diff options
Diffstat (limited to 'hosts/apocalypse/default.nix')
| -rw-r--r-- | hosts/apocalypse/default.nix | 99 |
1 files changed, 99 insertions, 0 deletions
diff --git a/hosts/apocalypse/default.nix b/hosts/apocalypse/default.nix new file mode 100644 index 0000000..8993dc2 --- /dev/null +++ b/hosts/apocalypse/default.nix @@ -0,0 +1,99 @@ + {lib, ...}: + { + imports = [ + ./hardware-configuration.nix + ./nvidia.nix + ./backup.nix + ./firewall.nix + ]; + + ## Addons for this system + addons = { + desktop.hyprland.enable = true; + desktop.xfce.enable = true; + + virtualisation.guest = false; + virtualisation.host = true; + + vpn.mullvad.enable = true; + gpg.enable = true; + }; + + boot.loader.grub = { + useOSProber = true; + device = "nodev"; + + efiSupport = true; + default = "saved"; + memtest86.enable = true; + # splashImage = ./GrubBG.png; + }; + boot.loader.efi.canTouchEfiVariables = true; + boot.initrd.systemd.enable = true; + boot.crashDump.enable = true; + boot.plymouth = { + enable = true; + theme = "bgrt"; + }; + + boot.kernelParams = [ + "quiet" + "splash" + "loglevel=3" + "rd.systemd.show_status=false" + "rd.udev.log_level=3" + "udev.logpriority=3" + ]; + boot.consoleLogLevel = 0; + + networking.hostName = "apocalypse"; # Define your hostname. + networking.networkmanager.enable = true; # Easiest to use and most distros use this by default. + + hardware.bluetooth.enable = true; + hardware.bluetooth.settings = { + General = {Enable = "Source,Sink,Media,Socket";}; + }; + + hardware.bluetooth.powerOnBoot = true; + services.blueman.enable = true; + + programs.nix-ld.enable = true; + services.printing.enable = true; + # nix.config.allowUnfree = true; + + + services.resolved = { + enable = true; + dnssec = "false"; + domains = [ "~." ]; + fallbackDns = [ ]; + dnsovertls = "opportunistic"; + }; + + networking.useDHCP = lib.mkDefault true; + networking.firewall.checkReversePath = false; + + + # Thunderbolt + services.hardware.bolt.enable = true; + powerManagement.enable = true; + + # Firmware updates + services.fwupd.enable = true; + + services.openssh = { + enable = true; + ports = [22]; + openFirewall = false; + allowSFTP = false; + settings = { + PasswordAuthentication = false; + AllowUsers = ["wilkuu"]; + X11Forwarding = false; + PermitRootLogin = "no"; + PrintMotd = true; + }; + }; +} + + |
