hotfixes
This commit is contained in:
		
							parent
							
								
									a2849b213f
								
							
						
					
					
						commit
						84cacc56d2
					
				
					 8 changed files with 28 additions and 92 deletions
				
			
		| 
						 | 
					@ -1,6 +1,6 @@
 | 
				
			||||||
## Unified nix configuration
 | 
					## Unified nix configuration
 | 
				
			||||||
 | 
					
 | 
				
			||||||
Update whole flake: `nix flake update --commit-lock-file`
 | 
					Update whole flake (clean working directory 1st): `nix flake update --commit-lock-file`
 | 
				
			||||||
 | 
					
 | 
				
			||||||
Switch current machine: `sudo nixos-rebuild switch --flake . --show-trace`
 | 
					Switch current machine: `sudo nixos-rebuild switch --flake . --show-trace`
 | 
				
			||||||
 | 
					
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -33,7 +33,8 @@ in {
 | 
				
			||||||
        vim
 | 
					        vim
 | 
				
			||||||
        zip
 | 
					        zip
 | 
				
			||||||
      ];
 | 
					      ];
 | 
				
			||||||
      keyboard = {  #TODO switch to normal people variant
 | 
					      keyboard = {
 | 
				
			||||||
 | 
					        #TODO switch to normal people variant
 | 
				
			||||||
        layout = "us";
 | 
					        layout = "us";
 | 
				
			||||||
        variant = "altgr-intl";
 | 
					        variant = "altgr-intl";
 | 
				
			||||||
      };
 | 
					      };
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -9,14 +9,10 @@
 | 
				
			||||||
    ./neovim.nix
 | 
					    ./neovim.nix
 | 
				
			||||||
    ./baseline.nix
 | 
					    ./baseline.nix
 | 
				
			||||||
    ./gaming.nix
 | 
					    ./gaming.nix
 | 
				
			||||||
    ./yubikey.nix
 | 
					 | 
				
			||||||
    ./firefox.nix
 | 
					    ./firefox.nix
 | 
				
			||||||
    ./gui
 | 
					    ./gui
 | 
				
			||||||
    ./zsh
 | 
					    ./zsh
 | 
				
			||||||
    ./defaultDesktopPack.nix
 | 
					    ./defaultDesktopPack.nix
 | 
				
			||||||
    ./accounts.nix
 | 
					 | 
				
			||||||
    ./syncthing.nix
 | 
					 | 
				
			||||||
    ./deepState.nix
 | 
					 | 
				
			||||||
    ./mapping.nix
 | 
					    ./mapping.nix
 | 
				
			||||||
  ];
 | 
					  ];
 | 
				
			||||||
}
 | 
					}
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -1,61 +0,0 @@
 | 
				
			||||||
{
 | 
					 | 
				
			||||||
  config,
 | 
					 | 
				
			||||||
  lib,
 | 
					 | 
				
			||||||
  pkgs,
 | 
					 | 
				
			||||||
  ...
 | 
					 | 
				
			||||||
}:
 | 
					 | 
				
			||||||
with lib; let
 | 
					 | 
				
			||||||
  cfg = config.local.services.gpg;
 | 
					 | 
				
			||||||
in {
 | 
					 | 
				
			||||||
  options.local.services.gpg = {
 | 
					 | 
				
			||||||
    enable = mkEnableOption "gpg settings";
 | 
					 | 
				
			||||||
    defaultKey = mkOption {
 | 
					 | 
				
			||||||
      type = types.str;
 | 
					 | 
				
			||||||
      description = "fingerprint of default public key to be used in gpg, git, email, etc.";
 | 
					 | 
				
			||||||
      example = "7AA277E604A4173916BBB4E91FFAC35E1798174F";
 | 
					 | 
				
			||||||
    };
 | 
					 | 
				
			||||||
  };
 | 
					 | 
				
			||||||
  config = mkIf cfg.enable {
 | 
					 | 
				
			||||||
    programs.gpg = {
 | 
					 | 
				
			||||||
      enable = true;
 | 
					 | 
				
			||||||
      settings = {
 | 
					 | 
				
			||||||
        default-key = config.local.services.gpg.defaultKey;
 | 
					 | 
				
			||||||
      };
 | 
					 | 
				
			||||||
    };
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
    services.gpg-agent = {
 | 
					 | 
				
			||||||
      enable = true;
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
      enableZshIntegration = true;
 | 
					 | 
				
			||||||
      enableBashIntegration = true;
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
      enableExtraSocket = true;
 | 
					 | 
				
			||||||
      enableSshSupport = true;
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
      defaultCacheTtl = 3600 * 3;
 | 
					 | 
				
			||||||
      defaultCacheTtlSsh = 3600 * 3;
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
      maxCacheTtl = 3600 * 6;
 | 
					 | 
				
			||||||
      maxCacheTtlSsh = 3600 * 6;
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
      pinentry.package = pkgs.pinentry-emacs;
 | 
					 | 
				
			||||||
    };
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
    accounts.email.accounts = {
 | 
					 | 
				
			||||||
      "fabian@posixlycorrect.com" = {
 | 
					 | 
				
			||||||
        gpg = {
 | 
					 | 
				
			||||||
          encryptByDefault = true;
 | 
					 | 
				
			||||||
          signByDefault = true;
 | 
					 | 
				
			||||||
          key = config.local.services.gpg.defaultKey;
 | 
					 | 
				
			||||||
        };
 | 
					 | 
				
			||||||
      };
 | 
					 | 
				
			||||||
    };
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
    programs.git = {
 | 
					 | 
				
			||||||
      signing = {
 | 
					 | 
				
			||||||
        key = config.local.services.gpg.defaultKey;
 | 
					 | 
				
			||||||
        signByDefault = true;
 | 
					 | 
				
			||||||
      };
 | 
					 | 
				
			||||||
    };
 | 
					 | 
				
			||||||
  };
 | 
					 | 
				
			||||||
}
 | 
					 | 
				
			||||||
| 
						 | 
					@ -28,10 +28,6 @@
 | 
				
			||||||
        enable = true;
 | 
					        enable = true;
 | 
				
			||||||
        prompt = "%B[%~] \${vcs_info_msg_0_}%b";
 | 
					        prompt = "%B[%~] \${vcs_info_msg_0_}%b";
 | 
				
			||||||
      };
 | 
					      };
 | 
				
			||||||
      gpg = { #TODO finish setup gpg
 | 
					 | 
				
			||||||
        enable = false;
 | 
					 | 
				
			||||||
        defaultKey = "7AA277E604A4173916BBB4E91FFAC35E1798174F";
 | 
					 | 
				
			||||||
      };
 | 
					 | 
				
			||||||
    };
 | 
					    };
 | 
				
			||||||
 | 
					
 | 
				
			||||||
    apps = {
 | 
					    apps = {
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -7,7 +7,8 @@ with prev.lib; let
 | 
				
			||||||
  inherit (final) callPackage fetchpatch;
 | 
					  inherit (final) callPackage fetchpatch;
 | 
				
			||||||
in {
 | 
					in {
 | 
				
			||||||
  override =
 | 
					  override =
 | 
				
			||||||
    {# add python modules here to make them available in all versions
 | 
					    {
 | 
				
			||||||
 | 
					      # add python modules here to make them available in all versions
 | 
				
			||||||
    }
 | 
					    }
 | 
				
			||||||
    // (
 | 
					    // (
 | 
				
			||||||
      let
 | 
					      let
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -6,7 +6,6 @@
 | 
				
			||||||
}: {
 | 
					}: {
 | 
				
			||||||
  imports = [
 | 
					  imports = [
 | 
				
			||||||
    ./baseline.nix
 | 
					    ./baseline.nix
 | 
				
			||||||
    ./yubikey.nix
 | 
					 | 
				
			||||||
    ./audio.nix
 | 
					    ./audio.nix
 | 
				
			||||||
    ./graphics.nix
 | 
					    ./graphics.nix
 | 
				
			||||||
    ./virtualisation.nix
 | 
					    ./virtualisation.nix
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -1,30 +1,34 @@
 | 
				
			||||||
# Do not modify this file!  It was generated by ‘nixos-generate-config’
 | 
					# Do not modify this file!  It was generated by ‘nixos-generate-config’
 | 
				
			||||||
# and may be overwritten by future invocations.  Please make changes
 | 
					# and may be overwritten by future invocations.  Please make changes
 | 
				
			||||||
# to /etc/nixos/configuration.nix instead.
 | 
					# to /etc/nixos/configuration.nix instead.
 | 
				
			||||||
{ config, lib, pkgs, modulesPath, ... }:
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
{
 | 
					{
 | 
				
			||||||
  imports =
 | 
					  config,
 | 
				
			||||||
    [ (modulesPath + "/installer/scan/not-detected.nix")
 | 
					  lib,
 | 
				
			||||||
    ];
 | 
					  pkgs,
 | 
				
			||||||
 | 
					  modulesPath,
 | 
				
			||||||
 | 
					  ...
 | 
				
			||||||
 | 
					}: {
 | 
				
			||||||
 | 
					  imports = [
 | 
				
			||||||
 | 
					    (modulesPath + "/installer/scan/not-detected.nix")
 | 
				
			||||||
 | 
					  ];
 | 
				
			||||||
 | 
					
 | 
				
			||||||
  boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod" ];
 | 
					  boot.initrd.availableKernelModules = ["xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod"];
 | 
				
			||||||
  boot.initrd.kernelModules = [ ];
 | 
					  boot.initrd.kernelModules = [];
 | 
				
			||||||
  boot.kernelModules = [ "kvm-intel" ];
 | 
					  boot.kernelModules = ["kvm-intel"];
 | 
				
			||||||
  boot.extraModulePackages = [ ];
 | 
					  boot.extraModulePackages = [];
 | 
				
			||||||
 | 
					
 | 
				
			||||||
  fileSystems."/" =
 | 
					  fileSystems."/" = {
 | 
				
			||||||
    { device = "/dev/disk/by-uuid/b925ebc0-f717-4f0d-83ca-a9a29990b8e2";
 | 
					    device = "/dev/disk/by-uuid/b925ebc0-f717-4f0d-83ca-a9a29990b8e2";
 | 
				
			||||||
      fsType = "btrfs";
 | 
					    fsType = "btrfs";
 | 
				
			||||||
    };
 | 
					  };
 | 
				
			||||||
 | 
					
 | 
				
			||||||
  fileSystems."/boot" =
 | 
					  fileSystems."/boot" = {
 | 
				
			||||||
    { device = "/dev/disk/by-uuid/EC62-0FDF";
 | 
					    device = "/dev/disk/by-uuid/EC62-0FDF";
 | 
				
			||||||
      fsType = "vfat";
 | 
					    fsType = "vfat";
 | 
				
			||||||
      options = [ "fmask=0022" "dmask=0022" ];
 | 
					    options = ["fmask=0022" "dmask=0022"];
 | 
				
			||||||
    };
 | 
					  };
 | 
				
			||||||
 | 
					
 | 
				
			||||||
  swapDevices = [ ];
 | 
					  swapDevices = [];
 | 
				
			||||||
 | 
					
 | 
				
			||||||
  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
 | 
					  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
 | 
				
			||||||
  # (the default) this is the recommended approach. When using systemd-networkd it's
 | 
					  # (the default) this is the recommended approach. When using systemd-networkd it's
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
		Loading…
	
	Add table
		Add a link
		
	
		Reference in a new issue