diff options
| author | Jakub Stachurski <j.stachurski@student.utwente.nl> | 2025-08-17 11:25:33 +0200 |
|---|---|---|
| committer | Jakub Stachurski <j.stachurski@student.utwente.nl> | 2025-08-17 11:25:33 +0200 |
| commit | 1be972048dd58218cd689ecb5cac562eb398b751 (patch) | |
| tree | 203f19ee01ad5fe28f2868e8c1451f9538e4ab12 /hosts/apocalypse/default.nix | |
| parent | 3cd59d4670711e34a50adea912c3b0894883e490 (diff) | |
refreshed config
Diffstat (limited to 'hosts/apocalypse/default.nix')
| -rw-r--r-- | hosts/apocalypse/default.nix | 99 |
1 files changed, 99 insertions, 0 deletions
diff --git a/hosts/apocalypse/default.nix b/hosts/apocalypse/default.nix new file mode 100644 index 0000000..8993dc2 --- /dev/null +++ b/hosts/apocalypse/default.nix @@ -0,0 +1,99 @@ + {lib, ...}: + { + imports = [ + ./hardware-configuration.nix + ./nvidia.nix + ./backup.nix + ./firewall.nix + ]; + + ## Addons for this system + addons = { + desktop.hyprland.enable = true; + desktop.xfce.enable = true; + + virtualisation.guest = false; + virtualisation.host = true; + + vpn.mullvad.enable = true; + gpg.enable = true; + }; + + boot.loader.grub = { + useOSProber = true; + device = "nodev"; + + efiSupport = true; + default = "saved"; + memtest86.enable = true; + # splashImage = ./GrubBG.png; + }; + boot.loader.efi.canTouchEfiVariables = true; + boot.initrd.systemd.enable = true; + boot.crashDump.enable = true; + boot.plymouth = { + enable = true; + theme = "bgrt"; + }; + + boot.kernelParams = [ + "quiet" + "splash" + "loglevel=3" + "rd.systemd.show_status=false" + "rd.udev.log_level=3" + "udev.logpriority=3" + ]; + boot.consoleLogLevel = 0; + + networking.hostName = "apocalypse"; # Define your hostname. + networking.networkmanager.enable = true; # Easiest to use and most distros use this by default. + + hardware.bluetooth.enable = true; + hardware.bluetooth.settings = { + General = {Enable = "Source,Sink,Media,Socket";}; + }; + + hardware.bluetooth.powerOnBoot = true; + services.blueman.enable = true; + + programs.nix-ld.enable = true; + services.printing.enable = true; + # nix.config.allowUnfree = true; + + + services.resolved = { + enable = true; + dnssec = "false"; + domains = [ "~." ]; + fallbackDns = [ ]; + dnsovertls = "opportunistic"; + }; + + networking.useDHCP = lib.mkDefault true; + networking.firewall.checkReversePath = false; + + + # Thunderbolt + services.hardware.bolt.enable = true; + powerManagement.enable = true; + + # Firmware updates + services.fwupd.enable = true; + + services.openssh = { + enable = true; + ports = [22]; + openFirewall = false; + allowSFTP = false; + settings = { + PasswordAuthentication = false; + AllowUsers = ["wilkuu"]; + X11Forwarding = false; + PermitRootLogin = "no"; + PrintMotd = true; + }; + }; +} + + |
