This repository has no description
2.3 kB
114 lines
1{
2 self,
3 config,
4 pkgs,
5 ...
6}:
7
8{
9 imports = [
10 ../../configs
11 ../../configs/mouse.nix
12 ../../configs/retiolum.nix
13 ../../configs/desktops/qtile/nixos.nix
14 ../../configs/pipewire.nix
15 ../../configs/browsers.nix
16 ../../configs/pass.nix
17 ../../configs/steam.nix
18 ../../configs/fetchWallpaper.nix
19 ../../configs/mail.nix
20 ../../configs/syncthing.nix
21 ../../configs/ableton.nix
22 ../../configs/rtl-sdr.nix
23 ../../configs/printing
24 ../../configs/network-manager.nix
25 ../../configs/yellow-mounts/samba.nix
26 ../../configs/consul.nix
27 ../../configs/networkd.nix
28 ../../configs/autotether.nix
29 ../../configs/autoupdate.nix
30 {
31 services.nginx = {
32 enable = true;
33 virtualHosts.default = {
34 default = true;
35 serverAliases = [
36 "localhost"
37 "${config.networking.hostName}"
38 "${config.networking.hostName}.r"
39 ];
40 locations."~ ^/~(.+?)(/.*)?\$".extraConfig = ''
41 alias /home/$1/public_html$2;
42 '';
43 };
44 };
45 }
46 {
47 services.redis.servers."".enable = true;
48 }
49 {
50 environment.systemPackages = [
51 self.packages.${pkgs.system}.bank
52 ];
53 }
54 {
55 services.tor = {
56 enable = true;
57 client.enable = true;
58 };
59 }
60 ];
61
62 environment.systemPackages = with pkgs; [
63 android-tools
64 dnsutils
65 woeusb
66 ];
67
68 #TODO: fix this shit
69 ##fprint stuff
70 ##sudo fprintd-enroll $USER to save fingerprints
71 #services.fprintd.enable = true;
72 #security.pam.services.sudo.fprintAuth = true;
73
74 users.extraGroups = {
75 loot = {
76 members = [
77 config.users.extraUsers.mainUser.name
78 "firefox"
79 "chromium"
80 "google"
81 "virtual"
82 ];
83 };
84 };
85
86 nixpkgs.config.android_sdk.accept_license = true;
87
88 # It may leak your data, but look how FAST it is!1!!
89 # https://make-linux-fast-again.com/
90 boot.kernelParams = [
91 "noibrs"
92 "noibpb"
93 "nopti"
94 "nospectre_v2"
95 "nospectre_v1"
96 "l1tf=off"
97 "nospec_store_bypass_disable"
98 "no_stf_barrier"
99 "mds=off"
100 "mitigations=off"
101 ];
102
103 boot.binfmt.emulatedSystems = [
104 "aarch64-linux"
105 ];
106
107 nix.settings.trusted-users = [
108 "root"
109 "lass"
110 ];
111
112 services.nscd.enableNsncd = true;
113
114}