This commit is contained in:
chem 2025-08-25 21:51:56 -06:00
parent a2849b213f
commit d41d67a858
9 changed files with 29 additions and 93 deletions

View file

@ -1,6 +1,6 @@
## Unified nix configuration ## Unified nix configuration
Update whole flake: `nix flake update --commit-lock-file` Update whole flake (clean working directory 1st): `nix flake update --commit-lock-file`
Switch current machine: `sudo nixos-rebuild switch --flake . --show-trace` Switch current machine: `sudo nixos-rebuild switch --flake . --show-trace`

View file

@ -33,7 +33,8 @@ in {
vim vim
zip zip
]; ];
keyboard = { #TODO switch to normal people variant keyboard = {
#TODO switch to normal people variant
layout = "us"; layout = "us";
variant = "altgr-intl"; variant = "altgr-intl";
}; };

View file

@ -9,14 +9,10 @@
./neovim.nix ./neovim.nix
./baseline.nix ./baseline.nix
./gaming.nix ./gaming.nix
./yubikey.nix
./firefox.nix ./firefox.nix
./gui ./gui
./zsh ./zsh
./defaultDesktopPack.nix ./defaultDesktopPack.nix
./accounts.nix
./syncthing.nix
./deepState.nix
./mapping.nix ./mapping.nix
]; ];
} }

View file

@ -1,61 +0,0 @@
{
config,
lib,
pkgs,
...
}:
with lib; let
cfg = config.local.services.gpg;
in {
options.local.services.gpg = {
enable = mkEnableOption "gpg settings";
defaultKey = mkOption {
type = types.str;
description = "fingerprint of default public key to be used in gpg, git, email, etc.";
example = "7AA277E604A4173916BBB4E91FFAC35E1798174F";
};
};
config = mkIf cfg.enable {
programs.gpg = {
enable = true;
settings = {
default-key = config.local.services.gpg.defaultKey;
};
};
services.gpg-agent = {
enable = true;
enableZshIntegration = true;
enableBashIntegration = true;
enableExtraSocket = true;
enableSshSupport = true;
defaultCacheTtl = 3600 * 3;
defaultCacheTtlSsh = 3600 * 3;
maxCacheTtl = 3600 * 6;
maxCacheTtlSsh = 3600 * 6;
pinentry.package = pkgs.pinentry-emacs;
};
accounts.email.accounts = {
"fabian@posixlycorrect.com" = {
gpg = {
encryptByDefault = true;
signByDefault = true;
key = config.local.services.gpg.defaultKey;
};
};
};
programs.git = {
signing = {
key = config.local.services.gpg.defaultKey;
signByDefault = true;
};
};
};
}

View file

@ -5,7 +5,7 @@
italic_font JetBrains Mono Italic italic_font JetBrains Mono Italic
bold_italic_font JetBrains Mono Bold Italic bold_italic_font JetBrains Mono Bold Italic
font_size 10 font_size 15
disable_ligatures cursor disable_ligatures cursor
initial_window_width 1200 initial_window_width 1200

View file

@ -28,10 +28,6 @@
enable = true; enable = true;
prompt = "%B[%~] \${vcs_info_msg_0_}%b"; prompt = "%B[%~] \${vcs_info_msg_0_}%b";
}; };
gpg = { #TODO finish setup gpg
enable = false;
defaultKey = "7AA277E604A4173916BBB4E91FFAC35E1798174F";
};
}; };
apps = { apps = {

View file

@ -7,7 +7,8 @@ with prev.lib; let
inherit (final) callPackage fetchpatch; inherit (final) callPackage fetchpatch;
in { in {
override = override =
{# add python modules here to make them available in all versions {
# add python modules here to make them available in all versions
} }
// ( // (
let let

View file

@ -6,7 +6,6 @@
}: { }: {
imports = [ imports = [
./baseline.nix ./baseline.nix
./yubikey.nix
./audio.nix ./audio.nix
./graphics.nix ./graphics.nix
./virtualisation.nix ./virtualisation.nix

View file

@ -1,30 +1,34 @@
# Do not modify this file! It was generated by nixos-generate-config # Do not modify this file! It was generated by nixos-generate-config
# and may be overwritten by future invocations. Please make changes # and may be overwritten by future invocations. Please make changes
# to /etc/nixos/configuration.nix instead. # to /etc/nixos/configuration.nix instead.
{ config, lib, pkgs, modulesPath, ... }:
{ {
imports = config,
[ (modulesPath + "/installer/scan/not-detected.nix") lib,
pkgs,
modulesPath,
...
}: {
imports = [
(modulesPath + "/installer/scan/not-detected.nix")
]; ];
boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod" ]; boot.initrd.availableKernelModules = ["xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod"];
boot.initrd.kernelModules = [ ]; boot.initrd.kernelModules = [];
boot.kernelModules = [ "kvm-intel" ]; boot.kernelModules = ["kvm-intel"];
boot.extraModulePackages = [ ]; boot.extraModulePackages = [];
fileSystems."/" = fileSystems."/" = {
{ device = "/dev/disk/by-uuid/b925ebc0-f717-4f0d-83ca-a9a29990b8e2"; device = "/dev/disk/by-uuid/b925ebc0-f717-4f0d-83ca-a9a29990b8e2";
fsType = "btrfs"; fsType = "btrfs";
}; };
fileSystems."/boot" = fileSystems."/boot" = {
{ device = "/dev/disk/by-uuid/EC62-0FDF"; device = "/dev/disk/by-uuid/EC62-0FDF";
fsType = "vfat"; fsType = "vfat";
options = [ "fmask=0022" "dmask=0022" ]; options = ["fmask=0022" "dmask=0022"];
}; };
swapDevices = [ ]; swapDevices = [];
# Enables DHCP on each ethernet and wireless interface. In case of scripted networking # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
# (the default) this is the recommended approach. When using systemd-networkd it's # (the default) this is the recommended approach. When using systemd-networkd it's