120 lines
3.0 KiB
Nix
120 lines
3.0 KiB
Nix
{ pkgs, config, ... }: {
|
|
imports = [
|
|
./hardware-configuration.nix
|
|
./variables.nix
|
|
../modules/server/security.nix
|
|
../modules/server/openssh.nix
|
|
../modules/server/sops.nix
|
|
../modules/server/cloudflare-dyndns.nix
|
|
../modules/server/nginx.nix
|
|
../modules/server/nextcloud.nix
|
|
../modules/server/vaultwarden.nix
|
|
|
|
../modules/server/www
|
|
../modules/server/adguard.nix
|
|
../modules/server/ntfy-sh.nix
|
|
../modules/server/tailscale.nix
|
|
# ../modules/server/unifi.nix # FIXME: unifi5 is deprecated
|
|
|
|
];
|
|
|
|
# Bootloader.
|
|
boot = {
|
|
loader.grub.enable = true;
|
|
loader.grub.device = "/dev/sda";
|
|
loader.grub.useOSProber = true;
|
|
tmp.cleanOnBoot = true;
|
|
kernelPackages =
|
|
pkgs.linuxPackages_latest; # _zen, _hardened, _rt, _rt_latest, etc.
|
|
};
|
|
|
|
# Networking
|
|
networking = { hostName = config.var.hostname; };
|
|
|
|
# Timezone and locale
|
|
time.timeZone = config.var.timeZone;
|
|
i18n.defaultLocale = config.var.defaultLocale;
|
|
i18n.extraLocaleSettings = {
|
|
LC_ADDRESS = config.var.extraLocale;
|
|
LC_IDENTIFICATION = config.var.extraLocale;
|
|
LC_MEASUREMENT = config.var.extraLocale;
|
|
LC_MONETARY = config.var.extraLocale;
|
|
LC_NAME = config.var.extraLocale;
|
|
LC_NUMERIC = config.var.extraLocale;
|
|
LC_PAPER = config.var.extraLocale;
|
|
LC_TELEPHONE = config.var.extraLocale;
|
|
LC_TIME = config.var.extraLocale;
|
|
};
|
|
|
|
# Users
|
|
users.users.${config.var.username} = {
|
|
isNormalUser = true;
|
|
description = "${config.var.username} account";
|
|
extraGroups = [ "wheel" ];
|
|
};
|
|
|
|
services = {
|
|
xserver = {
|
|
enable = true;
|
|
xkb.layout = config.var.keyboardLayout;
|
|
xkb.variant = "";
|
|
};
|
|
gnome.gnome-keyring.enable = true;
|
|
};
|
|
console.keyMap = config.var.keyboardLayout;
|
|
|
|
# Shell
|
|
programs.zsh = {
|
|
enable = true;
|
|
loginShellInit = ''
|
|
dbus-update-activation-environment --systemd DISPLAY
|
|
'';
|
|
};
|
|
users.defaultUserShell = pkgs.zsh;
|
|
|
|
nix = {
|
|
settings = {
|
|
auto-optimise-store = true;
|
|
experimental-features = [ "nix-command" "flakes" ];
|
|
substituters = [ "https://hyprland.cachix.org" ];
|
|
trusted-public-keys = [
|
|
"hyprland.cachix.org-1:a7pgxzMz7+chwVL3/pzj6jIBMioiJM7ypFP8PwtkuGc="
|
|
];
|
|
};
|
|
gc = if config.var.autoGarbageCollector then {
|
|
automatic = true;
|
|
persistent = true;
|
|
dates = "weekly";
|
|
options = "--delete-older-than 7d";
|
|
} else
|
|
{ };
|
|
};
|
|
|
|
nixpkgs.config.allowUnfree = true;
|
|
|
|
system.autoUpgrade = if config.var.autoUpgrade then {
|
|
enable = true;
|
|
dates = "04:00";
|
|
flake = "${config.var.configDirectory}";
|
|
flags = [ "--update-input" "nixpkgs" "--commit-lock-file" ];
|
|
allowReboot = false;
|
|
} else
|
|
{ };
|
|
|
|
services.libinput.enable = true;
|
|
programs.dconf.enable = true;
|
|
|
|
# Faster rebuilding
|
|
documentation = {
|
|
enable = true;
|
|
doc.enable = false;
|
|
man.enable = true;
|
|
dev.enable = false;
|
|
};
|
|
|
|
services.dbus.enable = true;
|
|
|
|
# Don't touch this
|
|
system.stateVersion = "24.05";
|
|
}
|