This repository has no description
2.2 kB
111 lines
1{
2 self,
3 config,
4 pkgs,
5 ...
6}:
7
8{
9 imports = [
10 ../../configs
11 ../../configs/mouse.nix
12 ../../configs/retiolum.nix
13 ../../configs/desktops/qtile/nixos.nix
14 ../../configs/pipewire.nix
15 ../../configs/browsers.nix
16 ../../configs/pass.nix
17 ../../configs/steam.nix
18 ../../configs/mail.nix
19 ../../configs/syncthing.nix
20 ../../configs/ableton.nix
21 ../../configs/rtl-sdr.nix
22 ../../configs/printing
23 ../../configs/network-manager.nix
24 ../../configs/networkd.nix
25 ../../configs/autotether.nix
26 ../../configs/autoupdate.nix
27 {
28 services.nginx = {
29 enable = true;
30 virtualHosts.default = {
31 default = true;
32 serverAliases = [
33 "localhost"
34 "${config.networking.hostName}"
35 "${config.networking.hostName}.r"
36 ];
37 locations."~ ^/~(.+?)(/.*)?\$".extraConfig = ''
38 alias /home/$1/public_html$2;
39 '';
40 };
41 };
42 }
43 {
44 services.redis.servers."".enable = true;
45 }
46 {
47 environment.systemPackages = [
48 self.packages.${pkgs.system}.bank
49 ];
50 }
51 {
52 services.tor = {
53 enable = true;
54 client.enable = true;
55 };
56 }
57 ];
58
59 environment.systemPackages = with pkgs; [
60 android-tools
61 dnsutils
62 woeusb
63 ];
64
65 #TODO: fix this shit
66 ##fprint stuff
67 ##sudo fprintd-enroll $USER to save fingerprints
68 #services.fprintd.enable = true;
69 #security.pam.services.sudo.fprintAuth = true;
70
71 users.extraGroups = {
72 loot = {
73 members = [
74 config.users.extraUsers.mainUser.name
75 "firefox"
76 "chromium"
77 "google"
78 "virtual"
79 ];
80 };
81 };
82
83 nixpkgs.config.android_sdk.accept_license = true;
84
85 # It may leak your data, but look how FAST it is!1!!
86 # https://make-linux-fast-again.com/
87 boot.kernelParams = [
88 "noibrs"
89 "noibpb"
90 "nopti"
91 "nospectre_v2"
92 "nospectre_v1"
93 "l1tf=off"
94 "nospec_store_bypass_disable"
95 "no_stf_barrier"
96 "mds=off"
97 "mitigations=off"
98 ];
99
100 boot.binfmt.emulatedSystems = [
101 "aarch64-linux"
102 ];
103
104 nix.settings.trusted-users = [
105 "root"
106 "lass"
107 ];
108
109 services.nscd.enableNsncd = true;
110
111}