depot/ops/nixos/porcorosso/default.nix

221 lines
5.7 KiB
Nix
Raw Normal View History

{ depot, lib, pkgs, rebuilder, config, ... }:
let
inherit (depot.ops) secrets;
nvidia-offload-profile = ''
export __NV_PRIME_RENDER_OFFLOAD=1
export __NV_PRIME_RENDER_OFFLOAD_PROVIDER=NVIDIA-G0
export __GLX_VENDOR_LIBRARY_NAME=nvidia
export __VK_LAYER_NV_optimus=NVIDIA_only
'';
nvidia-offload = pkgs.writeShellScriptBin "nvidia-offload"
(nvidia-offload-profile + ''
exec -a "$0" "$@"
'');
in {
imports = [
../lib/zfs.nix
];
boot.initrd.availableKernelModules = [
"xhci_pci"
"ahci"
"nvme"
"usbhid"
"usb_storage"
"sd_mod"
"rtsx_pci_sdmmc"
];
boot.kernelModules = [ "kvm-intel" ];
2020-05-11 20:15:49 +00:00
boot.supportedFilesystems = [ "ntfs" ];
fileSystems = let
zfs = device: {
device = device;
fsType = "zfs";
};
in {
"/" = zfs "zpool/local/root";
"/nix" = zfs "zpool/local/nix";
"/tmp" = zfs "zpool/local/tmp";
"/var" = zfs "zpool/safe/var";
"/home" = zfs "zpool/safe/home";
"/persist" = zfs "zpool/safe/persist";
"/boot" = {
device = "/dev/disk/by-label/NIXBOOT";
fsType = "vfat";
};
2020-05-11 20:15:49 +00:00
"/data" = {
device = "/dev/disk/by-label/BULKDATA";
fsType = "ntfs";
options = [ "rw" "uid=1000" "gid=100" "dmask=077" "fmask=137" "windows_names" ];
};
};
nix.maxJobs = lib.mkDefault 12;
powerManagement.cpuFreqGovernor = lib.mkDefault "powersave";
hardware.enableRedistributableFirmware = true;
# Use the systemd-boot EFI boot loader.
boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true;
# ZFS!
services.zfs.rollbackOnBoot.enable = true;
# Enable HyperV guesting
virtualisation.hypervGuest.enable = true;
networking.hostName = "porcorosso";
networking.hostId = "1ee729a4";
# Boot faster.
systemd.services.systemd-udev-settle.enable = false;
systemd.services.NetworkManager-wait-online.enable = false;
# The global useDHCP flag is deprecated, therefore explicitly set to false here.
# Per-interface useDHCP will be mandatory in the future, so this generated config
# replicates the default behaviour.
# Use NetworkManager instead.
networking.useDHCP = false;
networking.interfaces.eno1.useDHCP = false;
networking.networkmanager.enable = true;
# Set your time zone.
time.timeZone = "Europe/London";
# List packages installed in system profile. To search, run:
# $ nix search wget
environment.systemPackages = with pkgs; [
pciutils
nvidia-offload
rebuilder
2020-05-10 01:12:29 +00:00
deluge
(writeShellScriptBin "windows" ''
set -ue
if [[ $EUID -ne 0 ]]; then
exec sudo "$0" "$@"
fi
efibootmgr -n 0001
systemctl reboot
'')
];
fonts = {
fonts = with pkgs; [
iosevka
];
fontconfig.penultimate.enable = true;
};
#hardware.nvidia.prime.offload.enable = true;
#hardware.nvidia.prime = {
# intelBusId = "PCI:0:2:0";
# nvidiaBusId = "PCI:1:0:0";
#};
hardware.u2f.enable = true;
services.udev.packages = [ pkgs.libu2f-host ];
services.pcscd.enable = true;
# Some programs need SUID wrappers, can be configured further or are
# started in user sessions.
programs.mtr.enable = true;
# programs.gnupg.agent = { enable = true; enableSSHSupport = true; };
# List services that you want to enable:
# Enable the OpenSSH daemon.
services.openssh.enable = true;
# Enable CUPS to print documents.
services.printing.enable = true;
# Enable sound.
sound.enable = true;
hardware.pulseaudio.enable = true;
# Enable the X11 windowing system.
services.xserver.enable = true;
services.xserver.layout = "us";
services.xserver.libinput.enable = true;
services.xserver.windowManager.i3.enable = true;
services.xserver.videoDrivers = [ "nvidia" ];
services.xserver.displayManager.gdm = {
enable = true;
};
hardware.opengl.driSupport32Bit = true;
hardware.opengl.extraPackages32 = with pkgs.pkgsi686Linux; [ libva ];
hardware.pulseaudio.support32Bit = true;
# Define a user account.
users.users.lukegb = {
extraGroups = [ "wheel" "networkmanager" ];
packages = with pkgs; [
(steam.override { extraProfile = nvidia-offload-profile; })
(writeScriptBin "javaws" ''
#!/bin/sh
exec ${depot.nix.pkgs.javaws-env}/bin/javaws-env "$@"
'')
(depot.nix.pkgs.secretsync.configure {
workingDir = "/home/lukegb/depot";
gitlabAccessToken = secrets.deployer.gitlabAccessToken;
manifestVariable = "SECRETS_MANIFEST";
variablesToFile = {
"OPS_SECRETS_DEFAULT_NIX" = "ops/secrets/default.nix";
};
})
chromium
2020-05-16 15:44:29 +00:00
depot.nix.pkgs.copybara
2020-05-22 12:04:47 +00:00
direnv
efibootmgr
git
graphicsmagick-imagemagick-compat
iotop
iw
pavucontrol
rxvt_unicode
teamspeak_client
2020-05-11 15:45:02 +00:00
whois
xclip
yubioath-desktop
];
};
2020-05-22 12:04:47 +00:00
# github.com/target/lorri
services.lorri.enable = true;
# Things to persist.
services.openssh.hostKeys = [
{
path = "/persist/etc/ssh/ssh_host_ed25519_key";
type = "ed25519";
}
{
path = "/persist/etc/ssh/ssh_host_rsa_key";
type = "rsa";
bits = 4096;
}
];
environment.etc = {
"NetworkManager/system-connections" = {
source = "/persist/etc/NetworkManager/system-connections/";
};
"nixos" = { source = "/persist/etc/nixos/"; };
};
systemd.tmpfiles.rules = [
#"L /etc/nixos - - - - /persist/etc/nixos"
];
# Enable Thunderbolt device management.
services.hardware.bolt.enable = true;
# This value determines the NixOS release with which your system is to be
# compatible, in order to avoid breaking some software such as database
# servers. You should change this only after NixOS release notes say you
# should.
2020-05-11 20:15:49 +00:00
system.stateVersion = "20.03"; # Did you read the comment?
}