7 Commits

Author SHA1 Message Date
64392b695e Fix recursion on self
Some checks failed
Update Nix Flake / update-flake (push) Failing after 12s
2026-03-23 21:57:18 +01:00
8896788bfd Delete unneeded standalone hm configs 2026-03-23 20:58:19 +01:00
eec600d1d0 Move common host features to features-nixos folder 2026-03-23 20:57:12 +01:00
b31791b9ef Rename pkgs to packages 2026-03-23 20:43:11 +01:00
8de280d7e5 Remove my own trys for pob wrapper 2026-03-23 20:39:47 +01:00
8c8a6121bc Remove unused users 2026-03-23 20:38:38 +01:00
f1296e7675 Remove unused pianonix config 2026-03-23 20:37:54 +01:00
120 changed files with 1273 additions and 2099 deletions

View File

@@ -1,17 +1,15 @@
keys: keys:
- &primary age1ee5udznhadk6m7jtglu4709rep080yjyd2ukzdl8jma4mm92y3psv0slpg - &primary age1ee5udznhadk6m7jtglu4709rep080yjyd2ukzdl8jma4mm92y3psv0slpg
- &aspi-ssh age1q8lc5340gz5xw2f57nglrss68wv0j0hf36py2pdtrl6ky3yrq9qqk0njr4 - &aspi-ssh age1q8lc5340gz5xw2f57nglrss68wv0j0hf36py2pdtrl6ky3yrq9qqk0njr4
- &pianonix-ssh age1tguyu2yd5xv8rgjjl50cq6dq5rr7umqgv098dgre4u9wyj30ea7sexw62c
- &builder-ssh age1kw4kmdm45zprvdkrrpvgq966l7585vhusmum083qlwnr0xxgd3uqatcyja - &builder-ssh age1kw4kmdm45zprvdkrrpvgq966l7585vhusmum083qlwnr0xxgd3uqatcyja
- &kardorf-ssh age15lxw97z03q40xrdscnxqqugh5ky5aqrerg2t2rphkcqm6rnllurq8v98q5 - &kardorf-ssh age15lxw97z03q40xrdscnxqqugh5ky5aqrerg2t2rphkcqm6rnllurq8v98q5
creation_rules: creation_rules:
- path_regex: hosts/common/secrets.yaml$ - path_regex: hosts/secrets-common.yaml$
key_groups: key_groups:
- age: - age:
- *primary - *primary
- *aspi-ssh - *aspi-ssh
- *pianonix-ssh
- *kardorf-ssh - *kardorf-ssh
- path_regex: hosts/builder/secrets.yaml$ - path_regex: hosts/builder/secrets.yaml$
@@ -19,9 +17,3 @@ creation_rules:
- age: - age:
- *primary - *primary
- *builder-ssh - *builder-ssh
- path_regex: hosts/pianonix/secrets*
key_groups:
- age:
- *primary
- *pianonix-ssh

View File

@@ -1,18 +0,0 @@
{
flake.nixosModules.base = {
inputs,
config,
...
}: {
system.hydraAutoUpgrade = {
# Only enable if not dirty
enable = inputs.self ? rev;
dates = "*:0/10"; # Every 10 minutes
instance = "http://hydra.julian-mutter.de";
project = "dotfiles";
jobset = "main";
job = "hosts.${config.networking.hostName}";
oldFlakeRef = "self";
};
};
}

View File

@@ -1,40 +0,0 @@
# Common config for all hosts
{
flake.nixosModules.base = {
inputs,
outputs,
pkgs,
lib,
...
}: {
imports = [
inputs.home-manager.nixosModules.home-manager
];
# Replaces the (modulesPath + "/installer/scan/not-detected.nix") from default hardware-configuration.nix
# Enables non-free firmware
hardware.enableRedistributableFirmware = true;
# Networking
networking.networkmanager = {
enable = true;
plugins = with pkgs; [
networkmanager-openconnect
];
};
services.resolved.enable = false;
# MDNS Taken by avahi
# networking.networkmanager.dns = "none";
networking.nameservers = lib.mkDefault [
"1.1.1.1"
"8.8.8.8"
];
# HM module
home-manager.useGlobalPkgs = true; # hm module uses the pkgs of the nixos config
home-manager.backupFileExtension = "hm-backup"; # backup conflicting files. So hm activation never fails
home-manager.extraSpecialArgs = {
inherit inputs outputs;
};
};
}

View File

@@ -1,12 +0,0 @@
{
flake.nixosModules.base = {
programs.fish = {
enable = true;
vendor = {
completions.enable = true;
config.enable = true;
functions.enable = true;
};
};
};
}

View File

@@ -1,28 +0,0 @@
{
flake.nixosModules.base = {
# Select internationalisation properties.
i18n.defaultLocale = "en_US.UTF-8";
i18n.extraLocaleSettings = {
LC_ADDRESS = "de_DE.UTF-8";
LC_IDENTIFICATION = "de_DE.UTF-8";
LC_MEASUREMENT = "de_DE.UTF-8";
LC_MONETARY = "de_DE.UTF-8";
LC_NAME = "de_DE.UTF-8";
LC_NUMERIC = "en_US.UTF-8";
LC_PAPER = "de_DE.UTF-8";
LC_TELEPHONE = "de_DE.UTF-8";
LC_TIME = "de_DE.UTF-8";
};
# Keymap
services.xserver.xkb = {
layout = "de";
variant = "";
};
console.keyMap = "de";
time.timeZone = "Europe/Berlin";
};
}

View File

@@ -1,48 +0,0 @@
{
flake.nixosModules.base = {outputs, ...}: {
# Apply overlays
nixpkgs = {
# TODO: apply this to hm and nixos without duplicate code
overlays = builtins.attrValues outputs.overlays;
config = {
nvidia.acceptLicense = true;
allowUnfree = true;
allowUnfreePredicate = _: true; # TODO: what is this
warn-dirty = false;
permittedInsecurePackages = [
"olm-3.2.16"
];
};
};
# optimize at every build, slows down builds
# better to do optimise.automatic for regular optimising
# nix.settings.auto-optimise-store = lib.mkDefault true;
nix.settings.experimental-features = [
"nix-command"
"flakes"
"ca-derivations"
];
# warn-dirty = false;
nix.gc = {
automatic = true;
dates = "weekly";
options = "--delete-older-than 30d";
persistent = true;
};
nix.optimise = {
automatic = true;
dates = ["weekly"]; # Optional; allows customizing optimisation schedule
persistent = true;
};
programs.nix-ld.enable = true;
# TODO: is this useful?, what does it do?
# nix.settings.flake-registry = ""; # Disable global flake registry
# Add each flake input as a registry and nix_path
# registry = lib.mapAttrs (_: flake: { inherit flake; }) flakeInputs;
# nixPath = lib.mapAttrsToList (n: _: "${n}=flake:${n}") flakeInputs;
};
}

View File

@@ -1,11 +0,0 @@
{
flake.nixosModules.base = {pkgs, ...}: {
# Packages needed as root
environment.systemPackages = with pkgs; [
vim
htop
mc
gparted-xhost # needs to be installed as system package so it can be actually opened
];
};
}

View File

@@ -1,24 +0,0 @@
{
flake.nixosModules.base = {
inputs,
config,
...
}: let
isEd25519 = k: k.type == "ed25519";
getKeyPath = k: k.path;
keys = builtins.filter isEd25519 config.services.openssh.hostKeys;
in {
imports = [inputs.sops-nix.nixosModules.sops];
sops.age = {
sshKeyPaths = map getKeyPath keys;
# TODO: remove? only rely on ssh or pgp keys (e.g. ubikey like misterio is using!!!)
# keyFile = "/home/julian/.config/sops/age/keys.txt";
# Generate key if none of the above worked. With this, building will still work, just without secrets
generateKey = false; # TODO: building should not work without secrets!?
};
sops.defaultSopsFile = ./secrets.yaml;
};
}

View File

@@ -0,0 +1,16 @@
{
inputs,
config,
...
}: {
system.hydraAutoUpgrade = {
# Only enable if not dirty
enable = inputs.self ? rev;
dates = "*:0/10"; # Every 10 minutes
instance = "http://hydra.julian-mutter.de";
project = "dotfiles";
jobset = "main";
job = "hosts.${config.networking.hostName}";
oldFlakeRef = "self";
};
}

View File

@@ -0,0 +1,47 @@
# Common config for all hosts
{
inputs,
outputs,
pkgs,
lib,
...
}: {
imports =
[
./fish.nix # fish for admin
./locale.nix
./nix.nix
./sops.nix
./root.nix
]
++ [
inputs.home-manager.nixosModules.home-manager
]
++ (builtins.attrValues outputs.nixosModules);
# Replaces the (modulesPath + "/installer/scan/not-detected.nix") from default hardware-configuration.nix
# Enables non-free firmware
hardware.enableRedistributableFirmware = true;
# Networking
networking.networkmanager = {
enable = true;
plugins = with pkgs; [
networkmanager-openconnect
];
};
services.resolved.enable = false;
# MDNS Taken by avahi
# networking.networkmanager.dns = "none";
networking.nameservers = lib.mkDefault [
"1.1.1.1"
"8.8.8.8"
];
# HM module
home-manager.useGlobalPkgs = true; # hm module uses the pkgs of the nixos config
home-manager.backupFileExtension = "hm-backup"; # backup conflicting files. So hm activation never fails
home-manager.extraSpecialArgs = {
inherit inputs outputs;
};
}

View File

@@ -0,0 +1,10 @@
{
programs.fish = {
enable = true;
vendor = {
completions.enable = true;
config.enable = true;
functions.enable = true;
};
};
}

View File

@@ -0,0 +1,26 @@
{
# Select internationalisation properties.
i18n.defaultLocale = "en_US.UTF-8";
i18n.extraLocaleSettings = {
LC_ADDRESS = "de_DE.UTF-8";
LC_IDENTIFICATION = "de_DE.UTF-8";
LC_MEASUREMENT = "de_DE.UTF-8";
LC_MONETARY = "de_DE.UTF-8";
LC_NAME = "de_DE.UTF-8";
LC_NUMERIC = "en_US.UTF-8";
LC_PAPER = "de_DE.UTF-8";
LC_TELEPHONE = "de_DE.UTF-8";
LC_TIME = "de_DE.UTF-8";
};
# Keymap
services.xserver.xkb = {
layout = "de";
variant = "";
};
console.keyMap = "de";
time.timeZone = "Europe/Berlin";
}

View File

@@ -0,0 +1,46 @@
{outputs, ...}: {
# Apply overlays
nixpkgs = {
# TODO: apply this to hm and nixos without duplicate code
overlays = builtins.attrValues outputs.overlays;
config = {
nvidia.acceptLicense = true;
allowUnfree = true;
allowUnfreePredicate = _: true; # TODO: what is this
warn-dirty = false;
permittedInsecurePackages = [
"olm-3.2.16"
];
};
};
# optimize at every build, slows down builds
# better to do optimise.automatic for regular optimising
# nix.settings.auto-optimise-store = lib.mkDefault true;
nix.settings.experimental-features = [
"nix-command"
"flakes"
"ca-derivations"
];
# warn-dirty = false;
nix.gc = {
automatic = true;
dates = "weekly";
options = "--delete-older-than 30d";
persistent = true;
};
nix.optimise = {
automatic = true;
dates = ["weekly"]; # Optional; allows customizing optimisation schedule
persistent = true;
};
programs.nix-ld.enable = true;
# TODO: is this useful?, what does it do?
# nix.settings.flake-registry = ""; # Disable global flake registry
# Add each flake input as a registry and nix_path
# registry = lib.mapAttrs (_: flake: { inherit flake; }) flakeInputs;
# nixPath = lib.mapAttrsToList (n: _: "${n}=flake:${n}") flakeInputs;
}

View File

@@ -0,0 +1,9 @@
{pkgs, ...}: {
# Packages needed as root
environment.systemPackages = with pkgs; [
vim
htop
mc
gparted-xhost # needs to be installed as system package so it can be actually opened
];
}

View File

@@ -0,0 +1,23 @@
{
pwd,
inputs,
config,
...
}: let
isEd25519 = k: k.type == "ed25519";
getKeyPath = k: k.path;
keys = builtins.filter isEd25519 config.services.openssh.hostKeys;
in {
imports = [inputs.sops-nix.nixosModules.sops];
sops.age = {
sshKeyPaths = map getKeyPath keys;
# TODO: remove? only rely on ssh or pgp keys (e.g. ubikey like misterio is using!!!)
# keyFile = "/home/julian/.config/sops/age/keys.txt";
# Generate key if none of the above worked. With this, building will still work, just without secrets
generateKey = false; # TODO: building should not work without secrets!?
};
sops.defaultSopsFile = "${pwd}/hosts/secrets-common.yaml";
}

View File

@@ -1,5 +1,4 @@
{ {
flake.nixosModules.authentication = {
pkgs, pkgs,
lib, lib,
... ...
@@ -27,5 +26,4 @@
}; };
}; };
}; };
};
} }

View File

@@ -1,5 +1,4 @@
{ {
flake.nixosModules.avahi = {
# MDNS on local network # MDNS on local network
services.avahi = { services.avahi = {
enable = true; enable = true;
@@ -10,5 +9,4 @@
ipv4 = true; ipv4 = true;
ipv6 = true; ipv6 = true;
}; };
};
} }

View File

@@ -1,5 +1,4 @@
{ {
flake.nixosModules.binarycaches = {
lib, lib,
outputs, outputs,
... ...
@@ -29,5 +28,4 @@
# Ensure we can still build when missing-server is not accessible # Ensure we can still build when missing-server is not accessible
fallback = true; fallback = true;
}; };
};
} }

View File

@@ -1,5 +1,4 @@
{ {
flake.nixosModules.boot-efi = {
# Bootloader # Bootloader
# Use this for simple nix boot menu, if no dual boot required # Use this for simple nix boot menu, if no dual boot required
boot.loader.systemd-boot.enable = true; boot.loader.systemd-boot.enable = true;
@@ -15,5 +14,4 @@
"nfs" "nfs"
"cifs" "cifs"
]; ];
};
} }

View File

@@ -1,7 +1,5 @@
{ {
flake.nixosModules.docker = {
virtualisation.docker = { virtualisation.docker = {
enable = true; enable = true;
}; };
};
} }

View File

@@ -1,8 +1,6 @@
{ {pkgs, ...}: {
flake.nixosModules.flatpak = {pkgs, ...}: {
services.flatpak.enable = true; services.flatpak.enable = true;
xdg.portal.enable = true; xdg.portal.enable = true;
xdg.portal.extraPortals = [pkgs.xdg-desktop-portal-gtk]; xdg.portal.extraPortals = [pkgs.xdg-desktop-portal-gtk];
xdg.portal.config.common.default = "*"; # Use first portal implementation found xdg.portal.config.common.default = "*"; # Use first portal implementation found
};
} }

View File

@@ -1,5 +1,4 @@
{ {pkgs, ...}: {
flake.nixosModules.gamemode = {pkgs, ...}: {
programs.gamemode = { programs.gamemode = {
enable = true; enable = true;
settings = { settings = {
@@ -19,5 +18,4 @@
}; };
}; };
}; };
};
} }

View File

@@ -1,5 +1,4 @@
{ {
flake.nixosModules.gdm = {
config, config,
lib, lib,
pkgs, pkgs,
@@ -11,5 +10,4 @@
# unlock GPG keyring on login # unlock GPG keyring on login
security.pam.services.gdm.enableGnomeKeyring = true; security.pam.services.gdm.enableGnomeKeyring = true;
};
} }

View File

@@ -1,5 +1,4 @@
{ {config, ...}: let
flake.nixosModules.greetd = {config, ...}: let
homeCfgs = config.home-manager.users; homeCfgs = config.home-manager.users;
julianCfg = homeCfgs.julian; julianCfg = homeCfgs.julian;
in { in {
@@ -35,5 +34,4 @@
# }; # };
# }; # };
}; };
};
} }

View File

@@ -1,5 +1,4 @@
{ {
flake.nixosModules.i3 = {
config, config,
lib, lib,
pkgs, pkgs,
@@ -14,5 +13,4 @@
enable = true; enable = true;
lockerCommand = "${pkgs.i3lock}/bin/i3lock --ignore-empty-password --color=000000"; lockerCommand = "${pkgs.i3lock}/bin/i3lock --ignore-empty-password --color=000000";
}; };
};
} }

View File

@@ -1,5 +1,4 @@
{ {
flake.nixosModules.kerberos = {
security.krb5.enable = true; security.krb5.enable = true;
security.krb5.settings = { security.krb5.settings = {
# domain_realm = { # domain_realm = {
@@ -21,5 +20,4 @@
}; };
}; };
}; };
};
} }

View File

@@ -1,5 +1,4 @@
{ {
flake.nixosModules.openssh = {
outputs, outputs,
lib, lib,
config, config,
@@ -47,5 +46,4 @@
# ]); # ]);
# }); # });
# }; # };
};
} }

View File

@@ -1,5 +1,4 @@
{ {pkgs, ...}: {
flake.nixosModules.pcmanfm = {pkgs, ...}: {
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
shared-mime-info # extended mimetype support shared-mime-info # extended mimetype support
lxmenu-data # open with "Installed Applications" lxmenu-data # open with "Installed Applications"
@@ -7,5 +6,4 @@
]; ];
services.gvfs.enable = true; # Mount, trash, and other functionalities services.gvfs.enable = true; # Mount, trash, and other functionalities
};
} }

View File

@@ -1,5 +1,4 @@
{ {
flake.nixosModules.pipewire = {
security.rtkit.enable = true; security.rtkit.enable = true;
services.pulseaudio.enable = false; services.pulseaudio.enable = false;
services.pipewire = { services.pipewire = {
@@ -26,5 +25,4 @@
}; };
}; };
}; };
};
} }

View File

@@ -1,5 +1,4 @@
{ {config, ...}: let
flake.nixosModules.podman = {config, ...}: let
dockerEnabled = config.virtualisation.docker.enable; dockerEnabled = config.virtualisation.docker.enable;
in { in {
virtualisation.podman = { virtualisation.podman = {
@@ -8,5 +7,4 @@
dockerSocket.enable = !dockerEnabled; dockerSocket.enable = !dockerEnabled;
defaultNetwork.settings.dns_enabled = true; defaultNetwork.settings.dns_enabled = true;
}; };
};
} }

View File

@@ -1,5 +1,4 @@
{ {
flake.nixosModules.redshift = {
config, config,
lib, lib,
pkgs, pkgs,
@@ -10,5 +9,4 @@
location.latitude = 47.92; location.latitude = 47.92;
location.longitude = 10.12; location.longitude = 10.12;
services.redshift.enable = true; services.redshift.enable = true;
};
} }

View File

@@ -1,5 +1,4 @@
{ {
flake.nixosModules.remote-builder = {
nix.distributedBuilds = true; nix.distributedBuilds = true;
nix.settings.builders-use-substitutes = true; nix.settings.builders-use-substitutes = true;
@@ -32,5 +31,4 @@
# speedFactor = 1; # speedFactor = 1;
# } # }
]; ];
};
} }

View File

@@ -1,5 +1,4 @@
{ {
flake.nixosModules.thunar = {
config, config,
lib, lib,
pkgs, pkgs,
@@ -14,5 +13,4 @@
]; ];
services.gvfs.enable = true; # Mount, trash, and other functionalities services.gvfs.enable = true; # Mount, trash, and other functionalities
services.tumbler.enable = true; # Thumbnail support for images services.tumbler.enable = true; # Thumbnail support for images
};
} }

View File

@@ -1,5 +1,4 @@
{ {
flake.nixosModules.virtualbox = {
config, config,
lib, lib,
pkgs, pkgs,
@@ -10,5 +9,4 @@
# virtualisation.virtualbox.guest.enable = true; # virtualisation.virtualbox.guest.enable = true;
# virtualisation.virtualbox.guest.x11 = true; # virtualisation.virtualbox.guest.x11 = true;
users.extraGroups.vboxusers.members = ["julian"]; users.extraGroups.vboxusers.members = ["julian"];
};
} }

View File

@@ -1,5 +1,4 @@
{ {
flake.nixosModules.wireguard = {
networking.wg-quick.interfaces = { networking.wg-quick.interfaces = {
julian = { julian = {
configFile = "/etc/wireguard/julian.conf"; configFile = "/etc/wireguard/julian.conf";
@@ -10,5 +9,4 @@
autostart = false; autostart = false;
}; };
}; };
};
} }

View File

@@ -1,5 +1,4 @@
{ {
flake.nixosModules.wireshark = {
programs.wireshark = { programs.wireshark = {
enable = true; enable = true;
dumpcap.enable = true; dumpcap.enable = true;
@@ -7,5 +6,4 @@
}; };
users.users.julian.extraGroups = ["wireshark"]; users.users.julian.extraGroups = ["wireshark"];
};
} }

View File

@@ -1,8 +1,6 @@
{ {
flake.nixosModules.xserver = {
services.xserver = { services.xserver = {
enable = true; enable = true;
wacom.enable = true; wacom.enable = true;
}; };
};
} }

View File

@@ -1,5 +1,5 @@
{ {
flake.nixosModules.users.julian = { pwd,
pkgs, pkgs,
config, config,
lib, lib,
@@ -30,7 +30,7 @@
]; ];
openssh.authorizedKeys.keys = lib.splitString "\n" ( openssh.authorizedKeys.keys = lib.splitString "\n" (
builtins.readFile ../../../../homes/julian/ssh.pub builtins.readFile ./ssh.pub
); );
# hashedPasswordFile = config.sops.secrets.julian-password.path; # hashedPasswordFile = config.sops.secrets.julian-password.path;
hashedPassword = "$y$j9T$N33kLJQbV8soUoCbDkpwA1$r/yahJDgOPo4GGOrAi6BUG5zLTzmaBrA5NQ4nno561A"; hashedPassword = "$y$j9T$N33kLJQbV8soUoCbDkpwA1$r/yahJDgOPo4GGOrAi6BUG5zLTzmaBrA5NQ4nno561A";
@@ -41,12 +41,11 @@
}; };
sops.secrets.julian-password = { sops.secrets.julian-password = {
sopsFile = ../../secrets.yaml; sopsFile = "${pwd}/hosts/secrets-common.yaml";
neededForUsers = true; neededForUsers = true;
}; };
home-manager.users.julian = import ../../../../homes/julian/${config.networking.hostName}.nix; home-manager.users.julian = import "${pwd}/homes/julian/${config.networking.hostName}.nix";
security.pam.services.swaylock = {}; # Make swaylock unlocking work security.pam.services.swaylock = {}; # Make swaylock unlocking work
};
} }

View File

@@ -1,30 +0,0 @@
{
flake.nixosModules.users.pob = {
pkgs,
config,
...
}: let
ifTheyExist = groups: builtins.filter (group: builtins.hasAttr group config.users.groups) groups;
in {
users.mutableUsers = false;
users.users.pob = {
description = "A helper user to use another profile for some applications";
group = "pob";
isNormalUser = true;
shell = pkgs.fish;
extraGroups = ifTheyExist [
"networkmanager"
];
packages = with pkgs; [
firefox
wineWowPackages.stable # 32-bit and 64-bit wine
winetricks
];
};
users.groups.pob = {};
security.sudo.extraConfig = ''
julian ALL=(pob) NOPASSWD: ALL
'';
};
}

View File

@@ -1,5 +1,4 @@
{ {
flake.nixosModules.users.wolfi = {
pkgs, pkgs,
config, config,
... ...
@@ -28,5 +27,4 @@
packages = [pkgs.home-manager]; packages = [pkgs.home-manager];
}; };
users.groups.wolfi = {}; users.groups.wolfi = {};
};
} }

View File

@@ -1,99 +0,0 @@
{
flake.nixosModules.users.yukari = {
pkgs,
config,
lib,
outputs,
...
}: let
ifTheyExist = groups: builtins.filter (group: builtins.hasAttr group config.users.groups) groups;
in {
users.mutableUsers = false;
users.users.yukari = {
description = "Yukari";
group = "yukari";
isNormalUser = true;
shell = pkgs.fish;
extraGroups = ifTheyExist [
"networkmanager"
"audio"
"network"
"video"
"podman"
"docker"
"git"
"gamemode"
];
createHome = true;
hashedPassword = "$y$j9T$rGuTL0rfiy7ht8L58BGCw0$fN.KwHjYlIitFEPHndKvV06ezgeWzP3/58o1kkviZwB";
packages = [pkgs.home-manager];
};
users.groups.yukari = {};
home-manager.users.yukari = {
imports =
[
../../../../homes/julian/features/fonts
../../../../homes/julian/features/suites/cli
]
++ (builtins.attrValues outputs.homeManagerModules);
home = {
username = lib.mkDefault "yukari";
homeDirectory = lib.mkDefault "/home/${config.home.username}";
stateVersion = lib.mkDefault "23.11";
sessionPath = ["$HOME/.local/bin"];
packages = with pkgs; [
arandr
calibre # ebook manager and viewer
# digikam
discord
discord-ptb # in case discord updates take their time
# dvdisaster
# element-desktop
# rocketchat-desktop
thunderbird
telegram-desktop # telegram
# schildichat-desktop # not updated regularly
nheko
evince # Simple pdf reader, good for focusing on document content
firefox
vivaldi
# geogebra
cheese
handbrake
# kitty # Terminal, already available as feature
libnotify
libreoffice
mate.engrampa
nomacs # Image viewer
kdePackages.okular # Pdf reader with many features, good for commenting documents
pavucontrol
qalculate-gtk # Nice gui calculator
qpdfview
# qutebrowser
# realvnc-vnc-viewer
# rustdesk
tor-browser
# frajul.pob-dev-version # Path of Building
vlc
wineWowPackages.stable # 32-bit and 64-bit wine
winetricks
xclip # x11 clipboard access from terminal
xfce.mousepad # simple text editor
xournalpp # Edit pdf files
zoom-us # Video conferencing
zotero # Manage papers and other sources
pdfpc # Present slides in pdf form
];
};
programs = {
home-manager.enable = true;
git.enable = true;
};
};
};
}

257
flake.nix
View File

@@ -36,9 +36,6 @@
inputs.nixpkgs.follows = "nixpkgs"; inputs.nixpkgs.follows = "nixpkgs";
}; };
flake-parts.url = "github:hercules-ci/flake-parts";
import-tree.url = "github:vic/import-tree";
# Various flakes # Various flakes
yazi-flavors = { yazi-flavors = {
url = "github:yazi-rs/flavors"; url = "github:yazi-rs/flavors";
@@ -64,163 +61,99 @@
}; };
}; };
outputs = inputs: outputs = {
inputs.flake-parts.lib.mkFlake {inherit inputs;} (inputs.import-tree self,
[ nixpkgs,
./hosts home-manager,
./features-nixos systems,
./homes ...
./features-home-manager } @ inputs: let
# ./modules inherit (self) outputs;
# ./overlays lib = nixpkgs.lib // home-manager.lib;
# ./packages forEachSystem = f: lib.genAttrs (import systems) (system: f pkgsFor.${system});
]); pkgsFor = lib.genAttrs (import systems) (
# let system:
# inherit (self) outputs; import nixpkgs {
# lib = nixpkgs.lib // home-manager.lib; inherit system;
# forEachSystem = f: lib.genAttrs (import systems) (system: f pkgsFor.${system}); config.allowUnfree = true;
# pkgsFor = lib.genAttrs (import systems) ( }
# system: );
# import nixpkgs { in {
# inherit system; inherit lib;
# config.allowUnfree = true;
# config.permittedInsecurePackages = [ nixosModules = import ./modules/nixos;
# "olm-3.2.16" homeManagerModules = import ./modules/home-manager;
# ];
# warn-dirty = false; overlays = import ./overlays {inherit inputs outputs;};
# }
# ); packages = forEachSystem (pkgs: import ./packages {inherit pkgs;});
# in { devShells = forEachSystem (pkgs: import ./shell.nix {inherit pkgs;});
# inherit lib; formatter = forEachSystem (pkgs: pkgs.alejandra); # nix fmt *
# nixosModules = import ./modules/nixos; nixosConfigurations = {
# homeManagerModules = import ./modules/home-manager; # Main laptop
aspi = lib.nixosSystem {
# overlays = import ./overlays {inherit inputs outputs;}; modules = [
# # hydraJobs = import ./hydra.nix { inherit inputs outputs; }; # TODO add hydra jobs here? ./hosts/aspi
];
# packages = forEachSystem (pkgs: import ./pkgs {inherit pkgs;}); specialArgs = {
# devShells = forEachSystem (pkgs: import ./shell.nix {inherit pkgs;}); inherit inputs outputs;
# formatter = forEachSystem (pkgs: pkgs.alejandra); # nix fmt * pwd = "${self}";
};
# nixosConfigurations = { };
# # Main laptop kardorf = lib.nixosSystem {
# aspi = lib.nixosSystem { modules = [./hosts/kardorf];
# modules = [ specialArgs = {
# ./hosts/aspi inherit inputs outputs;
# ]; pwd = "${self}";
# specialArgs = { };
# inherit inputs outputs; };
# }; builder = lib.nixosSystem {
# }; modules = [./hosts/builder];
# # Piano raspberry pi specialArgs = {
# # pianonix = lib.nixosSystem { inherit inputs outputs;
# # modules = [./hosts/pianonix]; pwd = "${self}";
# # specialArgs = { };
# # inherit inputs outputs; };
# # }; };
# # };
# kardorf = lib.nixosSystem { # Standalone HM
# modules = [./hosts/kardorf]; homeConfigurations = {
# specialArgs = { "julian@v3ms" = lib.homeManagerConfiguration {
# inherit inputs outputs; modules = [
# }; ./homes/julian/v3ms
# }; ./homes/julian/hm-standalone-config.nix
# builder = lib.nixosSystem { ];
# modules = [./hosts/builder]; pkgs = pkgsFor.x86_64-linux;
# specialArgs = { extraSpecialArgs = {
# inherit inputs outputs; inherit inputs outputs;
# }; pwd = "${self}";
# }; };
# }; };
"julian@quickstart" = lib.homeManagerConfiguration {
# # Standalone HM modules = [
# homeConfigurations = { ./homes/julian/quickstart.nix
# # Main laptop ./homes/julian/hm-standalone-config.nix
# "julian@aspi" = lib.homeManagerConfiguration { ];
# modules = [ pkgs = pkgsFor.x86_64-linux;
# ./homes/julian/aspi.nix extraSpecialArgs = {
# ./homes/julian/hm-standalone-config.nix inherit inputs outputs;
# ]; pwd = "${self}";
# pkgs = pkgsFor.x86_64-linux; };
# extraSpecialArgs = { };
# inherit inputs outputs; };
# };
# }; # deploy-rs node configuration
# # Media server (RPi) deploy.nodes = {
# # "julian@pianonix" = lib.homeManagerConfiguration { builder = {
# # modules = [ hostname = "builder.julian-mutter.de";
# # ./homes/julian/pianonix.nix profiles.system = {
# # ./homes/julian/hm-standalone-config.nix sshUser = "root";
# # ]; user = "root";
# # pkgs = pkgsFor.aarch64-linux; path = inputs.deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.builder;
# # extraSpecialArgs = { remoteBuild = true;
# # inherit inputs outputs; };
# # }; };
# # }; };
# "julian@kardorf" = lib.homeManagerConfiguration { };
# modules = [
# ./homes/julian/kardorf.nix
# ./homes/julian/hm-standalone-config.nix
# ];
# pkgs = pkgsFor.x86_64-linux;
# extraSpecialArgs = {
# inherit inputs outputs;
# };
# };
# "julian@v3ms" = lib.homeManagerConfiguration {
# modules = [
# ./homes/julian/v3ms
# ./homes/julian/hm-standalone-config.nix
# ];
# pkgs = pkgsFor.x86_64-linux;
# extraSpecialArgs = {
# inherit inputs outputs;
# };
# };
# "julian@quickstart" = lib.homeManagerConfiguration {
# modules = [
# ./homes/julian/quickstart.nix
# ./homes/julian/hm-standalone-config.nix
# ];
# pkgs = pkgsFor.x86_64-linux;
# extraSpecialArgs = {
# inherit inputs outputs;
# };
# };
# };
# # deploy-rs node configuration
# deploy.nodes = {
# # pianonix = {
# # hostname = "pianonix.local";
# # profiles.system = {
# # sshUser = "root";
# # user = "root";
# # path = inputs.deploy-rs.lib.aarch64-linux.activate.nixos self.nixosConfigurations.pianonix;
# # confirmTimeout = 90; # default: 30s; raspberrypi takes a little longer restarting services
# # };
# # };
# builder = {
# hostname = "builder.julian-mutter.de";
# profiles.system = {
# sshUser = "root";
# user = "root";
# path = inputs.deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.builder;
# remoteBuild = true;
# };
# };
# };
# # substitutes: nixos-generate --flake .#pianonix -f sd-aarch64 --system aarch64-linux
# pianonix-image = inputs.nixos-generators.nixosGenerate {
# system = "aarch64-linux";
# format = "sd-aarch64";
# modules = [./hosts/pianonix];
# specialArgs = {
# inherit inputs outputs;
# };
# };
# };
} }

View File

@@ -52,7 +52,6 @@
# rustdesk # rustdesk
tor-browser tor-browser
rusty-path-of-building # Path of Building for poe1 and poe2 rusty-path-of-building # Path of Building for poe1 and poe2
# frajul.pob-dev-version # Path of Building
vlc vlc
wineWowPackages.stable # 32-bit and 64-bit wine wineWowPackages.stable # 32-bit and 64-bit wine
winetricks winetricks
@@ -69,6 +68,5 @@
## My scripts ## My scripts
frajul.open-messaging frajul.open-messaging
frajul.xwacomcalibrate frajul.xwacomcalibrate
frajul.pob2-frajul
]; ];
} }

Some files were not shown because too many files have changed in this diff Show More