diff options
Diffstat (limited to 'hosts/generic/configuration.nix')
| -rw-r--r-- | hosts/generic/configuration.nix | 118 |
1 files changed, 118 insertions, 0 deletions
diff --git a/hosts/generic/configuration.nix b/hosts/generic/configuration.nix new file mode 100644 index 0000000..07f15fe --- /dev/null +++ b/hosts/generic/configuration.nix @@ -0,0 +1,118 @@ +{ pkgs, ... }: + +{ + imports = [ # Include the results of the hardware scan. + ./hardware-configuration.nix + ]; + + # Bootloader. + boot.loader = { + efi = { + canTouchEfiVariables = true; + efiSysMountPoint = "/boot"; # ← use the same mount point here. + }; + grub = { + efiSupport = true; + device = "nodev"; + useOSProber = true; + theme = "${pkgs.fetchFromGitHub { # blue screen of life grub theme + owner = "harishnkr"; + repo = "bsol"; + rev = "8f39f66967e2391b11ee554578f0b821070ec72a"; + sha256 = "sha256-UD5crwJdqnKVnxTN2vHIukJnQuzxmkko3E5wb8Xg6gs"; + }}/bsol"; + }; + }; + + boot.kernelPackages = pkgs.linuxPackages_latest; + + # amd gpu config + hardware.graphics = { + enable = true; + enable32Bit = true; + extraPackages = with pkgs; [ + rocmPackages.clr.icd + libva + ]; + }; + + hardware.firmware = with pkgs; [ + linux-firmware + ]; + hardware.cpu.amd.updateMicrocode = true; + + # networking + system.name = "system"; + networking.hostName = "system"; + networking.networkmanager = { + enable = true; + plugins = with pkgs; [ + networkmanager-openvpn + ]; + }; + + networking.nameservers = [ "1.1.1.1" "9.9.9.9" ]; + + # localization + time.timeZone = "Etc/UTC"; + i18n.defaultLocale = "en_US.UTF-8"; + i18n.extraLocaleSettings = { + LC_ADDRESS = "en_US.UTF-8"; + LC_IDENTIFICATION = "en_US.UTF-8"; + LC_MEASUREMENT = "en_US.UTF-8"; + LC_MONETARY = "en_US.UTF-8"; + LC_NAME = "en_US.UTF-8"; + LC_NUMERIC = "en_US.UTF-8"; + LC_PAPER = "en_US.UTF-8"; + LC_TELEPHONE = "en_US.UTF-8"; + LC_TIME = "en_US.UTF-8"; + }; + + services.xserver.xkb = { + layout = "us"; + variant = ""; + }; + + users.users.user = { + isNormalUser = true; + description = "user"; + extraGroups = [ "networkmanager" "wheel" "nordvpn" ]; + }; + + nixpkgs.config.allowUnfree = true; + + nix.settings = { + experimental-features = [ "nix-command" "flakes" ]; + auto-optimise-store = true; + }; + + environment.pathsToLink = [ "/share/xdg-desktop-portal" "/share/applications" ]; + + gaming.enable = true; + + # Some programs need SUID wrappers, can be configured further or are + # started in user sessions. + # programs.mtr.enable = true; + # programs.gnupg.agent = { + # enable = true; + # enableSSHSupport = true; + # }; + + security.polkit.enable = true; + services.playerctld.enable = true; + + services.openssh = { + enable = true; + settings.PermitRootLogin = "no"; + # PasswordAuthentication = true; + # allowSFTP = true; + }; + + # Open ports in the firewall. + # networking.firewall.allowedTCPPorts = [ ... ]; + # networking.firewall.allowedUDPPorts = [ ... ]; + # Or disable the firewall altogether. + # networking.firewall.enable = false; + + system.stateVersion = "25.05"; +} |
