hackstream-config/configuration.nix at master · hackeriet/hackstream-config · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
{ config, pkgs, ... }:

{
  imports = [
    ./kanidm-client.nix
    ./programs.nix
  ];
  boot = {
    loader.systemd-boot.enable = true;
    initrd.availableKernelModules = [
      "ohci_pci"
      "ehci_pci"
      "ahci"
      "firewire_ohci"
      "usbhid"
      "usb_storage"
      "sd_mod"
      "sr_mod"
      "sdhci_pci"
    ];
    initrd.kernelModules = [ ];
    kernelModules = [
      "kvm-intel"
      "wl"
    ];
    extraModulePackages = [ config.boot.kernelPackages.broadcom_sta ];
  };

  disko.devices.disk.sda = {
    device = "/dev/sda";
    type = "disk";
    content = {
      type = "gpt";
      partitions = {
        boot = {
          device = "/dev/sda1";
          type = "EF00";
          size = "512M";
          content = {
            type = "filesystem";
            format = "vfat";
            mountpoint = "/boot";
          };
        };
        root = {
          size = "100%";
          content = {
            type = "filesystem";
            format = "ext4";
            mountpoint = "/";
          };
        };
      };
    };
  };
  environment = {
    etc.hosts.mode = "0644";
    systemPackages = with pkgs; [
      fish
      git
      ghostty.terminfo
      ripgrep
    ];

  };

  hardware = {
    enableAllFirmware = true;
    graphics = {
      enable = true;
      enable32Bit = true;
    };

    nvidia = {
      modesetting.enable = true;
      powerManagement.enable = false;
      powerManagement.finegrained = false;
      open = false;
      nvidiaSettings = true;
    };
  };
  networking = {
    hostName = "hackstream";
    wireless = {
      enable = false;
      interfaces = [ "wlp3s0" ];
      networks."hackeriet.no".pskRaw = "21c46552088617c043f5426178d616dff5b338c88a81fa6fe0b01757f0e6eb62";
    };
  };
  nix = {
    settings.experimental-features = [
      "nix-command"
      "flakes"
    ];
  };

  nixpkgs.config = {
    allowUnfree = true;
    permittedInsecurePackages = [
      "broadcom-sta-6.30.223.271-57-6.12.46"
    ];
  };

  services = {
    pipewire.enable = false;
    pulseaudio.enable = true;
  };
  profiles.kodi.enable = true;
  services.xserver.videoDrivers = [ "nvidiaLegacy340" ];
  services.openssh.enable = true;
  time.timeZone = "Europe/Oslo";
  security.sudo.wheelNeedsPassword = false;
  users.users.kodi = {
    isNormalUser = true;
    description = "Kodi User";
    extraGroups = [
      "wheel"
    ];
    openssh.authorizedKeys.keys = [
      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAqWWPb0DqvTwAJKd0Nb/MOdplnTJgxQBSGbJkL2S+nz marcus@butterbee"
    ];
    uid = 1000;
    shell = pkgs.fish;
    initialHashedPassword = "$y$j9T$macjSemIfW9l003gAalB5.$1LpRma6WvwC7WwcvkwuwifLrLxcyrOuiKW70/SnC5J0";

  };
  system.stateVersion = "25.11";
}