[chore] Add config for new nix box.

2026-01-17 23:10:04 -08:00
parent 1fea0933d2
commit e87207d4d8
9 changed files with 418 additions and 46 deletions
@@ -0,0 +1,160 @@
+{ config, lib, pkgs, ghostty, ... }:
+let
+  pubKeys = lib.filesystem.listFilesRecursive ../common/keys;
+in
+{
+  imports =
+    [ # Include the results of the hardware scan.
+      ./hardware-configuration.nix
+      # Sops and other stuff.
+      ../common/core
+      ../common/optional/yubikey.nix
+    ];
+
+  # Use the systemd-boot EFI boot loader.
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+
+  nix.settings.experimental-features = [ "nix-command" "flakes" ];
+  nixpkgs.config.allowUnfree = true;  
+  virtualisation.docker.enable = true;
+
+  hardware.graphics = {
+    enable = true;
+    enable32Bit = true;
+  };
+
+  # Bluetooth.
+  hardware.bluetooth.enable = true;
+  hardware.bluetooth.powerOnBoot = true;
+  services.blueman.enable = true;
+
+  # Use latest kernel.
+  boot.kernelPackages = pkgs.linuxPackages_latest;
+
+  # networking.hostName = "nixos"; # Define your hostname.
+  networking.hostName = "nixbox";
+  networking.wireless = {
+    enable = true;
+    secretsFile = config.sops.secrets."wireless.env".path;
+    networks = {
+      "UG_LivingRoom_5G" = {
+        pskRaw = "ext:home_psk";
+      };
+    };
+  };
+  # Configure network connections interactively with nmcli or nmtui.
+
+  # Set your time zone.
+  time.timeZone = "America/Los_Angeles";
+  i18n.defaultLocale = "en_US.UTF-8";
+  i18n.extraLocaleSettings = {
+    LC_ADDRESS = "en_US.UTF-8";
+    LC_IDENTIFICATION = "en_US.UTF-8";
+    LC_MEASUREMENT = "en_US.UTF-8";
+    LC_MONETARY = "en_US.UTF-8";
+    LC_NAME = "en_US.UTF-8";
+    LC_NUMERIC = "en_US.UTF-8";
+    LC_PAPER = "en_US.UTF-8";
+    LC_TELEPHONE = "en_US.UTF-8";
+    LC_TIME = "en_US.UTF-8";
+  };
+
+  programs.zsh.enable = true;
+  user.name = "jmug";
+  users.users.jmug = {
+    isNormalUser = true;
+    description = "Mariano Uvalle";
+    extraGroups = [ "wheel" "docker"]; # Enable ‘sudo’ for the user.
+    shell = pkgs.zsh;
+    packages = with pkgs; [
+      tree
+      btop
+      git
+    ];
+    openssh.authorizedKeys.keys = lib.lists.forEach pubKeys (key: builtins.readFile key);
+  };
+  users.users.root = {
+    shell = pkgs.zsh;
+  };
+  programs.neovim = {
+    enable = true;
+    defaultEditor = true;
+  };
+
+  # List packages installed in system profile.
+  # You can use https://search.nixos.org/ to find more packages (and options).
+  environment.systemPackages = with pkgs; [
+    # vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
+    wget
+    curl
+    # Misc utils
+    ripgrep
+    fzf
+    unzip
+    nautilus
+    # Terminal
+    ghostty.packages.x86_64-linux.default
+    kitty
+    # Theming
+    palenight-theme
+    # Lock screen
+    hyprlock
+    # Idling
+    sway-audio-idle-inhibit
+  ];
+  environment.pathsToLink = [ "/share/applications" "/share/xdg-desktop-portal" ];
+  fonts = {
+    fontDir.enable = true;
+    packages = with pkgs; [
+      nerd-fonts.bigblue-terminal
+      nerd-fonts.fira-code
+      nerd-fonts.caskaydia-cove
+    ];
+  };
+
+  security.pam.services.hyprlock = {};
+  programs.hyprland = {
+    enable = true;
+    xwayland.enable = true;
+  };
+  environment.sessionVariables = {
+    # Enable wayland support for chromium/electron apps.
+    GDK_BACKEND = "wayland";
+    NIXOS_OZONE_WL = "1";
+    MOZ_ENABLE_WAYLAND = "1";
+    QT_QPA_PLATFORM = "wayland";
+    # This caused issues with walker, but might be some other
+    # issue with wayland/hyprland, so will leave it here for now.
+    # QT_WAYLAND_DISABLE_WINDOWDECORATION = "1";
+    # WLR_NO_HARDWARE_CURSORS = "1";
+  };
+
+  # This is not really enabling X11, bad naming.
+  services.xserver = {
+    enable = true;
+    displayManager.gdm = {
+      enable = true;
+      wayland = true;
+    };
+  };
+
+  # USB devices.
+  services.devmon.enable = true;
+  services.gvfs.enable = true;
+  services.udisks2.enable = true;
+
+  # Enable the OpenSSH daemon.
+  # Enable the OpenSSH daemon.
+  services.openssh = {
+    enable = true;
+    # ports = [ 69 ];
+    settings = {
+      PasswordAuthentication = false;
+      PermitRootLogin = "no";
+    };
+  };
+
+  system.stateVersion = "25.11"; # Did you read the comment?
+}
+