110 lines
2.9 KiB
Nix
110 lines
2.9 KiB
Nix
{ pkgs, lib, ... }@args:
|
|
let
|
|
cfg = args.config.jconfig;
|
|
keysFromGithub = lib.attrsets.mapAttrs' (username: sha256: {
|
|
name = "pubkeys/${username}";
|
|
value = {
|
|
mode = "0755";
|
|
source = builtins.fetchurl {
|
|
inherit sha256;
|
|
url = "https://github.com/${username}.keys";
|
|
};
|
|
};
|
|
}) cfg.importSSHKeysFromGithub;
|
|
in
|
|
{
|
|
imports = [
|
|
./options.nix
|
|
./dev.nix
|
|
./gui.nix
|
|
./styling.nix
|
|
];
|
|
|
|
config = lib.mkIf cfg.enable {
|
|
# Enable unlocking the gpg-agent at boot (configured through home.nix)
|
|
security.pam.services.login.gnupg.enable = true;
|
|
|
|
environment.systemPackages = [
|
|
# CLI tools
|
|
pkgs.fd
|
|
pkgs.ripgrep
|
|
pkgs.du-dust
|
|
pkgs.curl
|
|
pkgs.zip
|
|
pkgs.unzip
|
|
];
|
|
|
|
programs = {
|
|
# Launch fish if shell is interactive (from https://wiki.nixos.org/wiki/Fish)
|
|
bash.interactiveShellInit = # bash
|
|
''
|
|
if [[ $(${pkgs.procps}/bin/ps --no-header --pid=$PPID --format=comm) != "fish" && -z ''${BASH_EXECUTION_STRING} ]]
|
|
then
|
|
shopt -q login_shell && LOGIN_OPTION='--login' || LOGIN_OPTION=""
|
|
exec ${pkgs.fish}/bin/fish $LOGIN_OPTION
|
|
fi
|
|
'';
|
|
# Default shell
|
|
fish.enable = true;
|
|
# Shell prompt
|
|
starship = {
|
|
enable = true;
|
|
settings = lib.mkMerge [
|
|
{
|
|
format = "$time$all";
|
|
add_newline = false;
|
|
cmd_duration.min_time = 500;
|
|
cmd_duration.show_milliseconds = true;
|
|
time.disabled = false;
|
|
status = {
|
|
format = "[$signal_name$common_meaning$maybe_int](red)";
|
|
symbol = "[✗](bold red)";
|
|
disabled = false;
|
|
};
|
|
sudo.disabled = false;
|
|
}
|
|
# Add nerdfont symbols
|
|
(lib.mkIf cfg.styling.enable (import ./starship-nerdfont-symbols.nix))
|
|
# Remove the `in`s and `on`s from the prompt
|
|
(import ./starship-shorter-text.nix)
|
|
];
|
|
};
|
|
};
|
|
|
|
environment.etc = keysFromGithub;
|
|
services = {
|
|
# Enable printer autodiscovery if printing is enabled
|
|
avahi = {
|
|
inherit (args.config.services.printing) enable;
|
|
nssmdns4 = true;
|
|
openFirewall = true;
|
|
};
|
|
openssh.authorizedKeysFiles = builtins.map (keys: "/etc/${keys}") (
|
|
builtins.attrNames keysFromGithub
|
|
);
|
|
};
|
|
# Open ports for spotifyd
|
|
networking.firewall = {
|
|
allowedUDPPorts = [ 5353 ];
|
|
allowedTCPPorts = [ 2020 ];
|
|
};
|
|
# Nix Settings
|
|
nix = {
|
|
gc = {
|
|
automatic = true;
|
|
dates = "weekly";
|
|
options = "--delete-older-than 30d";
|
|
# run between 0 and 45min after boot if run was missed
|
|
randomizedDelaySec = "45min";
|
|
};
|
|
settings = {
|
|
use-xdg-base-directories = true;
|
|
auto-optimise-store = true;
|
|
experimental-features = [
|
|
"nix-command"
|
|
"flakes"
|
|
];
|
|
};
|
|
};
|
|
};
|
|
}
|