forked from
lass.pds.lassul.us/superconfig
This repository has no description
2.8 kB
120 lines
1{
2 config,
3 lib,
4 pkgs,
5 ...
6}:
7
8{
9 imports = [
10 ../../configs
11 ../../configs/retiolum.nix
12 ../../configs/pipewire.nix
13 ../../configs/autoupdate.nix
14 {
15 users.mutableUsers = lib.mkForce true;
16 # bubsy config
17 users.users.bubsy = {
18 uid = 1001;
19 home = "/home/bubsy";
20 group = "users";
21 createHome = true;
22 extraGroups = [
23 "audio"
24 "networkmanager"
25 "pipewire"
26 "video"
27 # "plugdev"
28 ];
29 useDefaultShell = true;
30 isNormalUser = true;
31 };
32 networking.networkmanager.enable = true;
33 networking.wireless.enable = lib.mkForce false;
34 # programs.chromium = {
35 # enable = true;
36 # extensions = [
37 # "cjpalhdlnbpafiamejdnhcphjbkeiagm" # ublock origin
38 # ];
39 # };
40 environment.systemPackages = with pkgs; [
41 kdePackages.ark
42 pavucontrol
43 #firefox
44 chromium
45 networkmanagerapplet
46 libreoffice
47 audacity
48 zathura
49 wine
50 vlc
51 telegram-desktop
52 ];
53 # services.udev.packages = [ pkgs.ledger-udev-rules ];
54 services.xserver.enable = true;
55 services.xserver.displayManager.sddm.enable = true;
56 services.xserver.desktopManager.plasma6.enable = true;
57 services.displayManager.sddm.wayland.enable = true;
58 services.tlp.enable = lib.mkForce false;
59 services.xserver.layout = "de";
60 }
61 {
62 users = {
63 groups.plugdev = { };
64 users = {
65 bitcoin = {
66 name = "bitcoin";
67 description = "user for bitcoin stuff";
68 home = "/home/bitcoin";
69 isNormalUser = true;
70 useDefaultShell = true;
71 createHome = true;
72 extraGroups = [
73 "audio"
74 "networkmanager"
75 "plugdev"
76 ];
77 packages = [
78 pkgs.electrum
79 pkgs.ledger-live-desktop
80 ];
81 };
82 };
83 };
84 hardware.ledger.enable = true;
85 security.sudo.extraConfig = ''
86 bubsy ALL=(bitcoin) NOPASSWD: ALL
87 '';
88 }
89 {
90 #remote control
91 environment.systemPackages = with pkgs; [
92 x11vnc
93 # torbrowser
94 ];
95 krebs.iptables.tables.filter.INPUT.rules = [
96 {
97 predicate = "-p tcp -i retiolum --dport 5900";
98 target = "ACCEPT";
99 }
100 ];
101 }
102 ];
103
104 time.timeZone = "Europe/Berlin";
105
106 hardware.trackpoint = {
107 enable = true;
108 sensitivity = 220;
109 speed = 0;
110 emulateWheel = true;
111 };
112
113 services.logind.settings.Login.HandleLidSwitch = "ignore";
114
115 nixpkgs.config.permittedInsecurePackages = [
116 "python3.13-ecdsa-0.19.1"
117 ];
118
119 krebs.build.host = config.krebs.hosts.daedalus;
120}