summaryrefslogtreecommitdiff
path: root/hosts/apocalypse/default.nix
diff options
context:
space:
mode:
authorJakub Stachurski <j.stachurski@student.utwente.nl>2025-11-19 21:02:52 +0100
committerJakub Stachurski <j.stachurski@student.utwente.nl>2025-11-19 21:02:52 +0100
commit892de67a9f64d0b0cdb023d830a019d8feec0a57 (patch)
tree0c5fd0c60ef93bb5cdc5f83c8cade0c5dddb4899 /hosts/apocalypse/default.nix
parentf5b37610b3835ea26757ef36d554ec598d53100c (diff)
Nix fmt
Diffstat (limited to 'hosts/apocalypse/default.nix')
-rw-r--r--hosts/apocalypse/default.nix142
1 files changed, 70 insertions, 72 deletions
diff --git a/hosts/apocalypse/default.nix b/hosts/apocalypse/default.nix
index eb9d14c..5437a32 100644
--- a/hosts/apocalypse/default.nix
+++ b/hosts/apocalypse/default.nix
@@ -1,68 +1,70 @@
- {lib, pkgs, ...}:
- {
- imports = [
- ./hardware-configuration.nix
- ./nvidia.nix
- ./backup.nix
- ./firewall.nix
- ];
+{ lib, pkgs, ... }:
+{
+ imports = [
+ ./hardware-configuration.nix
+ ./nvidia.nix
+ ./backup.nix
+ ./firewall.nix
+ ];
## TODO REMOVE LATER TO PREVENT ELI FROM BUILDING REMOTELY
- boot.binfmt.emulatedSystems = ["aarch64-linux"];
-
+ boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
+
## Addons for this system
- addons = {
- desktop.hyprland.enable = true;
- desktop.xfce.enable = true;
- steam.enable = true;
+ addons = {
+ desktop.hyprland.enable = true;
+ desktop.xfce.enable = true;
+ steam.enable = true;
- virtualisation.guest = false;
- virtualisation.host = true;
+ virtualisation.guest = false;
+ virtualisation.host = true;
- vpn.mullvad.enable = true;
- vpn.eduvpn.enable = true;
+ vpn.mullvad.enable = true;
+ vpn.eduvpn.enable = true;
gpg.enable = true;
remote_builder = {
- enable = true;
- allowedKeyFiles = [../../secrets/eli.pub];
- openFirewall = true;
- };
+ enable = true;
+ allowedKeyFiles = [ ../../secrets/eli.pub ];
+ openFirewall = true;
+ };
};
- boot.loader.grub = {
- useOSProber = true;
- device = "nodev";
+ boot.loader.grub = {
+ useOSProber = true;
+ device = "nodev";
- efiSupport = true;
- default = "saved";
- memtest86.enable = true;
- # splashImage = ./GrubBG.png;
- };
- boot.loader.efi.canTouchEfiVariables = true;
- boot.initrd.systemd.enable = true;
- boot.crashDump.enable = true;
- boot.plymouth = {
- enable = true;
- theme = "bgrt";
- };
+ efiSupport = true;
+ default = "saved";
+ memtest86.enable = true;
+ # splashImage = ./GrubBG.png;
+ };
+ boot.loader.efi.canTouchEfiVariables = true;
+ boot.initrd.systemd.enable = true;
+ boot.crashDump.enable = true;
+ boot.plymouth = {
+ enable = true;
+ theme = "bgrt";
+ };
- boot.kernelParams = [
- "quiet"
- "splash"
- "loglevel=3"
- "rd.systemd.show_status=false"
- "rd.udev.log_level=3"
- "udev.logpriority=3"
+ boot.kernelParams = [
+ "quiet"
+ "splash"
+ "loglevel=3"
+ "rd.systemd.show_status=false"
+ "rd.udev.log_level=3"
+ "udev.logpriority=3"
];
- boot.consoleLogLevel = 0;
+ boot.consoleLogLevel = 0;
networking.hostName = "apocalypse"; # Define your hostname.
- networking.networkmanager.enable = true; # Easiest to use and most distros use this by default.
-
- hardware.bluetooth.enable = true;
+ networking.networkmanager.enable = true; # Easiest to use and most distros use this by default.
+
+ hardware.bluetooth.enable = true;
hardware.bluetooth.settings = {
- General = {Enable = "Source,Sink,Media,Socket";};
+ General = {
+ Enable = "Source,Sink,Media,Socket";
+ };
};
hardware.bluetooth.powerOnBoot = true;
@@ -71,39 +73,35 @@
programs.nix-ld.enable = true;
services.printing.enable = true;
-
- services.resolved = {
- enable = true;
- dnssec = "false";
- domains = [ "~." ];
- fallbackDns = [ ];
- dnsovertls = "opportunistic";
- };
+ services.resolved = {
+ enable = true;
+ dnssec = "false";
+ domains = [ "~." ];
+ fallbackDns = [ ];
+ dnsovertls = "opportunistic";
+ };
networking.useDHCP = lib.mkDefault true;
- networking.firewall.checkReversePath = false;
-
+ networking.firewall.checkReversePath = false;
- # Thunderbolt
+ # Thunderbolt
services.hardware.bolt.enable = true;
- powerManagement.enable = true;
+ powerManagement.enable = true;
- # Firmware updates
- services.fwupd.enable = true;
+ # Firmware updates
+ services.fwupd.enable = true;
services.openssh = {
- enable = true;
- ports = [22];
- openFirewall = false;
- allowSFTP = false;
+ enable = true;
+ ports = [ 22 ];
+ openFirewall = false;
+ allowSFTP = false;
settings = {
PasswordAuthentication = false;
- AllowUsers = ["wilkuu"];
- X11Forwarding = false;
+ AllowUsers = [ "wilkuu" ];
+ X11Forwarding = false;
PermitRootLogin = "no";
PrintMotd = true;
- };
+ };
};
}
-
-