nydragon/nix-da
1
Fork 0
Code Issues Pull requests Activity Actions 1

Compare commits

base: nydragon:main
Branches Tags
nydragon:main
nydragon:hjemify
..
compare: nydragon:hjemify
Branches Tags
nydragon:main
nydragon:hjemify

No commits in common. "main" and "hjemify" have entirely different histories.
main ... hjemify

81 changed files with 643 additions and 800 deletions
Show stats Expand all files Collapse all files

8
.forgejo/workflows/ci.yaml
View file

@ -2,8 +2,8 @@ on: [push]
jobs: jobs:
test: test:
runs-on: nix-latest runs-on: debian-latest
container:
image: ghcr.io/nydragon/runner:latest
steps: steps:
- run: nix --experimental-features 'nix-command flakes' profile install nixpkgs#nodejs-slim - run: nix flake check --verbose
- uses: actions/checkout@v4
- run: nix --experimental-features 'nix-command flakes' flake check --verbose

34
.pre-commit-config.yaml
View file

@ -11,12 +11,20 @@ repos:
- repo: local - repo: local
hooks: hooks:
- id: nixpkgs-fmt
name: Check nix formatting
entry: nixfmt
language: system
files: .*\.nix$
args: [-c]
stages: [pre-commit]
- id: prettier - id: prettier
name: Check css, scss, js, ts and yaml formatting name: Check css, scss, js, ts and yaml formatting
entry: prettier entry: prettier
language: system language: system
files: .*\.(css|scss|js|ts|yaml)$ files: .*\.(css|scss|js|ts|yaml)$
args: [--write] args: [-c]
stages: [pre-commit] stages: [pre-commit]
- id: typos - id: typos
@ -26,27 +34,3 @@ repos:
files: .* files: .*
exclude: .*\.(png|jpg|jpeg|age) exclude: .*\.(png|jpg|jpeg|age)
stages: [pre-commit] stages: [pre-commit]
- id: deadnix
name: Check for dead nix code
entry: deadnix
language: system
files: .+\.nix$
args: ["-e", "-l"]
stages: [pre-commit]
- id: statix
name: Lint nix code
entry: statix
language: system
files: .+\.nix$
pass_filenames: false
args: [fix]
stages: [pre-commit]
- id: nix-fmt
name: Check nix formatting
entry: nix fmt
language: system
files: .*\.nix$
stages: [pre-commit]

1
README.md
View file

@ -4,6 +4,7 @@
| ------- | ------- | ---------------------------------------- | | ------- | ------- | ---------------------------------------- |
| marr | x86_64 | Laptop Workstation | | marr | x86_64 | Laptop Workstation |
| brontes | x86_64 | Desktop Workstation | | brontes | x86_64 | Desktop Workstation |
| styrax | x86_64 | |
| raptus | x86_64 | | | raptus | x86_64 | |
| nihilus | aarch64 | Small Pi used to make "off-site" backups | | nihilus | aarch64 | Small Pi used to make "off-site" backups |

BIN
assets/landscape-pink-pastel.jpg Normal file
View file

Binary file not shown.
Side by side

After

Width:  |  Height:  |  Size: 774 KiB

BIN
assets/wallpapers/nix-flake-pastel.jpg Normal file
View file

Binary file not shown.
Side by side

After

Width:  |  Height:  |  Size: 308 KiB

164
flake.lock generated
View file

@ -23,24 +23,6 @@
"type": "github" "type": "github"
} }
}, },
"calibre-plugins": {
"inputs": {
"nixpkgs": "nixpkgs_2"
},
"locked": {
"lastModified": 1742395204,
"narHash": "sha256-RhI3wa1OCIjpkgwI8FEt1n3DlDP6w9W4jA+E3h6KdZU=",
"ref": "refs/heads/main",
"rev": "a131835a6016b8538d4e66e79eeb6393f436ee8c",
"revCount": 6,
"type": "git",
"url": "https://git.ccnlc.eu/nydragon/calibre-plugins.git"
},
"original": {
"type": "git",
"url": "https://git.ccnlc.eu/nydragon/calibre-plugins.git"
}
},
"darwin": { "darwin": {
"inputs": { "inputs": {
"nixpkgs": [ "nixpkgs": [
@ -70,11 +52,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1741786315, "lastModified": 1737038063,
"narHash": "sha256-VT65AE2syHVj6v/DGB496bqBnu1PXrrzwlw07/Zpllc=", "narHash": "sha256-rMEuiK69MDhjz1JgbaeQ9mBDXMJ2/P8vmOYRbFndXsk=",
"owner": "nix-community", "owner": "nix-community",
"repo": "disko", "repo": "disko",
"rev": "0d8c6ad4a43906d14abd5c60e0ffe7b587b213de", "rev": "bf0abfde48f469c256f2b0f481c6281ff04a5db2",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -106,11 +88,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1741352980, "lastModified": 1736143030,
"narHash": "sha256-+u2UunDA4Cl5Fci3m7S643HzKmIDAe+fiXrLqYsR2fs=", "narHash": "sha256-+hu54pAoLDEZT9pjHlqL9DNzWz0NbUn8NEAHP7PQPzU=",
"owner": "hercules-ci", "owner": "hercules-ci",
"repo": "flake-parts", "repo": "flake-parts",
"rev": "f4330d22f1c5d2ba72d3d22df5597d123fdb60a9", "rev": "b905f6fc23a9051a6e1b741e1438dbfc0634c6de",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -124,11 +106,11 @@
"nixpkgs-lib": "nixpkgs-lib" "nixpkgs-lib": "nixpkgs-lib"
}, },
"locked": { "locked": {
"lastModified": 1740872218, "lastModified": 1736143030,
"narHash": "sha256-ZaMw0pdoUKigLpv9HiNDH2Pjnosg7NBYMJlHTIsHEUo=", "narHash": "sha256-+hu54pAoLDEZT9pjHlqL9DNzWz0NbUn8NEAHP7PQPzU=",
"owner": "hercules-ci", "owner": "hercules-ci",
"repo": "flake-parts", "repo": "flake-parts",
"rev": "3876f6b87db82f33775b1ef5ea343986105db764", "rev": "b905f6fc23a9051a6e1b741e1438dbfc0634c6de",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -181,11 +163,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1742070442, "lastModified": 1737619027,
"narHash": "sha256-xPDSLswRazXLlceqc2+VdbKKG2m/OXCjTzU9O/Bs4ZQ=", "narHash": "sha256-jEzZs9dHdmVP5X9HCC/7jrv08aWFfqZV5cZ+cZWYGA4=",
"owner": "feel-co", "owner": "feel-co",
"repo": "hjem", "repo": "hjem",
"rev": "ae49a5a2e013c710d2b2cf046ae365d08eae75b3", "rev": "48cfa21987672a31a358b7e4d582fc174556e633",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -204,11 +186,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1743618206, "lastModified": 1740334274,
"narHash": "sha256-2m+NSilel93Kmafb1ghS+7T6kxmesKynWEqsVXIxj/k=", "narHash": "sha256-7WePvSVCZFoq10tf0LF6MsYbS/JPl/eQjE6zsfz5RpE=",
"owner": "nydragon", "owner": "nydragon",
"repo": "hjem-rum", "repo": "hjem-rum",
"rev": "c365017ca78d21ffcf0e785332b04bdbbd96c284", "rev": "20b1173bc9fee5ef26a11578934f01992b84e5a2",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -224,11 +206,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1742926508, "lastModified": 1737762889,
"narHash": "sha256-wgfY302ZaOsBCXb8aZDTG3Zt2kg3jDDaRrmtUw8nz00=", "narHash": "sha256-5HGG09bh/Yx0JA8wtBMAzt0HMCL1bYZ93x4IqzVExio=",
"owner": "nix-community", "owner": "nix-community",
"repo": "home-manager", "repo": "home-manager",
"rev": "8bef8b7a0a95d347018f09b291e2fa0a77abd23f", "rev": "daf04c5950b676f47a794300657f1d3d14c1a120",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -239,11 +221,11 @@
}, },
"nixos-hardware": { "nixos-hardware": {
"locked": { "locked": {
"lastModified": 1742806253, "lastModified": 1737751639,
"narHash": "sha256-zvQ4GsCJT6MTOzPKLmlFyM+lxo0JGQ0cSFaZSACmWfY=", "narHash": "sha256-ZEbOJ9iT72iwqXsiEMbEa8wWjyFvRA9Ugx8utmYbpz4=",
"owner": "NixOS", "owner": "NixOS",
"repo": "nixos-hardware", "repo": "nixos-hardware",
"rev": "ecaa2d911e77c265c2a5bac8b583c40b0f151726", "rev": "dfad538f751a5aa5d4436d9781ab27a6128ec9d4",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -271,38 +253,23 @@
}, },
"nixpkgs-lib": { "nixpkgs-lib": {
"locked": { "locked": {
"lastModified": 1740872140, "lastModified": 1735774519,
"narHash": "sha256-3wHafybyRfpUCLoE8M+uPVZinImg3xX+Nm6gEfN3G8I=", "narHash": "sha256-CewEm1o2eVAnoqb6Ml+Qi9Gg/EfNAxbRx1lANGVyoLI=",
"type": "tarball", "type": "tarball",
"url": "https://github.com/NixOS/nixpkgs/archive/6d3702243441165a03f699f64416f635220f4f15.tar.gz" "url": "https://github.com/NixOS/nixpkgs/archive/e9b51731911566bbf7e4895475a87fe06961de0b.tar.gz"
}, },
"original": { "original": {
"type": "tarball", "type": "tarball",
"url": "https://github.com/NixOS/nixpkgs/archive/6d3702243441165a03f699f64416f635220f4f15.tar.gz" "url": "https://github.com/NixOS/nixpkgs/archive/e9b51731911566bbf7e4895475a87fe06961de0b.tar.gz"
} }
}, },
"nixpkgs_2": { "nixpkgs_2": {
"locked": { "locked": {
"lastModified": 1742335908, "lastModified": 1737885589,
"narHash": "sha256-unmSiGsXmUAZ4fAcSgf1iwssLmt/FLrczhLAsosyLh8=", "narHash": "sha256-Zf0hSrtzaM1DEz8//+Xs51k/wdSajticVrATqDrfQjg=",
"owner": "nixos", "owner": "nixos",
"repo": "nixpkgs", "repo": "nixpkgs",
"rev": "fb9a9ddebc6c9685d2b6b98b35f134573e1872c8", "rev": "852ff1d9e153d8875a83602e03fdef8a63f0ecf8",
"type": "github"
},
"original": {
"owner": "nixos",
"repo": "nixpkgs",
"type": "github"
}
},
"nixpkgs_3": {
"locked": {
"lastModified": 1742669843,
"narHash": "sha256-G5n+FOXLXcRx+3hCJ6Rt6ZQyF1zqQ0DL0sWAMn2Nk0w=",
"owner": "nixos",
"repo": "nixpkgs",
"rev": "1e5b653dff12029333a6546c11e108ede13052eb",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -312,13 +279,13 @@
"type": "github" "type": "github"
} }
}, },
"nixpkgs_4": { "nixpkgs_3": {
"locked": { "locked": {
"lastModified": 1741462378, "lastModified": 1738297584,
"narHash": "sha256-ZF3YOjq+vTcH51S+qWa1oGA9FgmdJ67nTNPG2OIlXDc=", "narHash": "sha256-AYvaFBzt8dU0fcSK2jKD0Vg23K2eIRxfsVXIPCW9a0E=",
"owner": "NixOS", "owner": "NixOS",
"repo": "nixpkgs", "repo": "nixpkgs",
"rev": "2d9e4457f8e83120c9fdf6f1707ed0bc603e5ac9", "rev": "9189ac18287c599860e878e905da550aa6dec1cd",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -328,21 +295,6 @@
"type": "github" "type": "github"
} }
}, },
"nixpkgs_5": {
"locked": {
"lastModified": 1741851582,
"narHash": "sha256-cPfs8qMccim2RBgtKGF+x9IBCduRvd/N5F4nYpU0TVE=",
"owner": "NixOS",
"repo": "nixpkgs",
"rev": "6607cf789e541e7873d40d3a8f7815ea92204f32",
"type": "github"
},
"original": {
"id": "nixpkgs",
"ref": "nixos-unstable",
"type": "indirect"
}
},
"nur": { "nur": {
"inputs": { "inputs": {
"flake-parts": "flake-parts_2", "flake-parts": "flake-parts_2",
@ -352,11 +304,11 @@
"quasigod": "quasigod" "quasigod": "quasigod"
}, },
"locked": { "locked": {
"lastModified": 1741801623, "lastModified": 1738585852,
"narHash": "sha256-U3pD4UFNMFwm1hDQeKa4H+lgVy+RoX/XbbphUROXHEo=", "narHash": "sha256-Z+cDls2k+57lAFU+/EwRcjutgCI2iRMRpGlXHMkVcz8=",
"ref": "refs/heads/master", "ref": "refs/heads/master",
"rev": "e25a92424c4b0d095d7cdf63eb9ae2b276c84a51", "rev": "60d71b8a446906db16b33bc3081507d077d39b6c",
"revCount": 6, "revCount": 5,
"type": "git", "type": "git",
"url": "https://git.ccnlc.eu/nydragon/nur.git" "url": "https://git.ccnlc.eu/nydragon/nur.git"
}, },
@ -373,11 +325,11 @@
"quickshell": "quickshell" "quickshell": "quickshell"
}, },
"locked": { "locked": {
"lastModified": 1742061478, "lastModified": 1739209080,
"narHash": "sha256-zfqsTAU4l17jjtTFibe2MmLlqMcMuhk5iaHN55vb9RU=", "narHash": "sha256-s1SVaFQ7GSJalxIhVN7aDS7rMcMJ1AUQfjRMYho5yuM=",
"ref": "refs/heads/main", "ref": "refs/heads/main",
"rev": "693a785140b5202d51cee0c883c73dba8b2561b3", "rev": "2ca83819872d82fa0ee8dbfccfbfcf3480c279f1",
"revCount": 108, "revCount": 107,
"type": "git", "type": "git",
"url": "https://git.ccnlc.eu/nydragon/nysh.git" "url": "https://git.ccnlc.eu/nydragon/nysh.git"
}, },
@ -388,15 +340,15 @@
}, },
"quasigod": { "quasigod": {
"inputs": { "inputs": {
"nixpkgs": "nixpkgs_4", "nixpkgs": "nixpkgs_3",
"snowfall-lib": "snowfall-lib" "snowfall-lib": "snowfall-lib"
}, },
"locked": { "locked": {
"lastModified": 1741620435, "lastModified": 1738444760,
"narHash": "sha256-DUbAVfzso8WoqNQPkuIykv8be0z5d6OMY+kbtCn9A6Q=", "narHash": "sha256-MbAyUUHtiByivJLDKLO5fu3goxeHxQHQxqCzhAZ3F14=",
"ref": "refs/heads/main", "ref": "refs/heads/main",
"rev": "148b55beaeacb7ffef5ae6ccaf1543aed02cc843", "rev": "a1db39ff40250211485a98853c6d71ac42d79026",
"revCount": 20, "revCount": 16,
"type": "git", "type": "git",
"url": "https://codeberg.org/quasigod/nur.git" "url": "https://codeberg.org/quasigod/nur.git"
}, },
@ -407,7 +359,10 @@
}, },
"quickshell": { "quickshell": {
"inputs": { "inputs": {
"nixpkgs": "nixpkgs_5" "nixpkgs": [
"nysh",
"nixpkgs"
]
}, },
"locked": { "locked": {
"lastModified": 1738200090, "lastModified": 1738200090,
@ -426,17 +381,15 @@
"root": { "root": {
"inputs": { "inputs": {
"agenix": "agenix", "agenix": "agenix",
"calibre-plugins": "calibre-plugins",
"disko": "disko", "disko": "disko",
"flake-parts": "flake-parts", "flake-parts": "flake-parts",
"hjem": "hjem", "hjem": "hjem",
"hjem-rum": "hjem-rum", "hjem-rum": "hjem-rum",
"home-manager": "home-manager", "home-manager": "home-manager",
"nixos-hardware": "nixos-hardware", "nixos-hardware": "nixos-hardware",
"nixpkgs": "nixpkgs_3", "nixpkgs": "nixpkgs_2",
"nur": "nur", "nur": "nur",
"nysh": "nysh", "nysh": "nysh"
"wallpapers": "wallpapers"
} }
}, },
"snowfall-lib": { "snowfall-lib": {
@ -492,21 +445,6 @@
"repo": "default", "repo": "default",
"type": "github" "type": "github"
} }
},
"wallpapers": {
"locked": {
"lastModified": 1740607812,
"narHash": "sha256-QtyujHP3K0bUhW8Yj232/Cpioz86G+gR/zB4ruLSmW0=",
"ref": "refs/heads/main",
"rev": "ec895329334e800a4d015321ece15aafa021a9ff",
"revCount": 5,
"type": "git",
"url": "https://git.ccnlc.eu/nydragon/wallpapers.git"
},
"original": {
"type": "git",
"url": "https://git.ccnlc.eu/nydragon/wallpapers.git"
}
} }
}, },
"root": "root", "root": "root",

7
flake.nix
View file

@ -45,10 +45,6 @@
inputs.nixpkgs.follows = "nixpkgs"; inputs.nixpkgs.follows = "nixpkgs";
inputs.hjem.follows = "hjem"; inputs.hjem.follows = "hjem";
}; };
wallpapers.url = "git+https://git.ccnlc.eu/nydragon/wallpapers.git";
calibre-plugins.url = "git+https://git.ccnlc.eu/nydragon/calibre-plugins.git";
}; };
outputs = outputs =
@ -72,10 +68,9 @@
devShells.default = pkgs.mkShell { devShells.default = pkgs.mkShell {
buildInputs = with pkgs; [ buildInputs = with pkgs; [
pre-commit pre-commit
nixfmt-rfc-style
nodePackages.prettier nodePackages.prettier
typos typos
deadnix
statix
inputs'.agenix.packages.default inputs'.agenix.packages.default
]; ];
shellHook = '' shellHook = ''

3
home/default.nix
View file

@ -1,15 +1,16 @@
# This file contains default settings used across different systems # This file contains default settings used across different systems
{ {
imports = [ imports = [
./themes/vanilla.nix
./graphical ./graphical
./terminal ./terminal
./desktop ./desktop
./hyprland ./hyprland
./hyprlock
./services ./services
./rofi ./rofi
./sway ./sway
./waybar ./waybar
./hyprpaper
./swaync ./swaync
]; ];
} }

5
home/desktop/default.nix
View file

@ -2,6 +2,7 @@
self, self,
pkgs, pkgs,
lib, lib,
osConfig,
... ...
}: }:
let let
@ -24,5 +25,9 @@ in
(mkURLEntry "KitchenOwl" "https://kitchenowl.ccnlc.eu" "${self}/assets/favicon-kitchenowl.png") (mkURLEntry "KitchenOwl" "https://kitchenowl.ccnlc.eu" "${self}/assets/favicon-kitchenowl.png")
(mkURLEntry "Discord" "https://discord.com/app" "${self}/assets/favicon-discord.png") (mkURLEntry "Discord" "https://discord.com/app" "${self}/assets/favicon-discord.png")
]; ];
mimeApps = {
enable = true;
defaultApplications = osConfig.xdg.mime.defaultApplications;
};
}; };
} }

77
home/graphical/firefox/default.nix
View file

@ -9,10 +9,77 @@ lib.mkIf osConfig.programs.firefox.enable {
programs.firefox = { programs.firefox = {
enable = true; enable = true;
# Installed by nixpkgs module # Installed by nixpkgs module
package = null; package = osConfig.programs.firefox.package;
profiles.${config.home.username} = { profiles.${config.home.username} = {
name = config.home.username; name = config.home.username;
isDefault = true; isDefault = true;
userContent = # css
''
/* Sidebery */
@-moz-document url("moz-extension://d1d9847c-2bad-429f-9366-56db49b8c3d6/sidebar/sidebar.html")
{
#root {
--tabs-indent: 0px !important;
}
#root:hover {
--tabs-indent: 30px !important;
}
}
'';
userChrome = # css
''
/* Hides the native tabs, sidebar header and splitter */
#TabsToolbar,
#sidebar-splitter,
#sidebar-header {
display: none;
}
#sidebar-box {
--sidebar-normal-width: 35px;
--sidebar-hovered-width: 300px;
--sidebar-transition-speed: 200ms;
--sidebar-collapse-delay: 300ms;
--sidebar-transition-type: linear;
--browser-area-z-index-sidebar: 3;
position: relative;
min-width: var(--sidebar-normal-width) !important;
width: var(--sidebar-normal-width) !important;
max-width: var(--sidebar-normal-width) !important;
z-index: var(--browser-area-z-index-sidebar);
}
#sidebar-box[positionend] {
direction: rtl;
}
#sidebar-box[positionend] > * {
direction: ltr;
}
#sidebar-box[positionend]:-moz-locale-dir(rtl) {
direction: ltr;
}
#sidebar-box[positionend]:-moz-locale-dir(rtl) > * {
direction: rtl;
}
#main-window[sizemode="fullscreen"] #sidebar-box {
--sidebar-normal-width: 1px;
}
#sidebar {
transition: min-width var(--sidebar-transition-speed)
var(--sidebar-transition-type) var(--sidebar-collapse-delay) !important;
min-width: var(--sidebar-normal-width) !important;
will-change: min-width;
}
#sidebar-box:hover > #sidebar {
min-width: var(--sidebar-hovered-width) !important;
transition-delay: 100ms !important;
}
'';
search = { search = {
default = "DuckDuckGo"; default = "DuckDuckGo";
force = true; force = true;
@ -44,13 +111,13 @@ lib.mkIf osConfig.programs.firefox.enable {
urls = [ urls = [
{ template = "https://wiki.archlinux.org/index.php?title=Special:Search&search={searchTerms}"; } { template = "https://wiki.archlinux.org/index.php?title=Special:Search&search={searchTerms}"; }
]; ];
icon = "https://wiki.archlinux.org/favicon.ico"; iconUpdateURL = "https://wiki.archlinux.org/favicon.ico";
updateInterval = iconUpdateInterval; updateInterval = iconUpdateInterval;
definedAliases = [ "@archwiki" ]; definedAliases = [ "@archwiki" ];
}; };
"DuckDuckGo" = { "DuckDuckGo" = {
urls = [ { template = "https://duckduckgo.com/?q={searchTerms}"; } ]; urls = [ { template = "https://duckduckgo.com/?q={searchTerms}"; } ];
icon = "https://duckduckgo.com/favicon.ico"; iconUpdateURL = "https://duckduckgo.com/favicon.ico";
updateInterval = iconUpdateInterval; updateInterval = iconUpdateInterval;
definedAliases = [ definedAliases = [
"@duckduckgo" "@duckduckgo"
@ -59,7 +126,7 @@ lib.mkIf osConfig.programs.firefox.enable {
}; };
"MyNixOS" = { "MyNixOS" = {
urls = [ { template = "https://mynixos.com/search?q={searchTerms}"; } ]; urls = [ { template = "https://mynixos.com/search?q={searchTerms}"; } ];
icon = "https://mynixos.com/favicon.ico"; iconUpdateURL = "https://mynixos.com/favicon.ico";
updateInterval = iconUpdateInterval; updateInterval = iconUpdateInterval;
definedAliases = [ definedAliases = [
"@hm" "@hm"
@ -68,7 +135,7 @@ lib.mkIf osConfig.programs.firefox.enable {
}; };
"stackoverflow" = { "stackoverflow" = {
urls = [ { template = "https://stackoverflow.com/search?q={searchTerms}"; } ]; urls = [ { template = "https://stackoverflow.com/search?q={searchTerms}"; } ];
icon = "https://cdn.sstatic.net/Sites/stackoverflow/Img/favicon.ico"; iconUpdateURL = "https://cdn.sstatic.net/Sites/stackoverflow/Img/favicon.ico";
updateInterval = iconUpdateInterval; updateInterval = iconUpdateInterval;
definedAliases = [ "@stackoverflow" ]; definedAliases = [ "@stackoverflow" ];
}; };

20
home/graphical/swww.nix
View file

@ -1,24 +1,26 @@
{ {
self,
lib, lib,
pkgs, pkgs,
inputs, config,
... ...
}: }:
let
inherit (lib.my) getExe getExe';
wp = inputs.wallpapers.wallpapers.pastel.nix-flake.path;
in
{ {
systemd.user.services.swww = { systemd.user.services.swww = {
Install.WantedBy = [ "graphical-session.target" ]; Install.WantedBy = [ "graphical-session.target" ];
Unit.After = [ "graphical-session.target" ];
Unit = {
After = [ "graphical-session.target" ];
};
Service = { Service = {
Type = "simple"; Type = "simple";
ExecStart = "${getExe' pkgs.swww "swww-daemon"} --no-cache"; ExecStart = "${pkgs.swww}/bin/swww-daemon";
ExecStartPost = "${getExe pkgs.swww} img ${wp} -t none"; ExecStartPost = "${pkgs.swww}/bin/swww img ${
self + "/assets/landscape-pink-pastel.jpg"
} -t wipe --transition-fps 144";
Restart = "on-failure"; Restart = "on-failure";
BindPaths = "/run/user ${wp}"; BindPaths = "/run/user /home/${config.home.username}/.cache/swww";
TemporaryFileSystem = "/home /run/user /root"; TemporaryFileSystem = "/home /run/user /root";
ProtectProc = "noaccess"; ProtectProc = "noaccess";
RestrictNamespaces = true; RestrictNamespaces = true;

3
home/graphical/thunderbird/default.nix
View file

@ -1,4 +1,5 @@
_: { { ... }:
{
programs.thunderbird = { programs.thunderbird = {
enable = true; enable = true;
settings = { settings = {

29
home/graphical/vscode/default.nix
View file

@ -12,18 +12,23 @@ in
config = mkIf cfg.enable { config = mkIf cfg.enable {
programs.vscode = { programs.vscode = {
package = pkgs.vscode; package = pkgs.vscode;
profiles.default = { enableUpdateCheck = false;
enableUpdateCheck = false; extensions = with pkgs.vscode-extensions; [
extensions = with pkgs.vscode-extensions; [ rust-lang.rust-analyzer
rust-lang.rust-analyzer ms-vscode-remote.remote-ssh
ms-vscode-remote.remote-ssh ms-vscode-remote.remote-ssh-edit
ms-vscode-remote.remote-ssh-edit tamasfe.even-better-toml
tamasfe.even-better-toml ];
]; userSettings = {
userSettings = { editor.formatOnSave = true;
editor.formatOnSave = true; terminal.integrated.inheritEnv = false;
terminal.integrated.inheritEnv = false; git.autofetch = true;
git.autofetch = true; remote.SSH = {
connectTimeout = 60;
useLocalServer = true;
remotePlatform = {
"192.168.122.152" = "linux";
};
}; };
}; };
}; };

163
home/hyprland/default.nix
View file

@ -7,16 +7,10 @@
}: }:
let let
inherit (lib) mapAttrsToList mkIf hasAttr; inherit (lib) mapAttrsToList mkIf hasAttr;
inherit (lib.my) getExe getExe';
inherit (osConfig.modules.system) roles;
inherit (osConfig.modules.system.roles) desktop;
in in
mkIf osConfig.programs.hyprland.enable { mkIf osConfig.programs.hyprland.enable {
home.sessionVariables.ELECTRON_OZONE_PLATFORM_HINT = "auto"; home.sessionVariables.ELECTRON_OZONE_PLATFORM_HINT = "auto";
services.swayidle.enable = true;
wayland.windowManager.hyprland = { wayland.windowManager.hyprland = {
enable = true; enable = true;
systemd.variables = [ "--all" ]; systemd.variables = [ "--all" ];
@ -35,8 +29,8 @@ mkIf osConfig.programs.hyprland.enable {
exec-once = [ exec-once = [
"${config.services.kdeconnect.package}/bin/kdeconnect-indicator" "${config.services.kdeconnect.package}/bin/kdeconnect-indicator"
"${getExe' pkgs.gnome-keyring "gnome-keyring-daemon"}" "${pkgs.keepassxc}/bin/keepassxc"
(getExe pkgs.keepassxc) (lib.mkIf config.services.hypridle.enable "${pkgs.hypridle}/bin/hypridle")
]; ];
general = { general = {
@ -49,14 +43,13 @@ mkIf osConfig.programs.hyprland.enable {
"col.active_border" = "rgba(33ccffee) rgba(00ff99ee) 45deg"; "col.active_border" = "rgba(33ccffee) rgba(00ff99ee) 45deg";
"col.inactive_border" = "rgba(595959aa)"; "col.inactive_border" = "rgba(595959aa)";
# Set to true enable resizing windows by clicking and dragging on borders and gaps
resize_on_border = false;
# Please see https://wiki.hyprland.org/Configuring/Tearing/ before you turn this on # Please see https://wiki.hyprland.org/Configuring/Tearing/ before you turn this on
allow_tearing = false; allow_tearing = false;
hover_icon_on_border = true;
resize_on_border = true;
layout = "dwindle"; layout = "dwindle";
snap = {
enabled = true;
};
}; };
input = { input = {
@ -76,7 +69,7 @@ mkIf osConfig.programs.hyprland.enable {
inactive_opacity = 1.0; inactive_opacity = 1.0;
shadow = { shadow = {
enabled = roles.portable.enable; enabled = true;
range = 4; range = 4;
render_power = 3; render_power = 3;
color = "rgba(1a1a1aee)"; color = "rgba(1a1a1aee)";
@ -84,7 +77,7 @@ mkIf osConfig.programs.hyprland.enable {
# https://wiki.hyprland.org/Configuring/Variables/#blur # https://wiki.hyprland.org/Configuring/Variables/#blur
blur = { blur = {
enabled = roles.portable.enable; enabled = true;
size = 3; size = 3;
passes = 1; passes = 1;
@ -102,12 +95,11 @@ mkIf osConfig.programs.hyprland.enable {
in in
[ [
"float,initialClass:${floatReg}" "float,initialClass:${floatReg}"
"float,initialTitle:^(KeePassXC - Passkey credentials)$"
"bordercolor rgb(e50000) rgb(ff8d00) rgb(ffee00) rgb(028121) rgb(004cff) rgb(770088), fullscreen:1" "bordercolor rgb(e50000) rgb(ff8d00) rgb(ffee00) rgb(028121) rgb(004cff) rgb(770088), fullscreen:1"
"focusonactivate, title:${mkRegexList [ "Firefox" ]}" "focusonactivate, title:${mkRegexList [ "Firefox" ]}"
"workspace 2,initialClass:${mkRegexList [ "firefox" ]}" "workspace 2,initialClass:${mkRegexList [ "firefox" ]}"
"workspace 3,initialClass:${mkRegexList [ "obsidian" ]}" "workspace 3,initialClass:${mkRegexList [ "obsidian" ]}"
"workspace silent 4,initialClass:${mkRegexList [ "steam" ]}" "workspace 4,initialClass:${mkRegexList [ "steam" ]}"
"workspace 5,initialClass:${mkRegexList [ "lollypop" ]}" "workspace 5,initialClass:${mkRegexList [ "lollypop" ]}"
"fullscreen, class:gamescope" "fullscreen, class:gamescope"
@ -145,98 +137,77 @@ mkIf osConfig.programs.hyprland.enable {
gestures = { gestures = {
workspace_swipe = true; workspace_swipe = true;
}; };
group = {
"col.border_active" = "0xff601393";
groupbar = {
"col.active" = "0x66601393";
"col.inactive" = "0xff340851";
};
};
# https://wiki.hyprland.org/Configuring/Variables/#misc # https://wiki.hyprland.org/Configuring/Variables/#misc
misc = { misc = {
force_default_wallpaper = 0; force_default_wallpaper = 0;
disable_hyprland_logo = false; disable_hyprland_logo = false;
focus_on_activate = false; # Open windows without focusing them focus_on_activate = false; # Open windows without focusing them
new_window_takes_over_fullscreen = 2; # When a new window opens, the current fullscreen window returns to its tiled state new_window_takes_over_fullscreen = 2; # When a new window opens, the current fullscreen window returns to its tiled state
key_press_enables_dpms = true;
mouse_move_enables_dpms = true;
disable_autoreload = true;
vfr = true;
enable_swallow = true;
swallow_regex = "^foot$";
}; };
bindm = [ "$mod,mouse:272,movewindow" ]; bindm = [ "$mod,mouse:272,movewindow" ];
bind = bind = [
let "$mod, D, exec, ${pkgs.fuzzel}/bin/fuzzel"
copy = getExe' pkgs.wl-clipboard "wl-copy"; "$mod, E, exec, ${lib.my.getExe osConfig.modules.system.roles.desktop.filemanager}"
cliphist = getExe pkgs.cliphist; "$mod, Return, exec, ${lib.my.getExe osConfig.modules.system.roles.desktop.terminal}"
in "$mod SHIFT, Q, killactive,"
[ "$mod, V, togglefloating"
"$mod, D, exec, ${getExe osConfig.modules.system.roles.desktop.runner.package}" "$mod SHIFT, P, exec, ${config.programs.rofi.package}/bin/rofi -show p -modi p:${pkgs.rofi-power-menu}/bin/rofi-power-menu"
"$mod, E, exec, ${getExe osConfig.modules.system.roles.desktop.filemanager}" "$mod, P, exec, ${pkgs.cliphist}/bin/cliphist wipe & ${pkgs.hyprlock}/bin/hyprlock"
"$mod, Return, exec, ${getExe osConfig.modules.system.roles.desktop.terminal}" "$mod SHIFT, C, exec, hyprctl reload"
"$mod SHIFT, Q, killactive," "$mod SHIFT, space, togglefloating"
"$mod, V, togglefloating" "$mod, left, movefocus, l"
"$mod SHIFT, P, exec, ${getExe pkgs.scripts.powerMenu}" "$mod, right, movefocus, r"
"$mod, P, exec, ${cliphist} wipe & ${getExe pkgs.hyprlock}" "$mod, up, movefocus, u"
"$mod SHIFT, C, exec, hyprctl reload" "$mod, down, movefocus, d"
"$mod SHIFT, space, togglefloating"
"$mod, left, movefocus, l"
"$mod, right, movefocus, r"
"$mod, up, movefocus, u"
"$mod, down, movefocus, d"
"CTRL, G, togglegroup"
"ALT, Tab, changegroupactive"
# Example special workspace (scratchpad)
"$mod, W, togglespecialworkspace, magic"
"$mod SHIFT, W, movetoworkspace, special:magic"
"$mod, X, fullscreen, 1"
"$mod, F, fullscreen, 0"
"$mod, U, exec, ${pkgs.hyprshot}/bin/hyprshot -o ${config.xdg.userDirs.pictures}/screenshots -m region"
"$mod SHIFT, U, exec, ${pkgs.hyprshot}/bin/hyprshot --raw -m region | ${getExe pkgs.satty} -f - --fullscreen --copy-command ${copy}"
"$mod, S, exec, ${cliphist} list | ${desktop.runner.dmenu} | ${cliphist} decode | ${copy}"
#: Brightness and Media {{{ # Example special workspace (scratchpad)
",XF86MonBrightnessUp, exec, ${getExe pkgs.brightnessctl} s +10%" "$mod, S, togglespecialworkspace, magic"
",XF86MonBrightnessDown, exec, ${getExe pkgs.brightnessctl} s 10%-" "$mod SHIFT, S, movetoworkspace, special:magic"
",XF86AudioRaiseVolume, exec, ${getExe pkgs.pamixer} -u && ${getExe pkgs.pamixer} -i 5" "$mod, X, fullscreen, 1"
",XF86AudioLowerVolume, exec, ${getExe pkgs.pamixer} -u && ${getExe pkgs.pamixer} -d 5" "$mod, F, fullscreen, 0"
",XF86AudioMicMute, exec, ${getExe pkgs.pamixer} --default-source -m" "$mod, N, exec, ${pkgs.swaynotificationcenter}/bin/swaync-client -t"
",XF86AudioMute, exec, ${getExe pkgs.pamixer} -t" "$mod, U, exec, ${pkgs.hyprshot}/bin/hyprshot -z -o $XDG_PICTURES_DIR/screenshots -m region"
",XF86AudioPlay, exec, ${getExe pkgs.playerctl} play-pause" "$mod SHIFT, U, exec, ${pkgs.hyprshot}/bin/hyprshot -z --raw -m region | ${pkgs.satty}/bin/satty -f - --fullscreen"
",XF86AudioPause, exec, ${getExe pkgs.playerctl} play-pause"
",XF86AudioNext, exec, ${getExe pkgs.playerctl} next"
",XF86AudioPrev, exec, ${getExe pkgs.playerctl} previous"
#: }}}
# Workspaces #: Brightness and Media {{{
"$mod, code:10, workspace, 1" ",XF86MonBrightnessUp, exec, ${pkgs.brightnessctl}/bin/brightnessctl s +10%"
"$mod, code:11, workspace, 2" ",XF86MonBrightnessDown, exec, ${pkgs.brightnessctl}/bin/brightnessctl s 10%-"
"$mod, code:12, workspace, 3" ",XF86AudioRaiseVolume, exec, ${pkgs.pamixer}/bin/pamixer -i 5"
"$mod, code:13, workspace, 4" ",XF86AudioLowerVolume, exec, ${pkgs.pamixer}/bin/pamixer -d 5"
"$mod, code:14, workspace, 5" ",XF86AudioMicMute, exec, ${pkgs.pamixer}/bin/pamixer --default-source -m"
"$mod, code:15, workspace, 6" ",XF86AudioMute, exec, ${pkgs.pamixer}/bin/pamixer -t"
"$mod, code:16, workspace, 7" ",XF86AudioPlay, exec, ${pkgs.playerctl}/bin/playerctl play-pause"
"$mod, code:17, workspace, 8" ",XF86AudioPause, exec, ${pkgs.playerctl}/bin/playerctl play-pause"
"$mod, code:18, workspace, 9" ",XF86AudioNext, exec, ${pkgs.playerctl}/bin/playerctl next"
"$mod, code:19, workspace, 10" ",XF86AudioPrev, exec, ${pkgs.playerctl}/bin/playerctl previous"
#: }}}
# Send to Workspaces # Workspaces
"$mod SHIFT, code:10, movetoworkspace, 1" "$mod, code:10, workspace, 1"
"$mod SHIFT, code:11, movetoworkspace, 2" "$mod, code:11, workspace, 2"
"$mod SHIFT, code:12, movetoworkspace, 3" "$mod, code:12, workspace, 3"
"$mod SHIFT, code:13, movetoworkspace, 4" "$mod, code:13, workspace, 4"
"$mod SHIFT, code:14, movetoworkspace, 5" "$mod, code:14, workspace, 5"
"$mod SHIFT, code:15, movetoworkspace, 6" "$mod, code:15, workspace, 6"
"$mod SHIFT, code:16, movetoworkspace, 7" "$mod, code:16, workspace, 7"
"$mod SHIFT, code:17, movetoworkspace, 8" "$mod, code:17, workspace, 8"
"$mod SHIFT, code:18, movetoworkspace, 9" "$mod, code:18, workspace, 9"
"$mod SHIFT, code:19, movetoworkspace, 10" "$mod, code:19, workspace, 10"
];
# Send to Workspaces
"$mod SHIFT, code:10, movetoworkspace, 1"
"$mod SHIFT, code:11, movetoworkspace, 2"
"$mod SHIFT, code:12, movetoworkspace, 3"
"$mod SHIFT, code:13, movetoworkspace, 4"
"$mod SHIFT, code:14, movetoworkspace, 5"
"$mod SHIFT, code:15, movetoworkspace, 6"
"$mod SHIFT, code:16, movetoworkspace, 7"
"$mod SHIFT, code:17, movetoworkspace, 8"
"$mod SHIFT, code:18, movetoworkspace, 9"
"$mod SHIFT, code:19, movetoworkspace, 10"
];
}; };
}; };
} }

6
users/ny/programs/hyprlock.nix → home/hyprlock/default.nix
View file

@ -1,6 +1,6 @@
{ { lib, config, ... }:
rum.programs.hyprlock = { lib.mkIf config.programs.hyprlock.enable {
enable = true; programs.hyprlock = {
settings = { settings = {
general = { general = {
hide_cursor = true; hide_cursor = true;

15
home/hyprpaper/default.nix Normal file
View file

@ -0,0 +1,15 @@
{ self, ... }:
{
services.hyprpaper = {
enable = false;
settings =
let
wp = "${self}/assets/wallpapers/nix-flake-pastel.jpg";
in
{
ipc = "on";
preload = [ "${wp}" ];
wallpaper = [ ",${wp}" ];
};
};
}

62
modules/scripts/default.nix → home/scripts/default.nix
View file

@ -7,9 +7,7 @@
let let
inherit (pkgs.writers) writeFishBin writeBashBin; inherit (pkgs.writers) writeFishBin writeBashBin;
inherit (lib.my) getExe; inherit (lib.my) getExe;
runner = config.modules.system.roles.desktop.runner;
inherit (config.modules.system.roles.desktop) runner;
nixos-rebuild = nixos-rebuild =
name: word: name: word:
writeFishBin name '' writeFishBin name ''
@ -20,47 +18,24 @@ let
''; '';
in in
{ {
screenshot = pkgs.writeShellApplication { screenshot =
name = "screenshot"; with pkgs;
runtimeInputs = with pkgs; [ writeShellApplication {
wl-clipboard name = "screenshot";
libnotify runtimeInputs = [
hyprshot slurp
xdg-utils wl-clipboard
]; libnotify
text = '' ];
set -e text = ''
location="$XDG_PICTURES_DIR/screenshots/$(date +%Y-%m-%d-%H%M%S)-screenshot.png"; location="$HOME/Pictures/Screenshots/$(date +%Y-%m-%d-%H%M%S)-screenshot.png";
hyprshot -r -z -m region | tee "$location" | wl-copy --type image/png; if zone=$(slurp); then
grim -t png -g "$zone" - | wl-copy --type image/png && wl-paste > "$location" \
body="<img src=\"$location\"\>" && notify-send --app-name Screenshot -i "$location" --urgency=low "Screenshot copied to clipboard" "Screenshot created at $location";
fi
response=$( '';
notify-send \ };
"Copied to clipboard" \
"$body" \
--app-name Screenshot \
-i "$location" \
--urgency=low \
--action=COPY=Copy \
--action=OPEN=Open \
--action=DELETE=Delete
)
case "$response" in
"DELETE")
rm "$location"
;;
"COPY")
wl-copy <"$location"
;;
"OPEN")
xdg-open "$location"
;;
esac
'';
};
set-background = writeFishBin "set-background" '' set-background = writeFishBin "set-background" ''
argparse 'f/file=!test -e "$_flag_value"' -- $argv; or return argparse 'f/file=!test -e "$_flag_value"' -- $argv; or return
@ -147,4 +122,5 @@ in
Lock) exec loginctl lock-session "$${XDG_SESSION_ID-}" ;; Lock) exec loginctl lock-session "$${XDG_SESSION_ID-}" ;;
esac esac
''; '';
} }

0
modules/scripts/list.nix → home/scripts/list.nix
View file

0
modules/scripts/logo.fish → home/scripts/logo.fish
View file

1
home/services/default.nix
View file

@ -1,5 +1,6 @@
{ {
imports = [ imports = [
./kdeconnect.nix ./kdeconnect.nix
./syncthing.nix
]; ];
} }

19
home/services/syncthing.nix Normal file
View file

@ -0,0 +1,19 @@
{
pkgs,
config,
lib,
...
}:
let
inherit (lib) mkIf;
in
{
config = mkIf config.services.syncthing.enable {
xdg.desktopEntries."Syncthing" = {
name = "Syncthing";
icon = "";
terminal = false;
exec = "${pkgs.syncthing}/bin/syncthing --browser-only";
};
};
}

2
home/sway/default.nix
View file

@ -10,7 +10,7 @@ let
inherit (lib) mapAttrs mkIf; inherit (lib) mapAttrs mkIf;
inherit (lib.my) getExe getExe'; inherit (lib.my) getExe getExe';
inherit (osConfig.modules.system.roles) desktop; desktop = osConfig.modules.system.roles.desktop;
term = getExe desktop.terminal; term = getExe desktop.terminal;
filemanager = getExe desktop.filemanager; filemanager = getExe desktop.filemanager;
cliphistEnabled = osConfig.modules.services.cliphist.enable; cliphistEnabled = osConfig.modules.services.cliphist.enable;

2
home/terminal/beets.nix
View file

@ -72,8 +72,6 @@ in
}; };
settings = { settings = {
plugins = concatStringsSep " " plugins; plugins = concatStringsSep " " plugins;
directory = "/mnt/music";
library = "/mnt/music/library.db";
per_disc_numbering = "yes"; per_disc_numbering = "yes";
asciify_paths = true; asciify_paths = true;
convert = { convert = {

1
home/terminal/default.nix
View file

@ -2,6 +2,7 @@
imports = [ imports = [
./neovim ./neovim
./ssh ./ssh
./git
./fish ./fish
./btop.nix ./btop.nix
./beets.nix ./beets.nix

34
home/terminal/git/default.nix Normal file
View file

@ -0,0 +1,34 @@
{ pkgs, ... }:
{
programs.git = {
enable = true;
userName = "nydragon";
userEmail = "contact@ccnlc.eu";
extraConfig = {
gpg.format = "ssh";
push = {
autoSetupRemote = true;
};
pull = {
rebase = true;
};
core = {
editor = "${pkgs.neovim}/bin/nvim";
};
init = {
defaultBranch = "master";
};
merge = {
conflictstyle = "diff3";
};
diff = {
colorMoved = "default";
};
};
signing = {
signByDefault = true;
key = "key::ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMvPqWPXEUOSMGMIRmirQfbrzq//NkPlEI2TmFpIkSfw";
};
delta.enable = true;
};
}

2
home/terminal/ssh/default.nix
View file

@ -10,7 +10,7 @@ let
in in
mkIf config.programs.ssh.enable { mkIf config.programs.ssh.enable {
programs.ssh = { programs.ssh = {
addKeysToAgent = "yes"; addKeysToAgent = "confirm";
matchBlocks = { matchBlocks = {
deck = { deck = {
hostname = "steamdeck"; hostname = "steamdeck";

2
home/themes/vanilla.nix
View file

@ -11,7 +11,7 @@ in
gtk = { gtk = {
enable = true; enable = true;
theme = { theme = {
name = "Adwaita-dark"; name = "Adwaita";
package = pkgs.gnome-themes-extra; package = pkgs.gnome-themes-extra;
}; };
iconTheme = rec { iconTheme = rec {

43
hosts/brontes/default.nix
View file

@ -2,6 +2,7 @@
{ {
pkgs, pkgs,
config, config,
inputs',
... ...
}: }:
let let
@ -19,8 +20,6 @@ in
efi.canTouchEfiVariables = true; efi.canTouchEfiVariables = true;
}; };
zramSwap.enable = true;
age.secrets.rustypaste = { age.secrets.rustypaste = {
file = ../../secrets/rustypaste.age; file = ../../secrets/rustypaste.age;
mode = "440"; mode = "440";
@ -41,10 +40,10 @@ in
xdg = { xdg = {
portal.enable = true; portal.enable = true;
mime.enable = true;
}; };
modules = { modules = {
fs.nfsEnable = true;
system = { system = {
roles = { roles = {
desktop.enable = true; desktop.enable = true;
@ -93,18 +92,9 @@ in
}; };
media.enableAll = true; media.enableAll = true;
}; };
security.pam.services.greetd.enableGnomeKeyring = true;
services = { services = {
greetd = { displayManager.sddm.enable = true;
enable = true;
package = pkgs.greetd.tuigreet;
settings = {
default_session = {
command = "${pkgs.greetd.tuigreet}/bin/tuigreet --cmd Hyprland";
user = "ny";
};
};
};
dbus.enable = true; dbus.enable = true;
pipewire.enable = true; pipewire.enable = true;
# Necessary for Nautilus to display trash, DVDs and for gnome-disk-utility to show file systems # Necessary for Nautilus to display trash, DVDs and for gnome-disk-utility to show file systems
@ -113,14 +103,11 @@ in
}; };
programs = { programs = {
direnv = {
nix-direnv.enable = true;
enable = true;
};
dconf.enable = true; dconf.enable = true;
fish.enable = true; fish.enable = true;
firefox.enable = true; firefox.enable = true;
thunderbird.enable = true; thunderbird.enable = true;
sway.enable = true;
hyprland.enable = true; hyprland.enable = true;
}; };
@ -129,15 +116,17 @@ in
users = { users = {
defaultUserShell = pkgs.fish; defaultUserShell = pkgs.fish;
users.${username} = { users.${username} = {
packages = [
inputs'.nur.packages.grayjay-desktop
];
isNormalUser = true; isNormalUser = true;
createHome = true; createHome = true;
packages = with pkgs; [
orca-slicer
];
extraGroups = [ extraGroups = [
"networkmanager" "networkmanager"
"wheel"
"audio" "audio"
"libvirtd" # VM OPs "libvirtd" # VM OPs
"dialout" # Necessary for serial port interactions
]; ];
}; };
}; };
@ -151,6 +140,18 @@ in
enableSSHSupport = true; enableSSHSupport = true;
}; };
environment.systemPackages = with pkgs; [
fish
wireguard-tools
git
htop
eza
bat
nfs-utils
];
services.rpcbind.enable = true; # necessary for nfs
boot.binfmt.emulatedSystems = [ "aarch64-linux" ]; boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
nix.settings.extra-platforms = config.boot.binfmt.emulatedSystems; nix.settings.extra-platforms = config.boot.binfmt.emulatedSystems;

2
hosts/brontes/hardware-configuration.nix
View file

@ -38,7 +38,7 @@
]; ];
}; };
fileSystems."/home/ny/Games" = { fileSystems."/home" = {
device = "/dev/disk/by-uuid/efe4d345-e248-4101-b74d-4a215b42e059"; device = "/dev/disk/by-uuid/efe4d345-e248-4101-b74d-4a215b42e059";
fsType = "btrfs"; fsType = "btrfs";
}; };

59
hosts/brontes/home.nix
View file

@ -1,4 +1,5 @@
{ {
pkgs,
config, config,
inputs, inputs,
... ...
@ -14,12 +15,19 @@ in
home-manager.users.${username} = { home-manager.users.${username} = {
imports = [ imports = [
../../home/themes/catppuccin.nix
../../home ../../home
]; ];
programs = { programs = {
beets.enable = true; direnv = {
enable = true;
nix-direnv.enable = true;
};
waybar.enable = true;
ssh.enable = true; ssh.enable = true;
rofi.enable = true;
}; };
services = { services = {
@ -28,8 +36,55 @@ in
}; };
home = { home = {
inherit (config.system) stateVersion; stateVersion = config.system.stateVersion;
inherit username; inherit username;
packages = with pkgs; [
keepassxc
digikam
fragments
element-desktop
libreoffice
loupe
seahorse
gimp
pwvucontrol
thunderbird
keepassxc
protonmail-bridge-gui
varia
signal-desktop
tagger
prismlauncher
orca-slicer
kid3
soundconverter
# proprietary
obsidian
# CLI tools
jhead
fdupes
exiftool
sshfs
lazygit
wl-clipboard
# custom
nysh
scripts.nixedit
scripts.set-background
scripts.fishl
scripts.nrun
scripts.rpaste
scripts.genswitch
scripts.gentest
scripts.editsym
scripts.deployswitch
scripts.deploytest
];
}; };
}; };
} }

12
hosts/default.nix
View file

@ -18,8 +18,6 @@ in
extraModules = [ extraModules = [
inputs.disko.nixosModules.disko inputs.disko.nixosModules.disko
inputs.agenix.nixosModules.default inputs.agenix.nixosModules.default
inputs.hjem.nixosModules.default
inputs.hjem-rum.nixosModules.default
]; ];
}) })
@ -62,15 +60,5 @@ in
inputs.nixos-hardware.nixosModules.raspberry-pi-4 inputs.nixos-hardware.nixosModules.raspberry-pi-4
]; ];
}) })
(mkSystem' {
inherit username;
hostname = "ashla";
system = "x86_64-linux";
extraModules = [
inputs.disko.nixosModules.disko
inputs.agenix.nixosModules.default
];
})
]; ];
} }

57
hosts/marr/default.nix
View file

@ -2,17 +2,13 @@
{ {
pkgs, pkgs,
inputs, inputs,
config,
... ...
}: }:
let
inherit (config.modules.meta) username;
in
{ {
imports = [ imports = [
./hardware-configuration.nix ./hardware-configuration.nix
./home.nix ./home.nix
../../users/ny ./ny.nix
]; ];
time.timeZone = "Europe/Paris"; time.timeZone = "Europe/Paris";
@ -24,7 +20,6 @@ in
system = { system = {
roles = { roles = {
desktop.enable = true; desktop.enable = true;
portable.enable = true;
}; };
outputs = { outputs = {
@ -65,8 +60,11 @@ in
}; };
}; };
hardware.graphics.enable = true;
xdg = { xdg = {
portal.enable = true; portal.enable = true;
mime.enable = true;
}; };
specialisation = { specialisation = {
@ -85,34 +83,30 @@ in
}; };
programs = { programs = {
direnv = {
nix-direnv.enable = true;
enable = true;
};
dconf.enable = true; dconf.enable = true;
fish.enable = true; fish.enable = true;
firefox.enable = true; firefox.enable = true;
thunderbird.enable = true; thunderbird.enable = true;
sway.enable = true;
hyprland.enable = true; hyprland.enable = true;
pulseview.enable = true;
gnupg.agent = { gnupg.agent = {
enable = true; enable = true;
enableSSHSupport = true; enableSSHSupport = true;
enableExtraSocket = true;
}; };
seahorse.enable = true;
}; };
#hardware.sane = { hardware.sane = {
#enable = true; enable = true;
#extraBackends = [ pkgs.hplipWithPlugin ]; extraBackends = [ pkgs.hplipWithPlugin ];
#}; };
services = { services = {
displayManager.sddm.enable = true; displayManager.sddm.enable = true;
dbus.enable = true; dbus.enable = true;
fwupd.enable = true; fwupd.enable = true;
gvfs.enable = true; gvfs.enable = true;
#printing.enable = true; printing.enable = true;
xserver.xkb = { xserver.xkb = {
layout = "fr"; layout = "fr";
@ -128,9 +122,9 @@ in
powerKey = "hibernate"; powerKey = "hibernate";
}; };
#thermald.enable = true; thermald.enable = true;
#auto-cpufreq.enable = true; auto-cpufreq.enable = true;
upower = { upower = {
enable = true; enable = true;
@ -143,19 +137,6 @@ in
users = { users = {
defaultUserShell = pkgs.fish; defaultUserShell = pkgs.fish;
users.${username} = {
isNormalUser = true;
createHome = true;
packages = with pkgs; [
simple-scan
beekeeper-studio
];
extraGroups = [
"networkmanager"
"audio"
"libvirtd" # VM OPs
];
};
}; };
environment.variables = { environment.variables = {
@ -169,17 +150,19 @@ in
libvirtd.enable = true; libvirtd.enable = true;
docker = { docker = {
enable = true; enable = true;
extraPackages = [ pkgs.docker-credential-helpers ]; rootless.enable = true;
rootless = {
enable = true;
setSocketVariable = true;
};
}; };
}; };
programs.virt-manager.enable = true; programs.virt-manager.enable = true;
programs.nix-ld.enable = true;
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
shared-mime-info
glib
dconf
xdg-utils
brightnessctl brightnessctl
]; ];

5
hosts/marr/home.nix
View file

@ -14,6 +14,7 @@ in
home-manager.users.${username} = { home-manager.users.${username} = {
imports = [ imports = [
../../home/themes/vanilla.nix
../../home ../../home
]; ];
@ -26,6 +27,10 @@ in
}; };
programs = { programs = {
direnv = {
enable = true;
nix-direnv.enable = true;
};
beets.enable = true; beets.enable = true;
vscode.enable = true; vscode.enable = true;
ssh.enable = true; ssh.enable = true;

71
hosts/marr/ny.nix Normal file
View file

@ -0,0 +1,71 @@
{
pkgs,
config,
inputs',
...
}:
let
inherit (config.modules.meta) username;
in
{
config = {
users.users.${username} = {
packages =
[
inputs'.nur.packages.grayjay-desktop
]
++ (with pkgs; [
digikam
fragments
element-desktop
loupe
seahorse
gimp
thunderbird
keepassxc
protonmail-bridge-gui
varia
signal-desktop
onlyoffice-desktopeditors
picard
simple-scan
insomnia
beekeeper-studio
# Proprietary
postman
mongodb-compass
obsidian
# CLI tools
jhead
fdupes
exiftool
sshfs
lazygit
wl-clipboard
# custom
nysh
scripts.screenshot
scripts.nixedit
scripts.set-background
scripts.rpaste
scripts.nrun
scripts.nruni
scripts.genswitch
scripts.gentest
scripts.editsym
scripts.deployswitch
scripts.deploytest
]);
isNormalUser = true;
createHome = true;
extraGroups = [
"networkmanager"
"audio"
"libvirtd"
];
};
};
}

31
hosts/nihilus/default.nix
View file

@ -4,10 +4,6 @@
]; ];
modules = { modules = {
meta = {
tailscale.ip = "100.64.0.6";
};
services.tailscale = { services.tailscale = {
enable = true; enable = true;
tags = [ tags = [
@ -19,6 +15,7 @@
server = { server = {
rsync-daemon = { rsync-daemon = {
enable = true; enable = true;
port = 9523;
openFirewall = true; openFirewall = true;
location = "/mnt/backups"; location = "/mnt/backups";
address = "100.64.0.6"; address = "100.64.0.6";
@ -34,8 +31,8 @@
mode = "write"; mode = "write";
} }
{ {
name = "shan"; name = "brontes-backup";
comment = "backups for shan"; comment = "brontes's backup space";
mode = "write"; mode = "write";
} }
{ {
@ -63,33 +60,11 @@
comment = "backup location for games"; comment = "backup location for games";
mode = "write"; mode = "write";
} }
{
name = "brontes-backup";
comment = "brontes's backup space";
mode = "write";
}
]; ];
}; };
}; };
}; };
security.polkit.enable = true;
services.prometheus.exporters.node = {
enable = true;
port = 9000;
# https://github.com/NixOS/nixpkgs/blob/nixos-24.05/nixos/modules/services/monitoring/prometheus/exporters.nix
enabledCollectors = [ "systemd" ];
# /nix/store/zgsw0yx18v10xa58psanfabmg95nl2bb-node_exporter-1.8.1/bin/node_exporter --help
extraFlags = [
"--collector.ethtool"
"--collector.softirqs"
"--collector.tcpstat"
"--collector.wifi"
];
};
networking.firewall.allowedTCPPorts = [ 9000 ];
boot.initrd.systemd.tpm2.enable = false; boot.initrd.systemd.tpm2.enable = false;
system.stateVersion = "24.11"; system.stateVersion = "24.11";

12
hosts/raptus/default.nix
View file

@ -26,10 +26,6 @@ in
group = "rustypaste"; group = "rustypaste";
}; };
forgejo-runner-token.file = ../../secrets/forgejo-runner-token.age; forgejo-runner-token.file = ../../secrets/forgejo-runner-token.age;
acme = {
owner = if config.security.acme.useRoot then "root" else "acme";
file = ../../secrets/acme.age;
};
}; };
boot.loader.grub = { boot.loader.grub = {
@ -37,8 +33,6 @@ in
efiInstallAsRemovable = true; efiInstallAsRemovable = true;
}; };
virtualisation.docker.enable = true;
modules = { modules = {
server.rustypaste = { server.rustypaste = {
enable = true; enable = true;
@ -99,12 +93,8 @@ in
polkit.enable = true; polkit.enable = true;
acme = { acme = {
defaults.email = "admin@ccnlc.eu";
acceptTerms = true; acceptTerms = true;
defaults = {
email = "contact@ccnlc.eu";
dnsProvider = "ovh";
environmentFile = config.age.secrets.acme.path;
};
}; };
}; };

6
hosts/raptus/forgejo/default.nix
View file

@ -4,6 +4,10 @@ let
sshPort = 2222; sshPort = 2222;
in in
{ {
imports = [
./runner.nix
];
systemd.tmpfiles.rules = systemd.tmpfiles.rules =
let let
# Disallow crawlers from indexing this site. # Disallow crawlers from indexing this site.
@ -52,8 +56,6 @@ in
migrations.ALLOWED_DOMAINS = "*"; migrations.ALLOWED_DOMAINS = "*";
service = { service = {
DISABLE_REGISTRATION = true; DISABLE_REGISTRATION = true;
DEFAULT_KEEP_EMAIL_PRIVATE = true;
#REQUIRE_SIGNIN_VIEW = true;
}; };
packages.ENABLED = false; packages.ENABLED = false;
log.LEVEL = "Info"; log.LEVEL = "Info";

3
hosts/raptus/forgejo/runner.nix
View file

@ -12,8 +12,6 @@ let
in in
{ {
config = mkIf cfg.enable { config = mkIf cfg.enable {
virtualisation.docker.autoPrune.enable = true;
services.gitea-actions-runner = { services.gitea-actions-runner = {
package = pkgs.forgejo-runner; package = pkgs.forgejo-runner;
@ -26,7 +24,6 @@ in
labels = [ labels = [
"debian-latest:docker://node:18-bullseye" "debian-latest:docker://node:18-bullseye"
"ubuntu-latest:docker://node:18-bullseye" "ubuntu-latest:docker://node:18-bullseye"
"nix-latest:docker://nixos/nix:latest"
]; ];
settings = { settings = {

15
hosts/raptus/headscale/acls.nix
View file

@ -1,5 +1,6 @@
{ {
pkgs, pkgs,
options,
lib, lib,
self, self,
... ...
@ -15,7 +16,6 @@ let
}; };
shanMeta = self.nixosConfigurations.shan.config.modules.meta; shanMeta = self.nixosConfigurations.shan.config.modules.meta;
nihilusCfg = self.nixosConfigurations.nihilus.config;
homeAIp = "100.64.0.9"; homeAIp = "100.64.0.9";
in in
{ {
@ -36,16 +36,7 @@ in
"tag:client" "tag:client"
"tag:server" "tag:server"
] ]
[ [ "tag:backup:${toString options.modules.server.rsync-daemon.port.default}" ]
"${nihilusCfg.modules.meta.tailscale.ip}:${toString nihilusCfg.modules.server.rsync-daemon.port}"
]
)
(mkAcl
[
"${shanMeta.tailscale.ip}"
]
[ "tag:server:9000" ]
) )
(mkAcl (mkAcl
@ -69,6 +60,7 @@ in
tags = [ tags = [
"tag:client" "tag:client"
"tag:server" "tag:server"
"tag:backup"
"tag:guest" "tag:guest"
]; ];
@ -78,6 +70,7 @@ in
tags = map (name: "tag:${name}") [ tags = map (name: "tag:${name}") [
"server" "server"
"client" "client"
"backup"
]; ];
in in
lib.genAttrs tags (_: users); lib.genAttrs tags (_: users);

4
hosts/raptus/headscale/dns.nix
View file

@ -47,10 +47,6 @@
"ntfy" "ntfy"
"octoprint" "octoprint"
"assistant" "assistant"
"rss"
"calibre"
"prometheus"
"grafana"
]; ];
}; };
}; };

10
hosts/shan/calibre-web.nix
View file

@ -1,18 +1,14 @@
{ }:
{ {
config = { config = {
services.calibre-web = { calibre-web = {
enable = true; enable = true;
options = { options = {
enableBookUploading = true; enableBookUploading = true;
calibreLibrary = "/mnt/books";
}; };
}; };
systemd.services.calibre-web = {
after = [ "mnt-books.mount" ];
requires = [ "mnt-books.mount" ];
};
fileSystems."/mnt/books" = { fileSystems."/mnt/books" = {
device = "192.168.178.21:/mnt/Fort/data/books"; device = "192.168.178.21:/mnt/Fort/data/books";
fsType = "nfs"; fsType = "nfs";

54
hosts/shan/default.nix
View file

@ -10,7 +10,6 @@
./disk-config.nix ./disk-config.nix
./adguard.nix ./adguard.nix
./calibre-web.nix ./calibre-web.nix
./prometheus.nix
]; ];
swapDevices = [ swapDevices = [
@ -27,10 +26,6 @@
file = ../../secrets/freshrss-default-password.age; file = ../../secrets/freshrss-default-password.age;
owner = config.services.freshrss.user; owner = config.services.freshrss.user;
}; };
acme = {
owner = if config.security.acme.useRoot then "root" else "acme";
file = ../../secrets/acme.age;
};
}; };
boot.loader.grub = { boot.loader.grub = {
@ -89,21 +84,6 @@
rsync-backup = { rsync-backup = {
enable = true; enable = true;
modules = [ modules = [
{
sources = [
"/var/lib/paperless"
"/var/lib/radicale"
"/var/lib/navidrome"
"/var/lib/immich"
"/var/lib/freshrss"
];
target = {
location = "shan";
type = "rsyncd";
host = "nihilus";
};
incremental.enable = true;
}
{ {
sources = [ "/var/lib/paperless" ]; sources = [ "/var/lib/paperless" ];
target = { target = {
@ -158,40 +138,34 @@
}; };
incremental.enable = true; incremental.enable = true;
} }
]; ];
}; };
}; };
}; };
security = { security.acme = {
polkit.enable = true; acceptTerms = true;
defaults = {
email = "contact@ccnlc.eu";
dnsProvider = "ovh";
environmentFile = "/run/secrets/ovh";
};
acme = { certs."ccnlc.eu" = {
acceptTerms = true; group = "nginx";
defaults = { extraDomainNames = [ "*.ccnlc.eu" ];
email = "dns@ccnlc.eu";
dnsProvider = "ovh";
dnsResolver = "9.9.9.9"; # Necessary to avoid failing due to a local dns server
environmentFile = config.age.secrets.acme.path;
};
certs."ccnlc.eu" = {
group = "nginx";
extraDomainNames = [ "*.ccnlc.eu" ];
};
}; };
}; };
services.nginx = { services.nginx = {
enable = true; enable = true;
recommendedProxySettings = true; recommendedProxySettings = true;
recommendedTlsSettings = true; recommendedTlsSettings = true;
clientMaxBodySize = "0"; clientMaxBodySize = "100M";
virtualHosts = virtualHosts =
let let
mkVHLocal = mkVH "http://localhost"; mkVHLocal = mkVH "http://localhost";
mkVH = domain: port: { mkVH = domain: port: {
forceSSL = true; forceSSL = true;
useACMEHost = "ccnlc.eu";
locations."/" = { locations."/" = {
proxyPass = "${domain}:${toString port}"; proxyPass = "${domain}:${toString port}";
extraConfig = '' extraConfig = ''
@ -202,6 +176,7 @@
proxy_http_version 1.1; proxy_http_version 1.1;
''; '';
}; };
useACMEHost = "ccnlc.eu";
}; };
in in
{ {
@ -217,9 +192,6 @@
"fritz.ccnlc.eu" = mkVH "http://192.168.178.1" 80; "fritz.ccnlc.eu" = mkVH "http://192.168.178.1" 80;
"truenas.ccnlc.eu" = mkVH "https://192.168.178.21" 443; "truenas.ccnlc.eu" = mkVH "https://192.168.178.21" 443;
"calibre.ccnlc.eu" = mkVHLocal config.services.calibre-web.listen.port; "calibre.ccnlc.eu" = mkVHLocal config.services.calibre-web.listen.port;
"prometheus.ccnlc.eu" = mkVHLocal config.services.prometheus.port;
"adguard.ccnlc.eu" = mkVHLocal config.services.adguardhome.port;
"grafana.ccnlc.eu" = mkVHLocal config.services.grafana.settings.server.http_port;
${config.services.freshrss.virtualHost} = { ${config.services.freshrss.virtualHost} = {
forceSSL = true; forceSSL = true;
useACMEHost = "ccnlc.eu"; useACMEHost = "ccnlc.eu";

59
hosts/shan/prometheus.nix
View file

@ -1,59 +0,0 @@
{ config, ... }:
{
services.prometheus = {
enable = true;
webExternalUrl = "https://prometheus.ccnlc.eu";
scrapeConfigs = [
{
job_name = "node";
static_configs = [
{
targets = [
"nihilus:9000"
"shan:9000"
];
}
];
}
];
};
services.prometheus.exporters.node = {
enable = true;
port = 9000;
# https://github.com/NixOS/nixpkgs/blob/nixos-24.05/nixos/modules/services/monitoring/prometheus/exporters.nix
enabledCollectors = [ "systemd" ];
# /nix/store/zgsw0yx18v10xa58psanfabmg95nl2bb-node_exporter-1.8.1/bin/node_exporter --help
extraFlags = [
"--collector.ethtool"
"--collector.softirqs"
"--collector.tcpstat"
"--collector.wifi"
];
};
services.grafana = {
enable = true;
provision = {
enable = true;
datasources.settings.datasources = [
{
name = "Prometheus";
type = "prometheus";
url = "http://${config.services.prometheus.listenAddress}:${toString config.services.prometheus.port}";
}
];
};
settings = {
users = {
allow_sign_up = true;
};
server = {
protocol = "http";
http_addr = "127.0.0.1";
domain = "grafana.ccnlc.eu";
http_port = 9032;
};
};
};
}

1
modules/default.nix
View file

@ -10,6 +10,7 @@
./system/printing.nix ./system/printing.nix
./system/audio.nix ./system/audio.nix
./system/mime.nix
./system/polkit.nix ./system/polkit.nix
./users/ny.nix ./users/ny.nix

4
modules/env.nix
View file

@ -1,9 +1,7 @@
{ pkgs, inputs, ... }: { pkgs, ... }:
{ {
environment.sessionVariables = { environment.sessionVariables = {
SSH_AUTH_SOCK = "/run/user/\${UID}/keyring/ssh";
MANROFFOPT = "-c"; MANROFFOPT = "-c";
MANPAGER = "sh -c 'col -bx | ${pkgs.bat}/bin/bat -l man -p'"; MANPAGER = "sh -c 'col -bx | ${pkgs.bat}/bin/bat -l man -p'";
WALLPAPERS = "${inputs.wallpapers}";
}; };
} }

24
modules/nix/overlays.nix
View file

@ -1,4 +1,5 @@
{ {
inputs,
inputs', inputs',
config, config,
lib, lib,
@ -7,12 +8,27 @@
{ {
nixpkgs.overlays = [ nixpkgs.overlays = [
(final: prev: { (final: prev: {
scripts = import ../scripts { # Add env vars to calibre so they may get propagated to a plugin that needs them
inherit lib config; calibre = prev.calibre.overrideAttrs (old: {
inherit (prev) pkgs; postInstall = ''
wrapProgram $out/bin/calibre \
--set QT_QPA_PLATFORM xcb \
--set-default ACSM_LIBCRYPTO ${prev.openssl.out}/lib/libcrypto.so \
--set-default ACSM_LIBSSL ${prev.openssl.out}/lib/libssl.so
'';
});
lollypop = prev.lollypop.override {
#lastFMSupport = false;
youtubeSupport = false;
}; };
inherit (inputs'.nysh.packages) nysh; scripts = import ../../home/scripts {
inherit lib config;
pkgs = prev.pkgs;
};
nysh = inputs'.nysh.packages.nysh;
}) })
]; ];
} }

4
modules/portals.nix
View file

@ -7,10 +7,10 @@
lib.mkIf config.xdg.portal.enable { lib.mkIf config.xdg.portal.enable {
xdg.portal = { xdg.portal = {
config = { config = {
common = { sway = {
default = "*";
"org.freedesktop.impl.portal.Screenshot.PickColor" = [ "${pkgs.hyprpicker}/bin/hyprpicker" ]; "org.freedesktop.impl.portal.Screenshot.PickColor" = [ "${pkgs.hyprpicker}/bin/hyprpicker" ];
}; };
common.default = "*";
}; };
# gtk portal needed to make gtk apps happy # gtk portal needed to make gtk apps happy

18
modules/programs/firefox.nix
View file

@ -10,7 +10,7 @@
}: }:
lib.mkIf config.programs.firefox.enable { lib.mkIf config.programs.firefox.enable {
programs.firefox = { programs.firefox = {
package = pkgs.firefox-beta; package = pkgs.firefox-esr;
languagePacks = [ languagePacks = [
"de" "de"
"en-GB" "en-GB"
@ -27,9 +27,9 @@ lib.mkIf config.programs.firefox.enable {
"browser.urlbar.suggest.trending" = false; "browser.urlbar.suggest.trending" = false;
"browser.urlbar.suggest.weather" = false; "browser.urlbar.suggest.weather" = false;
"browser.urlbar.suggest.yelp" = false; "browser.urlbar.suggest.yelp" = false;
"browser.urlbar.suggest.bookmark" = true; "browser.urlbar.suggest.bookmark" = false;
"browser.urlbar.suggest.engines" = false; "browser.urlbar.suggest.engines" = false;
"browser.urlbar.suggest.history" = true; "browser.urlbar.suggest.history" = false;
"browser.urlbar.suggest.topsites" = false; "browser.urlbar.suggest.topsites" = false;
"browser.urlbar.suggest.calculator" = true; "browser.urlbar.suggest.calculator" = true;
"browser.urlbar.trimHttps" = false; "browser.urlbar.trimHttps" = false;
@ -42,7 +42,6 @@ lib.mkIf config.programs.firefox.enable {
"browser.newtabpage.activity-stream.showSearch" = false; "browser.newtabpage.activity-stream.showSearch" = false;
"browser.newtabpage.activity-stream.feeds.topsites" = false; "browser.newtabpage.activity-stream.feeds.topsites" = false;
"browser.newtabpage.activity-stream.feeds.section.highlights" = false; "browser.newtabpage.activity-stream.feeds.section.highlights" = false;
"browser.tabs.groups.enabled" = true;
# Add-ons # Add-ons
"extensions.pocket.enabled" = false; "extensions.pocket.enabled" = false;
"extensions.postDownloadThirdPartyPrompt" = false; # Prompt for install before download "extensions.postDownloadThirdPartyPrompt" = false; # Prompt for install before download
@ -51,6 +50,12 @@ lib.mkIf config.programs.firefox.enable {
"dom.security.https_only_mode" = true; "dom.security.https_only_mode" = true;
"cookiebanners.service.mode" = 1;
"cookiebanners.bannerClicking.enabled" = true;
"cookiebanners.cookieInjector.enabled" = true;
"cookiebanners.service.mode.privateBrowsing" = 2;
"cookiebanners.ui.desktop.enabled" = true;
"browser.shell.checkDefaultBrowser" = false; "browser.shell.checkDefaultBrowser" = false;
#"privacy.clearOnShutdown.offlineApps" = true; #"privacy.clearOnShutdown.offlineApps" = true;
"layout.spellcheckDefault" = 1; "layout.spellcheckDefault" = 1;
@ -72,8 +77,6 @@ lib.mkIf config.programs.firefox.enable {
"privacy.resistFingerprinting.block_mozAddonManager" = true; "privacy.resistFingerprinting.block_mozAddonManager" = true;
# Allow styling through userChrome.css # Allow styling through userChrome.css
"toolkit.legacyUserProfileCustomizations.stylesheets" = true; "toolkit.legacyUserProfileCustomizations.stylesheets" = true;
"sidebar.verticalTabs" = true;
}; };
policies = { policies = {
PasswordManagerEnabled = false; PasswordManagerEnabled = false;
@ -93,10 +96,9 @@ lib.mkIf config.programs.firefox.enable {
builtins.listToAttrs [ builtins.listToAttrs [
(extension "ublock-origin" "uBlock0@raymondhill.net") (extension "ublock-origin" "uBlock0@raymondhill.net")
(extension "firefox-translations" "firefox-translations-addon@mozilla.org") (extension "firefox-translations" "firefox-translations-addon@mozilla.org")
(extension "private-relay" "private-relay@firefox.com")
(extension "decentraleyes" "jid1-BoFifL9Vbdl2zQ@jetpack") (extension "decentraleyes" "jid1-BoFifL9Vbdl2zQ@jetpack")
(extension "keepassxc-browser" "keepassxc-browser@keepassxc.org") (extension "keepassxc-browser" "keepassxc-browser@keepassxc.org")
(extension "simplelogin" "addon@simplelogin")
]; ];
FirefoxHome = { FirefoxHome = {
Search = true; Search = true;

3
modules/programs/lazygit.nix
View file

@ -3,9 +3,6 @@
enable = true; enable = true;
settings = { settings = {
"notARepository" = "skip"; "notARepository" = "skip";
git = {
overrideGpg = true;
};
}; };
}; };
} }

4
modules/sddm.nix
View file

@ -1,8 +1,8 @@
{ {
self,
pkgs, pkgs,
lib, lib,
config, config,
inputs,
... ...
}: }:
lib.mkIf config.services.displayManager.sddm.enable { lib.mkIf config.services.displayManager.sddm.enable {
@ -18,7 +18,7 @@ lib.mkIf config.services.displayManager.sddm.enable {
flavor = "mocha"; flavor = "mocha";
font = "Noto Sans"; font = "Noto Sans";
fontSize = "9"; fontSize = "9";
background = inputs.wallpapers.wallpapers.pastel.nix-flake.path; background = "${self}/assets/wallpapers/nix-flake-pastel.jpg";
loginBackground = true; loginBackground = true;
}) })
]; ];

23
modules/system/mime.nix Normal file
View file

@ -0,0 +1,23 @@
{
xdg.mime = {
defaultApplications =
let
fileManager = "org.gnome.Nautilus.desktop";
browser = "firefox-esr.desktop";
in
{
"inode/directory" = fileManager;
"application/zip" = fileManager;
"application/pdf" = browser;
"x-www-browser" = browser;
"text/html" = browser;
"application/vnd.comicbook+zip" = "com.github.johnfactotum.Foliate.desktop";
"application/epub+zip" = "com.github.johnfactotum.Foliate.desktop";
"image/*" = "org.gnome.Loupe.desktop";
"image/png" = "org.gnome.Loupe.desktop";
"image/jpeg" = "org.gnome.Loupe.desktop";
"x-scheme-handler/http" = browser;
"x-scheme-handler/https" = browser;
};
};
}

12
modules/themes/default.nix
View file

@ -8,14 +8,16 @@
config = lib.mkIf config.modules.system.roles.desktop.enable { config = lib.mkIf config.modules.system.roles.desktop.enable {
qt = { qt = {
enable = true; enable = true;
platformTheme = "gtk2"; # Follow gtk theme platformTheme = "gtk2";
#platformTheme = "qt5ct";
#style = "kvantum";
}; };
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
(catppuccin-papirus-folders.override { #vimix-icon-theme
accent = "lavender"; #pop-icon-theme
flavor = "frappe"; catppuccin-papirus-folders
}) #catppuccin-kvantum
]; ];
}; };
} }

2
options/fixes/rsyncd.nix
View file

@ -20,7 +20,7 @@ in
}; };
settings = lib.mkOption { settings = lib.mkOption {
inherit (settingsFormat) type; type = settingsFormat.type;
default = { }; default = { };
example = { example = {
globalSection = { globalSection = {

2
options/media.nix
View file

@ -88,8 +88,6 @@ in
"audio/mpeg" = cfg.audio.default; "audio/mpeg" = cfg.audio.default;
# Ebooks sadly don't have a singular major type. # Ebooks sadly don't have a singular major type.
"application/epub+zip" = cfg.ebook.default; "application/epub+zip" = cfg.ebook.default;
"application/pdf" = cfg.ebook.default;
"application/vnd.comicbook+zip" = cfg.ebook.default;
}; };
}; };
}; };

7
options/server/navidrome.nix
View file

@ -45,7 +45,7 @@ in
}; };
}; };
}; };
inherit (options.services.navidrome) settings; settings = options.services.navidrome.settings;
restartPolicy = mkOption { restartPolicy = mkOption {
type = str; type = str;
default = "always"; default = "always";
@ -60,7 +60,7 @@ in
fileSystems.${cfg.library.path} = mkIf (cfg.library.type == "nfs") { fileSystems.${cfg.library.path} = mkIf (cfg.library.type == "nfs") {
device = "${cfg.library.source.ip}:${cfg.library.source.path}"; device = "${cfg.library.source.ip}:${cfg.library.source.path}";
fsType = "nfs"; fsType = "nfs";
inherit (cfg.library.source) options; options = cfg.library.source.options;
}; };
systemd.tmpfiles.rules = mkIf (cfg.library.type == "nfs") [ systemd.tmpfiles.rules = mkIf (cfg.library.type == "nfs") [
@ -76,9 +76,6 @@ in
}; };
systemd.services.navidrome = { systemd.services.navidrome = {
after = mkIf (cfg.library.type == "nfs") [ "mnt-music.mount" ];
requires = mkIf (cfg.library.type == "nfs") [ "mnt-music.mount" ];
serviceConfig = { serviceConfig = {
Restart = cfg.restartPolicy; Restart = cfg.restartPolicy;
EnvironmentFile = config.age.secrets.navidrome.path; EnvironmentFile = config.age.secrets.navidrome.path;

2
options/server/paperless-ngx/default.nix
View file

@ -22,7 +22,7 @@ in
description = "Whether the port should be publicly accessible."; description = "Whether the port should be publicly accessible.";
type = bool; type = bool;
}; };
inherit (options.services.paperless) settings; settings = options.services.paperless.settings;
}; };
config = mkIf cfg.enable { config = mkIf cfg.enable {

4
options/server/rsync-daemon/default.nix
View file

@ -26,7 +26,7 @@ in
default = false; default = false;
description = "Whether to open the firewall"; description = "Whether to open the firewall";
}; };
port = mkPortOption 873 "rsyncd"; port = mkPortOption 9523 "rsyncd";
address = mkOption { address = mkOption {
type = nonEmptyStr; type = nonEmptyStr;
default = "0.0.0.0"; default = "0.0.0.0";
@ -80,8 +80,6 @@ in
modules.fixes.services.rsyncd = { modules.fixes.services.rsyncd = {
enable = true; enable = true;
inherit (cfg) port;
socketActivated = true;
settings = { settings = {
globalSection = { globalSection = {
inherit (cfg) port address; inherit (cfg) port address;

2
options/server/rustypaste.nix
View file

@ -134,7 +134,7 @@ in
users.users = mkIf (cfg.user == "rustypaste") { users.users = mkIf (cfg.user == "rustypaste") {
rustypaste = { rustypaste = {
useDefaultShell = true; useDefaultShell = true;
inherit (cfg) group; group = cfg.group;
isSystemUser = true; isSystemUser = true;
}; };
}; };

2
options/services/cliphist.nix
View file

@ -40,7 +40,5 @@ in
postStop = "${cfg.package}/bin/cliphist wipe"; postStop = "${cfg.package}/bin/cliphist wipe";
}; };
environment.systemPackages = [ cfg.package ];
}; };
} }

1
options/services/nysh.nix
View file

@ -33,6 +33,7 @@ in
Type = "simple"; Type = "simple";
ExecStart = "/bin/sh -lc ${cfg.package}/bin/nysh"; ExecStart = "/bin/sh -lc ${cfg.package}/bin/nysh";
Restart = "on-failure"; Restart = "on-failure";
NoNewPrivileges = true; NoNewPrivileges = true;
}; };
}; };

13
options/services/rsync-backup/default.nix
View file

@ -85,7 +85,7 @@ in
port = mkOption { port = mkOption {
type = port; type = port;
inherit (options.modules.server.rsync-daemon.port) default; default = options.modules.server.rsync-daemon.port.default;
}; };
}; };
@ -135,17 +135,6 @@ in
unitConfig = { unitConfig = {
Description = "Backs up files from a source location to a specified destination."; Description = "Backs up files from a source location to a specified destination.";
}; };
postStop = ''
if [ "$SERVICE_RESULT" != "success" ]; then
${pkgs.curl}/bin/curl \
-H "Priority: urgent" \
-H "Title: Backup error" \
-d "Backup '${cfg.unitName}-${slugify mod.target.location}' had unexpected behaviour: $SERVICE_RESULT" \
https://ntfy.ccnlc.eu/rsync-backup
fi
'';
serviceConfig = { serviceConfig = {
Type = "simple"; Type = "simple";
Restart = "on-failure"; Restart = "on-failure";

20
options/services/tailscale.nix
View file

@ -18,7 +18,6 @@ let
enum enum
bool bool
; ;
inherit (lib.my) getExe;
cfg = config.modules.services.tailscale; cfg = config.modules.services.tailscale;
in in
{ {
@ -87,29 +86,14 @@ in
description = "tailscale system tray"; description = "tailscale system tray";
wantedBy = [ "graphical-session.target" ]; wantedBy = [ "graphical-session.target" ];
after = [ "graphical-session.target" ]; after = [ "graphical-session.target" ];
path = with pkgs; [ path = [ pkgs.polkit ];
polkit
tailscale
];
serviceConfig = { serviceConfig = {
Type = "simple"; Type = "simple";
ExecStart = getExe pkgs.tail-tray; ExecStart = "/bin/sh -lc ${pkgs.tailscale-systray}/bin/tailscale-systray";
Restart = "on-failure"; Restart = "on-failure";
RestartSec = 1; RestartSec = 1;
TimeoutStopSec = 10; TimeoutStopSec = 10;
IPAddressDeny = "any"; IPAddressDeny = "any";
NoNewPrivileges = true;
ProtectClock = true;
ProtectKernelTunables = true;
ProtectKernelModules = true;
ProtectKernelLogs = true;
SystemCallFilter = "~@clock @cpu-emulation @debug @obsolete @module @mount @raw-io @reboot @swap";
# ProtectControlGroups = true;
#RestrictNamespaces = true;
LockPersonality = true;
MemoryDenyWriteExecute = true;
RestrictRealtime = true;
RestrictSUIDSGID = true;
}; };
}; };
}; };

2
options/system/outputs.nix
View file

@ -13,7 +13,7 @@ in
options.modules.system.outputs = mkOption { options.modules.system.outputs = mkOption {
type = attrsOf ( type = attrsOf (
submodule ( submodule (
{ name, ... }: { name, config, ... }:
{ {
options = { options = {
name = mkOption { name = mkOption {

1
options/system/roles/default.nix
View file

@ -3,6 +3,5 @@
./terminal.nix ./terminal.nix
./desktop.nix ./desktop.nix
./gaming.nix ./gaming.nix
./portable.nix
]; ];
} }

2
options/system/roles/gaming.nix
View file

@ -12,7 +12,6 @@ in
{ {
options.modules.system.roles.gaming = { options.modules.system.roles.gaming = {
enable = mkEnableOption "gaming features"; enable = mkEnableOption "gaming features";
minecraft.enable = mkEnableOption "minecraft";
}; };
config = mkIf cfg.enable { config = mkIf cfg.enable {
@ -33,7 +32,6 @@ in
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
mangohud mangohud
heroic heroic
(mkIf cfg.minecraft.enable prismlauncher)
]; ];
}; };
} }

9
options/system/roles/portable.nix
View file

@ -1,9 +0,0 @@
{ lib, ... }:
let
inherit (lib) mkEnableOption;
in
{
options.modules.system.roles.portable = {
enable = mkEnableOption "Laptop/Portable tweaks";
};
}

1
options/system/roles/terminal.nix
View file

@ -38,7 +38,6 @@ in
fd fd
ripgrep ripgrep
jnv jnv
jq
]; ];
}; };
}; };

27
options/system/users/default.nix
View file

@ -15,26 +15,29 @@ let
; ;
cfg = config.modules.system.users; cfg = config.modules.system.users;
file = submodule (_: { file = submodule (
options = { { name, config, ... }:
path = mkOption { {
type = either package null; options = {
default = null; path = mkOption {
}; type = either package null;
default = null;
};
content = mkOption { content = mkOption {
type = either str null; type = either str null;
default = null; default = null;
};
}; };
}; }
}); );
in in
{ {
options.modules.system.users = mkOption { options.modules.system.users = mkOption {
default = { }; default = { };
type = attrsOf ( type = attrsOf (
submodule ( submodule (
{ name, ... }: { name, config, ... }:
{ {
options = { options = {
name = mkOption { name = mkOption {

2
parts/lib/default.nix
View file

@ -5,7 +5,7 @@
my = import ./functions.nix { my = import ./functions.nix {
inherit inputs; inherit inputs;
lib = self; lib = self;
inherit (args) self; self = args.self;
}; };
} }
); );

2
parts/lib/functions.nix
View file

@ -112,7 +112,7 @@ in
disko = { disko = {
mkBoot = size: { mkBoot = size: {
inherit size; size = size;
type = "EF00"; type = "EF00";
content = { content = {
type = "filesystem"; type = "filesystem";

2
parts/templates/basic/flake.nix
View file

@ -21,7 +21,7 @@
devShell = pkgs.mkShell { buildInputs = with pkgs; [ ]; }; devShell = pkgs.mkShell { buildInputs = with pkgs; [ ]; };
packages.${system} = { packages.${system} = {
inherit (pkgs) hello; hello = pkgs.hello;
default = self.packages.hello; default = self.packages.hello;
}; };
} }

4
parts/templates/rust/flake.nix
View file

@ -30,12 +30,12 @@
rustBuild = rustPlatform.buildRustPackage { rustBuild = rustPlatform.buildRustPackage {
inherit pname; inherit pname;
inherit (manifest) version; version = manifest.version;
src = ./.; src = ./.;
cargoLock.lockFile = ./Cargo.lock; cargoLock.lockFile = ./Cargo.lock;
meta = { meta = {
inherit (manifest) description; description = manifest.description;
#license = nixpkgs.lib.licenses.unlicense; #license = nixpkgs.lib.licenses.unlicense;
maintainers = [ ]; maintainers = [ ];
}; };

BIN
secrets/acme.age
View file

Binary file not shown.

5
secrets/secrets.nix
View file

@ -24,9 +24,4 @@ in
shan shan
ny ny
]; ];
"acme.age".publicKeys = [
shan
raptus
ny
];
} }

69
users/ny/default.nix
View file

@ -1,74 +1,9 @@
{
lib,
inputs',
pkgs,
config,
...
}:
let
inherit (config.modules.meta) username;
calibrePlugins = inputs'.calibre-plugins.packages;
in
{ {
hjem = { hjem = {
users.${username} = { users.ny = {
enable = true; enable = true;
imports = [ imports = [ ./programs ];
./programs
./misc
];
files = {
".config/calibre/plugins/ACSM Input.zip".source = calibrePlugins.acsm-calibre-plugin;
".config/calibre/plugins/DeDRM.zip".source = calibrePlugins.dedrm-plugin;
};
};
specialArgs = {
libmy = lib.my;
}; };
clobberByDefault = true; clobberByDefault = true;
}; };
users.users.${username}.packages =
[
inputs'.nur.packages.grayjay
]
++ (with pkgs; [
keepassxc
fragments
element-desktop
libreoffice
loupe
pwvucontrol
thunderbird
protonmail-bridge-gui
tagger
kid3
hoppscotch
# proprietary
obsidian
# CLI tools
jhead
fdupes
exiftool
sshfs
wl-clipboard
# custom
nysh
scripts.nixedit
scripts.set-background
scripts.fishl
scripts.nrun
scripts.nruni
scripts.rpaste
scripts.genswitch
scripts.gentest
scripts.editsym
scripts.deployswitch
scripts.deploytest
scripts.screenshot
]);
} }

3
users/ny/misc/default.nix
View file

@ -1,3 +0,0 @@
{
imports = [ ./gtk.nix ];
}

12
users/ny/misc/gtk.nix
View file

@ -1,12 +0,0 @@
{
rum.gtk = {
enable = true;
bookmarks = [
"file:///home/ny/Documents Documents"
"file:///home/ny/Music Music"
"file:///home/ny/Pictures Pictures"
"file:///home/ny/Videos Videos"
"file:///home/ny/Downloads Downloads"
];
};
}

2
users/ny/programs/default.nix
View file

@ -3,7 +3,5 @@
./foot.nix ./foot.nix
./fuzzel.nix ./fuzzel.nix
./keepassxc.nix ./keepassxc.nix
./git.nix
./hyprlock.nix
]; ];
} }

6
users/ny/programs/fuzzel.nix
View file

@ -1,10 +1,10 @@
{ libmy, osConfig, ... }: { lib, osConfig, ... }:
let let
inherit (osConfig.modules.system.roles) desktop; inherit (osConfig.modules.system.roles) desktop;
in in
{ {
rum.programs.fuzzel = { rum.programs.fuzzel = {
inherit (desktop) enable; enable = desktop.enable;
settings = { settings = {
main = { main = {
icon-theme = "Papirus-Dark"; icon-theme = "Papirus-Dark";
@ -12,7 +12,7 @@ in
font = "Hack:weight=bold"; font = "Hack:weight=bold";
line-height = 30; line-height = 30;
fields = "name,generic,comment"; fields = "name,generic,comment";
terminal = libmy.getExe desktop.terminal; terminal = lib.my.getExe desktop.terminal;
prompt = ''"❯ "''; prompt = ''"❯ "'';
layer = "overlay"; layer = "overlay";
}; };

42
users/ny/programs/git.nix
View file

@ -1,42 +0,0 @@
{ pkgs, libmy, ... }:
let
inherit (libmy) getExe;
in
{
rum.programs.git = {
enable = true;
settings = {
user = {
email = "git@ccnlc.eu";
name = "nydragon";
signingKey = "key::ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMvPqWPXEUOSMGMIRmirQfbrzq//NkPlEI2TmFpIkSfw";
};
gpg.format = "ssh";
push = {
autoSetupRemote = true;
};
pull = {
rebase = true;
};
core = {
editor = "${getExe pkgs.neovim}";
pager = "${getExe pkgs.delta}";
};
interactive = {
diffFilter = "${getExe pkgs.delta} --color-only";
};
init = {
defaultBranch = "main";
};
merge = {
conflictstyle = "diff3";
};
diff = {
colorMoved = "default";
};
tag.gpgSign = true;
commit.gpgSign = true;
};
destination = ".config/git/config";
};
}

1
users/ny/programs/keepassxc.nix
View file

@ -11,7 +11,6 @@
Enabled = true; Enabled = true;
}; };
GUI = { GUI = {
ApplicationTheme = "dark";
ColorPasswords = true; ColorPasswords = true;
MinimizeOnClose = true; MinimizeOnClose = true;
MinimizeOnStartup = true; MinimizeOnStartup = true;