This repository has no description
2.3 kB
113 lines
1{
2 self,
3 config,
4 pkgs,
5 ...
6}:
7
8{
9 imports = [
10 ../../configs
11 ../../configs/mouse.nix
12 ../../configs/retiolum.nix
13 ../../configs/desktops/qtile/nixos.nix
14 ../../configs/pipewire.nix
15 ../../configs/browsers.nix
16 ../../configs/pass.nix
17 ../../configs/steam.nix
18 ../../configs/fetchWallpaper.nix
19 ../../configs/mail.nix
20 ../../configs/syncthing.nix
21 ../../configs/ableton.nix
22 ../../configs/rtl-sdr.nix
23 ../../configs/printing
24 ../../configs/network-manager.nix
25 ../../configs/consul.nix
26 ../../configs/networkd.nix
27 ../../configs/autotether.nix
28 ../../configs/autoupdate.nix
29 {
30 services.nginx = {
31 enable = true;
32 virtualHosts.default = {
33 default = true;
34 serverAliases = [
35 "localhost"
36 "${config.networking.hostName}"
37 "${config.networking.hostName}.r"
38 ];
39 locations."~ ^/~(.+?)(/.*)?\$".extraConfig = ''
40 alias /home/$1/public_html$2;
41 '';
42 };
43 };
44 }
45 {
46 services.redis.servers."".enable = true;
47 }
48 {
49 environment.systemPackages = [
50 self.packages.${pkgs.system}.bank
51 ];
52 }
53 {
54 services.tor = {
55 enable = true;
56 client.enable = true;
57 };
58 }
59 ];
60
61 environment.systemPackages = with pkgs; [
62 android-tools
63 dnsutils
64 woeusb
65 ];
66
67 #TODO: fix this shit
68 ##fprint stuff
69 ##sudo fprintd-enroll $USER to save fingerprints
70 #services.fprintd.enable = true;
71 #security.pam.services.sudo.fprintAuth = true;
72
73 users.extraGroups = {
74 loot = {
75 members = [
76 config.users.extraUsers.mainUser.name
77 "firefox"
78 "chromium"
79 "google"
80 "virtual"
81 ];
82 };
83 };
84
85 nixpkgs.config.android_sdk.accept_license = true;
86
87 # It may leak your data, but look how FAST it is!1!!
88 # https://make-linux-fast-again.com/
89 boot.kernelParams = [
90 "noibrs"
91 "noibpb"
92 "nopti"
93 "nospectre_v2"
94 "nospectre_v1"
95 "l1tf=off"
96 "nospec_store_bypass_disable"
97 "no_stf_barrier"
98 "mds=off"
99 "mitigations=off"
100 ];
101
102 boot.binfmt.emulatedSystems = [
103 "aarch64-linux"
104 ];
105
106 nix.settings.trusted-users = [
107 "root"
108 "lass"
109 ];
110
111 services.nscd.enableNsncd = true;
112
113}