521 lines
12 KiB
Nix
521 lines
12 KiB
Nix
# Edit this configuration file to define what should be installed on
|
||
# your system. Help is available in the configuration.nix(5) man page
|
||
# and in the NixOS manual (accessible by running ‘nixos-help’).
|
||
|
||
{
|
||
config,
|
||
lib,
|
||
pkgs,
|
||
inputs,
|
||
...
|
||
}:
|
||
|
||
with lib;
|
||
|
||
{
|
||
imports = [
|
||
# Include the results of the hardware scan.
|
||
./hardware-configuration.nix
|
||
../../modules/nixos/clamav.nix
|
||
];
|
||
|
||
hardware.bluetooth = {
|
||
enable = true;
|
||
powerOnBoot = true;
|
||
settings = {
|
||
General = {
|
||
Name = "Hello";
|
||
ControllerMode = "dual";
|
||
FastConnectable = "true";
|
||
Experimental = "true";
|
||
};
|
||
Policy = {
|
||
AutoEnable = "true";
|
||
};
|
||
};
|
||
};
|
||
services.blueman.enable = true;
|
||
hardware.enableAllFirmware = true;
|
||
|
||
hardware.uinput.enable = true;
|
||
|
||
boot.kernelPackages = pkgs.linuxPackages_latest;
|
||
|
||
boot = {
|
||
extraModulePackages = [ config.boot.kernelPackages.v4l2loopback ];
|
||
extraModprobeConfig = ''
|
||
options v4l2loopback devices=2 video_nr=10,20 card_label="custom_cam","android_cam" exclusive_caps=1,1
|
||
'';
|
||
|
||
kernelModules = [
|
||
"v4l2loopback"
|
||
];
|
||
};
|
||
|
||
#boot.kernelPackages = pkgs.linuxPackagesFor (
|
||
# pkgs.linux_latest.override {
|
||
# argsOverride = rec {
|
||
# version = "7.0.6";
|
||
# modDirVersion = "7.0.6";
|
||
# src = pkgs.fetchurl {
|
||
# url = "mirror://kernel/linux/kernel/v7.x/linux-${version}.tar.xz";
|
||
# sha256 = "08vm18wx6399phzgr3wz94yga3ab4fyca79445ygvbspm904996b";
|
||
# };
|
||
# };
|
||
# }
|
||
#);
|
||
|
||
# Bootloader.
|
||
boot.loader.systemd-boot.enable = true;
|
||
boot.loader.efi.canTouchEfiVariables = true;
|
||
|
||
boot.initrd.luks.devices."luks-1dfcf980-6806-4f69-bd86-ee87c904c04b".device =
|
||
"/dev/disk/by-uuid/1dfcf980-6806-4f69-bd86-ee87c904c04b";
|
||
networking.hostName = "fw"; # Define your hostname.
|
||
# networking.wireless.enable = true; # Enables wireless support via wpa_supplicant.
|
||
networking.extraHosts = ''
|
||
127.0.0.1 yt.be m.youtube.com youtube.com
|
||
127.0.0.1 www.youtube.com
|
||
'';
|
||
|
||
# Configure network proxy if necessary
|
||
# networking.proxy.default = "http://user:password@proxy:port/";
|
||
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
|
||
|
||
# Enable networking
|
||
networking.networkmanager.enable = true;
|
||
|
||
# Set your time zone.
|
||
time.timeZone = "Europe/Berlin";
|
||
|
||
# Select internationalisation properties.
|
||
i18n.defaultLocale = "en_US.UTF-8";
|
||
|
||
i18n.extraLocaleSettings = {
|
||
LC_ADDRESS = "de_DE.UTF-8";
|
||
LC_IDENTIFICATION = "de_DE.UTF-8";
|
||
LC_MEASUREMENT = "de_DE.UTF-8";
|
||
LC_MONETARY = "de_DE.UTF-8";
|
||
LC_NAME = "de_DE.UTF-8";
|
||
LC_NUMERIC = "de_DE.UTF-8";
|
||
LC_PAPER = "de_DE.UTF-8";
|
||
LC_TELEPHONE = "de_DE.UTF-8";
|
||
LC_TIME = "de_DE.UTF-8";
|
||
};
|
||
|
||
# Enable the X11 windowing system.
|
||
# You can disable this if you're only using the Wayland session.
|
||
services.xserver.enable = true;
|
||
|
||
# Configure keymap in X11
|
||
services.xserver.xkb = {
|
||
layout = "us";
|
||
variant = "";
|
||
};
|
||
|
||
# services.xserver.windowManager.dwm = {
|
||
# enable = true;
|
||
# package = pkgs.dwm.overrideAttrs {
|
||
# src = ./config/dwm;
|
||
# };
|
||
# };
|
||
|
||
# Enable the KDE Plasma Desktop Environment.
|
||
services.displayManager.sddm.enable = true;
|
||
services.desktopManager.plasma6.enable = true;
|
||
|
||
# services.displayManager.ly.enable = true;
|
||
|
||
# Enable CUPS to print documents.
|
||
services.printing.enable = true;
|
||
|
||
# Enable sound with pipewire.
|
||
security.rtkit.enable = true;
|
||
|
||
#services.pulseaudio.enable = true; # ENABLE FOR MULTI BLUETOOTH
|
||
#services.pulseaudio.support32Bit = true; # ENABLE FOR MULTI BLUETOOTH
|
||
|
||
services.pipewire = {
|
||
enable = true; # DISABLE FOR MULTI BLUETOOTH
|
||
alsa.enable = true; # DISABLE FOR MULTI BLUETOOTH
|
||
alsa.support32Bit = true; # DISABLE FOR MULTI BLUETOOTH
|
||
pulse.enable = true; # DISABLE FOR MULTI BLUETOOTH
|
||
# If you want to use JACK applications, uncomment this
|
||
#jack.enable = true;
|
||
|
||
# use the example session manager (no others are packaged yet so this is enabled by default,
|
||
# no need to redefine it in your config for now)
|
||
#media-session.enable = true;
|
||
};
|
||
|
||
# Enable touchpad support (enabled default in most desktopManager).
|
||
# services.xserver.libinput.enable = true;
|
||
|
||
# Define a user account. Don't forget to set a password with ‘passwd’.
|
||
users.users.tsi = {
|
||
isNormalUser = true;
|
||
description = "tsi";
|
||
extraGroups = [
|
||
"networkmanager"
|
||
"wheel"
|
||
"libvirtd"
|
||
"docker"
|
||
"video"
|
||
"ydotool"
|
||
];
|
||
packages = with pkgs; [ ];
|
||
};
|
||
|
||
# Install firefox.
|
||
programs.firefox.enable = true;
|
||
|
||
# Allow unfree packages
|
||
nixpkgs.config.allowUnfree = true;
|
||
|
||
virtualisation.virtualbox.host.enable = true;
|
||
users.extraGroups.vboxusers.members = [ "tsi" ];
|
||
|
||
virtualisation.libvirtd.enable = true;
|
||
virtualisation.docker = {
|
||
enable = true;
|
||
package = pkgs.docker_29;
|
||
};
|
||
programs.virt-manager.enable = true;
|
||
programs.fuse.userAllowOther = true;
|
||
services.pcscd.enable = true;
|
||
|
||
systemd.services.keyd.environment = {
|
||
YDOTOOL_SOCKET = "/run/ydotoold/socket";
|
||
};
|
||
|
||
services.keyd =
|
||
let
|
||
mouseMove = pkgs.writeShellScript "mouse-move" ''
|
||
${pkgs.ydotool}/bin/ydotool mousemove -- "$1" "$2"
|
||
'';
|
||
mouseScroll = pkgs.writeShellScript "mouse-scroll" ''
|
||
${pkgs.ydotool}/bin/ydotool mousemove -w -- "$1" "$2"
|
||
'';
|
||
mouseClick = pkgs.writeShellScript "mouse-click" ''
|
||
${pkgs.ydotool}/bin/ydotool click "$1"
|
||
'';
|
||
in
|
||
{
|
||
enable = true;
|
||
|
||
keyboards.default = {
|
||
ids = [ "*" ];
|
||
extraConfig = ''
|
||
[main]
|
||
leftcontrol = layer(lctrl)
|
||
|
||
leftshift = layer(lshift)
|
||
rightshift = layer(lshift)
|
||
|
||
# Swapped layout
|
||
# leftalt = layer(lsuper)
|
||
# rightalt = layer(rsuper)
|
||
|
||
# leftmeta = layer(lalt)
|
||
# rightmeta = layer(altgr)
|
||
|
||
# Normal layout
|
||
leftalt = layer(lalt)
|
||
rightalt = layer(altgr)
|
||
|
||
leftmeta = layer(lsuper)
|
||
rightmeta = layer(rsuper)
|
||
|
||
capslock = layer(lctrl)
|
||
|
||
[lctrl:C]
|
||
j = enter
|
||
leftbrace = escape
|
||
|
||
[lalt:A]
|
||
|
||
[lshift:S]
|
||
|
||
[lsuper:M]
|
||
|
||
[rsuper:M]
|
||
|
||
[altgr:G]
|
||
|
||
[lctrl+lshift]
|
||
h = backspace
|
||
|
||
[lalt+lctrl]
|
||
h = left
|
||
j = down
|
||
k = up
|
||
l = right
|
||
|
||
[altgr]
|
||
h = command(${mouseScroll} -1 0)
|
||
j = command(${mouseScroll} 0 -1)
|
||
k = command(${mouseScroll} 0 1)
|
||
l = command(${mouseScroll} 1 0)
|
||
|
||
[lctrl+lsuper]
|
||
h = C-left
|
||
j = C-down
|
||
k = C-up
|
||
l = C-right
|
||
|
||
[lalt+lctrl+lsuper]
|
||
h = command(${mouseMove} -200 0)
|
||
j = command(${mouseMove} 0 200)
|
||
k = command(${mouseMove} 0 -200)
|
||
l = command(${mouseMove} 200 0)
|
||
enter = rightmouse
|
||
|
||
[lctrl+lshift+lsuper]
|
||
h = C-S-left
|
||
j = C-S-down
|
||
k = C-S-up
|
||
l = C-S-right
|
||
|
||
[lalt+lctrl+lshift]
|
||
h = S-left
|
||
j = S-down
|
||
k = S-up
|
||
l = S-right
|
||
|
||
[lalt+lctrl+lshift+lsuper]
|
||
h = command(${mouseMove} -20 0)
|
||
j = command(${mouseMove} 0 20)
|
||
k = command(${mouseMove} 0 -20)
|
||
l = command(${mouseMove} 20 0)
|
||
enter = leftmouse
|
||
'';
|
||
};
|
||
};
|
||
|
||
services.netbird.enable = true;
|
||
#services.netbird.clients.wt0 = {
|
||
# login = {
|
||
# enable = true;
|
||
# #setupKeyFile = /home/tsi/.config/netbird/setup-key;
|
||
# };
|
||
|
||
# port = 51821;
|
||
# ui.enable = true;
|
||
# #openFirewall = true;
|
||
# #oepnInternalFirewall = true;
|
||
#};
|
||
|
||
# Some programs need SUID wrappers, can be configured further or are
|
||
# started in user sessions.
|
||
# programs.mtr.enable = true;
|
||
# programs.gnupg.agent = {
|
||
# enable = true;
|
||
# enableSSHSupport = true;
|
||
# };
|
||
|
||
# List services that you want to enable:
|
||
|
||
# Enable the OpenSSH daemon.
|
||
# services.openssh.enable = true;
|
||
|
||
# Open ports in the firewall.
|
||
# networking.firewall.allowedTCPPorts = [ ... ];
|
||
# networking.firewall.allowedUDPPorts = [ ... ];
|
||
# Or disable the firewall altogether.
|
||
networking.firewall.enable = false;
|
||
|
||
# This value determines the NixOS release from which the default
|
||
# settings for stateful data, like file locations and database versions
|
||
# on your system were taken. It‘s perfectly fine and recommended to leave
|
||
# this value at the release version of the first install of this system.
|
||
# Before changing this value read the documentation for this option
|
||
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
|
||
system.stateVersion = "25.11"; # Did you read the comment?
|
||
|
||
nix.settings.experimental-features = [
|
||
"nix-command"
|
||
"flakes"
|
||
];
|
||
|
||
programs.nix-index-database.comma.enable = true;
|
||
|
||
home-manager = {
|
||
extraSpecialArgs = { inherit inputs; };
|
||
users = {
|
||
"tsi" = import ./home.nix;
|
||
};
|
||
};
|
||
|
||
### services.xserver.dpi = 192;
|
||
services.xserver.dpi = 96;
|
||
|
||
# environment.variables = {
|
||
### ## Used by GTK 3
|
||
### # `GDK_SCALE` is limited to integer values
|
||
### GDK_SCALE = "2";
|
||
### # Inverse of GDK_SCALE
|
||
### GDK_DPI_SCALE = "0.5";
|
||
|
||
### # Used by Qt 5
|
||
### QT_AUTO_SCREEN_SCALE_FACTOR = "1";
|
||
|
||
### _JAVA_OPTIONS = "-Dsun.java2d.uiScale=2";
|
||
|
||
### XCURSOR_SIZE = "64";
|
||
### };
|
||
|
||
# Expose variables to graphical systemd user services
|
||
### services.xserver.displayManager.importedVariables = [
|
||
### "GDK_SCALE"
|
||
### "GDK_DPI_SCALE"
|
||
### "QT_AUTO_SCREEN_SCALE_FACTOR"
|
||
### ];
|
||
|
||
# List packages installed in system profile. To search, run:
|
||
# $ nix search wget
|
||
environment.systemPackages = with pkgs; [
|
||
alacritty
|
||
android-tools
|
||
ansible
|
||
anydesk
|
||
arandr
|
||
ayugram-desktop
|
||
bat
|
||
bc
|
||
brave
|
||
brightnessctl
|
||
clamav
|
||
conntrack-tools
|
||
convmv
|
||
dash
|
||
dig
|
||
dive
|
||
dmenu
|
||
dnsmasq
|
||
exfat
|
||
expect
|
||
fastfetch
|
||
ffmpeg
|
||
file
|
||
fprintd
|
||
freerdp
|
||
gcc
|
||
gdu
|
||
gh
|
||
glow
|
||
gnumake
|
||
gnupg
|
||
gron
|
||
guestfs-tools
|
||
gurk-rs
|
||
htop
|
||
ijq
|
||
iperf3
|
||
jless
|
||
jq
|
||
kdotool
|
||
ksh
|
||
libarchive
|
||
libreoffice
|
||
lynx
|
||
man-pages
|
||
man-pages-posix
|
||
mkvtoolnix-cli
|
||
moreutils
|
||
mosh
|
||
mpv
|
||
mupdf
|
||
nautilus
|
||
neomutt
|
||
netbird-ui
|
||
netcat-openbsd
|
||
nextcloud-client
|
||
nmap
|
||
nodejs_26
|
||
ntfsprogs-plus
|
||
obs-studio
|
||
openssh
|
||
openssl_4_0
|
||
openvpn
|
||
pangolin-cli
|
||
paprefs
|
||
parted
|
||
patchelf
|
||
pavucontrol
|
||
pciutils
|
||
proton-vpn
|
||
psmisc
|
||
pstree
|
||
pulseaudio
|
||
pv
|
||
python3
|
||
ranger
|
||
rustdesk
|
||
scli
|
||
signal-cli
|
||
signal-cli
|
||
signal-desktop
|
||
simplex-chat-desktop
|
||
slack
|
||
spacer
|
||
sshfs
|
||
sshpass
|
||
tcpdump
|
||
tmux
|
||
traceroute
|
||
trash-cli
|
||
tree
|
||
tt
|
||
usbutils
|
||
usbutils
|
||
v4l-utils
|
||
vagrant
|
||
vim
|
||
virtualenv
|
||
wget
|
||
winbox
|
||
wireguard-tools
|
||
wl-clipboard-rs
|
||
yash
|
||
ydiff
|
||
ydotool
|
||
yq
|
||
yt-dlp
|
||
yubioath-flutter
|
||
|
||
(pkgs.symlinkJoin {
|
||
name = "keepassxc";
|
||
paths = [ pkgs.keepassxc ];
|
||
nativeBuildInputs = [ pkgs.makeWrapper ];
|
||
postBuild = ''
|
||
wrapProgram $out/bin/keepassxc --set QT_LINUX_ACCESSIBILITY_ALWAYS_ON 1
|
||
'';
|
||
})
|
||
keepassxc
|
||
(pkgs.writeShellScriptBin "kpxc-search" ''
|
||
export GI_TYPELIB_PATH=${pkgs.lib.makeSearchPath "lib/girepository-1.0" [
|
||
pkgs.at-spi2-core pkgs.glib.out pkgs.gobject-introspection
|
||
]}''${GI_TYPELIB_PATH:+:$GI_TYPELIB_PATH}
|
||
exec ${pkgs.python3.withPackages (ps: [ ps.pygobject3 ])}/bin/python3 ${./scripts/kpxc-search} "$@"
|
||
'')
|
||
];
|
||
programs.ydotool.enable = true;
|
||
|
||
documentation.dev.enable = true;
|
||
|
||
services.openssh = {
|
||
enable = true;
|
||
openFirewall = true;
|
||
settings = {
|
||
PasswordAuthentication = true;
|
||
KbdInteractiveAuthentication = false;
|
||
PermitRootLogin = "no";
|
||
AllowUsers = [ "tsi" ];
|
||
MaxAuthTries = 30;
|
||
};
|
||
};
|
||
|
||
services.power-profiles-daemon.enable = true;
|
||
|
||
environment.localBinInPath = true;
|
||
}
|