This repository has no description
2.4 kB
115 lines
1{
2 self,
3 config,
4 pkgs,
5 ...
6}:
7
8{
9 imports = [
10 ../../configs
11 ../../configs/mouse.nix
12 ../../configs/retiolum.nix
13 ../../configs/desktops/qtile/nixos.nix
14 ../../configs/pipewire.nix
15 ../../configs/browsers.nix
16 ../../configs/pass.nix
17 ../../configs/steam.nix
18 ../../configs/fetchWallpaper.nix
19 ../../configs/mail.nix
20 ../../configs/syncthing.nix
21 ../../configs/ableton.nix
22 ../../configs/rtl-sdr.nix
23 ../../configs/printing
24 ../../configs/network-manager.nix
25 ../../configs/yellow-mounts/samba.nix
26 ../../configs/consul.nix
27 ../../configs/networkd.nix
28 ../../configs/autotether.nix
29 ../../configs/autoupdate.nix
30 {
31 services.nginx = {
32 enable = true;
33 virtualHosts.default = {
34 default = true;
35 serverAliases = [
36 "localhost"
37 "${config.networking.hostName}"
38 "${config.networking.hostName}.r"
39 ];
40 locations."~ ^/~(.+?)(/.*)?\$".extraConfig = ''
41 alias /home/$1/public_html$2;
42 '';
43 };
44 };
45 }
46 {
47 services.redis.servers."".enable = true;
48 }
49 {
50 environment.systemPackages = [
51 self.packages.${pkgs.system}.bank
52 pkgs.transgui
53 ];
54 }
55 {
56 services.tor = {
57 enable = true;
58 client.enable = true;
59 };
60 }
61 ];
62
63 environment.systemPackages = with pkgs; [
64 android-tools
65 dnsutils
66 woeusb
67 ];
68
69 #TODO: fix this shit
70 ##fprint stuff
71 ##sudo fprintd-enroll $USER to save fingerprints
72 #services.fprintd.enable = true;
73 #security.pam.services.sudo.fprintAuth = true;
74
75 users.extraGroups = {
76 loot = {
77 members = [
78 config.users.extraUsers.mainUser.name
79 "firefox"
80 "chromium"
81 "google"
82 "virtual"
83 ];
84 };
85 };
86
87 nixpkgs.config.android_sdk.accept_license = true;
88
89 # It may leak your data, but look how FAST it is!1!!
90 # https://make-linux-fast-again.com/
91 boot.kernelParams = [
92 "noibrs"
93 "noibpb"
94 "nopti"
95 "nospectre_v2"
96 "nospectre_v1"
97 "l1tf=off"
98 "nospec_store_bypass_disable"
99 "no_stf_barrier"
100 "mds=off"
101 "mitigations=off"
102 ];
103
104 boot.binfmt.emulatedSystems = [
105 "aarch64-linux"
106 ];
107
108 nix.settings.trusted-users = [
109 "root"
110 "lass"
111 ];
112
113 services.nscd.enableNsncd = true;
114
115}