diff --git a/macbook/home-manager/home.nix b/macbook/home-manager/home.nix new file mode 100644 index 0000000..77ebd0a --- /dev/null +++ b/macbook/home-manager/home.nix @@ -0,0 +1,152 @@ +{ config, pkgs, ... }: + +{ + # Home Manager needs a bit of information about you and the paths it should + # manage. + home.username = "august"; + home.homeDirectory = "/home/august"; + + # This value determines the Home Manager release that your configuration is + # compatible with. This helps avoid breakage when a new Home Manager release + # introduces backwards incompatible changes. + # + # You should not change this value, even if you update Home Manager. If you do + # want to update the value, then make sure to first check the Home Manager + # release notes. + home.stateVersion = "25.11"; # Please read the comment before changing. + + # The home.packages option allows you to install Nix packages into your + # environment. + home.packages = with pkgs; [ + # # Adds the 'hello' command to your environment. It prints a friendly + # # "Hello, world!" when run. + # pkgs.hello + + # # It is sometimes useful to fine-tune packages, for example, by applying + # # overrides. You can do that directly here, just don't forget the + # # parentheses. Maybe you want to install Nerd Fonts with a limited number of + # # fonts? + # (pkgs.nerdfonts.override { fonts = [ "FantasqueSansMono" ]; }) + + # # You can also create simple shell scripts directly inside your + # # configuration. For example, this adds a command 'my-hello' to your + # # environment: + # (pkgs.writeShellScriptBin "my-hello" '' + # echo "Hello, ${config.home.username}!" + # '') + rustup + helix + vscodium + fish + bitwarden-desktop + starship + fastfetch + file + virt-manager + vesktop + gcc + nil + kdePackages.kcolorchooser + wireshark + orca-slicer +]; + + programs.chromium = { + enable = true; + nativeMessagingHosts = [ pkgs.kdePackages.plasma-browser-integration ]; + }; + + # Home Manager is pretty good at managing dotfiles. The primary way to manage + # plain files is through 'home.file'. + home.file = { + # # Building this configuration will create a copy of 'dotfiles/screenrc' in + # # the Nix store. Activating the configuration will then make '~/.screenrc' a + # # symlink to the Nix store copy. + # ".screenrc".source = dotfiles/screenrc; + + # # You can also set the file content immediately. + # ".gradle/gradle.properties".text = '' + # org.gradle.console=verbose + # org.gradle.daemon.idletimeout=3600000 + # ''; + }; + + # Home Manager can also manage your environment variables through + # 'home.sessionVariables'. These will be explicitly sourced when using a + # shell provided by Home Manager. If you don't want to manage your shell + # through Home Manager then you have to manually source 'hm-session-vars.sh' + # located at either + # + # ~/.nix-profile/etc/profile.d/hm-session-vars.sh + # + # or + # + # ~/.local/state/nix/profiles/profile/etc/profile.d/hm-session-vars.sh + # + # or + # + # /etc/profiles/per-user/august/etc/profile.d/hm-session-vars.sh + # + home.sessionVariables = { + # EDITOR = "emacs"; + SSH_AUTH_SOCK = "/home/august/.bitwarden-ssh-agent.sock"; + }; + + home.sessionPath = [ + "/home/august/.cargo/bin" + ]; + + # Let Home Manager install and manage itself. + programs.home-manager.enable = true; + + programs.ssh = { + enable = true; + enableDefaultConfig = false; + matchBlocks = { + "gitea" = { + hostname = "git.shibedrill.site"; + user = "gitea"; + port = 107; + addKeysToAgent = "yes"; + identityFile = "/home/august/.ssh/key-ssh.pub"; + }; + }; + }; + + programs.git = { + enable = true; + signing = { + key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKOdWx2P1BpqO57ceOdYfhE+aL+D+/KrUqnt3Ohg7qg6 august@macbookpro"; + signByDefault = true; + }; + settings = { + gpg = { + format = "ssh"; + }; + user = { + name = "shibedrill"; + email = "shibedrill1@gmail.com"; + }; + init.defaultBranch = "main"; + }; + }; + + programs.bash.enable = true; + programs.fish = { + enable = true; + interactiveShellInit = "source (/home/august/.nix-profile/bin/starship init fish --print-full-init | psub)"; + shellAliases = { + cargo = "cargo-mommy"; + }; + }; + + services.ssh-agent = { + enable = true; + socket = ".bitwarden-ssh-agent.sock"; + }; + + systemd.user.tmpfiles.rules = [ + "L /home/august/.bitwarden-ssh-agent.sock - - - - /run/user/1000/.bitwarden-ssh-agent.sock" + ]; + +} diff --git a/macbook/nixos/configuration.nix b/macbook/nixos/configuration.nix new file mode 100644 index 0000000..837c30e --- /dev/null +++ b/macbook/nixos/configuration.nix @@ -0,0 +1,181 @@ +# Edit this configuration file to define what should be installed on +# your system. Help is available in the configuration.nix(5) man page +# and in the NixOS manual (accessible by running ‘nixos-help’). + +{ config, pkgs, ... }: + +{ + imports = + [ # Include the results of the hardware scan. + ./hardware-configuration.nix + ]; + + # Bootloader. + boot.loader.systemd-boot.enable = true; + boot.loader.efi.canTouchEfiVariables = true; + + boot.plymouth = { + enable = true; + theme = "bgrt"; + }; + + boot.initrd.systemd.enable = true; + + # Use latest kernel. + boot.kernelPackages = pkgs.linuxPackages_latest; + + # Enable wl kernel driver. + boot.kernelModules = ["wl"]; + boot.extraModulePackages = [ config.boot.kernelPackages.broadcom_sta ]; + + boot.initrd.luks.devices."luks-87a7791a-ba73-4769-9827-8965a727c4e9".device = "/dev/disk/by-uuid/87a7791a-ba73-4769-9827-8965a727c4e9"; + networking.hostName = "nixbookpro"; # Define your hostname. + # networking.wireless.enable = true; # Enables wireless support via wpa_supplicant. + networking.enableB43Firmware = true; + + # Configure network proxy if necessary + # networking.proxy.default = "http://user:password@proxy:port/"; + # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain"; + + # Enable networking + networking.networkmanager.enable = true; + + # Set your time zone. + time.timeZone = "America/New_York"; + + # Select internationalisation properties. + i18n.defaultLocale = "en_US.UTF-8"; + + i18n.extraLocaleSettings = { + LC_ADDRESS = "en_US.UTF-8"; + LC_IDENTIFICATION = "en_US.UTF-8"; + LC_MEASUREMENT = "en_US.UTF-8"; + LC_MONETARY = "en_US.UTF-8"; + LC_NAME = "en_US.UTF-8"; + LC_NUMERIC = "en_US.UTF-8"; + LC_PAPER = "en_US.UTF-8"; + LC_TELEPHONE = "en_US.UTF-8"; + LC_TIME = "en_US.UTF-8"; + }; + + # Enable the X11 windowing system. + # You can disable this if you're only using the Wayland session. + services.xserver.enable = true; + + # Enable the KDE Plasma Desktop Environment. + services.displayManager.sddm.enable = true; + services.desktopManager.plasma6.enable = true; + + # Configure keymap in X11 + services.xserver.xkb = { + layout = "us"; + variant = ""; + }; + + # Enable CUPS to print documents. + services.printing.enable = true; + + # Enable sound with pipewire. + services.pulseaudio.enable = false; + security.rtkit.enable = true; + services.pipewire = { + enable = true; + alsa.enable = true; + alsa.support32Bit = true; + pulse.enable = true; + # If you want to use JACK applications, uncomment this + #jack.enable = true; + + # use the example session manager (no others are packaged yet so this is enabled by default, + # no need to redefine it in your config for now) + #media-session.enable = true; + }; + + # Enable touchpad support (enabled default in most desktopManager). + # services.xserver.libinput.enable = true; + + # Define a user account. Don't forget to set a password with ‘passwd’. + users.users.august = { + isNormalUser = true; + description = "August"; + extraGroups = [ "libvirtd" "networkmanager" "wheel" "wireshark" ]; + packages = with pkgs; [ + kdePackages.kate + # thunderbird + ]; + }; + + # Install firefox. + #programs.firefox.enable = true; + + # Allow unfree packages + nixpkgs.config.allowUnfree = true; + + # List packages installed in system profile. To search, run: + # $ nix search wget + environment.systemPackages = with pkgs; [ + vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default. + wget + podman-compose + distrobox + kdePackages.partitionmanager + kdePackages.plymouth-kcm + kdePackages.sddm-kcm + ]; + + programs.wireshark.enable = true; + programs.kdeconnect.enable = true; + + # Some programs need SUID wrappers, can be configured further or are + # started in user sessions. + # programs.mtr.enable = true; + # programs.gnupg.agent = { + # enable = true; + # enableSSHSupport = true; + # }; + + # List services that you want to enable: + + # Enable the OpenSSH daemon. + # services.openssh.enable = true; + + # Open ports in the firewall. + # networking.firewall.allowedTCPPorts = [ ... ]; + # networking.firewall.allowedUDPPorts = [ ... ]; + # Or disable the firewall altogether. + # networking.firewall.enable = false; + + nixpkgs.config.permittedInsecurePackages = [ + "broadcom-sta-6.30.223.271-59-7.0.10" + ]; + + hardware.bluetooth = { + enable = true; + powerOnBoot = false; + }; + + virtualisation = { + libvirtd = { + enable = true; + qemu = { + package = pkgs.qemu_kvm; + runAsRoot = true; + swtpm.enable = true; + }; + }; + podman = { + enable = true; + dockerCompat = true; + }; + }; + + + # This value determines the NixOS release from which the default + # settings for stateful data, like file locations and database versions + # on your system were taken. It‘s perfectly fine and recommended to leave + # this value at the release version of the first install of this system. + # Before changing this value read the documentation for this option + # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html). + system.stateVersion = "25.11"; # Did you read the comment? + +} diff --git a/macbook/nixos/hardware-configuration.nix b/macbook/nixos/hardware-configuration.nix new file mode 100644 index 0000000..91fd1be --- /dev/null +++ b/macbook/nixos/hardware-configuration.nix @@ -0,0 +1,35 @@ +# Do not modify this file! It was generated by ‘nixos-generate-config’ +# and may be overwritten by future invocations. Please make changes +# to /etc/nixos/configuration.nix instead. +{ config, lib, pkgs, modulesPath, ... }: + +{ + imports = + [ (modulesPath + "/installer/scan/not-detected.nix") + ]; + + boot.initrd.availableKernelModules = [ "xhci_pci" "ehci_pci" "ahci" "firewire_ohci" "usbhid" "usb_storage" "sd_mod" "sr_mod" "sdhci_pci" ]; + boot.initrd.kernelModules = [ ]; + boot.kernelModules = [ "kvm-intel" ]; + boot.extraModulePackages = [ ]; + + fileSystems."/" = + { device = "/dev/mapper/luks-9a51bdf8-71e3-4d24-a54f-9881cfb2fa86"; + fsType = "ext4"; + }; + + boot.initrd.luks.devices."luks-9a51bdf8-71e3-4d24-a54f-9881cfb2fa86".device = "/dev/disk/by-uuid/9a51bdf8-71e3-4d24-a54f-9881cfb2fa86"; + + fileSystems."/boot" = + { device = "/dev/disk/by-uuid/F6CB-FC70"; + fsType = "vfat"; + options = [ "fmask=0077" "dmask=0077" ]; + }; + + swapDevices = + [ { device = "/dev/mapper/luks-87a7791a-ba73-4769-9827-8965a727c4e9"; } + ]; + + nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux"; + hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware; +}