Nix-Config/system/shared-configuration.nix

115 lines
2.8 KiB
Nix

{ config, pkgs, inputs, ... }:
{
# Use the systemd-boot EFI boot loader.
boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true;
boot.supportedFilesystems = [ "ntfs" ];
networking.networkmanager.enable = true;
i18n.defaultLocale = "en_GB.UTF-8";
i18n.extraLocaleSettings = {
LC_ADDRESS = "en_GB.UTF-8";
LC_IDENTIFICATION = "en_GB.UTF-8";
LC_MEASUREMENT = "en_GB.UTF-8";
LC_MONETARY = "en_GB.UTF-8";
LC_NAME = "en_GB.UTF-8";
LC_NUMERIC = "en_GB.UTF-8";
LC_PAPER = "en_GB.UTF-8";
LC_TELEPHONE = "en_GB.UTF-8";
LC_TIME = "en_GB.UTF-8";
};
environment.variables.LC_ALL = "en_GB.UTF-8";
time.timeZone = "Europe/London";
# security.polkit.enable = true;
systemd.user.services.polkit-gnome-authentication-agent-1 = {
Unit.Description = "polkit-gnome-authentication-agent-1";
Service = {
Type = "simple";
ExecStart = "${pkgs.polkit_gnome}/libexec/polkit-gnome-authentication-agent-1";
Restart = "on-failure";
RestartSec = 1;
TimeoutStopSec = 10;
};
};
# Enable sound.
security.rtkit.enable = true;
services.pipewire = {
enable = true;
alsa.enable = true;
alsa.support32Bit = true;
pulse.enable = true;
};
users.groups.tmux.gid = 1000; # Used for tmux pairing
systemd.tmpfiles.rules = [
"d /var/tmux_share 2770 tsv tmux"
];
users.users.tsv = {
isNormalUser = true;
extraGroups = [
"wheel"
"docker"
"tmux"
"networkmanager"
];
initialPassword = "password";
};
nix.settings.trusted-users = [ "root" "tsv" ];
nix = {
extraOptions = "experimental-features = nix-command flakes";
package = pkgs.nixFlakes;
gc = {
automatic = true;
dates = "weekly";
options = "--delete-older-than 30d";
};
};
hardware.bluetooth.enable = true;
environment.systemPackages = [
pkgs.wget
pkgs.tmux
pkgs.git
pkgs.pciutils
pkgs.pinentry-curses
pkgs.xdg-desktop-portal
pkgs.xdg-desktop-portal-gtk
pkgs.xdg-desktop-portal-kde
inputs.devenv.packages.x86_64-linux.devenv
];
programs.gnupg.agent = {
enable = true;
enableSSHSupport = true;
pinentryFlavor = "curses";
};
nixpkgs.config.allowUnfree = true;
services.openssh = {
enable = true;
settings.PasswordAuthentication = false;
};
xdg.mime.enable = true;
xdg.mime.defaultApplications = {
"text/html" = "org.qutebrowser.qutebrowser.desktop";
"x-scheme-handler/http" = "org.qutebrowser.qutebrowser.desktop";
"x-scheme-handler/https" = "org.qutebrowser.qutebrowser.desktop";
"x-scheme-handler/about" = "org.qutebrowser.qutebrowser.desktop";
"x-scheme-handler/unknown" = "org.qutebrowser.qutebrowser.desktop";
};
system.stateVersion = "22.11"; # Don't change this
}