make amdgpu & stateversion host-specific, fix yubikey

This commit is contained in:
2025-06-17 12:22:23 +02:00
parent 8d6da08a22
commit e01f3c7cdc
3 changed files with 25 additions and 11 deletions

View File

@ -16,11 +16,14 @@
graphics.enable = true; graphics.enable = true;
}; };
# Network security specific to wildfire # AMD GPU kernel module
boot.initrd.kernelModules = ["amdgpu"];
# Network security specific to host
networking.firewall.allowedTCPPorts = []; networking.firewall.allowedTCPPorts = [];
networking.firewall.allowedUDPPorts = []; networking.firewall.allowedUDPPorts = [];
# Wildfire-specific packages # host-specific packages
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
lact lact
multiviewer-for-f1 multiviewer-for-f1
@ -30,7 +33,7 @@
ardour ardour
]; ];
# Wildfire-specific Systemd services # host-specific Systemd services
systemd.services.lact = { systemd.services.lact = {
description = "AMDGPU Control Daemon"; description = "AMDGPU Control Daemon";
after = ["multi-user.target"]; after = ["multi-user.target"];
@ -40,4 +43,12 @@
}; };
enable = true; enable = true;
}; };
# This value determines the NixOS release from which the default
# settings for stateful data, like file locations and database versions
# on your system were taken. Its perfectly fine and recommended to leave
# this value at the release version of the first install of this system.
# Before changing this value read the documentation for this option
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
system.stateVersion = "23.11";
} }

View File

@ -8,7 +8,7 @@
users.schulze = { users.schulze = {
isNormalUser = true; isNormalUser = true;
description = "Felix Schulze"; description = "Felix Schulze";
extraGroups = ["networkmanager" "wheel" "docker"]; extraGroups = ["networkmanager" "wheel" "docker" "plugdev"];
shell = pkgs.fish; shell = pkgs.fish;
}; };
groups.libvirtd.members = ["schulze"]; groups.libvirtd.members = ["schulze"];
@ -18,7 +18,6 @@
boot = { boot = {
loader.systemd-boot.enable = true; loader.systemd-boot.enable = true;
loader.efi.canTouchEfiVariables = true; loader.efi.canTouchEfiVariables = true;
initrd.kernelModules = ["amdgpu"];
kernelPackages = pkgs.linuxPackages_latest; kernelPackages = pkgs.linuxPackages_latest;
}; };
@ -123,6 +122,12 @@
firefox = { firefox = {
executable = "${pkgs.lib.getBin pkgs.firefox}/bin/firefox"; executable = "${pkgs.lib.getBin pkgs.firefox}/bin/firefox";
profile = "${pkgs.firejail}/etc/firejail/firefox.profile"; profile = "${pkgs.firejail}/etc/firejail/firefox.profile";
extraArgs = [
# Required for U2F USB stick
"--ignore=private-dev"
# Enable system notifications
"--dbus-user.talk=org.freedesktop.Notifications"
];
}; };
chromium = { chromium = {
executable = "${pkgs.lib.getBin pkgs.ungoogled-chromium}/bin/chromium"; executable = "${pkgs.lib.getBin pkgs.ungoogled-chromium}/bin/chromium";
@ -130,9 +135,7 @@
}; };
}; };
}; };
# Yubikey Settings
# This value determines the NixOS release from which the default services.yubikey-agent.enable = true;
# settings for stateful data, like file locations and database versions security.pam.u2f.enable =true ;
# on your system were taken.
system.stateVersion = "23.11";
} }

View File

@ -4,7 +4,7 @@
enable = true; enable = true;
displayManager.gdm.enable = false; displayManager.gdm.enable = false;
}; };
# Greetd is lightweight and Wayland-native
greetd.enable = true; greetd.enable = true;
upower.enable = true; upower.enable = true;