144 lines
4 KiB
Nix
144 lines
4 KiB
Nix
{
|
|
pkgs,
|
|
lib,
|
|
config,
|
|
...
|
|
}: {
|
|
imports = [
|
|
./firefox
|
|
];
|
|
services.udev.extraRules = ''
|
|
KERNEL=="hidraw*", ATTRS{idVendor}=="057e", MODE="0660", TAG+="uaccess"
|
|
KERNEL=="hidraw*", KERNELS=="*057e:*", MODE="0660", TAG+="uaccess"
|
|
KERNEL=="hidraw*", ATTRS{idVendor}=="2dc8", MODE="0660", TAG+="uaccess"
|
|
KERNEL=="hidraw*", KERNELS=="*2DC8:*", MODE="0660", TAG+="uaccess"
|
|
KERNEL=="hidraw*", ATTRS{idProduct}=="6012", ATTRS{idVendor}=="2dc8", MODE="0660", TAG+="uaccess"
|
|
KERNEL=="hidraw*", KERNELS=="*2DC8:6012*", MODE="0660", TAG+="uaccess"
|
|
'';
|
|
|
|
fonts.packages = [pkgs.ttf-ms-win10];
|
|
|
|
programs = {
|
|
# Allow executing of anything on the system with a , eg: , python executes python from the nix store even if not in $PATH currently
|
|
command-not-found.enable = lib.mkForce false;
|
|
# nix-index.enable = true;
|
|
nix-index-database.comma.enable = true;
|
|
|
|
direnv = {
|
|
enable = true;
|
|
};
|
|
|
|
# steam = {
|
|
# enable = true;
|
|
# remotePlay.openFirewall = true; # Open ports in the firewall for Steam Remote Play
|
|
# dedicatedServer.openFirewall = true; # Open ports in the firewall for Source Dedicated Server
|
|
# extest.enable = true;
|
|
# };
|
|
kdeconnect.enable = true;
|
|
|
|
noisetorch = {
|
|
enable = true;
|
|
};
|
|
};
|
|
|
|
xdg.portal.enable = true;
|
|
|
|
# Enable networking
|
|
networking.networkmanager.enable = true; # Enables support for 32bit libs that steam uses
|
|
|
|
# Set your time zone.
|
|
time.timeZone = "Europe/Amsterdam";
|
|
services = {
|
|
# Enable the X11 windowing system.
|
|
xserver.enable = true;
|
|
|
|
# Enable the KDE Plasma Desktop Environment.
|
|
# displayManager.sddm = {
|
|
# enable = true;
|
|
# wayland.enable = true;
|
|
# };
|
|
displayManager.defaultSession = lib.mkDefault "plasma";
|
|
desktopManager.plasma6.enable = true;
|
|
desktopManager.plasma6.notoPackage = pkgs.atkinson-hyperlegible;
|
|
|
|
# Enable flatpak support
|
|
flatpak.enable = true;
|
|
packagekit.enable = true;
|
|
|
|
# Configure keymap in X11
|
|
xserver.xkb = {
|
|
layout = "us";
|
|
variant = "";
|
|
options = "terminate:ctrl_alt_bksp,compose:caps_toggle";
|
|
};
|
|
|
|
# Enable CUPS to print documents.
|
|
printing.enable = true;
|
|
|
|
# Enable fwupd daemon and user space client
|
|
fwupd.enable = true;
|
|
pipewire = {
|
|
enable = true;
|
|
alsa.enable = true;
|
|
alsa.support32Bit = true;
|
|
pulse.enable = true;
|
|
jack.enable = true;
|
|
wireplumber.enable = true;
|
|
};
|
|
|
|
avahi = {
|
|
nssmdns4 = true;
|
|
enable = true;
|
|
ipv4 = true;
|
|
ipv6 = true;
|
|
publish = {
|
|
enable = true;
|
|
addresses = true;
|
|
workstation = true;
|
|
};
|
|
};
|
|
};
|
|
hardware = {
|
|
graphics.enable32Bit = true;
|
|
|
|
# Enable bluetooth hardware
|
|
bluetooth.enable = true;
|
|
};
|
|
security.rtkit.enable = true;
|
|
|
|
services.pulseaudio.enable = false;
|
|
virtualisation.podman = {
|
|
enable = true;
|
|
dockerCompat = true;
|
|
};
|
|
security.tpm2 = {
|
|
enable = true;
|
|
pkcs11.enable = true; # expose /run/current-system/sw/lib/libtpm2_pkcs11.so
|
|
tctiEnvironment.enable = true;
|
|
}; # TPM2TOOLS_TCTI and TPM2_PKCS11_TCTI env variables
|
|
users.users.lillian.extraGroups = ["tss"];
|
|
boot = {
|
|
# tss group has access to TPM devices
|
|
bootspec.enable = true;
|
|
binfmt.emulatedSystems = ["aarch64-linux"];
|
|
#boot.kernelPackages = lib.mkForce pkgs.linuxPackages_latest;
|
|
#boot.supportedFilesystems = ["bcachefs"];
|
|
extraModulePackages = with config.boot.kernelPackages; [v4l2loopback.out];
|
|
kernelModules = [
|
|
# Virtual Camera
|
|
"v4l2loopback"
|
|
# Virtual Microphone, built-in
|
|
"snd-aloop"
|
|
];
|
|
|
|
# Set initial kernel module settings
|
|
extraModprobeConfig = ''
|
|
# exclusive_caps: Skype, Zoom, Teams etc. will only show device when actually streaming
|
|
# card_label: Name of virtual camera, how it'll show up in Skype, Zoom, Teams
|
|
# https://github.com/umlaeute/v4l2loopback
|
|
options v4l2loopback exclusive_caps=1 card_label="Virtual Camera"
|
|
'';
|
|
loader.systemd-boot.configurationLimit = 3;
|
|
loader.efi.canTouchEfiVariables = true;
|
|
};
|
|
}
|