make amdgpu & stateversion host-specific, fix yubikey
This commit is contained in:
@ -16,11 +16,14 @@
|
|||||||
graphics.enable = true;
|
graphics.enable = true;
|
||||||
};
|
};
|
||||||
|
|
||||||
# Network security specific to wildfire
|
# AMD GPU kernel module
|
||||||
|
boot.initrd.kernelModules = ["amdgpu"];
|
||||||
|
|
||||||
|
# Network security specific to host
|
||||||
networking.firewall.allowedTCPPorts = [];
|
networking.firewall.allowedTCPPorts = [];
|
||||||
networking.firewall.allowedUDPPorts = [];
|
networking.firewall.allowedUDPPorts = [];
|
||||||
|
|
||||||
# Wildfire-specific packages
|
# host-specific packages
|
||||||
environment.systemPackages = with pkgs; [
|
environment.systemPackages = with pkgs; [
|
||||||
lact
|
lact
|
||||||
multiviewer-for-f1
|
multiviewer-for-f1
|
||||||
@ -30,7 +33,7 @@
|
|||||||
ardour
|
ardour
|
||||||
];
|
];
|
||||||
|
|
||||||
# Wildfire-specific Systemd services
|
# host-specific Systemd services
|
||||||
systemd.services.lact = {
|
systemd.services.lact = {
|
||||||
description = "AMDGPU Control Daemon";
|
description = "AMDGPU Control Daemon";
|
||||||
after = ["multi-user.target"];
|
after = ["multi-user.target"];
|
||||||
@ -40,4 +43,12 @@
|
|||||||
};
|
};
|
||||||
enable = true;
|
enable = true;
|
||||||
};
|
};
|
||||||
|
|
||||||
|
# This value determines the NixOS release from which the default
|
||||||
|
# settings for stateful data, like file locations and database versions
|
||||||
|
# on your system were taken. It‘s perfectly fine and recommended to leave
|
||||||
|
# this value at the release version of the first install of this system.
|
||||||
|
# Before changing this value read the documentation for this option
|
||||||
|
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
|
||||||
|
system.stateVersion = "23.11";
|
||||||
}
|
}
|
||||||
|
@ -8,7 +8,7 @@
|
|||||||
users.schulze = {
|
users.schulze = {
|
||||||
isNormalUser = true;
|
isNormalUser = true;
|
||||||
description = "Felix Schulze";
|
description = "Felix Schulze";
|
||||||
extraGroups = ["networkmanager" "wheel" "docker"];
|
extraGroups = ["networkmanager" "wheel" "docker" "plugdev"];
|
||||||
shell = pkgs.fish;
|
shell = pkgs.fish;
|
||||||
};
|
};
|
||||||
groups.libvirtd.members = ["schulze"];
|
groups.libvirtd.members = ["schulze"];
|
||||||
@ -18,7 +18,6 @@
|
|||||||
boot = {
|
boot = {
|
||||||
loader.systemd-boot.enable = true;
|
loader.systemd-boot.enable = true;
|
||||||
loader.efi.canTouchEfiVariables = true;
|
loader.efi.canTouchEfiVariables = true;
|
||||||
initrd.kernelModules = ["amdgpu"];
|
|
||||||
kernelPackages = pkgs.linuxPackages_latest;
|
kernelPackages = pkgs.linuxPackages_latest;
|
||||||
};
|
};
|
||||||
|
|
||||||
@ -123,6 +122,12 @@
|
|||||||
firefox = {
|
firefox = {
|
||||||
executable = "${pkgs.lib.getBin pkgs.firefox}/bin/firefox";
|
executable = "${pkgs.lib.getBin pkgs.firefox}/bin/firefox";
|
||||||
profile = "${pkgs.firejail}/etc/firejail/firefox.profile";
|
profile = "${pkgs.firejail}/etc/firejail/firefox.profile";
|
||||||
|
extraArgs = [
|
||||||
|
# Required for U2F USB stick
|
||||||
|
"--ignore=private-dev"
|
||||||
|
# Enable system notifications
|
||||||
|
"--dbus-user.talk=org.freedesktop.Notifications"
|
||||||
|
];
|
||||||
};
|
};
|
||||||
chromium = {
|
chromium = {
|
||||||
executable = "${pkgs.lib.getBin pkgs.ungoogled-chromium}/bin/chromium";
|
executable = "${pkgs.lib.getBin pkgs.ungoogled-chromium}/bin/chromium";
|
||||||
@ -130,9 +135,7 @@
|
|||||||
};
|
};
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
# Yubikey Settings
|
||||||
# This value determines the NixOS release from which the default
|
services.yubikey-agent.enable = true;
|
||||||
# settings for stateful data, like file locations and database versions
|
security.pam.u2f.enable =true ;
|
||||||
# on your system were taken.
|
|
||||||
system.stateVersion = "23.11";
|
|
||||||
}
|
}
|
||||||
|
@ -4,7 +4,7 @@
|
|||||||
enable = true;
|
enable = true;
|
||||||
displayManager.gdm.enable = false;
|
displayManager.gdm.enable = false;
|
||||||
};
|
};
|
||||||
|
# Greetd is lightweight and Wayland-native
|
||||||
greetd.enable = true;
|
greetd.enable = true;
|
||||||
|
|
||||||
upower.enable = true;
|
upower.enable = true;
|
||||||
|
Reference in New Issue
Block a user