diff options
| author | Jakub Stachurski <j.stachurski@student.utwente.nl> | 2025-11-19 21:02:52 +0100 |
|---|---|---|
| committer | Jakub Stachurski <j.stachurski@student.utwente.nl> | 2025-11-19 21:02:52 +0100 |
| commit | 892de67a9f64d0b0cdb023d830a019d8feec0a57 (patch) | |
| tree | 0c5fd0c60ef93bb5cdc5f83c8cade0c5dddb4899 /hosts/apocalypse/default.nix | |
| parent | f5b37610b3835ea26757ef36d554ec598d53100c (diff) | |
Nix fmt
Diffstat (limited to 'hosts/apocalypse/default.nix')
| -rw-r--r-- | hosts/apocalypse/default.nix | 142 |
1 files changed, 70 insertions, 72 deletions
diff --git a/hosts/apocalypse/default.nix b/hosts/apocalypse/default.nix index eb9d14c..5437a32 100644 --- a/hosts/apocalypse/default.nix +++ b/hosts/apocalypse/default.nix @@ -1,68 +1,70 @@ - {lib, pkgs, ...}: - { - imports = [ - ./hardware-configuration.nix - ./nvidia.nix - ./backup.nix - ./firewall.nix - ]; +{ lib, pkgs, ... }: +{ + imports = [ + ./hardware-configuration.nix + ./nvidia.nix + ./backup.nix + ./firewall.nix + ]; ## TODO REMOVE LATER TO PREVENT ELI FROM BUILDING REMOTELY - boot.binfmt.emulatedSystems = ["aarch64-linux"]; - + boot.binfmt.emulatedSystems = [ "aarch64-linux" ]; + ## Addons for this system - addons = { - desktop.hyprland.enable = true; - desktop.xfce.enable = true; - steam.enable = true; + addons = { + desktop.hyprland.enable = true; + desktop.xfce.enable = true; + steam.enable = true; - virtualisation.guest = false; - virtualisation.host = true; + virtualisation.guest = false; + virtualisation.host = true; - vpn.mullvad.enable = true; - vpn.eduvpn.enable = true; + vpn.mullvad.enable = true; + vpn.eduvpn.enable = true; gpg.enable = true; remote_builder = { - enable = true; - allowedKeyFiles = [../../secrets/eli.pub]; - openFirewall = true; - }; + enable = true; + allowedKeyFiles = [ ../../secrets/eli.pub ]; + openFirewall = true; + }; }; - boot.loader.grub = { - useOSProber = true; - device = "nodev"; + boot.loader.grub = { + useOSProber = true; + device = "nodev"; - efiSupport = true; - default = "saved"; - memtest86.enable = true; - # splashImage = ./GrubBG.png; - }; - boot.loader.efi.canTouchEfiVariables = true; - boot.initrd.systemd.enable = true; - boot.crashDump.enable = true; - boot.plymouth = { - enable = true; - theme = "bgrt"; - }; + efiSupport = true; + default = "saved"; + memtest86.enable = true; + # splashImage = ./GrubBG.png; + }; + boot.loader.efi.canTouchEfiVariables = true; + boot.initrd.systemd.enable = true; + boot.crashDump.enable = true; + boot.plymouth = { + enable = true; + theme = "bgrt"; + }; - boot.kernelParams = [ - "quiet" - "splash" - "loglevel=3" - "rd.systemd.show_status=false" - "rd.udev.log_level=3" - "udev.logpriority=3" + boot.kernelParams = [ + "quiet" + "splash" + "loglevel=3" + "rd.systemd.show_status=false" + "rd.udev.log_level=3" + "udev.logpriority=3" ]; - boot.consoleLogLevel = 0; + boot.consoleLogLevel = 0; networking.hostName = "apocalypse"; # Define your hostname. - networking.networkmanager.enable = true; # Easiest to use and most distros use this by default. - - hardware.bluetooth.enable = true; + networking.networkmanager.enable = true; # Easiest to use and most distros use this by default. + + hardware.bluetooth.enable = true; hardware.bluetooth.settings = { - General = {Enable = "Source,Sink,Media,Socket";}; + General = { + Enable = "Source,Sink,Media,Socket"; + }; }; hardware.bluetooth.powerOnBoot = true; @@ -71,39 +73,35 @@ programs.nix-ld.enable = true; services.printing.enable = true; - - services.resolved = { - enable = true; - dnssec = "false"; - domains = [ "~." ]; - fallbackDns = [ ]; - dnsovertls = "opportunistic"; - }; + services.resolved = { + enable = true; + dnssec = "false"; + domains = [ "~." ]; + fallbackDns = [ ]; + dnsovertls = "opportunistic"; + }; networking.useDHCP = lib.mkDefault true; - networking.firewall.checkReversePath = false; - + networking.firewall.checkReversePath = false; - # Thunderbolt + # Thunderbolt services.hardware.bolt.enable = true; - powerManagement.enable = true; + powerManagement.enable = true; - # Firmware updates - services.fwupd.enable = true; + # Firmware updates + services.fwupd.enable = true; services.openssh = { - enable = true; - ports = [22]; - openFirewall = false; - allowSFTP = false; + enable = true; + ports = [ 22 ]; + openFirewall = false; + allowSFTP = false; settings = { PasswordAuthentication = false; - AllowUsers = ["wilkuu"]; - X11Forwarding = false; + AllowUsers = [ "wilkuu" ]; + X11Forwarding = false; PermitRootLogin = "no"; PrintMotd = true; - }; + }; }; } - - |
