nix/thinkpad/configuration.nix

146 lines
3.0 KiB
Nix
Raw Normal View History

2022-08-01 21:11:10 +00:00
{ config, pkgs, ... }:
{
imports = [
./hardware-configuration.nix
2023-06-18 23:00:40 +00:00
../common/configuration/main.nix
2022-08-01 21:11:10 +00:00
];
sound.enable = true;
hardware = {
bluetooth.enable = true;
pulseaudio.enable = true;
2022-08-07 21:29:15 +00:00
};
2022-08-01 21:11:10 +00:00
boot = {
loader = {
efi.canTouchEfiVariables = true;
systemd-boot = {
enable = true;
consoleMode = "auto";
};
};
kernelPackages = pkgs.linuxPackages_latest;
2022-08-01 21:11:10 +00:00
kernelParams = [
"quiet"
"splash"
"vga=current"
"mitigations=off"
"udev.log_level=3"
];
loader.timeout = 0;
initrd.verbose = false;
consoleLogLevel = 0;
plymouth.enable = true;
2022-08-01 21:11:10 +00:00
};
networking = {
hostName = "sijmen-laptop";
networkmanager.enable = true;
2022-08-01 21:39:24 +00:00
firewall = {
allowedTCPPorts = [
22 # ssh
22000 # syncthing sync
51414 # transmission
57621 # spotify connect
];
allowedUDPPorts = [
21027 # syncthing discovery
22000 # syncthing sync
2022-08-08 00:11:49 +00:00
51820 # wireguard
];
};
wireguard.interfaces.wg0 = {
ips = [ "10.100.0.2/32" ];
listenPort = 51820;
privateKeyFile = "/home/sijmen/wireguard-keys/private";
peers = [{
publicKey = "zu9vXxxg4wm0R4yWQ2HPaAwJbizuccGYbBB/StwSsm4=";
# Forward all the traffic via VPN.
#allowedIPs = [ "0.0.0.0/0" ];
# Or forward only particular subnets
allowedIPs = [ "10.100.0.0/24" ];
# Set this to the server IP and port.
endpoint = "143.178.219.107:51820";
persistentKeepalive = 25;
}
2022-08-01 21:39:24 +00:00
];
};
2022-08-01 21:11:10 +00:00
};
2022-08-01 21:39:24 +00:00
services = {
throttled.enable = true;
xserver = {
enable = true;
displayManager.gdm.enable = true;
desktopManager.gnome.enable = true;
};
2022-08-01 21:39:24 +00:00
syncthing = {
overrideDevices = true;
overrideFolders = true;
2022-08-01 21:11:10 +00:00
2022-08-01 21:39:24 +00:00
devices = {
nas.id = "5XADATO-6ZKNZFK-YIX2TU3-RTUOAXR-OMWOAH6-OIUB7LE-TWM5B3C-W2I2FQU";
desktop-fedora.id = "RE3BCEP-2FVDNPA-C72KDCX-5NRTLD4-DEJZAIX-PJAMJAN-LJDFHOY-WOXNPQW";
};
folders = {
"vhuse-qjbcl" = {
path = "${config.users.users.sijmen.home}/Sync";
devices = [ "nas" "desktop-fedora" ];
};
};
2022-08-01 21:11:10 +00:00
};
2023-03-31 12:17:02 +00:00
fwupd = {
enableTestRemote = true;
};
2022-08-01 21:11:10 +00:00
};
environment = {
gnome.excludePackages = (with pkgs; [
gnome-photos
gnome-tour
]) ++ (with pkgs.gnome; [
gnome-calendar
gnome-music
epiphany # web browser
geary # email reader
totem # video player
tali # poker game
iagno # go game
hitori # sudoku game
atomix # puzzle game
]);
systemPackages = with pkgs; [
gnome.adwaita-icon-theme
ifuse
libimobiledevice
libheif
];
};
programs.steam = {
enable = true;
remotePlay.openFirewall = true;
dedicatedServer.openFirewall = true;
};
2022-08-10 07:41:44 +00:00
home-manager.users.sijmen.imports = [ ../common/dconf.nix ];
2022-08-01 21:39:24 +00:00
system.stateVersion = "22.05";
2022-08-01 21:11:10 +00:00
}