nixos-config/configuration.nix at system · bamidev/nixos-config · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
# Edit this configuration file to define what should be installed on
# your system. Help is available in the configuration.nix(5) man page, on
# https://search.nixos.org/options and in the NixOS manual (`nixos-help`).

{ pkgs, lib, ... }:

let
  deviceConfig = import ./device.nix;
  homeManager = (import ./sources.nix).homeManager25_11;
  params = import ./params.nix;
  theme = import ./theme.nix;
in
{
  imports = [
    "/etc/nixos/devices/${deviceConfig.name}/hardware.nix"
    homeManager
    ./apps.nix
  ] ++ lib.optionals (params.environmentType == "desktop") [
    ./desktop.nix
  ];

  system.stateVersion = "24.11";

  boot = {
    tmp.cleanOnBoot = true;

    # Completely disable the IPv6 stack in order to prevent IPv6 from being used; it is not
    # supported by my VPN.
    kernelParams = [
      "console=tty12"
      "ipv6.disable=1"
    ];

    loader = {
      grub = {
        enable = true;
      } // lib.attrsets.optionalAttrs (builtins.pathExists /home/bamilab/Pictures/grub.png) {
        splashImage = /home/bamilab/Pictures/grub.png;
        splashMode = "stretch";
      };
      timeout = 2;
    };
  };

  console.colors = [
    theme.dark.black
  ] ++ (with theme.normal; [
    red
    green
    yellow
    blue
    magenta
    cyan
    white
  ]) ++ (with theme.bright; [
    black
    red
    green
    yellow
    blue
    magenta
    cyan
    white
  ]);

  hardware.enableRedistributableFirmware = lib.mkDefault false;

  nix = {
    extraOptions = ''
      keep-outputs = true
      keep-derivations = true
    '';

    gc = {
      automatic = true;
      dates = "weekly";
      options = "--delete-older-than 90d";
    };

    settings.experimental-features = [ "nix-command" "flakes" ];
  };

  networking = {
    enableIPv6 = false;
    hostName = "baminix";
    networkmanager.enable = true;  # Easiest to use and most distros use this by default.
    resolvconf = {
      enable = true;
    };

    firewall.allowedUDPPorts = [ 53 67 ];
  };

  # Set your time zone.
  time.timeZone = "Europe/Amsterdam";

  # Select internationalisation properties.
  # i18n.defaultLocale = "en_US.UTF-8";
  # console = {
  #   font = "Lat2-Terminus16";
  #   keyMap = "us";
  #   useXkbConfig = true; # use xkb.options in tty.
  # };

  # Users
  users = {
    mutableUsers = true;
    users = {
      bamilab = {
        description = "Personal";
        home = "/home/bamilab";
        isNormalUser = true;
        extraGroups = [
          "audio"
          "docker"
          "video"
          "wheel"	# Enable ‘sudo’ for the user.
        ];
        #packages = with pkgs; [];
      };
      therp = {
        description = "Work";
        home = "/home/therp";
        isNormalUser = true;
        extraGroups = [
          "audio"
          "docker"
          "video"
          "wheel"
        ];
        packages = with pkgs; [
          postgresql_17
        ];
      };
    };
  };

  home-manager = {
    backupFileExtension = "backup";

    # Use the `imports` feature because now the imports list of users/defaults.nix is being
    # overriden by the other files.
    users =
      {
        root = { pkgs, lib, ... }: import ./users/root.nix { pkgs=pkgs; lib=lib; };
        bamilab = { pkgs, lib, ... }:
          import ./users/bamilab.nix { pkgs=pkgs; lib=lib; };
      } // lib.attrsets.optionalAttrs (params.environmentType == "desktop") {
        therp = { pkgs, lib, ... }:
          import ./users/therp.nix { pkgs=pkgs; lib=lib; };
      };
  };

  security.polkit.enable = true;
}