This repository has no description
2.4 kB
116 lines
1{
2 self,
3 config,
4 pkgs,
5 ...
6}:
7
8{
9 imports = [
10 ../../configs
11 ../../configs/mouse.nix
12 ../../configs/retiolum.nix
13 ../../configs/desktops/qtile/nixos.nix
14 ../../configs/pipewire.nix
15 ../../configs/browsers.nix
16 ../../configs/pass.nix
17 ../../configs/steam.nix
18 ../../configs/fetchWallpaper.nix
19 ../../configs/mail.nix
20 ../../configs/syncthing.nix
21 ../../configs/ableton.nix
22 ../../configs/dunst.nix
23 ../../configs/rtl-sdr.nix
24 ../../configs/printing
25 ../../configs/network-manager.nix
26 ../../configs/yellow-mounts/samba.nix
27 ../../configs/consul.nix
28 ../../configs/networkd.nix
29 ../../configs/autotether.nix
30 ../../configs/autoupdate.nix
31 {
32 services.nginx = {
33 enable = true;
34 virtualHosts.default = {
35 default = true;
36 serverAliases = [
37 "localhost"
38 "${config.networking.hostName}"
39 "${config.networking.hostName}.r"
40 ];
41 locations."~ ^/~(.+?)(/.*)?\$".extraConfig = ''
42 alias /home/$1/public_html$2;
43 '';
44 };
45 };
46 }
47 {
48 services.redis.servers."".enable = true;
49 }
50 {
51 environment.systemPackages = [
52 self.packages.${pkgs.system}.bank
53 pkgs.transgui
54 ];
55 }
56 {
57 services.tor = {
58 enable = true;
59 client.enable = true;
60 };
61 }
62 ];
63
64 environment.systemPackages = with pkgs; [
65 android-tools
66 dnsutils
67 woeusb
68 ];
69
70 #TODO: fix this shit
71 ##fprint stuff
72 ##sudo fprintd-enroll $USER to save fingerprints
73 #services.fprintd.enable = true;
74 #security.pam.services.sudo.fprintAuth = true;
75
76 users.extraGroups = {
77 loot = {
78 members = [
79 config.users.extraUsers.mainUser.name
80 "firefox"
81 "chromium"
82 "google"
83 "virtual"
84 ];
85 };
86 };
87
88 nixpkgs.config.android_sdk.accept_license = true;
89
90 # It may leak your data, but look how FAST it is!1!!
91 # https://make-linux-fast-again.com/
92 boot.kernelParams = [
93 "noibrs"
94 "noibpb"
95 "nopti"
96 "nospectre_v2"
97 "nospectre_v1"
98 "l1tf=off"
99 "nospec_store_bypass_disable"
100 "no_stf_barrier"
101 "mds=off"
102 "mitigations=off"
103 ];
104
105 boot.binfmt.emulatedSystems = [
106 "aarch64-linux"
107 ];
108
109 nix.settings.trusted-users = [
110 "root"
111 "lass"
112 ];
113
114 services.nscd.enableNsncd = true;
115
116}