theclaw
This commit is contained in:
parent
143cd6c603
commit
36c73a41ff
17 changed files with 275 additions and 234 deletions
|
|
@ -1,12 +1,7 @@
|
|||
# Edit this configuration file to define what should be installed on
|
||||
# your system. Help is available in the configuration.nix(5) man page, on
|
||||
# https://search.nixos.org/options and in the NixOS manual (`nixos-help`).
|
||||
{
|
||||
config,
|
||||
lib,
|
||||
pkgs,
|
||||
...
|
||||
}: {
|
||||
{ config, lib, pkgs, ... }: {
|
||||
imports = [
|
||||
# Include the results of the hardware scan.
|
||||
./hardware-configuration.nix
|
||||
|
|
@ -32,19 +27,13 @@
|
|||
services.desktopManager.cosmic.enable = true;
|
||||
services.displayManager.cosmic-greeter.enable = true;
|
||||
|
||||
nix.settings.experimental-features = ["nix-command" "flakes"];
|
||||
nix.settings.experimental-features = [ "nix-command" "flakes" ];
|
||||
|
||||
# Define a user account. Don't forget to set a password with ‘passwd’.
|
||||
users.users.polen = {
|
||||
isNormalUser = true;
|
||||
extraGroups = ["wheel"]; # Enable ‘sudo’ for the user.
|
||||
packages = with pkgs; [
|
||||
neovim
|
||||
tree
|
||||
htop
|
||||
git
|
||||
ranger
|
||||
];
|
||||
extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.
|
||||
packages = with pkgs; [ neovim tree htop git ranger ];
|
||||
};
|
||||
|
||||
# List packages installed in system profile.
|
||||
|
|
@ -73,7 +62,7 @@
|
|||
};
|
||||
|
||||
# Open ports in the firewall.
|
||||
networking.firewall.allowedTCPPorts = [2283];
|
||||
networking.firewall.allowedTCPPorts = [ 2283 ];
|
||||
# networking.firewall.allowedUDPPorts = [ ... ];
|
||||
# Or disable the firewall altogether.
|
||||
# networking.firewall.enable = false;
|
||||
|
|
|
|||
|
|
@ -4,34 +4,32 @@
|
|||
{ config, lib, pkgs, modulesPath, ... }:
|
||||
|
||||
{
|
||||
imports =
|
||||
[ (modulesPath + "/installer/scan/not-detected.nix")
|
||||
];
|
||||
imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
|
||||
|
||||
boot.initrd.availableKernelModules = [ "xhci_pci" "ehci_pci" "ahci" "usb_storage" "sd_mod" "rtsx_pci_sdmmc" ];
|
||||
boot.initrd.availableKernelModules =
|
||||
[ "xhci_pci" "ehci_pci" "ahci" "usb_storage" "sd_mod" "rtsx_pci_sdmmc" ];
|
||||
boot.initrd.kernelModules = [ ];
|
||||
boot.kernelModules = [ "kvm-intel" ];
|
||||
boot.extraModulePackages = [ ];
|
||||
|
||||
fileSystems."/" =
|
||||
{ device = "/dev/disk/by-uuid/50ea20bc-d9bb-40c7-8e4a-34e31da665b5";
|
||||
fsType = "ext4";
|
||||
};
|
||||
fileSystems."/" = {
|
||||
device = "/dev/disk/by-uuid/50ea20bc-d9bb-40c7-8e4a-34e31da665b5";
|
||||
fsType = "ext4";
|
||||
};
|
||||
|
||||
fileSystems."/boot" =
|
||||
{ device = "/dev/disk/by-uuid/9267-2ED4";
|
||||
fsType = "vfat";
|
||||
options = [ "fmask=0077" "dmask=0077" ];
|
||||
};
|
||||
fileSystems."/boot" = {
|
||||
device = "/dev/disk/by-uuid/9267-2ED4";
|
||||
fsType = "vfat";
|
||||
options = [ "fmask=0077" "dmask=0077" ];
|
||||
};
|
||||
|
||||
fileSystems."/data" =
|
||||
{ device = "/dev/disk/by-uuid/465aa01d-2cc4-4955-bebb-b44c21528e4f";
|
||||
fsType = "ext4";
|
||||
};
|
||||
fileSystems."/data" = {
|
||||
device = "/dev/disk/by-uuid/465aa01d-2cc4-4955-bebb-b44c21528e4f";
|
||||
fsType = "ext4";
|
||||
};
|
||||
|
||||
swapDevices =
|
||||
[ { device = "/dev/disk/by-uuid/90dd6c81-79a7-45e2-b063-e263cabf1c28"; }
|
||||
];
|
||||
[{ device = "/dev/disk/by-uuid/90dd6c81-79a7-45e2-b063-e263cabf1c28"; }];
|
||||
|
||||
# Enables DHCP on each ethernet and wireless interface. In case of scripted networking
|
||||
# (the default) this is the recommended approach. When using systemd-networkd it's
|
||||
|
|
@ -42,5 +40,6 @@
|
|||
# networking.interfaces.wlp3s0.useDHCP = lib.mkDefault true;
|
||||
|
||||
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
|
||||
hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
|
||||
hardware.cpu.intel.updateMicrocode =
|
||||
lib.mkDefault config.hardware.enableRedistributableFirmware;
|
||||
}
|
||||
|
|
|
|||
|
|
@ -1,11 +1,7 @@
|
|||
# Edit this configuration file to define what should be installed on
|
||||
# your system. Help is available in the configuration.nix(5) man page
|
||||
# and in the NixOS manual (accessible by running 'nixos-help').
|
||||
{
|
||||
config,
|
||||
pkgs,
|
||||
...
|
||||
}: {
|
||||
{ config, pkgs, ... }: {
|
||||
imports = [
|
||||
# Include the results of the hardware scan.
|
||||
./hardware-configuration.nix
|
||||
|
|
@ -35,7 +31,7 @@
|
|||
# networking.proxy.default = "http://user:password@proxy:port/";
|
||||
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
|
||||
|
||||
nix.settings.experimental-features = ["nix-command" "flakes"];
|
||||
nix.settings.experimental-features = [ "nix-command" "flakes" ];
|
||||
#nix.settings.trusted-users = [ "polen" "polensky" ];
|
||||
#nix.settings.extra-platforms = config.boot.binfmt.emulatedSystems;
|
||||
#boot.binfmt.emulatedSystems = ["aarch64-linux"];
|
||||
|
|
@ -98,7 +94,7 @@
|
|||
users.users.polensky = {
|
||||
isNormalUser = true;
|
||||
description = "polensky";
|
||||
extraGroups = ["networkmanager" "wheel"];
|
||||
extraGroups = [ "networkmanager" "wheel" ];
|
||||
shell = pkgs.zsh;
|
||||
};
|
||||
|
||||
|
|
@ -109,13 +105,7 @@
|
|||
|
||||
# List packages installed in system profile. To search, run:
|
||||
# $ nix search wget
|
||||
environment.systemPackages = with pkgs; [
|
||||
htop-vim
|
||||
ranger
|
||||
neovim
|
||||
wget
|
||||
git
|
||||
];
|
||||
environment.systemPackages = with pkgs; [ htop-vim ranger neovim wget git ];
|
||||
|
||||
# Some programs need SUID wrappers, can be configured further or are
|
||||
# started in user sessions.
|
||||
|
|
|
|||
|
|
@ -4,44 +4,52 @@
|
|||
{ config, lib, pkgs, modulesPath, ... }:
|
||||
|
||||
{
|
||||
imports =
|
||||
[ (modulesPath + "/installer/scan/not-detected.nix")
|
||||
];
|
||||
imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
|
||||
|
||||
boot.initrd.availableKernelModules = [ "uhci_hcd" "ehci_pci" "ahci" "xhci_pci" "pata_marvell" "firewire_ohci" "usb_storage" "usbhid" "sd_mod" "sr_mod" ];
|
||||
boot.initrd.availableKernelModules = [
|
||||
"uhci_hcd"
|
||||
"ehci_pci"
|
||||
"ahci"
|
||||
"xhci_pci"
|
||||
"pata_marvell"
|
||||
"firewire_ohci"
|
||||
"usb_storage"
|
||||
"usbhid"
|
||||
"sd_mod"
|
||||
"sr_mod"
|
||||
];
|
||||
boot.initrd.kernelModules = [ ];
|
||||
boot.kernelModules = [ "kvm-intel" ];
|
||||
boot.extraModulePackages = [ ];
|
||||
|
||||
fileSystems."/" =
|
||||
{ device = "/dev/disk/by-uuid/62a34abf-561a-410d-b913-eb2ad7ede6f5";
|
||||
fsType = "ext4";
|
||||
};
|
||||
fileSystems."/" = {
|
||||
device = "/dev/disk/by-uuid/62a34abf-561a-410d-b913-eb2ad7ede6f5";
|
||||
fsType = "ext4";
|
||||
};
|
||||
|
||||
fileSystems."/boot" =
|
||||
{ device = "/dev/disk/by-uuid/9B7B-A012";
|
||||
fsType = "vfat";
|
||||
options = [ "fmask=0022" "dmask=0022" ];
|
||||
};
|
||||
fileSystems."/boot" = {
|
||||
device = "/dev/disk/by-uuid/9B7B-A012";
|
||||
fsType = "vfat";
|
||||
options = [ "fmask=0022" "dmask=0022" ];
|
||||
};
|
||||
|
||||
fileSystems."/data" =
|
||||
{ device = "/dev/disk/by-uuid/b7de7b88-6239-4340-9e7a-6486814bbd83";
|
||||
fsType = "ext4";
|
||||
};
|
||||
fileSystems."/data" = {
|
||||
device = "/dev/disk/by-uuid/b7de7b88-6239-4340-9e7a-6486814bbd83";
|
||||
fsType = "ext4";
|
||||
};
|
||||
|
||||
fileSystems."/data1" =
|
||||
{ device = "/dev/disk/by-uuid/86a239f2-50a5-4c26-9534-0636fb718fc8";
|
||||
fsType = "ext4";
|
||||
};
|
||||
fileSystems."/data1" = {
|
||||
device = "/dev/disk/by-uuid/86a239f2-50a5-4c26-9534-0636fb718fc8";
|
||||
fsType = "ext4";
|
||||
};
|
||||
|
||||
fileSystems."/home" =
|
||||
{ device = "/dev/disk/by-uuid/5181dbcf-7e00-46d9-ac04-c22d4c4e9827";
|
||||
fsType = "ext4";
|
||||
};
|
||||
fileSystems."/home" = {
|
||||
device = "/dev/disk/by-uuid/5181dbcf-7e00-46d9-ac04-c22d4c4e9827";
|
||||
fsType = "ext4";
|
||||
};
|
||||
|
||||
swapDevices =
|
||||
[ { device = "/dev/disk/by-uuid/29ac34a7-fa51-489b-b9da-8c5d02bdd2c4"; }
|
||||
];
|
||||
[{ device = "/dev/disk/by-uuid/29ac34a7-fa51-489b-b9da-8c5d02bdd2c4"; }];
|
||||
|
||||
# Enables DHCP on each ethernet and wireless interface. In case of scripted networking
|
||||
# (the default) this is the recommended approach. When using systemd-networkd it's
|
||||
|
|
@ -52,5 +60,6 @@
|
|||
# networking.interfaces.enp7s0.useDHCP = lib.mkDefault true;
|
||||
|
||||
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
|
||||
hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
|
||||
hardware.cpu.intel.updateMicrocode =
|
||||
lib.mkDefault config.hardware.enableRedistributableFirmware;
|
||||
}
|
||||
|
|
|
|||
|
|
@ -1,11 +1,5 @@
|
|||
{
|
||||
pkgs,
|
||||
inputs,
|
||||
system,
|
||||
config,
|
||||
...
|
||||
}: let
|
||||
my-emacs = pkgs.emacsNativeComp;
|
||||
{ pkgs, inputs, system, config, ... }:
|
||||
let my-emacs = pkgs.emacsNativeComp;
|
||||
in {
|
||||
nixpkgs.config.allowUnfree = true;
|
||||
|
||||
|
|
@ -24,7 +18,7 @@ in {
|
|||
colima
|
||||
git
|
||||
gnupg
|
||||
(pass.withExtensions (exts: [exts.pass-otp]))
|
||||
(pass.withExtensions (exts: [ exts.pass-otp ]))
|
||||
|
||||
# emacs
|
||||
my-emacs
|
||||
|
|
@ -90,9 +84,7 @@ in {
|
|||
programs.direnv.enable = true;
|
||||
programs.gnupg.agent.enable = true;
|
||||
|
||||
services.yabai = {
|
||||
enable = true;
|
||||
};
|
||||
services.yabai = { enable = true; };
|
||||
services.skhd.enable = true;
|
||||
|
||||
services.emacs = {
|
||||
|
|
@ -107,15 +99,13 @@ in {
|
|||
|
||||
system.defaults.dock = {
|
||||
autohide = true;
|
||||
persistent-apps = [];
|
||||
persistent-apps = [ ];
|
||||
show-recents = false;
|
||||
static-only = true;
|
||||
tilesize = 32;
|
||||
};
|
||||
|
||||
system.defaults.menuExtraClock = {
|
||||
Show24Hour = true;
|
||||
};
|
||||
system.defaults.menuExtraClock = { Show24Hour = true; };
|
||||
|
||||
launchd.user.agents.remap-keys = {
|
||||
serviceConfig = {
|
||||
|
|
@ -123,7 +113,8 @@ in {
|
|||
"/usr/bin/hidutil"
|
||||
"property"
|
||||
"--set"
|
||||
'' {
|
||||
''
|
||||
{
|
||||
"UserKeyMapping":[
|
||||
{"HIDKeyboardModifierMappingSrc":0x700000039,"HIDKeyboardModifierMappingDst":0x7000000E7}
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,16 +1,11 @@
|
|||
{
|
||||
inputs,
|
||||
config,
|
||||
pkgs,
|
||||
lib,
|
||||
...
|
||||
}: let
|
||||
{ inputs, config, pkgs, lib, ... }:
|
||||
let
|
||||
user = "polen";
|
||||
hostname = "pi";
|
||||
in {
|
||||
boot = {
|
||||
kernelPackages = pkgs.linuxKernel.packages.linux_rpi3;
|
||||
initrd.availableKernelModules = ["xhci_pci" "usbhid" "usb_storage"];
|
||||
initrd.availableKernelModules = [ "xhci_pci" "usbhid" "usb_storage" ];
|
||||
loader = {
|
||||
grub.enable = false;
|
||||
generic-extlinux-compatible.enable = true;
|
||||
|
|
@ -21,16 +16,14 @@ in {
|
|||
"/" = {
|
||||
device = "/dev/disk/by-label/NIXOS_SD";
|
||||
fsType = "ext4";
|
||||
options = ["noatime"];
|
||||
options = [ "noatime" ];
|
||||
};
|
||||
};
|
||||
|
||||
swapDevices = [
|
||||
{
|
||||
device = "/var/lib/swapfile";
|
||||
size = 10 * 1024;
|
||||
}
|
||||
];
|
||||
swapDevices = [{
|
||||
device = "/var/lib/swapfile";
|
||||
size = 10 * 1024;
|
||||
}];
|
||||
|
||||
#sops.defaultSopsFile = ../../secrets/secrets.yaml;
|
||||
#sops.defaultSopsFormat = "yaml";
|
||||
|
|
@ -48,15 +41,9 @@ in {
|
|||
node.openFirewall = true;
|
||||
};
|
||||
|
||||
nix.settings.trusted-users = [user];
|
||||
nix.settings.trusted-users = [ user ];
|
||||
|
||||
environment.systemPackages = with pkgs; [
|
||||
htop-vim
|
||||
neovim
|
||||
curl
|
||||
wget
|
||||
ranger
|
||||
];
|
||||
environment.systemPackages = with pkgs; [ htop-vim neovim curl wget ranger ];
|
||||
|
||||
services.openssh.enable = true;
|
||||
|
||||
|
|
@ -66,11 +53,9 @@ in {
|
|||
"${user}" = {
|
||||
isNormalUser = true;
|
||||
#hashedPasswordFile = config.sops.secrets.pi_user_pass.path;
|
||||
extraGroups = ["wheel"];
|
||||
};
|
||||
lauria = {
|
||||
isNormalUser = true;
|
||||
extraGroups = [ "wheel" ];
|
||||
};
|
||||
lauria = { isNormalUser = true; };
|
||||
};
|
||||
};
|
||||
|
||||
|
|
|
|||
|
|
@ -64,7 +64,8 @@ in {
|
|||
openFirewall = true; # 11434
|
||||
host = "0.0.0.0";
|
||||
syncModels = true;
|
||||
loadModels = [ "mistral:7b" "phi3.5:3.8b" ];
|
||||
loadModels =
|
||||
[ "qwen3:4b" "lfm2.5-thinking:1.2b" "ministral-3:8b" "ministral-3:3b" ];
|
||||
};
|
||||
};
|
||||
|
||||
|
|
@ -161,6 +162,7 @@ in {
|
|||
9000 # mealie
|
||||
8989 # sonarr
|
||||
10222 # taskchampion-sync-server
|
||||
18789 # openclaw
|
||||
];
|
||||
firewall.allowedUDPPorts = [
|
||||
5353 # mDNS
|
||||
|
|
@ -170,12 +172,15 @@ in {
|
|||
time.timeZone = "America/Toronto";
|
||||
|
||||
users.users."${user}" = {
|
||||
isNormalUser = true;
|
||||
group = "polen";
|
||||
extraGroups = [ "wheel" "transmission" "jellyfin" "polensky" "docker" ];
|
||||
shell = pkgs.zsh;
|
||||
openssh.authorizedKeys.keys = [
|
||||
"ssh-rsa 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 polen@polen-xps"
|
||||
];
|
||||
};
|
||||
users.groups.polen = { };
|
||||
|
||||
# Luna user for OpenClaw AI assistant
|
||||
users.users.luna = {
|
||||
|
|
@ -197,16 +202,17 @@ in {
|
|||
defaultSopsFile = ../../secrets/secrets.yaml;
|
||||
age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
|
||||
secrets = {
|
||||
luna-telegram-token = {
|
||||
luna_telegram_token = {
|
||||
owner = "luna";
|
||||
group = "luna";
|
||||
};
|
||||
luna-gateway-token = {
|
||||
luna_gateway_token = {
|
||||
owner = "luna";
|
||||
group = "luna";
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
environment.systemPackages = with pkgs; [
|
||||
neovim
|
||||
htop-vim
|
||||
|
|
|
|||
|
|
@ -1,30 +1,22 @@
|
|||
# Do not modify this file! It was generated by ‘nixos-generate-config’
|
||||
# and may be overwritten by future invocations. Please make changes
|
||||
# to /etc/nixos/configuration.nix instead.
|
||||
{
|
||||
config,
|
||||
lib,
|
||||
pkgs,
|
||||
modulesPath,
|
||||
...
|
||||
}: {
|
||||
imports = [
|
||||
(modulesPath + "/installer/scan/not-detected.nix")
|
||||
];
|
||||
{ config, lib, pkgs, modulesPath, ... }: {
|
||||
imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
|
||||
|
||||
boot.initrd.availableKernelModules = ["uhci_hcd" "ehci_pci" "hpsa" "usb_storage" "usbhid" "sd_mod"];
|
||||
boot.initrd.kernelModules = [];
|
||||
boot.kernelModules = ["kvm-intel"];
|
||||
boot.extraModulePackages = [];
|
||||
boot.initrd.availableKernelModules =
|
||||
[ "uhci_hcd" "ehci_pci" "hpsa" "usb_storage" "usbhid" "sd_mod" ];
|
||||
boot.initrd.kernelModules = [ ];
|
||||
boot.kernelModules = [ "kvm-intel" ];
|
||||
boot.extraModulePackages = [ ];
|
||||
|
||||
fileSystems."/" = {
|
||||
device = "/dev/disk/by-uuid/a4ba3cce-bbdd-470d-9874-71f3aea9ea13";
|
||||
fsType = "ext4";
|
||||
};
|
||||
|
||||
swapDevices = [
|
||||
{device = "/dev/disk/by-uuid/6fc86a5b-ac4b-41ed-a7c9-56f734f5e711";}
|
||||
];
|
||||
swapDevices =
|
||||
[{ device = "/dev/disk/by-uuid/6fc86a5b-ac4b-41ed-a7c9-56f734f5e711"; }];
|
||||
|
||||
# Enables DHCP on each ethernet and wireless interface. In case of scripted networking
|
||||
# (the default) this is the recommended approach. When using systemd-networkd it's
|
||||
|
|
@ -37,5 +29,6 @@
|
|||
# networking.interfaces.enp4s0f1.useDHCP = lib.mkDefault true;
|
||||
|
||||
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
|
||||
hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
|
||||
hardware.cpu.intel.updateMicrocode =
|
||||
lib.mkDefault config.hardware.enableRedistributableFirmware;
|
||||
}
|
||||
|
|
|
|||
|
|
@ -7,35 +7,105 @@
|
|||
home.homeDirectory = "/var/lib/luna";
|
||||
home.stateVersion = "25.05";
|
||||
|
||||
home.packages = with pkgs; [ xmlstarlet ];
|
||||
|
||||
programs.openclaw = {
|
||||
enable = true;
|
||||
documents = ./luna-documents;
|
||||
|
||||
config = {
|
||||
# Use local Ollama - auto-detected at 127.0.0.1:11434
|
||||
agents.defaults.model = {
|
||||
primary = "ollama/mistral:7b";
|
||||
fallbacks = [ "ollama/phi3.5:3.8b" ];
|
||||
models = {
|
||||
providers = {
|
||||
ollama = {
|
||||
baseUrl = "http://127.0.0.1:11434/v1";
|
||||
apiKey = "ollama-local";
|
||||
api = "openai-completions";
|
||||
models = [ ];
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
agents = {
|
||||
defaults = {
|
||||
model = { primary = "github-copilot/gpt-5-mini"; };
|
||||
workspace = "/var/lib/luna/.openclaw/workspace";
|
||||
maxConcurrent = 4;
|
||||
subagents = { maxConcurrent = 8; };
|
||||
models = { "github-copilot/gpt-5-mini" = { }; };
|
||||
};
|
||||
};
|
||||
|
||||
commands = {
|
||||
native = "auto";
|
||||
nativeSkills = "auto";
|
||||
};
|
||||
|
||||
channels = {
|
||||
telegram = {
|
||||
dmPolicy = "pairing";
|
||||
tokenFile = "/run/secrets/luna_telegram_token";
|
||||
groups = { "*" = { requireMention = true; }; };
|
||||
allowFrom = [ 1268580775 ];
|
||||
groupPolicy = "allowlist";
|
||||
streamMode = "partial";
|
||||
};
|
||||
};
|
||||
|
||||
gateway = {
|
||||
mode = "local";
|
||||
auth = { tokenFile = "/run/secrets/luna-gateway-token"; };
|
||||
auth = {
|
||||
token =
|
||||
"14db7eaede5f363bce5f5efd23baea45fd8c7984fd3d9234d9b98e1d52c88db7";
|
||||
mode = "token";
|
||||
};
|
||||
port = 18789;
|
||||
bind = "loopback";
|
||||
tailscale = {
|
||||
mode = "off";
|
||||
resetOnExit = false;
|
||||
};
|
||||
};
|
||||
|
||||
channels.telegram = {
|
||||
tokenFile = "/run/secrets/luna-telegram-token";
|
||||
allowFrom = [
|
||||
1268580775
|
||||
];
|
||||
groups = { "*" = { requireMention = true; }; };
|
||||
plugins = { entries = { telegram = { enabled = true; }; }; };
|
||||
|
||||
messages = { ackReactionScope = "group-mentions"; };
|
||||
|
||||
auth = {
|
||||
profiles = {
|
||||
"github-copilot:github" = {
|
||||
provider = "github-copilot";
|
||||
mode = "token";
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
hooks = {
|
||||
internal = {
|
||||
enabled = true;
|
||||
entries = {
|
||||
"boot-md" = { enabled = true; };
|
||||
"command-logger" = { enabled = true; };
|
||||
"session-memory" = { enabled = true; };
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
wizard = {
|
||||
lastRunAt = "2026-02-10T18:36:29.457Z";
|
||||
lastRunVersion = "2026.2.6-3";
|
||||
lastRunCommand = "onboard";
|
||||
lastRunMode = "local";
|
||||
};
|
||||
|
||||
meta = {
|
||||
lastTouchedVersion = "2026.2.6-3";
|
||||
lastTouchedAt = "2026-02-10T18:36:29.472Z";
|
||||
};
|
||||
};
|
||||
|
||||
# Plugins useful for homelab Q&A
|
||||
bundledPlugins = {
|
||||
summarize.enable = true; # Summarize docs/web pages
|
||||
oracle.enable = true; # Web search
|
||||
oracle.enable = false; # Web search
|
||||
};
|
||||
};
|
||||
|
||||
|
|
|
|||
|
|
@ -1,12 +1,7 @@
|
|||
# Edit this configuration file to define what should be installed on
|
||||
# your system. Help is available in the configuration.nix(5) man page
|
||||
# and in the NixOS manual (accessible by running 'nixos-help').
|
||||
{
|
||||
config,
|
||||
pkgs,
|
||||
inputs,
|
||||
...
|
||||
}: {
|
||||
{ config, pkgs, inputs, ... }: {
|
||||
imports = [
|
||||
# Include the results of the hardware scan.
|
||||
./hardware-configuration.nix
|
||||
|
|
@ -29,14 +24,14 @@
|
|||
boot.loader.systemd-boot.enable = true;
|
||||
boot.loader.efi.canTouchEfiVariables = true;
|
||||
|
||||
boot.kernelModules = ["msr"];
|
||||
boot.kernelModules = [ "msr" ];
|
||||
|
||||
networking.hostName = "xps13"; # Define your hostname.
|
||||
# networking.wireless.enable = true; # Enables wireless support via wpa_supplicant.
|
||||
|
||||
nix = {
|
||||
settings.experimental-features = ["nix-command" "flakes"];
|
||||
settings.trusted-users = ["polen"];
|
||||
settings.experimental-features = [ "nix-command" "flakes" ];
|
||||
settings.trusted-users = [ "polen" ];
|
||||
settings.extra-platforms = config.boot.binfmt.emulatedSystems;
|
||||
gc = {
|
||||
automatic = true;
|
||||
|
|
@ -44,7 +39,7 @@
|
|||
options = "--delete-older-than 15d";
|
||||
};
|
||||
};
|
||||
boot.binfmt.emulatedSystems = ["aarch64-linux"];
|
||||
boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
|
||||
|
||||
# Configure network proxy if necessary
|
||||
# networking.proxy.default = "http://user:password@proxy:port/";
|
||||
|
|
@ -68,14 +63,14 @@
|
|||
|
||||
services.displayManager.sddm = {
|
||||
enable = true;
|
||||
theme = "${import ./sddm-theme.nix {inherit pkgs;}}";
|
||||
theme = "${import ./sddm-theme.nix { inherit pkgs; }}";
|
||||
};
|
||||
|
||||
# Define a user account. Don't forget to set a password with 'passwd'.
|
||||
users.users.polen = {
|
||||
isNormalUser = true;
|
||||
description = "polen";
|
||||
extraGroups = ["networkmanager" "wheel"];
|
||||
extraGroups = [ "networkmanager" "wheel" ];
|
||||
shell = pkgs.zsh;
|
||||
};
|
||||
|
||||
|
|
@ -134,7 +129,7 @@
|
|||
programs.seahorse.enable = true;
|
||||
|
||||
xdg.portal.enable = true;
|
||||
xdg.portal.extraPortals = [pkgs.xdg-desktop-portal-gtk];
|
||||
xdg.portal.extraPortals = [ pkgs.xdg-desktop-portal-gtk ];
|
||||
|
||||
environment.sessionVariables = {
|
||||
NIXOS_OZONE_WL = "1";
|
||||
|
|
|
|||
|
|
@ -4,29 +4,28 @@
|
|||
{ config, lib, pkgs, modulesPath, ... }:
|
||||
|
||||
{
|
||||
imports =
|
||||
[ (modulesPath + "/installer/scan/not-detected.nix")
|
||||
];
|
||||
imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
|
||||
|
||||
boot.initrd.availableKernelModules = [ "xhci_pci" "nvme" "usb_storage" "sd_mod" "rtsx_pci_sdmmc" ];
|
||||
boot.initrd.availableKernelModules =
|
||||
[ "xhci_pci" "nvme" "usb_storage" "sd_mod" "rtsx_pci_sdmmc" ];
|
||||
boot.initrd.kernelModules = [ ];
|
||||
boot.kernelModules = [ "kvm-intel" ];
|
||||
boot.extraModulePackages = [ ];
|
||||
|
||||
fileSystems."/" =
|
||||
{ device = "/dev/disk/by-uuid/6faa62c9-8566-4ed7-b372-355e04ac4ca6";
|
||||
fsType = "ext4";
|
||||
};
|
||||
fileSystems."/" = {
|
||||
device = "/dev/disk/by-uuid/6faa62c9-8566-4ed7-b372-355e04ac4ca6";
|
||||
fsType = "ext4";
|
||||
};
|
||||
|
||||
fileSystems."/boot" =
|
||||
{ device = "/dev/disk/by-uuid/A769-2F96";
|
||||
fsType = "vfat";
|
||||
};
|
||||
fileSystems."/boot" = {
|
||||
device = "/dev/disk/by-uuid/A769-2F96";
|
||||
fsType = "vfat";
|
||||
};
|
||||
|
||||
fileSystems."/home" =
|
||||
{ device = "/dev/disk/by-uuid/8b28694c-3401-4545-9974-521674baa450";
|
||||
fsType = "ext4";
|
||||
};
|
||||
fileSystems."/home" = {
|
||||
device = "/dev/disk/by-uuid/8b28694c-3401-4545-9974-521674baa450";
|
||||
fsType = "ext4";
|
||||
};
|
||||
|
||||
swapDevices = [ ];
|
||||
|
||||
|
|
@ -38,5 +37,6 @@
|
|||
# networking.interfaces.wlp2s0.useDHCP = lib.mkDefault true;
|
||||
|
||||
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
|
||||
hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
|
||||
hardware.cpu.intel.updateMicrocode =
|
||||
lib.mkDefault config.hardware.enableRedistributableFirmware;
|
||||
}
|
||||
|
|
|
|||
|
|
@ -1,19 +1,18 @@
|
|||
{pkgs}: let
|
||||
image = ./assets/a_forest_of_trees_with_fog.jpg;
|
||||
in
|
||||
pkgs.stdenv.mkDerivation {
|
||||
name = "sddm-theme";
|
||||
src = pkgs.fetchFromGitHub {
|
||||
owner = "MarianArlt";
|
||||
repo = "sddm-sugar-dark";
|
||||
rev = "ceb2c455663429be03ba62d9f898c571650ef7fe";
|
||||
sha256 = "flOspjpYezPvGZ6b4R/Mr18N7N3JdytCSwwu6mf4owQ=";
|
||||
};
|
||||
installPhase = ''
|
||||
mkdir -p $out
|
||||
cp -R ./* $out/
|
||||
cd $out/
|
||||
rm Background.jpg
|
||||
cp -r ${image} $out/Background.jpg
|
||||
'';
|
||||
}
|
||||
{ pkgs }:
|
||||
let image = ./assets/a_forest_of_trees_with_fog.jpg;
|
||||
in pkgs.stdenv.mkDerivation {
|
||||
name = "sddm-theme";
|
||||
src = pkgs.fetchFromGitHub {
|
||||
owner = "MarianArlt";
|
||||
repo = "sddm-sugar-dark";
|
||||
rev = "ceb2c455663429be03ba62d9f898c571650ef7fe";
|
||||
sha256 = "flOspjpYezPvGZ6b4R/Mr18N7N3JdytCSwwu6mf4owQ=";
|
||||
};
|
||||
installPhase = ''
|
||||
mkdir -p $out
|
||||
cp -R ./* $out/
|
||||
cd $out/
|
||||
rm Background.jpg
|
||||
cp -r ${image} $out/Background.jpg
|
||||
'';
|
||||
}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue