.users.jawz = {
|
||||
groups = { piracy.gid = 985; };
|
||||
users.jawz = {
|
||||
isNormalUser = true;
|
||||
extraGroups = [ "wheel" "networkmanager" "docker"
|
||||
"scanner" "lp" "piracy" "kavita"
|
||||
"render" "video"
|
||||
extraGroups = [ "wheel" "networkmanager" "scanner"
|
||||
"lp" "piracy" "kavita" "video" "docker"
|
||||
];
|
||||
initialPassword = "password";
|
||||
openssh = {
|
||||
authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB5GaQM4N+yGAByibOFQOBVMV/6TjOfaGIP+NunMiK76 gpodeacero\cdreyes@100CDREYES"
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKDXxfFRSgII4w/S1mrekPQdfXNifqRxwJa0wpQo72wB jawz@workstation";
|
||||
authorizedKeys.keys = [
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB5GaQM4N+yGAByibOFQOBVMV/6TjOfaGIP+NunMiK76 gpodeacero\cdreyes@100CDREYES"
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJZ/TtwLIR/JNp1Sr3TLV/eQK52n2htF8sg/RYfz60z3 jawz@server"
|
||||
];
|
||||
};
|
||||
#+end_src
|
||||
|
||||
This section of the document categorizes and organizes all he packages that I
|
||||
want installed, attempting to group them as dependencies of others when
|
||||
necessary.
|
||||
|
||||
* USER PACKAGES
|
||||
This section of the document categorizes and organizes all he packages that I
|
||||
want installed, attempting to group them as dependencies of others when
|
||||
@ -327,12 +364,145 @@ Begin the block to install user packages.
|
||||
packages = (with pkgs; [
|
||||
#+end_src
|
||||
|
||||
** GUI PACKAGES
|
||||
All of my GUI applications categorized to make it easier to identify what each
|
||||
application does, and the justification for is existence on my system.
|
||||
|
||||
*** ART AND DEVELOPMENT
|
||||
Art and development applications are together, as a game-developer one of my
|
||||
goals is to create a workflow between this ecosystem of applications.
|
||||
|
||||
#+begin_src nix
|
||||
godot_4 # game development
|
||||
gdtoolkit # gdscript language server
|
||||
blender # cgi animation and sculpting
|
||||
|
||||
gimp # the coolest bestest art program to never exist
|
||||
krita # art to your heart desire!
|
||||
mypaint # not the best art program
|
||||
mypaint-brushes # but it's got some
|
||||
mypaint-brushes1 # nice damn brushes
|
||||
# drawpile # arty party with friends!!
|
||||
|
||||
pureref # create inspiration/reference boards
|
||||
#+end_src
|
||||
|
||||
*** GAMING
|
||||
So far gaming has been a lot less painful than I could have originally
|
||||
anticipated, most everything seems to run seamlessly.
|
||||
|
||||
Most packages on this section are set to unstable so we compile the newest
|
||||
possible binaries, which is handy mostly for frequently developed emulators.
|
||||
|
||||
I never figured out why, but lutris will give me wine errors unless both wine64
|
||||
and wineWow are installed.
|
||||
|
||||
=note= Steam is setup way later on the config file.
|
||||
=note= Roblox uninstalled as there is ongoing drama regarding Linux users.
|
||||
|
||||
#+begin_src nix
|
||||
(lutris.override {
|
||||
extraPkgs = pkgs: [
|
||||
winetricks
|
||||
wine64Packages.stable
|
||||
wineWowPackages.stable
|
||||
];
|
||||
})
|
||||
# nixGaming.packages.${pkgs.hostPlatform.system}.wine-tkg
|
||||
# nixGaming.packages.${pkgs.hostPlatform.system}.wine-discord-ipc-bridge
|
||||
# vulkan-tools # needed? stuff for vulkan drivers I suppose
|
||||
unstable.heroic # install epic games
|
||||
gamemode # optimizes linux to have better gaming performance
|
||||
# grapejuice # roblox manager
|
||||
# minecraft # minecraft official launcher
|
||||
parsec-bin # remote gaming with friends
|
||||
protonup-qt # update proton-ge
|
||||
unstable.ns-usbloader # load games into my switch
|
||||
|
||||
# emulators
|
||||
unstable.rpcs3 # ps3 emulator
|
||||
unstable.pcsx2 # ps2 emulator
|
||||
unstable.cemu # wii u emulator
|
||||
unstable.dolphin-emu # wii emulator
|
||||
unstable.citra-nightly # 3Ds emulator
|
||||
unstable.snes9x-gtk # snes emulator
|
||||
#+end_src
|
||||
|
||||
*** PRODUCTIVITY
|
||||
An assorted list of productivity-oriented apps which I will never use.
|
||||
|
||||
#+begin_src nix
|
||||
libreoffice-fresh # office, but based
|
||||
calibre # ugly af eBook library manager
|
||||
foliate # gtk eBook reader
|
||||
newsflash # feed reader, syncs with nextcloud
|
||||
wike # gtk wikipedia wow!
|
||||
denaro # manage your finances
|
||||
furtherance # I made this one tehee track time utility
|
||||
gnome.simple-scan # scanner
|
||||
#+end_src
|
||||
|
||||
*** MISC
|
||||
Most of these apps, are part of the gnome circle, and I decide to install them
|
||||
if just for a try and play a little. Most are kept commented out as an archive,
|
||||
so I remember their names in case I want to check them out or recommend them to
|
||||
someone.
|
||||
|
||||
#+begin_src nix
|
||||
blanket # background noise
|
||||
pika-backup # backups
|
||||
metadata-cleaner # remove any metadata and geolocation from files
|
||||
# sequeler # friendly SQL client
|
||||
# czkawka # duplicate finder
|
||||
# celeste # sync tool for any cloud provider
|
||||
#+end_src
|
||||
|
||||
*** MULTIMEDIA
|
||||
Overwhelmingly player applications, used for videos and music, while most of my
|
||||
consumption has moved towards jellyfin, it's still worth the install of most
|
||||
of these, for now.
|
||||
|
||||
#+begin_src nix
|
||||
celluloid # video player
|
||||
cozy # audiobooks player
|
||||
komikku # manga & comic GUI downloader
|
||||
gnome-podcasts # podcast player
|
||||
handbrake # video converter, may be unnecessary
|
||||
curtail # image compressor
|
||||
pitivi # video editor
|
||||
identity # compare images or videos
|
||||
gnome-obfuscate # censor private information
|
||||
mousai # poor man shazam
|
||||
tagger # tag music files
|
||||
obs-studio # screen recorder & streamer
|
||||
shortwave # listen to world radio
|
||||
nextcloud-client # self-hosted google-drive alternative
|
||||
#+end_src
|
||||
|
||||
*** WEB
|
||||
Stuff that I use to interact with the web, web browsers, chats, download
|
||||
managers, etc.
|
||||
|
||||
#+begin_src nix
|
||||
firefox # web browser that allows to disable spyware
|
||||
tor-browser-bundle-bin # dark web, so dark!
|
||||
chromium # web browser with spyware included
|
||||
telegram-desktop # furry chat
|
||||
nicotine-plus # remember Ares?
|
||||
warp # never used, but supposedly cool for sharing files
|
||||
(pkgs.discord.override {
|
||||
# withOpenASAR = true;
|
||||
withVencord = true;
|
||||
})
|
||||
# hugo # website engine
|
||||
#+end_src
|
||||
|
||||
** COMMAND-LINE PACKAGES
|
||||
cli and tui packages, which on their own right are as or more powerful than the
|
||||
packages on the previous section.
|
||||
|
||||
=note= exa is no longer maintained, and will soon be replaced by eza, a maintained
|
||||
fork.
|
||||
** COMMAND-LINE PACKAGES
|
||||
|
||||
#+begin_src nix
|
||||
unstable.yt-dlp # downloads videos from most video websites
|
||||
@ -340,28 +510,32 @@ unstable.gallery-dl # similar to yt-dlp but for most image gallery websites
|
||||
|
||||
fd # modern find, faster searches
|
||||
fzf # fuzzy finder! super cool and useful
|
||||
gdu # disk-space utility, somewhat useful
|
||||
du-dust # rusty du
|
||||
trashy # oop! didn't meant to delete that
|
||||
gdu # disk-space utility checker, somewhat useful
|
||||
du-dust # rusty du similar to gdu
|
||||
ripgrep # modern grep
|
||||
trashy # oop! did not meant to delete that
|
||||
unstable.eza # like ls but with colors
|
||||
gocryptfs # encrypted filesystem! shhh!!!
|
||||
rmlint # probably my favourite app, amazing dupe finder that integrates well with BTRFS
|
||||
|
||||
ffmpeg # not ffmpreg, the coolest video conversion tool!
|
||||
# torrenttools # create torrent files from the terminal!
|
||||
# vcsi # video thumbnails for torrents, can I replace it with ^?
|
||||
#+end_src
|
||||
|
||||
** MY SCRIPTS
|
||||
Here I compile my own scripts into binaries
|
||||
*** MY SCRIPTS
|
||||
Here I compile my own scripts into binaries.
|
||||
|
||||
#+begin_src nix
|
||||
jawzManageLibrary
|
||||
jawzTasks
|
||||
(writeScriptBin "ffmpeg4discord" (builtins.readFile ../scripts/ffmpeg4discord.py))
|
||||
(writeScriptBin "ffmpreg" (builtins.readFile ../scripts/ffmpreg.sh))
|
||||
(writeScriptBin "chat-dl" (builtins.readFile ../scripts/chat-dl.sh))
|
||||
(writeScriptBin "split-dir" (builtins.readFile ../scripts/split-dir.sh))
|
||||
(writeScriptBin "pika-list" (builtins.readFile ../scripts/pika-list.sh))
|
||||
(writeScriptBin "run" (builtins.readFile ../scripts/run.sh))
|
||||
(writeScriptBin "pika-list" (builtins.readFile ../scripts/pika-list.sh))
|
||||
#+end_src
|
||||
|
||||
** DEVELOPMENT PACKAGES
|
||||
*** DEVELOPMENT PACKAGES
|
||||
Assorted development packages and libraries, categorized by languages.
|
||||
|
||||
#+begin_src nix
|
||||
@ -403,9 +577,10 @@ pipenv # python development workflow for humans
|
||||
|
||||
# JS
|
||||
nodejs # not as bad as I thought
|
||||
# jq # linting
|
||||
#+end_src
|
||||
|
||||
** PYTHON
|
||||
*** PYTHON
|
||||
|
||||
#+begin_src nix
|
||||
]) ++ (with pkgs.python3Packages; [
|
||||
@ -439,21 +614,9 @@ nodejs # not as bad as I thought
|
||||
propagatedBuildInputs =
|
||||
[ tqdm ];
|
||||
})
|
||||
# (buildPythonApplication rec {
|
||||
# pname = "qbit_manage";
|
||||
# version = "4.0.3";
|
||||
# src = fetchPypi {
|
||||
# inherit pname version;
|
||||
# sha256 = "sha256-7eVqbLpMHS1sBw2vYS4cTtyVdnnknGtEI8190VlXflk=";
|
||||
# };
|
||||
# doCheck = true;
|
||||
# buildInputs = [ setuptools ];
|
||||
# propagatedBuildInputs =
|
||||
# [ gitpython requests retrying ruamel-yaml schedule unstable.qbittorrent-api ];
|
||||
# })
|
||||
#+end_src
|
||||
|
||||
** NODEJS PACKAGES
|
||||
*** NODEJS PACKAGES
|
||||
Mostly language servers and linters.
|
||||
|
||||
#+begin_src nix
|
||||
@ -471,7 +634,7 @@ Mostly language servers and linters.
|
||||
#+end_src
|
||||
|
||||
** HUNSPELL
|
||||
These dictionaries work with Firefox, Doom Emacs and LibreOffice.
|
||||
These dictionaries are compatible with Firefox, Doom Emacs and LibreOffice.
|
||||
|
||||
#+begin_src nix
|
||||
hunspell
|
||||
@ -485,18 +648,47 @@ Themes and other customization, making my DE look the way I want is one of the
|
||||
main draws of Linux for me.
|
||||
|
||||
#+begin_src nix
|
||||
# Themes
|
||||
adw-gtk3
|
||||
gnome.gnome-tweaks # tweaks for the gnome desktop environment
|
||||
# gradience # theme customizer, allows you to modify adw-gtk3 themes
|
||||
|
||||
# Fonts
|
||||
(nerdfonts.override {
|
||||
fonts = [ "Agave" "CascadiaCode" "SourceCodePro"
|
||||
"Ubuntu" "FiraCode" "Iosevka" ];
|
||||
})
|
||||
symbola
|
||||
(papirus-icon-theme.override {
|
||||
color = "adwaita";
|
||||
})
|
||||
#+end_src
|
||||
|
||||
** CLOSING USER PACKAGES
|
||||
** GNOME EXTENSIONS
|
||||
The last line can be commented to allow for the installation of gnome-extensions
|
||||
from the unstable channel.
|
||||
|
||||
#+begin_src nix
|
||||
]); }; # <--- end of package list
|
||||
# lm_sensors # for extension, displays cpu temp
|
||||
libgda # for pano shell extension
|
||||
]) ++ (with pkgs.gnomeExtensions; [
|
||||
appindicator # applets for open applications
|
||||
panel-scroll # scroll well to change workspaces
|
||||
reading-strip # like putting a finger on every line I read
|
||||
tactile # window manager
|
||||
pano # clipboard manager
|
||||
# freon # hardware temperature monitor
|
||||
# blur-my-shell # make the overview more visually appealing
|
||||
# gamemode # I guess I'm a gamer now?
|
||||
# burn-my-windows
|
||||
# forge # window manager
|
||||
# ]) ++ (with unstable.pkgs.gnomeExtensions; [
|
||||
#+end_src
|
||||
|
||||
** CLOSE USER PACKAGES
|
||||
|
||||
#+begin_src nix
|
||||
]); }; };# <--- end of package list
|
||||
#+end_src
|
||||
|
||||
* HOME-MANAGER
|
||||
@ -546,11 +738,15 @@ programs.bash = {
|
||||
f = "fzf --multi --exact -i";
|
||||
sc = "systemctl --user";
|
||||
jc = "journalctl --user -xefu";
|
||||
open-gallery = "cd /mnt/disk2/scrapping/JawZ/gallery-dl && xdg-open $(fd . ./ Husbands -tdirectory -d 1 | fzf -i)\"";
|
||||
unique-extensions = "fd -tf | rev | cut -d. -f1 | rev | tr '[:upper:]' '[:lower:]' | sort | uniq --count | sort -rn";
|
||||
open-gallery = "cd /mnt/disk2/scrapping/JawZ/gallery-dl \
|
||||
&& xdg-open \"$(fd . ./ Husbands -tdirectory -d 1 | fzf -i)\"";
|
||||
unique-extensions = "fd -tf | rev | cut -d. -f1 | rev \
|
||||
| tr '[:upper:]' '[:lower:]' | sort \
|
||||
| uniq --count | sort -rn";
|
||||
};
|
||||
enableVteIntegration = true;
|
||||
initExtra = ''
|
||||
,#+begin_src bash
|
||||
$HOME/.local/bin/pokemon-colorscripts -r --no-title
|
||||
# Lists
|
||||
list_root="${config.xdg.configHome}"/jawz/lists/jawz
|
||||
@ -565,8 +761,12 @@ programs.bash = {
|
||||
fi
|
||||
|
||||
nixos-reload () {
|
||||
nixfmt /home/jawz/Development/NixOS/workstation/*.nix
|
||||
sudo nixos-rebuild switch -I nixos-config=/home/jawz/Development/NixOS/workstation/configuration.nix
|
||||
NIXOSDIR=/home/jawz/Development/NixOS
|
||||
nix-store --add-fixed sha256 $NIXOSDIR/scripts/PureRef-1.11.1_x64.Appimage
|
||||
nixfmt $NIXOSDIR/battlestation/*.nix
|
||||
sudo unbuffer nixos-rebuild switch -I \
|
||||
nixos-config=$NIXOSDIR/battlestation/configuration.nix \
|
||||
|& nom
|
||||
}
|
||||
'';
|
||||
};
|
||||
@ -654,6 +854,7 @@ services = {
|
||||
enable = true;
|
||||
defaultEditor = true;
|
||||
package = pkgs.emacs;
|
||||
startWithUserSession = "graphical";
|
||||
};
|
||||
};
|
||||
#+end_src
|
||||
@ -677,10 +878,19 @@ some applications use.
|
||||
|
||||
#+begin_src nix
|
||||
environment = {
|
||||
etc = {
|
||||
"wireplumber/bluetooth.lua.d/51-bluez-config.lua".text = ''
|
||||
bluez_monitor.properties = {
|
||||
["bluez5.enable-sbc-xq"] = true,
|
||||
["bluez5.enable-msbc"] = true,
|
||||
["bluez5.enable-hw-volume"] = true,
|
||||
["bluez5.headset-roles"] = "[ hsp_hs hsp_ag hfp_hf hfp_ag ]"
|
||||
}
|
||||
'';
|
||||
};
|
||||
systemPackages = with pkgs; [
|
||||
wget
|
||||
jellyfin-ffmpeg # coolest video converter!
|
||||
dlib
|
||||
gwe
|
||||
];
|
||||
variables = rec {
|
||||
# PATH
|
||||
@ -732,50 +942,6 @@ environment = {
|
||||
};
|
||||
#+end_src
|
||||
|
||||
* SNAPRAID
|
||||
It's a parity raid utility which creates a scheme similar to what UNRAID
|
||||
offered, except not in real time, I schedule it to run every night, so it keeps
|
||||
my files sync, while it is possible to use snapraid as a solution to keep a
|
||||
historic backup of your files, I am more concerned with the whole disk recovery
|
||||
in case of failure, as such a frequent sync fits my preferences.
|
||||
|
||||
#+begin_src nix
|
||||
snapraid = {
|
||||
enable = true;
|
||||
touchBeforeSync = true;
|
||||
sync.interval = "02:00";
|
||||
scrub = {
|
||||
plan = 10;
|
||||
olderThan = 10;
|
||||
interval = "4:00";
|
||||
};
|
||||
parityFiles = [
|
||||
"/mnt/parity/snapraid.parity"
|
||||
];
|
||||
extraConfig = ''
|
||||
autosave 5000
|
||||
'';
|
||||
exclude = [
|
||||
"/tmp/"
|
||||
"/lost+found/"
|
||||
"/multimedia/downloads/"
|
||||
"/scrapping/nextcloud/"
|
||||
"/backups/"
|
||||
"/glue/Spankbank/____UNORGANIZED/Chaturbate/"
|
||||
"/nextcloud/nextcloud.log"
|
||||
];
|
||||
dataDisks = {
|
||||
d1 = "/mnt/disk1/";
|
||||
d2 = "/mnt/disk2/";
|
||||
};
|
||||
contentFiles = [
|
||||
"/var/snapraid.content"
|
||||
"/mnt/disk1/snapraid.content"
|
||||
"/mnt/disk2/snapraid.content"
|
||||
];
|
||||
};
|
||||
#+end_src
|
||||
|
||||
* PROGRAMS
|
||||
Some programs get enabled and installed through here, as well as the activation
|
||||
of some services.
|
||||
@ -792,17 +958,17 @@ programs = {
|
||||
enable = true;
|
||||
enableSSHSupport = true;
|
||||
};
|
||||
msmtp = {
|
||||
geary = {
|
||||
enable = true;
|
||||
accounts.default = {
|
||||
auth = true;
|
||||
host = "smtp.gmail.com";
|
||||
port = 587;
|
||||
tls = true;
|
||||
from = "stunner6399@gmail.com";
|
||||
user = "stunner6399@gmail.com";
|
||||
password = "eqyctcgjdykqeuwt";
|
||||
};
|
||||
};
|
||||
steam = {
|
||||
enable = true;
|
||||
remotePlay.openFirewall = true;
|
||||
dedicatedServer.openFirewall = true;
|
||||
};
|
||||
kdeconnect = {
|
||||
enable = true;
|
||||
package = pkgs.gnomeExtensions.gsconnect;
|
||||
};
|
||||
};
|
||||
#+end_src
|
||||
@ -810,39 +976,35 @@ programs = {
|
||||
* SERVICES
|
||||
Miscellaneous services, most of which are managed by systemd.
|
||||
|
||||
- minidlna: allows me to watch my media on my tv.
|
||||
- avahi: allows to discover/connect to devices through their hostname on the
|
||||
same network.
|
||||
- fstrim/btrfs: file-system services.
|
||||
- hardware.openrgb: enables to tune hardware RGB.
|
||||
- psd: profile-sync-daemon, loads the chrome/firefox profile to ram.
|
||||
|
||||
#+begin_src nix
|
||||
services = {
|
||||
minidlna = {
|
||||
printing = {
|
||||
enable = true;
|
||||
openFirewall = true;
|
||||
settings = {
|
||||
inotify = "yes";
|
||||
media_dir = [
|
||||
"/mnt/disk2/glue"
|
||||
"/mnt/seedbox/glue"
|
||||
"/mnt/disk1/multimedia/downloads"
|
||||
];
|
||||
};
|
||||
drivers = [ pkgs.hplip pkgs.hplipWithPlugin ];
|
||||
};
|
||||
avahi = {
|
||||
enable = true;
|
||||
nssmdns = true;
|
||||
};
|
||||
psd.enable = true;
|
||||
fstrim.enable = true;
|
||||
btrfs.autoScrub = {
|
||||
enable = true;
|
||||
fileSystems = [
|
||||
"/"
|
||||
"/mnt/disk1"
|
||||
"/mnt/disk2"
|
||||
];
|
||||
};
|
||||
hardware.openrgb = {
|
||||
enable = true;
|
||||
package = unstable.openrgb;
|
||||
motherboard = "amd";
|
||||
};
|
||||
openssh = {
|
||||
enable = true;
|
||||
openFirewall = true;
|
||||
@ -861,56 +1023,10 @@ the best way to define them for now, is using nix.
|
||||
|
||||
#+begin_src nix
|
||||
systemd = {
|
||||
packages = [ pkgs.qbittorrent-nox ];
|
||||
services = {
|
||||
"qbittorrent-nox@jawz" = {
|
||||
enable = true;
|
||||
overrideStrategy = "asDropin";
|
||||
wantedBy = [ "multi-user.target" ];
|
||||
};
|
||||
};
|
||||
services = { };
|
||||
timers = { };
|
||||
user = {
|
||||
services = {
|
||||
HentaiAtHome = {
|
||||
enable = true;
|
||||
restartIfChanged = true;
|
||||
description = "Run hentai@home server";
|
||||
wantedBy = [ "default.target" ];
|
||||
serviceConfig = {
|
||||
Restart = "on-failure";
|
||||
RestartSec = 30;
|
||||
WorkingDirectory="/mnt/hnbox";
|
||||
ExecStart = "${pkgs.HentaiAtHome}/bin/HentaiAtHome";
|
||||
};
|
||||
};
|
||||
unpackerr = {
|
||||
enable = true;
|
||||
restartIfChanged = true;
|
||||
description = "Run unpackerr";
|
||||
wantedBy = [ "default.target" ];
|
||||
serviceConfig = {
|
||||
Restart = "on-failure";
|
||||
RestartSec = 30;
|
||||
ExecStart = "${pkgs.unpackerr}/bin/unpackerr -c /home/jawz/.config/unpackerr.conf";
|
||||
};
|
||||
};
|
||||
manage-library = {
|
||||
enable = true;
|
||||
restartIfChanged = true;
|
||||
description = "Run the manage library bash script";
|
||||
wantedBy = [ "default.target" ];
|
||||
path = [
|
||||
pkgs.bash
|
||||
pkgs.nix
|
||||
jawzManageLibrary
|
||||
];
|
||||
serviceConfig = {
|
||||
Restart = "on-failure";
|
||||
RestartSec = 30;
|
||||
ExecStart = "${jawzManageLibrary}/bin/manage-library";
|
||||
};
|
||||
};
|
||||
tasks = {
|
||||
restartIfChanged = true;
|
||||
description = "Run a tasks script which keeps a lot of things organized";
|
||||
@ -926,20 +1042,6 @@ systemd = {
|
||||
ExecStart = "${jawzTasks}/bin/tasks";
|
||||
};
|
||||
};
|
||||
qbit_manage = let qbit_dir = "/home/jawz/Development/Git/qbit_manage"; in {
|
||||
restartIfChanged = true;
|
||||
description = "Tidy up my torrents";
|
||||
wantedBy = [ "default.target" ];
|
||||
path = [
|
||||
pkgs.python3
|
||||
pkgs.pipenv
|
||||
];
|
||||
serviceConfig = {
|
||||
Restart = "on-failure";
|
||||
RestartSec = 30;
|
||||
ExecStart = "${qbit_dir}/.venv/bin/python3 ${qbit_dir}/qbit_manage.py -r -c ${qbit_dir}/config.yml";
|
||||
};
|
||||
};
|
||||
};
|
||||
timers = {
|
||||
tasks = {
|
||||
@ -950,14 +1052,6 @@ systemd = {
|
||||
OnCalendar = "*:0/10";
|
||||
};
|
||||
};
|
||||
qbit_manage = {
|
||||
enable = true;
|
||||
description = "Tidy up my torrents";
|
||||
wantedBy = [ "timers.target" ];
|
||||
timerConfig = {
|
||||
OnCalendar = "*:0/10";
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
@ -980,24 +1074,67 @@ Computer-specific hardware settings. The power management settings are
|
||||
defaulted to "performance".
|
||||
|
||||
- nvidia: GPU drivers.
|
||||
- cpu.intel: microcode patches.
|
||||
- sane: hp scanner drivers.
|
||||
- cpu.amd: microcode patches.
|
||||
- opentabletdriver: overrides the default generic nvidia drivers.
|
||||
- opengl: required for gaming, as pug drivers as well as video acceleration.
|
||||
|
||||
#+begin_src nix
|
||||
powerManagement.cpuFreqGovernor = lib.mkDefault "performance";
|
||||
hardware = {
|
||||
cpu.amd.updateMicrocode =
|
||||
lib.mkDefault config.hardware.enableRedistributableFirmware;
|
||||
nvidia = {
|
||||
modesetting.enable = true;
|
||||
powerManagement.enable = true;
|
||||
};
|
||||
cpu.intel.updateMicrocode = lib.mkDefault true;
|
||||
sane = {
|
||||
enable = true;
|
||||
extraBackends = [ pkgs.hplip pkgs.hplipWithPlugin ];
|
||||
};
|
||||
opentabletdriver = {
|
||||
enable = true;
|
||||
package = unstable.opentabletdriver;
|
||||
daemon.enable = false;
|
||||
};
|
||||
opengl = {
|
||||
enable = true;
|
||||
driSupport = true;
|
||||
driSupport32Bit = true;
|
||||
extraPackages = with pkgs; [
|
||||
nvidia-vaapi-driver
|
||||
vaapiVdpau
|
||||
libvdpau-va-gl
|
||||
];
|
||||
};
|
||||
};
|
||||
### TEMPORARY PATCH, pinning up the linux kernel due to a bug with newer versions.
|
||||
boot.kernelPackages = pkgs.linuxPackagesFor (pkgs.linux_6_1.override {
|
||||
argsOverride = rec {
|
||||
src = pkgs.fetchurl {
|
||||
url = "mirror://kernel/linux/kernel/v6.x/linux-${version}.tar.xz";
|
||||
sha256 = "Vnc3mQ28kmWWageGOSghqfpVn9NGSU/R7/BQ2+s4OlI=";
|
||||
};
|
||||
version = "6.1.52";
|
||||
modDirVersion = "6.1.52";
|
||||
};
|
||||
});
|
||||
#+end_src
|
||||
|
||||
* DOCKER
|
||||
Basic docker settings to be able to run some images, although most docker images
|
||||
run on my server.
|
||||
|
||||
#+begin_src nix
|
||||
virtualisation.docker = {
|
||||
enable = true;
|
||||
storageDriver = "btrfs";
|
||||
enableNvidia = true;
|
||||
};
|
||||
#+end_src
|
||||
|
||||
* CLOSE SYSTEM
|
||||
#+begin_src nix
|
||||
}
|
||||
#+end_src
|
||||
|
||||
|
||||
91
workstation/fstab.nix
Normal file
91
workstation/fstab.nix
Normal file
@ -0,0 +1,91 @@
|
||||
{ config, pkgs, modulesPath, ... }: {
|
||||
imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
|
||||
boot = {
|
||||
#plymouth = { enable = true; };
|
||||
loader = {
|
||||
efi = {
|
||||
canTouchEfiVariables = true;
|
||||
efiSysMountPoint = "/boot/efi";
|
||||
};
|
||||
grub = {
|
||||
enable = true;
|
||||
device = "nodev";
|
||||
efiSupport = true;
|
||||
enableCryptodisk = true;
|
||||
};
|
||||
};
|
||||
initrd.luks.devices = {
|
||||
nvme = {
|
||||
|
||||
device = "/dev/disk/by-uuid/e9618e85-a631-4374-b2a4-22c376d6e41b";
|
||||
preLVM = true;
|
||||
};
|
||||
};
|
||||
kernelModules = [ "kvm-intel" ];
|
||||
kernel.sysctl = { "vm.swappiness" = 80; };
|
||||
extraModulePackages = [ ];
|
||||
initrd = {
|
||||
availableKernelModules =
|
||||
[ "xhci_pci" "ahci" "usbhid" "nvme" "usb_storage" "sd_mod" ];
|
||||
kernelModules = [ ];
|
||||
};
|
||||
};
|
||||
|
||||
fileSystems = let
|
||||
mount = disk: {
|
||||
device = "workstation:/${disk}";
|
||||
fsType = "nfs";
|
||||
};
|
||||
in {
|
||||
"/mnt/disk1" = mount "disk1" // { };
|
||||
"/mnt/disk2" = mount "disk2" // { };
|
||||
"/mnt/jawz" = mount "jawz" // { };
|
||||
"/mnt/seedbox" = mount "seedbox" // { };
|
||||
|
||||
"/" = {
|
||||
device = "/dev/mapper/nvme";
|
||||
fsType = "btrfs";
|
||||
options = [
|
||||
"subvol=nixos"
|
||||
"ssd"
|
||||
"compress=zstd:3"
|
||||
"x-systemd.device-timeout=0"
|
||||
"space_cache=v2"
|
||||
"commit=120"
|
||||
"datacow"
|
||||
"noatime"
|
||||
];
|
||||
};
|
||||
"/home" = {
|
||||
device = "/dev/mapper/nvme";
|
||||
fsType = "btrfs";
|
||||
options = [
|
||||
"subvol=home"
|
||||
"ssd"
|
||||
"compress=zstd:3"
|
||||
"x-systemd.device-timeout=0"
|
||||
"space_cache=v2"
|
||||
"commit=120"
|
||||
"datacow"
|
||||
];
|
||||
};
|
||||
"/boot" = {
|
||||
device = "/dev/disk/by-uuid/ac6d349a-96b9-499e-9009-229efd7743a5";
|
||||
fsType = "ext4";
|
||||
};
|
||||
"/boot/efi" = {
|
||||
device = "/dev/disk/by-uuid/B05D-B5FB";
|
||||
fsType = "vfat";
|
||||
};
|
||||
|
||||
};
|
||||
swapDevices = [{
|
||||
device = "/dev/disk/by-partuuid/c1bd22d7-e62c-440a-88d1-6464be1aa1b0";
|
||||
randomEncryption = {
|
||||
enable = true;
|
||||
cipher = "aes-xts-plain64";
|
||||
keySize = 512;
|
||||
sectorSize = 4096;
|
||||
};
|
||||
}];
|
||||
}
|
||||
Loading…
x
Reference in New Issue
Block a user