restructure nix configs

This commit is contained in:
2025-06-11 16:03:43 +02:00
parent c13c327727
commit 9b8bf0efc5
6 changed files with 38 additions and 34 deletions

View File

@ -7,6 +7,8 @@
imports = [ imports = [
./hardware-configuration.nix ./hardware-configuration.nix
../../modules/common.nix ../../modules/common.nix
../../modules/desktops/gnome-desktop.nix
../../modules/programs.nix
]; ];
# Encrypted drive # Encrypted drive
@ -26,6 +28,11 @@
# Wildfire-specific packages # Wildfire-specific packages
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
lact lact
multiviewer-for-f1
wasabiwallet
prismlauncher
davinci-resolve
ardour
]; ];
# Wildfire-specific Systemd services # Wildfire-specific Systemd services

View File

@ -4,11 +4,17 @@
inputs, inputs,
... ...
}: { }: {
imports = [
./desktop.nix # Define the main user account
./users.nix users = {
./programs.nix users.schulze = {
]; isNormalUser = true;
description = "Felix Schulze";
extraGroups = ["networkmanager" "wheel" "docker"];
shell = pkgs.fish;
};
groups.libvirtd.members = ["schulze"];
};
# Bootloader. # Bootloader.
boot = { boot = {
@ -18,12 +24,14 @@
kernelPackages = pkgs.linuxPackages_latest; kernelPackages = pkgs.linuxPackages_latest;
}; };
networking = {
# Enable networking # Enable networking
networking.networkmanager.enable = true; networkmanager.enable = true;
# Network security # Network security
# enable firewall and block all ports # enable firewall and block all ports
networking.firewall.enable = true; firewall.enable = true;
};
# disable coredump that could be exploited later # disable coredump that could be exploited later
# and also slow down the system when something crash # and also slow down the system when something crash
@ -33,9 +41,10 @@
time.timeZone = "Europe/Stockholm"; time.timeZone = "Europe/Stockholm";
# Select internationalisation properties. # Select internationalisation properties.
i18n.defaultLocale = "en_GB.UTF-8"; i18n = {
defaultLocale = "en_GB.UTF-8";
i18n.extraLocaleSettings = { extraLocaleSettings = {
LC_ADDRESS = "sv_SE.UTF-8"; LC_ADDRESS = "sv_SE.UTF-8";
LC_IDENTIFICATION = "sv_SE.UTF-8"; LC_IDENTIFICATION = "sv_SE.UTF-8";
LC_MEASUREMENT = "sv_SE.UTF-8"; LC_MEASUREMENT = "sv_SE.UTF-8";
@ -46,6 +55,7 @@
LC_TELEPHONE = "sv_SE.UTF-8"; LC_TELEPHONE = "sv_SE.UTF-8";
LC_TIME = "sv_SE.UTF-8"; LC_TIME = "sv_SE.UTF-8";
}; };
};
# Configure console keymap # Configure console keymap
console.keyMap = "sv-latin1"; console.keyMap = "sv-latin1";
@ -110,8 +120,10 @@
}; };
# enable antivirus clamav and keep the signatures' database updated # enable antivirus clamav and keep the signatures' database updated
services.clamav.daemon.enable = true; services.clamav = {
services.clamav.updater.enable = true; daemon.enable = true;
updater.enable = true;
};
# This value determines the NixOS release from which the default # This value determines the NixOS release from which the default
# settings for stateful data, like file locations and database versions # settings for stateful data, like file locations and database versions

View File

@ -0,0 +1,6 @@
{
config,
pkgs,
...
}: {
}

View File

@ -44,22 +44,17 @@
ghostty ghostty
obsidian obsidian
nextcloud-client nextcloud-client
multiviewer-for-f1
libreoffice-fresh libreoffice-fresh
tor-browser tor-browser
wasabiwallet
ungoogled-chromium ungoogled-chromium
prismlauncher
plexamp plexamp
remmina remmina
# Audio/Visual # Visual
inkscape inkscape
krita krita
darktable darktable
davinci-resolve
imagemagick imagemagick
ardour
]; ];
programs = { programs = {

View File

@ -1,16 +0,0 @@
{
config,
pkgs,
...
}: {
# Define the main user account
users = {
users.schulze = {
isNormalUser = true;
description = "Felix Schulze";
extraGroups = ["networkmanager" "wheel" "docker"];
shell = pkgs.fish;
};
groups.libvirtd.members = ["schulze"];
};
}