Apply treefmt
This commit is contained in:
parent
2cc5ca5d60
commit
dca0bd978d
|
@ -109,6 +109,4 @@
|
||||||
|
|
||||||
## [07092020](https://github.com/divnix/devos/tree/07092020) (2020-07-09)
|
## [07092020](https://github.com/divnix/devos/tree/07092020) (2020-07-09)
|
||||||
|
|
||||||
|
\* _This Changelog was automatically generated by [github_changelog_generator](https://github.com/github-changelog-generator/github-changelog-generator)_
|
||||||
|
|
||||||
\* *This Changelog was automatically generated by [github_changelog_generator](https://github.com/github-changelog-generator/github-changelog-generator)*
|
|
||||||
|
|
18
README.md
18
README.md
|
@ -10,36 +10,36 @@ At its core, it's a NixOS installation running our configuration. The UX
|
||||||
decisions and the way the project is structured are what make it
|
decisions and the way the project is structured are what make it
|
||||||
_PubSolarOS_:
|
_PubSolarOS_:
|
||||||
|
|
||||||
* Reproducibility is king, and the future is with declarative and functional
|
- Reproducibility is king, and the future is with declarative and functional
|
||||||
programming. Even if Nix does not turn out to be the end-all-be-all of
|
programming. Even if Nix does not turn out to be the end-all-be-all of
|
||||||
reproducible package management (Guix looks good), it has a plethora
|
reproducible package management (Guix looks good), it has a plethora
|
||||||
of packages, a very active and helpful community, and very solid
|
of packages, a very active and helpful community, and very solid
|
||||||
software engineering practices.
|
software engineering practices.
|
||||||
* Because reproducibility is king, we're using nix flakes for locking flake
|
- Because reproducibility is king, we're using nix flakes for locking flake
|
||||||
dependencies. [Digga](https://github.com/divnix/digga) is our flake
|
dependencies. [Digga](https://github.com/divnix/digga) is our flake
|
||||||
utility library, made by the wonderful people of the Divnix community.
|
utility library, made by the wonderful people of the Divnix community.
|
||||||
* Physical devices are not shared anymore nowadays. Only seldomly will you
|
- Physical devices are not shared anymore nowadays. Only seldomly will you
|
||||||
find shared devices that need more than one user account. For this
|
find shared devices that need more than one user account. For this
|
||||||
reason, only one user (excluding `root`) is assumed.
|
reason, only one user (excluding `root`) is assumed.
|
||||||
* Keyboard navigation wins where it matters; ergonomics, programmability,
|
- Keyboard navigation wins where it matters; ergonomics, programmability,
|
||||||
efficiency, and speed. We use a tiling window manager (`sway`) and
|
efficiency, and speed. We use a tiling window manager (`sway`) and
|
||||||
prioritize cli-based solutions where sensible. The editor is `neovim`
|
prioritize cli-based solutions where sensible. The editor is `neovim`
|
||||||
configured to be just as opiniated as the operating system it is a part
|
configured to be just as opiniated as the operating system it is a part
|
||||||
of. For mailing, `neomutt` is the default, but we're more divided on
|
of. For mailing, `neomutt` is the default, but we're more divided on
|
||||||
that part.
|
that part.
|
||||||
* We like new and shiny things, so we've moved to Wayland and pipewire.
|
- We like new and shiny things, so we've moved to Wayland and pipewire.
|
||||||
* SICHERHEIT is written in capital letters at pub.solar, so we have first-
|
- SICHERHEIT is written in capital letters at pub.solar, so we have first-
|
||||||
class disk-encryption support. Currently in the works is a paranoid
|
class disk-encryption support. Currently in the works is a paranoid
|
||||||
mode where the device can only hibernate (no more sleep or lockscreen)
|
mode where the device can only hibernate (no more sleep or lockscreen)
|
||||||
so your data is locked any time you leave the device.
|
so your data is locked any time you leave the device.
|
||||||
* Free software is better. If we can avoid it, nonfree software is avoided.
|
- Free software is better. If we can avoid it, nonfree software is avoided.
|
||||||
By default, `allowUnfree` is `false` so we don't ship non-free software
|
By default, `allowUnfree` is `false` so we don't ship non-free software
|
||||||
in a basic PubSolarOS ISO. However, nothing prevents you from using
|
in a basic PubSolarOS ISO. However, nothing prevents you from using
|
||||||
as much non-free software as you like.
|
as much non-free software as you like.
|
||||||
* Automation is better. The reproducibility of nix feels so much more
|
- Automation is better. The reproducibility of nix feels so much more
|
||||||
powerful once you're deploying your new configuration from your laptop
|
powerful once you're deploying your new configuration from your laptop
|
||||||
to all your other devices with one command. [We have an automated CI using drone](https://ci.b12f.io/pub-solar/os).
|
to all your other devices with one command. [We have an automated CI using drone](https://ci.b12f.io/pub-solar/os).
|
||||||
* Community is important. We just like working on this together, and it
|
- Community is important. We just like working on this together, and it
|
||||||
feels really good to see our progress at the end of a
|
feels really good to see our progress at the end of a
|
||||||
[hakken.irl](https://pub.solar/hakken) session.
|
[hakken.irl](https://pub.solar/hakken) session.
|
||||||
|
|
||||||
|
|
15
default.nix
15
default.nix
|
@ -9,17 +9,22 @@ let
|
||||||
"x86_64-linux"
|
"x86_64-linux"
|
||||||
];
|
];
|
||||||
|
|
||||||
filterSystems = lib.filterAttrs
|
filterSystems =
|
||||||
|
lib.filterAttrs
|
||||||
(system: _: lib.elem system ciSystems);
|
(system: _: lib.elem system ciSystems);
|
||||||
|
|
||||||
recurseIntoAttrsRecursive = lib.mapAttrs (_: v:
|
recurseIntoAttrsRecursive = lib.mapAttrs (
|
||||||
|
_: v:
|
||||||
if lib.isAttrs v
|
if lib.isAttrs v
|
||||||
then recurseIntoAttrsRecursive (lib.recurseIntoAttrs v)
|
then recurseIntoAttrsRecursive (lib.recurseIntoAttrs v)
|
||||||
else v
|
else v
|
||||||
);
|
);
|
||||||
|
|
||||||
systemOutputs = lib.filterAttrs
|
systemOutputs =
|
||||||
(name: set: lib.isAttrs set
|
lib.filterAttrs
|
||||||
|
(
|
||||||
|
name: set:
|
||||||
|
lib.isAttrs set
|
||||||
&& lib.any
|
&& lib.any
|
||||||
(system: set ? ${system} && name != "legacyPackages")
|
(system: set ? ${system} && name != "legacyPackages")
|
||||||
ciSystems
|
ciSystems
|
||||||
|
@ -28,4 +33,4 @@ let
|
||||||
|
|
||||||
ciDrvs = lib.mapAttrs (_: system: filterSystems system) systemOutputs;
|
ciDrvs = lib.mapAttrs (_: system: filterSystems system) systemOutputs;
|
||||||
in
|
in
|
||||||
(recurseIntoAttrsRecursive ciDrvs) // { shell = import ./shell.nix; }
|
(recurseIntoAttrsRecursive ciDrvs) // {shell = import ./shell.nix;}
|
||||||
|
|
|
@ -1,4 +1,5 @@
|
||||||
# TL;DR;
|
# TL;DR;
|
||||||
|
|
||||||
- **Target Branch**: `main`
|
- **Target Branch**: `main`
|
||||||
- **Merge Policy**: green check: merge away. yellow circle: have patience. red x: try again.
|
- **Merge Policy**: green check: merge away. yellow circle: have patience. red x: try again.
|
||||||
- **Docs**: every change set is expected to contain doc updates
|
- **Docs**: every change set is expected to contain doc updates
|
||||||
|
@ -9,5 +10,6 @@
|
||||||
make use of the `./examples` & `./e2e` and wire test up in the devshell.
|
make use of the `./examples` & `./e2e` and wire test up in the devshell.
|
||||||
|
|
||||||
### Within the Devshell (`nix develop`)
|
### Within the Devshell (`nix develop`)
|
||||||
|
|
||||||
- **Hooks**: please `git commit` within the devshell
|
- **Hooks**: please `git commit` within the devshell
|
||||||
- **Fail Early**: please run `check-all` from within the devshell on your local machine
|
- **Fail Early**: please run `check-all` from within the devshell on your local machine
|
||||||
|
|
|
@ -28,4 +28,3 @@
|
||||||
- [NixOS](./api-reference-nixos.md)
|
- [NixOS](./api-reference-nixos.md)
|
||||||
- [Library Reference]()
|
- [Library Reference]()
|
||||||
- [Contributing](./CONTRIBUTING.md)
|
- [Contributing](./CONTRIBUTING.md)
|
||||||
|
|
||||||
|
|
|
@ -1,91 +1,76 @@
|
||||||
# Channels API Container
|
# Channels API Container
|
||||||
|
|
||||||
Configure your channels that you can use throughout your configurations.
|
Configure your channels that you can use throughout your configurations.
|
||||||
|
|
||||||
> #### ⚠ Gotcha ⚠
|
> #### ⚠ Gotcha ⚠
|
||||||
|
>
|
||||||
> Devshell & (non-host-specific) Home-Manager `pkgs` instances are rendered off the
|
> Devshell & (non-host-specific) Home-Manager `pkgs` instances are rendered off the
|
||||||
> `nixos.hostDefaults.channelName` (default) channel.
|
> `nixos.hostDefaults.channelName` (default) channel.
|
||||||
|
|
||||||
|
|
||||||
## channels
|
## channels
|
||||||
|
|
||||||
nixpkgs channels to create
|
nixpkgs channels to create
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
attribute set of submodules or path convertible to it
|
attribute set of submodules or path convertible to it
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
{}
|
{}
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## channels.\<name\>.config
|
## channels.\<name\>.config
|
||||||
|
|
||||||
nixpkgs config for this channel
|
nixpkgs config for this channel
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
attribute set or path convertible to it
|
attribute set or path convertible to it
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
{}
|
{}
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## channels.\<name\>.input
|
## channels.\<name\>.input
|
||||||
|
|
||||||
nixpkgs flake input to use for this channel
|
nixpkgs flake input to use for this channel
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
nix flake
|
nix flake
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
"self.inputs.<name>"
|
"self.inputs.<name>"
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## channels.\<name\>.overlays
|
## channels.\<name\>.overlays
|
||||||
|
|
||||||
overlays to apply to this channel
|
overlays to apply to this channel
|
||||||
these will get exported under the 'overlays' flake output
|
these will get exported under the 'overlays' flake output
|
||||||
as \<channel\>/\<name\> and any overlay pulled from \<inputs\>
|
as \<channel\>/\<name\> and any overlay pulled from \<inputs\>
|
||||||
will be filtered out
|
will be filtered out
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
list of valid Nixpkgs overlay or path convertible to its or anything convertible to it or path convertible to it
|
list of valid Nixpkgs overlay or path convertible to its or anything convertible to it or path convertible to it
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
[]
|
[]
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## channels.\<name\>.patches
|
## channels.\<name\>.patches
|
||||||
|
|
||||||
patches to apply to this channel
|
patches to apply to this channel
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
list of paths
|
list of paths
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
[]
|
[]
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
|
@ -1,72 +1,59 @@
|
||||||
# Devshell API Container
|
# Devshell API Container
|
||||||
|
|
||||||
Configure your devshell module collections of your environment.
|
Configure your devshell module collections of your environment.
|
||||||
|
|
||||||
|
|
||||||
## devshell
|
## devshell
|
||||||
|
|
||||||
Modules to include in your DevOS shell. the `modules` argument
|
Modules to include in your DevOS shell. the `modules` argument
|
||||||
will be exported under the `devshellModules` output
|
will be exported under the `devshellModules` output
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
submodule or path convertible to it
|
submodule or path convertible to it
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
{}
|
{}
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## devshell.exportedModules
|
## devshell.exportedModules
|
||||||
|
|
||||||
modules to include in all hosts and export to devshellModules output
|
modules to include in all hosts and export to devshellModules output
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
list of valid module or path convertible to its or anything convertible to it
|
list of valid module or path convertible to its or anything convertible to it
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
[]
|
[]
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## devshell.externalModules
|
## devshell.externalModules
|
||||||
|
|
||||||
The `externalModules` option has been removed.
|
The `externalModules` option has been removed.
|
||||||
Any modules that should be exported should be defined with the `exportedModules`
|
Any modules that should be exported should be defined with the `exportedModules`
|
||||||
option and all other modules should just go into the `modules` option.
|
option and all other modules should just go into the `modules` option.
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
list of valid modules or anything convertible to it
|
list of valid modules or anything convertible to it
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
[]
|
[]
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## devshell.modules
|
## devshell.modules
|
||||||
|
|
||||||
modules to include that won't be exported
|
modules to include that won't be exported
|
||||||
meant importing modules from external flakes
|
meant importing modules from external flakes
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
list of valid modules or anything convertible to it or path convertible to it
|
list of valid modules or anything convertible to it or path convertible to it
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
[]
|
[]
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
|
@ -1,119 +1,97 @@
|
||||||
# Home-Manager API Container
|
# Home-Manager API Container
|
||||||
|
|
||||||
Configure your home manager modules, profiles & suites.
|
Configure your home manager modules, profiles & suites.
|
||||||
|
|
||||||
|
|
||||||
## home
|
## home
|
||||||
|
|
||||||
hosts, modules, suites, and profiles for home-manager
|
hosts, modules, suites, and profiles for home-manager
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
submodule or path convertible to it
|
submodule or path convertible to it
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
{}
|
{}
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## home.exportedModules
|
## home.exportedModules
|
||||||
|
|
||||||
modules to include in all hosts and export to homeModules output
|
modules to include in all hosts and export to homeModules output
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
list of valid modules or anything convertible to it or path convertible to it
|
list of valid modules or anything convertible to it or path convertible to it
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
[]
|
[]
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## home.externalModules
|
## home.externalModules
|
||||||
|
|
||||||
The `externalModules` option has been removed.
|
The `externalModules` option has been removed.
|
||||||
Any modules that should be exported should be defined with the `exportedModules`
|
Any modules that should be exported should be defined with the `exportedModules`
|
||||||
option and all other modules should just go into the `modules` option.
|
option and all other modules should just go into the `modules` option.
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
list of valid modules or anything convertible to it
|
list of valid modules or anything convertible to it
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
[]
|
[]
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## home.importables
|
## home.importables
|
||||||
|
|
||||||
Packages of paths to be passed to modules as `specialArgs`.
|
Packages of paths to be passed to modules as `specialArgs`.
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
attribute set
|
attribute set
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
{}
|
{}
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## home.importables.suites
|
## home.importables.suites
|
||||||
|
|
||||||
collections of profiles
|
collections of profiles
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
null or attribute set of list of paths or anything convertible to its or path convertible to it
|
null or attribute set of list of paths or anything convertible to its or path convertible to it
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
null
|
null
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## home.modules
|
## home.modules
|
||||||
|
|
||||||
modules to include that won't be exported
|
modules to include that won't be exported
|
||||||
meant importing modules from external flakes
|
meant importing modules from external flakes
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
list of valid modules or anything convertible to it or path convertible to it
|
list of valid modules or anything convertible to it or path convertible to it
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
[]
|
[]
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## home.users
|
## home.users
|
||||||
|
|
||||||
HM users that can be deployed portably without a host.
|
HM users that can be deployed portably without a host.
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
attribute set of HM user configs
|
attribute set of HM user configs
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
{}
|
{}
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
|
@ -1,234 +1,191 @@
|
||||||
# NixOS API Container
|
# NixOS API Container
|
||||||
|
|
||||||
Configure your nixos modules, profiles & suites.
|
Configure your nixos modules, profiles & suites.
|
||||||
|
|
||||||
|
|
||||||
## nixos
|
## nixos
|
||||||
|
|
||||||
hosts, modules, suites, and profiles for NixOS
|
hosts, modules, suites, and profiles for NixOS
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
submodule or path convertible to it
|
submodule or path convertible to it
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
{}
|
{}
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## nixos.hostDefaults
|
## nixos.hostDefaults
|
||||||
|
|
||||||
Defaults for all hosts.
|
Defaults for all hosts.
|
||||||
the modules passed under hostDefaults will be exported
|
the modules passed under hostDefaults will be exported
|
||||||
to the 'nixosModules' flake output.
|
to the 'nixosModules' flake output.
|
||||||
They will also be added to all hosts.
|
They will also be added to all hosts.
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
submodule
|
submodule
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
{}
|
{}
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## nixos.hostDefaults.channelName
|
## nixos.hostDefaults.channelName
|
||||||
|
|
||||||
Channel this host should follow
|
Channel this host should follow
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
channel defined in `channels`
|
channel defined in `channels`
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## nixos.hostDefaults.exportedModules
|
## nixos.hostDefaults.exportedModules
|
||||||
|
|
||||||
modules to include in all hosts and export to nixosModules output
|
modules to include in all hosts and export to nixosModules output
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
list of valid modules or anything convertible to it or path convertible to it
|
list of valid modules or anything convertible to it or path convertible to it
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
[]
|
[]
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## nixos.hostDefaults.externalModules
|
## nixos.hostDefaults.externalModules
|
||||||
|
|
||||||
The `externalModules` option has been removed.
|
The `externalModules` option has been removed.
|
||||||
Any modules that should be exported should be defined with the `exportedModules`
|
Any modules that should be exported should be defined with the `exportedModules`
|
||||||
option and all other modules should just go into the `modules` option.
|
option and all other modules should just go into the `modules` option.
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
list of valid modules or anything convertible to it
|
list of valid modules or anything convertible to it
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
[]
|
[]
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## nixos.hostDefaults.modules
|
## nixos.hostDefaults.modules
|
||||||
|
|
||||||
modules to include that won't be exported
|
modules to include that won't be exported
|
||||||
meant importing modules from external flakes
|
meant importing modules from external flakes
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
list of valid modules or anything convertible to it or path convertible to it
|
list of valid modules or anything convertible to it or path convertible to it
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
[]
|
[]
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## nixos.hostDefaults.system
|
## nixos.hostDefaults.system
|
||||||
|
|
||||||
system for this host
|
system for this host
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
null or system defined in `supportedSystems`
|
null or system defined in `supportedSystems`
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
null
|
null
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## nixos.hosts
|
## nixos.hosts
|
||||||
|
|
||||||
configurations to include in the nixosConfigurations output
|
configurations to include in the nixosConfigurations output
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
attribute set of submodules
|
attribute set of submodules
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
{}
|
{}
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## nixos.hosts.\<name\>.channelName
|
## nixos.hosts.\<name\>.channelName
|
||||||
|
|
||||||
Channel this host should follow
|
Channel this host should follow
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
null or channel defined in `channels`
|
null or channel defined in `channels`
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
null
|
null
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## nixos.hosts.\<name\>.modules
|
## nixos.hosts.\<name\>.modules
|
||||||
|
|
||||||
modules to include
|
modules to include
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
list of valid modules or anything convertible to it or path convertible to it
|
list of valid modules or anything convertible to it or path convertible to it
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
[]
|
[]
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## nixos.hosts.\<name\>.system
|
## nixos.hosts.\<name\>.system
|
||||||
|
|
||||||
system for this host
|
system for this host
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
null or system defined in `supportedSystems`
|
null or system defined in `supportedSystems`
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
null
|
null
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## nixos.hosts.\<name\>.tests
|
## nixos.hosts.\<name\>.tests
|
||||||
|
|
||||||
tests to run
|
tests to run
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
list of valid NixOS test or path convertible to its or anything convertible to it
|
list of valid NixOS test or path convertible to its or anything convertible to it
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
[]
|
[]
|
||||||
```
|
```
|
||||||
|
|
||||||
|
_*Example*_
|
||||||
|
|
||||||
*_Example_*
|
|
||||||
```
|
```
|
||||||
{"_type":"literalExpression","text":"[\n {\n name = \"testname1\";\n machine = { ... };\n testScript = ''\n # ...\n '';\n }\n ({ corutils, writers, ... }: {\n name = \"testname2\";\n machine = { ... };\n testScript = ''\n # ...\n '';\n })\n ./path/to/test.nix\n];\n"}
|
{"_type":"literalExpression","text":"[\n {\n name = \"testname1\";\n machine = { ... };\n testScript = ''\n # ...\n '';\n }\n ({ corutils, writers, ... }: {\n name = \"testname2\";\n machine = { ... };\n testScript = ''\n # ...\n '';\n })\n ./path/to/test.nix\n];\n"}
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
## nixos.importables
|
## nixos.importables
|
||||||
|
|
||||||
Packages of paths to be passed to modules as `specialArgs`.
|
Packages of paths to be passed to modules as `specialArgs`.
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
attribute set
|
attribute set
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
{}
|
{}
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## nixos.importables.suites
|
## nixos.importables.suites
|
||||||
|
|
||||||
collections of profiles
|
collections of profiles
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
null or attribute set of list of paths or anything convertible to its or path convertible to it
|
null or attribute set of list of paths or anything convertible to its or path convertible to it
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
null
|
null
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
|
@ -1,4 +1,5 @@
|
||||||
# Top Level API
|
# Top Level API
|
||||||
|
|
||||||
`digga`'s top level API. API Containers are documented in their respective sub-chapter:
|
`digga`'s top level API. API Containers are documented in their respective sub-chapter:
|
||||||
|
|
||||||
- [Channels](./api-reference-channels.md)
|
- [Channels](./api-reference-channels.md)
|
||||||
|
@ -8,73 +9,55 @@
|
||||||
- [Darwin](./api-reference-darwin.md)
|
- [Darwin](./api-reference-darwin.md)
|
||||||
|
|
||||||
## channelsConfig
|
## channelsConfig
|
||||||
|
|
||||||
nixpkgs config for all channels
|
nixpkgs config for all channels
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
attribute set or path convertible to it
|
attribute set or path convertible to it
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
{}
|
{}
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## inputs
|
## inputs
|
||||||
|
|
||||||
The flake's inputs
|
The flake's inputs
|
||||||
|
|
||||||
*_Type_*:
|
_*Type*_:
|
||||||
attribute set of nix flakes
|
attribute set of nix flakes
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## outputsBuilder
|
## outputsBuilder
|
||||||
|
|
||||||
builder for flake system-spaced outputs
|
builder for flake system-spaced outputs
|
||||||
The builder gets passed an attrset of all channels
|
The builder gets passed an attrset of all channels
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
function that evaluates to a(n) attribute set or path convertible to it
|
function that evaluates to a(n) attribute set or path convertible to it
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
"channels: { }"
|
"channels: { }"
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## self
|
## self
|
||||||
|
|
||||||
The flake to create the DevOS outputs for
|
The flake to create the DevOS outputs for
|
||||||
|
|
||||||
*_Type_*:
|
_*Type*_:
|
||||||
nix flake
|
nix flake
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## supportedSystems
|
## supportedSystems
|
||||||
|
|
||||||
The systems supported by this flake
|
The systems supported by this flake
|
||||||
|
|
||||||
|
_*Type*_:
|
||||||
*_Type_*:
|
|
||||||
list of strings
|
list of strings
|
||||||
|
|
||||||
|
_*Default*_
|
||||||
|
|
||||||
*_Default_*
|
|
||||||
```
|
```
|
||||||
["aarch64-linux","aarch64-darwin","i686-linux","x86_64-darwin","x86_64-linux"]
|
["aarch64-linux","aarch64-darwin","i686-linux","x86_64-darwin","x86_64-linux"]
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
|
@ -28,10 +28,10 @@ is best saved for [profile modules](./profiles.md).
|
||||||
This is a good place to import sets of profiles, called [suites](./suites.md),
|
This is a good place to import sets of profiles, called [suites](./suites.md),
|
||||||
that you intend to use on your machine.
|
that you intend to use on your machine.
|
||||||
|
|
||||||
|
|
||||||
## Example
|
## Example
|
||||||
|
|
||||||
flake.nix:
|
flake.nix:
|
||||||
|
|
||||||
```nix
|
```nix
|
||||||
{
|
{
|
||||||
nixos = {
|
nixos = {
|
||||||
|
@ -47,6 +47,7 @@ flake.nix:
|
||||||
```
|
```
|
||||||
|
|
||||||
hosts/librem.nix:
|
hosts/librem.nix:
|
||||||
|
|
||||||
```nix
|
```nix
|
||||||
{ suites, ... }:
|
{ suites, ... }:
|
||||||
{
|
{
|
||||||
|
|
|
@ -1,8 +1,10 @@
|
||||||
# Overrides
|
# Overrides
|
||||||
|
|
||||||
Each NixOS host follows one channel. But many times it is useful to get packages
|
Each NixOS host follows one channel. But many times it is useful to get packages
|
||||||
or modules from different channels.
|
or modules from different channels.
|
||||||
|
|
||||||
## Packages
|
## Packages
|
||||||
|
|
||||||
You can make use of `overlays/overrides.nix` to override specific packages in the
|
You can make use of `overlays/overrides.nix` to override specific packages in the
|
||||||
default channel to be pulled from other channels. That file is simply an example
|
default channel to be pulled from other channels. That file is simply an example
|
||||||
of how any overlay can get `channels` as their first argument.
|
of how any overlay can get `channels` as their first argument.
|
||||||
|
@ -10,6 +12,7 @@ of how any overlay can get `channels` as their first argument.
|
||||||
You can add overlays to any channel to override packages from other channels.
|
You can add overlays to any channel to override packages from other channels.
|
||||||
|
|
||||||
Pulling the manix package from the `latest` channel:
|
Pulling the manix package from the `latest` channel:
|
||||||
|
|
||||||
```nix
|
```nix
|
||||||
channels: final: prev: {
|
channels: final: prev: {
|
||||||
__dontExport = true;
|
__dontExport = true;
|
||||||
|
@ -28,6 +31,7 @@ You can also pull modules from other channels. All modules have access to the
|
||||||
`disabledModules` to remove modules from the current channel.
|
`disabledModules` to remove modules from the current channel.
|
||||||
|
|
||||||
To pull zsh module from the `latest` channel this code can be placed in any module, whether its your host file, a profile, or a module in ./modules etc:
|
To pull zsh module from the `latest` channel this code can be placed in any module, whether its your host file, a profile, or a module in ./modules etc:
|
||||||
|
|
||||||
```nix
|
```nix
|
||||||
{ latestModulesPath }:
|
{ latestModulesPath }:
|
||||||
{
|
{
|
||||||
|
@ -37,6 +41,7 @@ To pull zsh module from the `latest` channel this code can be placed in any modu
|
||||||
```
|
```
|
||||||
|
|
||||||
> ##### _Note:_
|
> ##### _Note:_
|
||||||
|
>
|
||||||
> Sometimes a modules name will change from one branch to another.
|
> Sometimes a modules name will change from one branch to another.
|
||||||
|
|
||||||
[nixpkgs-modules]: https://github.com/NixOS/nixpkgs/tree/master/nixos/modules
|
[nixpkgs-modules]: https://github.com/NixOS/nixpkgs/tree/master/nixos/modules
|
||||||
|
|
|
@ -6,6 +6,7 @@ built into the NixOS module system for a reason: to elegantly provide a clear
|
||||||
separation of concerns.
|
separation of concerns.
|
||||||
|
|
||||||
## Creation
|
## Creation
|
||||||
|
|
||||||
Profiles are created with the `rakeLeaves` function which recursively collects
|
Profiles are created with the `rakeLeaves` function which recursively collects
|
||||||
`.nix` files from within a folder. The recursion stops at folders with a `default.nix`
|
`.nix` files from within a folder. The recursion stops at folders with a `default.nix`
|
||||||
in them. You end up with an attribute set with leaves(paths to profiles) or
|
in them. You end up with an attribute set with leaves(paths to profiles) or
|
||||||
|
@ -14,12 +15,14 @@ nodes(attrsets leading to more nodes or leaves).
|
||||||
A profile is used for quick modularization of [interelated bits](./profiles.md#subprofiles).
|
A profile is used for quick modularization of [interelated bits](./profiles.md#subprofiles).
|
||||||
|
|
||||||
> ##### _Notes:_
|
> ##### _Notes:_
|
||||||
> * For _declaring_ module options, there's the [modules](../outputs/modules.md) directory.
|
>
|
||||||
> * This directory takes inspiration from
|
> - For _declaring_ module options, there's the [modules](../outputs/modules.md) directory.
|
||||||
|
> - This directory takes inspiration from
|
||||||
> [upstream](https://github.com/NixOS/nixpkgs/tree/master/nixos/modules/profiles)
|
> [upstream](https://github.com/NixOS/nixpkgs/tree/master/nixos/modules/profiles)
|
||||||
> .
|
> .
|
||||||
|
|
||||||
### Nested profiles
|
### Nested profiles
|
||||||
|
|
||||||
Profiles can be nested in attribute sets due to the recursive nature of `rakeLeaves`.
|
Profiles can be nested in attribute sets due to the recursive nature of `rakeLeaves`.
|
||||||
This can be useful to have a set of profiles created for a specific purpose. It is
|
This can be useful to have a set of profiles created for a specific purpose. It is
|
||||||
sometimes useful to have a `common` profile that has high level concerns related
|
sometimes useful to have a `common` profile that has high level concerns related
|
||||||
|
@ -28,6 +31,7 @@ to all its sister profiles.
|
||||||
### Example
|
### Example
|
||||||
|
|
||||||
profiles/develop/common.nix:
|
profiles/develop/common.nix:
|
||||||
|
|
||||||
```nix
|
```nix
|
||||||
{
|
{
|
||||||
imports = [ ./zsh ];
|
imports = [ ./zsh ];
|
||||||
|
@ -36,6 +40,7 @@ profiles/develop/common.nix:
|
||||||
```
|
```
|
||||||
|
|
||||||
profiles/develop/zsh.nix:
|
profiles/develop/zsh.nix:
|
||||||
|
|
||||||
```nix
|
```nix
|
||||||
{ ... }:
|
{ ... }:
|
||||||
{
|
{
|
||||||
|
@ -45,6 +50,7 @@ profiles/develop/zsh.nix:
|
||||||
```
|
```
|
||||||
|
|
||||||
The examples above will end up with a profiles set like this:
|
The examples above will end up with a profiles set like this:
|
||||||
|
|
||||||
```nix
|
```nix
|
||||||
{
|
{
|
||||||
develop = {
|
develop = {
|
||||||
|
@ -55,6 +61,7 @@ The examples above will end up with a profiles set like this:
|
||||||
```
|
```
|
||||||
|
|
||||||
## Conclusion
|
## Conclusion
|
||||||
|
|
||||||
Profiles are the most important concept in DevOS. They allow us to keep our
|
Profiles are the most important concept in DevOS. They allow us to keep our
|
||||||
Nix expressions self contained and modular. This way we can maximize reuse
|
Nix expressions self contained and modular. This way we can maximize reuse
|
||||||
across hosts while minimizing boilerplate. Remember, anything machine
|
across hosts while minimizing boilerplate. Remember, anything machine
|
||||||
|
|
|
@ -1,4 +1,5 @@
|
||||||
# Suites
|
# Suites
|
||||||
|
|
||||||
Suites provide a mechanism for users to easily combine and name collections of
|
Suites provide a mechanism for users to easily combine and name collections of
|
||||||
profiles.
|
profiles.
|
||||||
|
|
||||||
|
@ -8,6 +9,7 @@ argument (one that can be use in an `imports` line) to your hosts. All lists def
|
||||||
in `suites` are flattened and type-checked as paths.
|
in `suites` are flattened and type-checked as paths.
|
||||||
|
|
||||||
## Definition
|
## Definition
|
||||||
|
|
||||||
```nix
|
```nix
|
||||||
rec {
|
rec {
|
||||||
workstation = [ profiles.develop profiles.graphical users.nixos ];
|
workstation = [ profiles.develop profiles.graphical users.nixos ];
|
||||||
|
@ -16,7 +18,9 @@ rec {
|
||||||
```
|
```
|
||||||
|
|
||||||
## Usage
|
## Usage
|
||||||
|
|
||||||
`hosts/my-laptop.nix`:
|
`hosts/my-laptop.nix`:
|
||||||
|
|
||||||
```nix
|
```nix
|
||||||
{ suites, ... }:
|
{ suites, ... }:
|
||||||
{
|
{
|
||||||
|
|
|
@ -1,4 +1,5 @@
|
||||||
> ##### _Note:_
|
> ##### _Note:_
|
||||||
|
>
|
||||||
> This section and its semantics need a conceptiual rework.
|
> This section and its semantics need a conceptiual rework.
|
||||||
> Since recently [portable home configurations][portableuser]
|
> Since recently [portable home configurations][portableuser]
|
||||||
> that are not bound to any specific host are a thing.
|
> that are not bound to any specific host are a thing.
|
||||||
|
@ -12,7 +13,9 @@ your users. For a fully fleshed out example, check out the developers personal
|
||||||
[branch](https://github.com/divnix/devos/tree/nrd/users/nrd/default.nix).
|
[branch](https://github.com/divnix/devos/tree/nrd/users/nrd/default.nix).
|
||||||
|
|
||||||
## Basic Usage
|
## Basic Usage
|
||||||
|
|
||||||
`users/myuser/default.nix`:
|
`users/myuser/default.nix`:
|
||||||
|
|
||||||
```nix
|
```nix
|
||||||
{ ... }:
|
{ ... }:
|
||||||
{
|
{
|
||||||
|
@ -28,6 +31,7 @@ your users. For a fully fleshed out example, check out the developers personal
|
||||||
```
|
```
|
||||||
|
|
||||||
## Home Manager
|
## Home Manager
|
||||||
|
|
||||||
Home Manager support follows the same principles as regular nixos configurations,
|
Home Manager support follows the same principles as regular nixos configurations,
|
||||||
it even gets its own namespace in your `flake.nix` as `home`.
|
it even gets its own namespace in your `flake.nix` as `home`.
|
||||||
|
|
||||||
|
@ -37,7 +41,9 @@ User profiles can be collected in a similar fashion as system ones into a `suite
|
||||||
argument that gets passed to your home-manager users.
|
argument that gets passed to your home-manager users.
|
||||||
|
|
||||||
### Example
|
### Example
|
||||||
|
|
||||||
`flake.nix`
|
`flake.nix`
|
||||||
|
|
||||||
```nix
|
```nix
|
||||||
{
|
{
|
||||||
home.users.nixos = { suites, ... }: {
|
home.users.nixos = { suites, ... }: {
|
||||||
|
@ -46,8 +52,8 @@ argument that gets passed to your home-manager users.
|
||||||
}
|
}
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
## External Usage
|
## External Usage
|
||||||
|
|
||||||
You can easily use the defined home-manager configurations outside of NixOS
|
You can easily use the defined home-manager configurations outside of NixOS
|
||||||
using the `homeConfigurations` flake output.
|
using the `homeConfigurations` flake output.
|
||||||
|
|
||||||
|
@ -55,6 +61,7 @@ This is great for keeping your environment consistent across Unix-like systems,
|
||||||
including macOS.
|
including macOS.
|
||||||
|
|
||||||
### From within the projects devshell:
|
### From within the projects devshell:
|
||||||
|
|
||||||
```sh
|
```sh
|
||||||
# builds the pub-solar user defined in the PubSolarOS host
|
# builds the pub-solar user defined in the PubSolarOS host
|
||||||
nix build '.#homeConfigurations."pub-solar@PubSolarOS".activationPackage'
|
nix build '.#homeConfigurations."pub-solar@PubSolarOS".activationPackage'
|
||||||
|
@ -64,6 +71,7 @@ nix build '.#homeConfigurations."pub-solar@PubSolarOS".activationPackage' && ./r
|
||||||
```
|
```
|
||||||
|
|
||||||
### Manually from outside the project:
|
### Manually from outside the project:
|
||||||
|
|
||||||
```sh
|
```sh
|
||||||
# build
|
# build
|
||||||
nix build "github:divnix/devos#homeConfigurations.nixos@NixOS.home.activationPackage"
|
nix build "github:divnix/devos#homeConfigurations.nixos@NixOS.home.activationPackage"
|
||||||
|
|
|
@ -1,4 +1,5 @@
|
||||||
# Cachix
|
# Cachix
|
||||||
|
|
||||||
The system will automatically pull a cachix.nix at the root if one exists.
|
The system will automatically pull a cachix.nix at the root if one exists.
|
||||||
This is usually created automatically by a `sudo cachix use`. If you're more
|
This is usually created automatically by a `sudo cachix use`. If you're more
|
||||||
inclined to keep the root clean, you can drop any generated files in the
|
inclined to keep the root clean, you can drop any generated files in the
|
||||||
|
|
|
@ -1,4 +1,5 @@
|
||||||
# deploy-rs
|
# deploy-rs
|
||||||
|
|
||||||
[Deploy-rs][d-rs] is a tool for managing NixOS remote machines. It was
|
[Deploy-rs][d-rs] is a tool for managing NixOS remote machines. It was
|
||||||
chosen for devos after the author experienced some frustrations with the
|
chosen for devos after the author experienced some frustrations with the
|
||||||
stateful nature of nixops' db. It was also designed from scratch to support
|
stateful nature of nixops' db. It was also designed from scratch to support
|
||||||
|
@ -11,6 +12,7 @@ the command line.
|
||||||
## Usage
|
## Usage
|
||||||
|
|
||||||
Just add your ssh key to the host:
|
Just add your ssh key to the host:
|
||||||
|
|
||||||
```nix
|
```nix
|
||||||
{ ... }:
|
{ ... }:
|
||||||
{
|
{
|
||||||
|
@ -21,6 +23,7 @@ Just add your ssh key to the host:
|
||||||
```
|
```
|
||||||
|
|
||||||
And the private key to your user:
|
And the private key to your user:
|
||||||
|
|
||||||
```nix
|
```nix
|
||||||
{ ... }:
|
{ ... }:
|
||||||
{
|
{
|
||||||
|
@ -39,16 +42,20 @@ And the private key to your user:
|
||||||
```
|
```
|
||||||
|
|
||||||
And run the deployment:
|
And run the deployment:
|
||||||
|
|
||||||
```sh
|
```sh
|
||||||
deploy '.#hostName' --hostname host.example.com
|
deploy '.#hostName' --hostname host.example.com
|
||||||
```
|
```
|
||||||
|
|
||||||
> ##### _Note:_
|
> ##### _Note:_
|
||||||
|
>
|
||||||
> Your user will need **passwordless** sudo access
|
> Your user will need **passwordless** sudo access
|
||||||
|
|
||||||
### Home Manager
|
### Home Manager
|
||||||
|
|
||||||
Digga's `lib.mkDeployNodes` provides only `system` profile.
|
Digga's `lib.mkDeployNodes` provides only `system` profile.
|
||||||
In order to deploy your `home-manager` configuration you should provide additional profile(s) to deploy-rs config:
|
In order to deploy your `home-manager` configuration you should provide additional profile(s) to deploy-rs config:
|
||||||
|
|
||||||
```nix
|
```nix
|
||||||
# Initially, this line looks like this: deploy.nodes = digga.lib.mkDeployNodes self.nixosConfigurations { };
|
# Initially, this line looks like this: deploy.nodes = digga.lib.mkDeployNodes self.nixosConfigurations { };
|
||||||
deploy.nodes = digga.lib.mkDeployNodes self.nixosConfigurations
|
deploy.nodes = digga.lib.mkDeployNodes self.nixosConfigurations
|
||||||
|
@ -72,5 +79,4 @@ Substitute `<HOSTNAME>`, `<HM_PROFILE>` and `<YOUR_USERNAME>` placeholders (omit
|
||||||
`<ANOTHER_HM_PROFILE>` is there to illustrate deploying multiple `home-manager` configurations. Either substitute those as well,
|
`<ANOTHER_HM_PROFILE>` is there to illustrate deploying multiple `home-manager` configurations. Either substitute those as well,
|
||||||
or remove them altogether. Don't forget the `profileOrder` variable.
|
or remove them altogether. Don't forget the `profileOrder` variable.
|
||||||
|
|
||||||
|
|
||||||
[d-rs]: https://github.com/serokell/deploy-rs
|
[d-rs]: https://github.com/serokell/deploy-rs
|
||||||
|
|
|
@ -1,4 +1,5 @@
|
||||||
# Hercules CI
|
# Hercules CI
|
||||||
|
|
||||||
If you start adding your own packages and configurations, you'll probably have
|
If you start adding your own packages and configurations, you'll probably have
|
||||||
at least a few binary artifacts. With hercules we can build every package in
|
at least a few binary artifacts. With hercules we can build every package in
|
||||||
our configuration automatically, on every commit. Additionally, we can have it
|
our configuration automatically, on every commit. Additionally, we can have it
|
||||||
|
@ -8,6 +9,7 @@ This will work whether your copy is a fork, or a bare template, as long as your
|
||||||
repo is hosted on GitHub.
|
repo is hosted on GitHub.
|
||||||
|
|
||||||
## Setup
|
## Setup
|
||||||
|
|
||||||
Just head over to [hercules-ci.com](https://hercules-ci.com) to make an account.
|
Just head over to [hercules-ci.com](https://hercules-ci.com) to make an account.
|
||||||
|
|
||||||
Then follow the docs to set up an [agent][agent], if you want to deploy to a
|
Then follow the docs to set up an [agent][agent], if you want to deploy to a
|
||||||
|
@ -15,6 +17,7 @@ binary cache (and of course you do), be sure _not_ to skip the
|
||||||
[binary-caches.json][cache].
|
[binary-caches.json][cache].
|
||||||
|
|
||||||
## Ready to Use
|
## Ready to Use
|
||||||
|
|
||||||
The repo is already set up with the proper _default.nix_ file, building all
|
The repo is already set up with the proper _default.nix_ file, building all
|
||||||
declared packages, checks, profiles and shells. So you can see if something
|
declared packages, checks, profiles and shells. So you can see if something
|
||||||
breaks, and never build the same package twice!
|
breaks, and never build the same package twice!
|
||||||
|
@ -23,6 +26,7 @@ If you want to get fancy, you could even have hercules
|
||||||
[deploy your configuration](https://docs.hercules-ci.com/hercules-ci-effects/guide/deploy-a-nixos-machine/)!
|
[deploy your configuration](https://docs.hercules-ci.com/hercules-ci-effects/guide/deploy-a-nixos-machine/)!
|
||||||
|
|
||||||
> ##### _Note:_
|
> ##### _Note:_
|
||||||
|
>
|
||||||
> Hercules doesn't have access to anything encrypted in the
|
> Hercules doesn't have access to anything encrypted in the
|
||||||
> [secrets folder](../../secrets), so none of your secrets will accidentally get
|
> [secrets folder](../../secrets), so none of your secrets will accidentally get
|
||||||
> pushed to a cache by mistake.
|
> pushed to a cache by mistake.
|
||||||
|
|
|
@ -1,4 +1,5 @@
|
||||||
# Integrations
|
# Integrations
|
||||||
|
|
||||||
This section explores some of the optional tools included with devos to provide
|
This section explores some of the optional tools included with devos to provide
|
||||||
a solution to common concerns such as ci and remote deployment. An effort is
|
a solution to common concerns such as ci and remote deployment. An effort is
|
||||||
made to choose tools that treat nix, and where possible flakes, as first class
|
made to choose tools that treat nix, and where possible flakes, as first class
|
||||||
|
|
|
@ -1,4 +1,5 @@
|
||||||
# nvfetcher
|
# nvfetcher
|
||||||
|
|
||||||
[NvFetcher][nvf] is a workflow companion for updating nix sources.
|
[NvFetcher][nvf] is a workflow companion for updating nix sources.
|
||||||
|
|
||||||
You can specify an origin source and an update configuration, and
|
You can specify an origin source and an update configuration, and
|
||||||
|
@ -15,6 +16,7 @@ and commit the results.
|
||||||
## Usage
|
## Usage
|
||||||
|
|
||||||
Statically fetching (not tracking) a particular tag from a github repo:
|
Statically fetching (not tracking) a particular tag from a github repo:
|
||||||
|
|
||||||
```toml
|
```toml
|
||||||
[manix]
|
[manix]
|
||||||
src.manual = "v0.6.3"
|
src.manual = "v0.6.3"
|
||||||
|
@ -22,6 +24,7 @@ fetch.github = "mlvzk/manix"
|
||||||
```
|
```
|
||||||
|
|
||||||
Tracking the latest github _release_ from a github repo:
|
Tracking the latest github _release_ from a github repo:
|
||||||
|
|
||||||
```toml
|
```toml
|
||||||
[manix]
|
[manix]
|
||||||
src.github = "mlvzk/manix" # responsible for tracking
|
src.github = "mlvzk/manix" # responsible for tracking
|
||||||
|
@ -29,6 +32,7 @@ fetch.github = "mlvzk/manix" # responsible for fetching
|
||||||
```
|
```
|
||||||
|
|
||||||
Tracking the latest commit of a git repository and fetch from a git repo:
|
Tracking the latest commit of a git repository and fetch from a git repo:
|
||||||
|
|
||||||
```toml
|
```toml
|
||||||
[manix]
|
[manix]
|
||||||
src.git = "https://github.com/mlvzk/manix.git" # responsible for tracking
|
src.git = "https://github.com/mlvzk/manix.git" # responsible for tracking
|
||||||
|
@ -36,6 +40,7 @@ fetch.git = "https://github.com/mlvzk/manix.git" # responsible for fetching
|
||||||
```
|
```
|
||||||
|
|
||||||
> ##### _Note:_
|
> ##### _Note:_
|
||||||
|
>
|
||||||
> Please refer to the [NvFetcher Readme][nvf-readme] for more options.
|
> Please refer to the [NvFetcher Readme][nvf-readme] for more options.
|
||||||
|
|
||||||
[nvf]: https://github.com/berberman/nvfetcher
|
[nvf]: https://github.com/berberman/nvfetcher
|
||||||
|
|
|
@ -1,3 +1,4 @@
|
||||||
# Layout
|
# Layout
|
||||||
|
|
||||||
Each of the following sections is a directory whose contents are output to the
|
Each of the following sections is a directory whose contents are output to the
|
||||||
outside world via the flake's outputs. Check each chapter for details.
|
outside world via the flake's outputs. Check each chapter for details.
|
||||||
|
|
|
@ -1,4 +1,5 @@
|
||||||
# Modules
|
# Modules
|
||||||
|
|
||||||
The modules directory is a replica of nixpkg's NixOS [modules][nixpkgs-modules]
|
The modules directory is a replica of nixpkg's NixOS [modules][nixpkgs-modules]
|
||||||
, and follows the same semantics. This allows for trivial upstreaming into
|
, and follows the same semantics. This allows for trivial upstreaming into
|
||||||
nixpkgs proper once your module is sufficiently stable.
|
nixpkgs proper once your module is sufficiently stable.
|
||||||
|
@ -6,18 +7,21 @@ nixpkgs proper once your module is sufficiently stable.
|
||||||
All modules linked in _module-list.nix_ are automatically exported via
|
All modules linked in _module-list.nix_ are automatically exported via
|
||||||
`nixosModules.<file-basename>`, and imported into all [hosts](../concepts/hosts.md).
|
`nixosModules.<file-basename>`, and imported into all [hosts](../concepts/hosts.md).
|
||||||
|
|
||||||
|
|
||||||
> ##### _Note:_
|
> ##### _Note:_
|
||||||
|
>
|
||||||
> This is reserved for declaring brand new module options. If you just want to
|
> This is reserved for declaring brand new module options. If you just want to
|
||||||
> declare a coherent configuration of already existing and related NixOS options
|
> declare a coherent configuration of already existing and related NixOS options
|
||||||
> , use [profiles](../concepts/profiles.md) instead.
|
> , use [profiles](../concepts/profiles.md) instead.
|
||||||
|
|
||||||
## Semantics
|
## Semantics
|
||||||
|
|
||||||
In case you've never written a module for nixpkgs before, here is a brief
|
In case you've never written a module for nixpkgs before, here is a brief
|
||||||
outline of the process.
|
outline of the process.
|
||||||
|
|
||||||
### Declaration
|
### Declaration
|
||||||
|
|
||||||
modules/services/service-category/my-service.nix:
|
modules/services/service-category/my-service.nix:
|
||||||
|
|
||||||
```nix
|
```nix
|
||||||
{ config, lib, ... }:
|
{ config, lib, ... }:
|
||||||
let
|
let
|
||||||
|
@ -37,7 +41,9 @@ in
|
||||||
```
|
```
|
||||||
|
|
||||||
### Import
|
### Import
|
||||||
|
|
||||||
modules/module-list.nix:
|
modules/module-list.nix:
|
||||||
|
|
||||||
```nix
|
```nix
|
||||||
[
|
[
|
||||||
./services/service-category/my-service.nix
|
./services/service-category/my-service.nix
|
||||||
|
@ -47,7 +53,9 @@ modules/module-list.nix:
|
||||||
## Usage
|
## Usage
|
||||||
|
|
||||||
### Internal
|
### Internal
|
||||||
|
|
||||||
profiles/profile-category/my-profile.nix:
|
profiles/profile-category/my-profile.nix:
|
||||||
|
|
||||||
```nix
|
```nix
|
||||||
{ ... }:
|
{ ... }:
|
||||||
{
|
{
|
||||||
|
@ -56,7 +64,9 @@ profiles/profile-category/my-profile.nix:
|
||||||
```
|
```
|
||||||
|
|
||||||
### External
|
### External
|
||||||
|
|
||||||
flake.nix:
|
flake.nix:
|
||||||
|
|
||||||
```nix
|
```nix
|
||||||
{
|
{
|
||||||
# inputs omitted
|
# inputs omitted
|
||||||
|
|
|
@ -1,4 +1,5 @@
|
||||||
# Overlays
|
# Overlays
|
||||||
|
|
||||||
Writing overlays is a common occurence when using a NixOS system. Therefore,
|
Writing overlays is a common occurence when using a NixOS system. Therefore,
|
||||||
we want to keep the process as simple and straightforward as possible.
|
we want to keep the process as simple and straightforward as possible.
|
||||||
|
|
||||||
|
@ -9,7 +10,9 @@ exported via `overlays.<channel>/<pkgName>` _as well as_
|
||||||
write it.
|
write it.
|
||||||
|
|
||||||
## Example
|
## Example
|
||||||
|
|
||||||
overlays/kakoune.nix:
|
overlays/kakoune.nix:
|
||||||
|
|
||||||
```nix
|
```nix
|
||||||
final: prev: {
|
final: prev: {
|
||||||
kakoune = prev.kakoune.override {
|
kakoune = prev.kakoune.override {
|
||||||
|
|
|
@ -1,4 +1,5 @@
|
||||||
# Packages
|
# Packages
|
||||||
|
|
||||||
Similar to [modules](./modules.md), the pkgs directory mirrors the upstream
|
Similar to [modules](./modules.md), the pkgs directory mirrors the upstream
|
||||||
[nixpkgs/pkgs][pkgs], and for the same reason; if you ever want to upstream
|
[nixpkgs/pkgs][pkgs], and for the same reason; if you ever want to upstream
|
||||||
your package, it's as simple as dropping it into the nixpkgs/pkgs directory.
|
your package, it's as simple as dropping it into the nixpkgs/pkgs directory.
|
||||||
|
@ -19,20 +20,24 @@ date.
|
||||||
This is best understood by the simple example below.
|
This is best understood by the simple example below.
|
||||||
|
|
||||||
## Example
|
## Example
|
||||||
|
|
||||||
It is possible to specify sources separately to keep them up to date semi
|
It is possible to specify sources separately to keep them up to date semi
|
||||||
automatically.
|
automatically.
|
||||||
The basic rules are specified in pkgs/sources.toml:
|
The basic rules are specified in pkgs/sources.toml:
|
||||||
|
|
||||||
```toml
|
```toml
|
||||||
# nvfetcher.toml
|
# nvfetcher.toml
|
||||||
[libinih]
|
[libinih]
|
||||||
src.github = "benhoyt/inih"
|
src.github = "benhoyt/inih"
|
||||||
fetch.github = "benhoyt/inih"
|
fetch.github = "benhoyt/inih"
|
||||||
```
|
```
|
||||||
|
|
||||||
After changes to this file as well as to update the packages specified in there run
|
After changes to this file as well as to update the packages specified in there run
|
||||||
nvfetcher (for more details see [nvfetcher](https://github.com/berberman/nvfetcher)).
|
nvfetcher (for more details see [nvfetcher](https://github.com/berberman/nvfetcher)).
|
||||||
|
|
||||||
The pkgs overlay is managed in
|
The pkgs overlay is managed in
|
||||||
pkgs/default.nix:
|
pkgs/default.nix:
|
||||||
|
|
||||||
```nix
|
```nix
|
||||||
final: prev: {
|
final: prev: {
|
||||||
# keep sources first, this makes sources available to the pkgs
|
# keep sources first, this makes sources available to the pkgs
|
||||||
|
@ -45,6 +50,7 @@ final: prev: {
|
||||||
|
|
||||||
Lastly the example package is in
|
Lastly the example package is in
|
||||||
pkgs/development/libraries/libinih/default.nix:
|
pkgs/development/libraries/libinih/default.nix:
|
||||||
|
|
||||||
```nix
|
```nix
|
||||||
{ stdenv, meson, ninja, lib, sources, ... }:
|
{ stdenv, meson, ninja, lib, sources, ... }:
|
||||||
stdenv.mkDerivation {
|
stdenv.mkDerivation {
|
||||||
|
@ -59,8 +65,8 @@ stdenv.mkDerivation {
|
||||||
}
|
}
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
## Migration from flake based approach
|
## Migration from flake based approach
|
||||||
|
|
||||||
Previous to nvfetcher it was possible to manage sources via a pkgs/flake.nix, the main changes from there are that sources where in the attribute "srcs" (now "sources") and the contents of the sources where slightly different.
|
Previous to nvfetcher it was possible to manage sources via a pkgs/flake.nix, the main changes from there are that sources where in the attribute "srcs" (now "sources") and the contents of the sources where slightly different.
|
||||||
In order to switch to the new system, rewrite pkgs/flake.nix to a pkgs/sources.toml file using the documentation of nvfetcher,
|
In order to switch to the new system, rewrite pkgs/flake.nix to a pkgs/sources.toml file using the documentation of nvfetcher,
|
||||||
add the line that calls the sources at the beginning of pkgs/default.nix, and
|
add the line that calls the sources at the beginning of pkgs/default.nix, and
|
||||||
|
@ -69,6 +75,7 @@ accomodate the small changes in the packages as can be seen from the example.
|
||||||
The example package looked like:
|
The example package looked like:
|
||||||
|
|
||||||
pkgs/flake.nix:
|
pkgs/flake.nix:
|
||||||
|
|
||||||
```nix
|
```nix
|
||||||
{
|
{
|
||||||
description = "Package sources";
|
description = "Package sources";
|
||||||
|
@ -81,6 +88,7 @@ pkgs/flake.nix:
|
||||||
```
|
```
|
||||||
|
|
||||||
pkgs/default.nix:
|
pkgs/default.nix:
|
||||||
|
|
||||||
```nix
|
```nix
|
||||||
final: prev: {
|
final: prev: {
|
||||||
# then, call packages with `final.callPackage`
|
# then, call packages with `final.callPackage`
|
||||||
|
@ -89,6 +97,7 @@ final: prev: {
|
||||||
```
|
```
|
||||||
|
|
||||||
pkgs/development/libraries/libinih/default.nix:
|
pkgs/development/libraries/libinih/default.nix:
|
||||||
|
|
||||||
```nix
|
```nix
|
||||||
{ stdenv, meson, ninja, lib, srcs, ... }:
|
{ stdenv, meson, ninja, lib, srcs, ... }:
|
||||||
let inherit (srcs) libinih; in
|
let inherit (srcs) libinih; in
|
||||||
|
|
|
@ -1,9 +1,11 @@
|
||||||
# Secrets
|
# Secrets
|
||||||
|
|
||||||
Secrets are managed using [agenix][agenix]
|
Secrets are managed using [agenix][agenix]
|
||||||
so you can keep your flake in a public repository like GitHub without
|
so you can keep your flake in a public repository like GitHub without
|
||||||
exposing your password or other sensitive data.
|
exposing your password or other sensitive data.
|
||||||
|
|
||||||
## Agenix
|
## Agenix
|
||||||
|
|
||||||
Currently, there is [no mechanism][secrets-issue] in nix itself to deploy secrets
|
Currently, there is [no mechanism][secrets-issue] in nix itself to deploy secrets
|
||||||
within the nix store because it is world-readable.
|
within the nix store because it is world-readable.
|
||||||
|
|
||||||
|
@ -17,6 +19,7 @@ matching ssh private key can read the data. The [age module][age module] will ad
|
||||||
encrypted files to the nix store and decrypt them on activation to `/run/agenix`.
|
encrypted files to the nix store and decrypt them on activation to `/run/agenix`.
|
||||||
|
|
||||||
### Setup
|
### Setup
|
||||||
|
|
||||||
All hosts must have openssh enabled, this is done by default in the core profile.
|
All hosts must have openssh enabled, this is done by default in the core profile.
|
||||||
|
|
||||||
You need to populate your `secrets/secrets.nix` with the proper ssh public keys.
|
You need to populate your `secrets/secrets.nix` with the proper ssh public keys.
|
||||||
|
@ -24,6 +27,7 @@ Be extra careful to make sure you only add public keys, you should never share a
|
||||||
private key!!
|
private key!!
|
||||||
|
|
||||||
secrets/secrets.nix:
|
secrets/secrets.nix:
|
||||||
|
|
||||||
```nix
|
```nix
|
||||||
let
|
let
|
||||||
system = "<system ssh key>";
|
system = "<system ssh key>";
|
||||||
|
@ -37,22 +41,25 @@ this file doesn't exist you likely need to enable openssh and rebuild your syste
|
||||||
|
|
||||||
Your users ssh public key is probably stored in `~/.ssh/id_ed25519.pub` or
|
Your users ssh public key is probably stored in `~/.ssh/id_ed25519.pub` or
|
||||||
`~/.ssh/id_rsa.pub`. If you haven't generated a ssh key yet, be sure do so:
|
`~/.ssh/id_rsa.pub`. If you haven't generated a ssh key yet, be sure do so:
|
||||||
|
|
||||||
```sh
|
```sh
|
||||||
ssh-keygen -t ed25519
|
ssh-keygen -t ed25519
|
||||||
```
|
```
|
||||||
|
|
||||||
> ##### _Note:_
|
> ##### _Note:_
|
||||||
|
>
|
||||||
> The underlying tool used by agenix, rage, doesn't work well with password protected
|
> The underlying tool used by agenix, rage, doesn't work well with password protected
|
||||||
> ssh keys. So if you have lots of secrets you might have to type in your password many
|
> ssh keys. So if you have lots of secrets you might have to type in your password many
|
||||||
> times.
|
> times.
|
||||||
|
|
||||||
|
|
||||||
### Secrets
|
### Secrets
|
||||||
|
|
||||||
You will need the `agenix` command to create secrets. DevOS conveniently provides that
|
You will need the `agenix` command to create secrets. DevOS conveniently provides that
|
||||||
in the devShell, so just run `nix develop` whenever you want to edit secrets. Make sure
|
in the devShell, so just run `nix develop` whenever you want to edit secrets. Make sure
|
||||||
to always run `agenix` while in the `secrets/` folder, so it can pick up your `secrets.nix`.
|
to always run `agenix` while in the `secrets/` folder, so it can pick up your `secrets.nix`.
|
||||||
|
|
||||||
To create secrets, simply add lines to your `secrets/secrets.nix`:
|
To create secrets, simply add lines to your `secrets/secrets.nix`:
|
||||||
|
|
||||||
```
|
```
|
||||||
let
|
let
|
||||||
...
|
...
|
||||||
|
@ -62,21 +69,26 @@ in
|
||||||
"secret.age".publicKeys = allKeys;
|
"secret.age".publicKeys = allKeys;
|
||||||
}
|
}
|
||||||
```
|
```
|
||||||
|
|
||||||
That would tell agenix to create a `secret.age` file that is encrypted with the `system`
|
That would tell agenix to create a `secret.age` file that is encrypted with the `system`
|
||||||
and `user` ssh public key.
|
and `user` ssh public key.
|
||||||
|
|
||||||
Then go into the `secrets` folder and run:
|
Then go into the `secrets` folder and run:
|
||||||
|
|
||||||
```sh
|
```sh
|
||||||
agenix -e secret.age
|
agenix -e secret.age
|
||||||
```
|
```
|
||||||
|
|
||||||
This will create the `secret.age`, if it doesn't already exist, and allow you to edit it.
|
This will create the `secret.age`, if it doesn't already exist, and allow you to edit it.
|
||||||
|
|
||||||
If you ever change the `publicKeys` entry of any secret make sure to rekey the secrets:
|
If you ever change the `publicKeys` entry of any secret make sure to rekey the secrets:
|
||||||
|
|
||||||
```sh
|
```sh
|
||||||
agenix --rekey
|
agenix --rekey
|
||||||
```
|
```
|
||||||
|
|
||||||
### Usage
|
### Usage
|
||||||
|
|
||||||
Once you have your secret file encrypted and ready to use, you can utilize the [age module][age module]
|
Once you have your secret file encrypted and ready to use, you can utilize the [age module][age module]
|
||||||
to ensure that your secrets end up in `/run/secrets`.
|
to ensure that your secrets end up in `/run/secrets`.
|
||||||
|
|
||||||
|
@ -89,15 +101,14 @@ In any profile that uses a NixOS module that requires a secret you can enable a
|
||||||
}
|
}
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
Then you can just pass the path `/run/agenix/mysecret` to the module.
|
Then you can just pass the path `/run/agenix/mysecret` to the module.
|
||||||
|
|
||||||
You can make use of the many options provided by the age module to customize where and how
|
You can make use of the many options provided by the age module to customize where and how
|
||||||
secrets get decrypted. You can learn about them by looking at the
|
secrets get decrypted. You can learn about them by looking at the
|
||||||
[age module][age module].
|
[age module][age module].
|
||||||
|
|
||||||
|
|
||||||
> ##### _Note:_
|
> ##### _Note:_
|
||||||
|
>
|
||||||
> You can take a look at the [agenix repository][agenix] for more information
|
> You can take a look at the [agenix repository][agenix] for more information
|
||||||
> about the tool.
|
> about the tool.
|
||||||
|
|
||||||
|
|
|
@ -1,18 +1,24 @@
|
||||||
# Quick Start
|
# Quick Start
|
||||||
|
|
||||||
The only dependency is nix, so make sure you have it [installed][install-nix].
|
The only dependency is nix, so make sure you have it [installed][install-nix].
|
||||||
|
|
||||||
## Get the Template
|
## Get the Template
|
||||||
|
|
||||||
If you currently don't have flakes setup, you can utilize the digga shell to pull the template:
|
If you currently don't have flakes setup, you can utilize the digga shell to pull the template:
|
||||||
|
|
||||||
```sh
|
```sh
|
||||||
nix-shell "https://github.com/divnix/digga/archive/main.tar.gz" \
|
nix-shell "https://github.com/divnix/digga/archive/main.tar.gz" \
|
||||||
--run "nix flake init -t github:divnix/digga"
|
--run "nix flake init -t github:divnix/digga"
|
||||||
```
|
```
|
||||||
|
|
||||||
If you already have flakes support, you can directly pull the template:
|
If you already have flakes support, you can directly pull the template:
|
||||||
|
|
||||||
```sh
|
```sh
|
||||||
nix flake init -t github:divnix/digga
|
nix flake init -t github:divnix/digga
|
||||||
```
|
```
|
||||||
|
|
||||||
Then make sure to create the git repository:
|
Then make sure to create the git repository:
|
||||||
|
|
||||||
```sh
|
```sh
|
||||||
git init
|
git init
|
||||||
git add .
|
git add .
|
||||||
|
@ -20,11 +26,14 @@ git commit -m init
|
||||||
```
|
```
|
||||||
|
|
||||||
To drop into a nix-shell, if you don't have flakes setup, use the digga shell to create a `flake.lock`:
|
To drop into a nix-shell, if you don't have flakes setup, use the digga shell to create a `flake.lock`:
|
||||||
|
|
||||||
```sh
|
```sh
|
||||||
nix-shell "https://github.com/divnix/digga/archive/main.tar.gz" \
|
nix-shell "https://github.com/divnix/digga/archive/main.tar.gz" \
|
||||||
--run "nix flake lock"
|
--run "nix flake lock"
|
||||||
```
|
```
|
||||||
|
|
||||||
Or if you do have flakes support, just run:
|
Or if you do have flakes support, just run:
|
||||||
|
|
||||||
```sh
|
```sh
|
||||||
nix flake lock
|
nix flake lock
|
||||||
```
|
```
|
||||||
|
@ -35,6 +44,7 @@ version required. You can run `menu` to confirm that you are using digga (expect
|
||||||
In addition, the [binary cache](../integrations/cachix.md) is added for faster deployment.
|
In addition, the [binary cache](../integrations/cachix.md) is added for faster deployment.
|
||||||
|
|
||||||
> ##### _Notes:_
|
> ##### _Notes:_
|
||||||
|
>
|
||||||
> - Flakes ignore files that have not been added to git, so be sure to stage new
|
> - Flakes ignore files that have not been added to git, so be sure to stage new
|
||||||
> files before building the system.
|
> files before building the system.
|
||||||
> - You can choose to simply clone the repo with git if you want to follow
|
> - You can choose to simply clone the repo with git if you want to follow
|
||||||
|
@ -46,5 +56,4 @@ In addition, the [binary cache](../integrations/cachix.md) is added for faster d
|
||||||
|
|
||||||
- [Make installable ISO](./iso.md)
|
- [Make installable ISO](./iso.md)
|
||||||
|
|
||||||
|
|
||||||
[install-nix]: https://nixos.org/manual/nix/stable/#sect-multi-user-installation
|
[install-nix]: https://nixos.org/manual/nix/stable/#sect-multi-user-installation
|
||||||
|
|
|
@ -6,12 +6,14 @@ configuration, and, optionally, run them in
|
||||||
[CI](./integrations/hercules.md).
|
[CI](./integrations/hercules.md).
|
||||||
|
|
||||||
## Unit Tests
|
## Unit Tests
|
||||||
|
|
||||||
Unit tests can be created from regular derivations, and they can do
|
Unit tests can be created from regular derivations, and they can do
|
||||||
almost anything you can imagine. By convention, it is best to test your
|
almost anything you can imagine. By convention, it is best to test your
|
||||||
packages during their [check phase][check]. All packages and their tests will
|
packages during their [check phase][check]. All packages and their tests will
|
||||||
be built during CI.
|
be built during CI.
|
||||||
|
|
||||||
## Integration Tests
|
## Integration Tests
|
||||||
|
|
||||||
All your profiles defined in suites will be tested in a NixOS VM.
|
All your profiles defined in suites will be tested in a NixOS VM.
|
||||||
|
|
||||||
You can write integration tests for one or more NixOS VMs that can,
|
You can write integration tests for one or more NixOS VMs that can,
|
||||||
|
|
|
@ -1,17 +1,15 @@
|
||||||
{ suites, ... }:
|
{suites, ...}: {
|
||||||
{
|
|
||||||
### root password is empty by default ###
|
### root password is empty by default ###
|
||||||
### default password: pub-solar, optional: add your SSH keys
|
### default password: pub-solar, optional: add your SSH keys
|
||||||
imports =
|
imports =
|
||||||
suites.iso
|
suites.iso;
|
||||||
;
|
|
||||||
|
|
||||||
boot.loader.systemd-boot.enable = true;
|
boot.loader.systemd-boot.enable = true;
|
||||||
boot.loader.efi.canTouchEfiVariables = true;
|
boot.loader.efi.canTouchEfiVariables = true;
|
||||||
|
|
||||||
networking.networkmanager.enable = true;
|
networking.networkmanager.enable = true;
|
||||||
|
|
||||||
fileSystems."/" = { device = "/dev/disk/by-label/nixos"; };
|
fileSystems."/" = {device = "/dev/disk/by-label/nixos";};
|
||||||
|
|
||||||
# This value determines the NixOS release from which the default
|
# This value determines the NixOS release from which the default
|
||||||
# settings for stateful data, like file locations and database versions
|
# settings for stateful data, like file locations and database versions
|
||||||
|
|
|
@ -1,10 +1,14 @@
|
||||||
{ config, lib, pkgs, profiles, ... }:
|
{
|
||||||
with lib;
|
config,
|
||||||
let
|
lib,
|
||||||
|
pkgs,
|
||||||
|
profiles,
|
||||||
|
...
|
||||||
|
}:
|
||||||
|
with lib; let
|
||||||
# Gets hostname of host to be bundled inside iso
|
# Gets hostname of host to be bundled inside iso
|
||||||
# Copied from https://github.com/divnix/digga/blob/30ffa0b02272dc56c94fd3c7d8a5a0f07ca197bf/modules/bootstrap-iso.nix#L3-L11
|
# Copied from https://github.com/divnix/digga/blob/30ffa0b02272dc56c94fd3c7d8a5a0f07ca197bf/modules/bootstrap-iso.nix#L3-L11
|
||||||
getFqdn = config:
|
getFqdn = config: let
|
||||||
let
|
|
||||||
net = config.networking;
|
net = config.networking;
|
||||||
fqdn =
|
fqdn =
|
||||||
if (net ? domain) && (net.domain != null)
|
if (net ? domain) && (net.domain != null)
|
||||||
|
@ -12,8 +16,7 @@ let
|
||||||
else net.hostName;
|
else net.hostName;
|
||||||
in
|
in
|
||||||
fqdn;
|
fqdn;
|
||||||
in
|
in {
|
||||||
{
|
|
||||||
# build with: `nix build ".#nixosConfigurations.bootstrap.config.system.build.isoImage"`
|
# build with: `nix build ".#nixosConfigurations.bootstrap.config.system.build.isoImage"`
|
||||||
imports = [
|
imports = [
|
||||||
# profiles.networking
|
# profiles.networking
|
||||||
|
@ -28,7 +31,7 @@ in
|
||||||
boot.loader.systemd-boot.enable = true;
|
boot.loader.systemd-boot.enable = true;
|
||||||
|
|
||||||
# will be overridden by the bootstrapIso instrumentation
|
# will be overridden by the bootstrapIso instrumentation
|
||||||
fileSystems."/" = { device = "/dev/disk/by-label/nixos"; };
|
fileSystems."/" = {device = "/dev/disk/by-label/nixos";};
|
||||||
|
|
||||||
system.nixos.label = "PubSolarOS-" + config.system.nixos.version;
|
system.nixos.label = "PubSolarOS-" + config.system.nixos.version;
|
||||||
|
|
||||||
|
|
|
@ -1,6 +1,7 @@
|
||||||
{ suites, ... }:
|
{suites, ...}: {
|
||||||
{
|
imports =
|
||||||
imports = [
|
[
|
||||||
./dumpyourvms.nix
|
./dumpyourvms.nix
|
||||||
] ++ suites.dumpyourvms;
|
]
|
||||||
|
++ suites.dumpyourvms;
|
||||||
}
|
}
|
||||||
|
|
|
@ -1,30 +1,31 @@
|
||||||
# Do not modify this file! It was generated by ‘nixos-generate-config’
|
# Do not modify this file! It was generated by ‘nixos-generate-config’
|
||||||
# and may be overwritten by future invocations. Please make changes
|
# and may be overwritten by future invocations. Please make changes
|
||||||
# to /etc/nixos/configuration.nix instead.
|
# to /etc/nixos/configuration.nix instead.
|
||||||
{ config, lib, pkgs, modulesPath, ... }:
|
|
||||||
|
|
||||||
{
|
{
|
||||||
imports =
|
config,
|
||||||
[
|
lib,
|
||||||
|
pkgs,
|
||||||
|
modulesPath,
|
||||||
|
...
|
||||||
|
}: {
|
||||||
|
imports = [
|
||||||
#(modulesPath + "/hardware/network/broadcom-43xx.nix")
|
#(modulesPath + "/hardware/network/broadcom-43xx.nix")
|
||||||
(modulesPath + "/installer/scan/not-detected.nix")
|
(modulesPath + "/installer/scan/not-detected.nix")
|
||||||
];
|
];
|
||||||
|
|
||||||
boot.initrd.availableKernelModules = [ "xhci_pci" "nvme" "usbhid" "usb_storage" "sd_mod" ];
|
boot.initrd.availableKernelModules = ["xhci_pci" "nvme" "usbhid" "usb_storage" "sd_mod"];
|
||||||
boot.initrd.kernelModules = [ ];
|
boot.initrd.kernelModules = [];
|
||||||
boot.kernelModules = [ "kvm-intel" ];
|
boot.kernelModules = ["kvm-intel"];
|
||||||
boot.extraModulePackages = [ ];
|
boot.extraModulePackages = [];
|
||||||
|
|
||||||
fileSystems."/" =
|
fileSystems."/" = {
|
||||||
{
|
|
||||||
device = "/dev/disk/by-uuid/17bbb016-d27c-47da-8805-58c6395891e8";
|
device = "/dev/disk/by-uuid/17bbb016-d27c-47da-8805-58c6395891e8";
|
||||||
fsType = "ext4";
|
fsType = "ext4";
|
||||||
};
|
};
|
||||||
|
|
||||||
boot.initrd.luks.devices."cryptroot".device = "/dev/disk/by-uuid/c100b9a7-99d7-44d9-b7c2-3892a5f233c4";
|
boot.initrd.luks.devices."cryptroot".device = "/dev/disk/by-uuid/c100b9a7-99d7-44d9-b7c2-3892a5f233c4";
|
||||||
|
|
||||||
fileSystems."/boot" =
|
fileSystems."/boot" = {
|
||||||
{
|
|
||||||
device = "/dev/disk/by-uuid/06B8-5414";
|
device = "/dev/disk/by-uuid/06B8-5414";
|
||||||
fsType = "vfat";
|
fsType = "vfat";
|
||||||
};
|
};
|
||||||
|
|
|
@ -1,9 +1,15 @@
|
||||||
{ config, lib, pkgs, profiles, ... }:
|
|
||||||
{
|
{
|
||||||
|
config,
|
||||||
|
lib,
|
||||||
|
pkgs,
|
||||||
|
profiles,
|
||||||
|
...
|
||||||
|
}: {
|
||||||
imports = [
|
imports = [
|
||||||
# profiles.networking
|
# profiles.networking
|
||||||
#profiles.core
|
#profiles.core
|
||||||
"${fetchTarball {
|
"${
|
||||||
|
fetchTarball {
|
||||||
url = "https://github.com/NixOS/nixos-hardware/archive/8f1bf828d8606fe38a02df312cf14546ae200a72.tar.gz";
|
url = "https://github.com/NixOS/nixos-hardware/archive/8f1bf828d8606fe38a02df312cf14546ae200a72.tar.gz";
|
||||||
sha256 = "11milap153g3f63fcrcv4777vd64f7wlfkk9p3kpxi6dqd2sxvh4";
|
sha256 = "11milap153g3f63fcrcv4777vd64f7wlfkk9p3kpxi6dqd2sxvh4";
|
||||||
}
|
}
|
||||||
|
@ -21,19 +27,19 @@
|
||||||
"/" = {
|
"/" = {
|
||||||
device = "/dev/disk/by-label/NIXOS_SD";
|
device = "/dev/disk/by-label/NIXOS_SD";
|
||||||
fsType = "ext4";
|
fsType = "ext4";
|
||||||
options = [ "noatime" ];
|
options = ["noatime"];
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
environment.systemPackages = with pkgs; [
|
environment.systemPackages = with pkgs; [
|
||||||
(kodi-gbm.withPackages (p: with p; [ jellyfin netflix youtube ]))
|
(kodi-gbm.withPackages (p: with p; [jellyfin netflix youtube]))
|
||||||
];
|
];
|
||||||
|
|
||||||
services.openssh.enable = true;
|
services.openssh.enable = true;
|
||||||
|
|
||||||
networking.firewall = {
|
networking.firewall = {
|
||||||
allowedTCPPorts = [ 8080 ];
|
allowedTCPPorts = [8080];
|
||||||
allowedUDPPorts = [ 8080 ];
|
allowedUDPPorts = [8080];
|
||||||
};
|
};
|
||||||
|
|
||||||
security.sudo.extraConfig = lib.mkAfter ''
|
security.sudo.extraConfig = lib.mkAfter ''
|
||||||
|
@ -49,9 +55,9 @@
|
||||||
|
|
||||||
useSandbox = true;
|
useSandbox = true;
|
||||||
|
|
||||||
allowedUsers = [ "@wheel" ];
|
allowedUsers = ["@wheel"];
|
||||||
|
|
||||||
trustedUsers = [ "root" "@wheel" ];
|
trustedUsers = ["root" "@wheel"];
|
||||||
|
|
||||||
extraOptions = ''
|
extraOptions = ''
|
||||||
min-free = 536870912
|
min-free = 536870912
|
||||||
|
|
|
@ -1,5 +1,4 @@
|
||||||
{ ... }:
|
{...}: {
|
||||||
{
|
|
||||||
imports = [
|
imports = [
|
||||||
./powder.nix
|
./powder.nix
|
||||||
];
|
];
|
||||||
|
|
|
@ -1,29 +1,33 @@
|
||||||
# Do not modify this file! It was generated by ‘nixos-generate-config’
|
# Do not modify this file! It was generated by ‘nixos-generate-config’
|
||||||
# and may be overwritten by future invocations. Please make changes
|
# and may be overwritten by future invocations. Please make changes
|
||||||
# to /etc/nixos/configuration.nix instead.
|
# to /etc/nixos/configuration.nix instead.
|
||||||
{ config, lib, pkgs, modulesPath, ... }:
|
|
||||||
|
|
||||||
{
|
{
|
||||||
imports = [ ];
|
config,
|
||||||
|
lib,
|
||||||
|
pkgs,
|
||||||
|
modulesPath,
|
||||||
|
...
|
||||||
|
}: {
|
||||||
|
imports = [];
|
||||||
|
|
||||||
boot.initrd.availableKernelModules = [ "ahci" "virtio_pci" "xhci_pci" "sr_mod" "virtio_blk" ];
|
boot.initrd.availableKernelModules = ["ahci" "virtio_pci" "xhci_pci" "sr_mod" "virtio_blk"];
|
||||||
boot.initrd.kernelModules = [ ];
|
boot.initrd.kernelModules = [];
|
||||||
boot.kernelModules = [ ];
|
boot.kernelModules = [];
|
||||||
boot.extraModulePackages = [ ];
|
boot.extraModulePackages = [];
|
||||||
|
|
||||||
fileSystems."/" =
|
fileSystems."/" = {
|
||||||
{ device = "/dev/disk/by-label/nixos";
|
device = "/dev/disk/by-label/nixos";
|
||||||
autoResize = true;
|
autoResize = true;
|
||||||
fsType = "ext4";
|
fsType = "ext4";
|
||||||
};
|
};
|
||||||
|
|
||||||
fileSystems."/boot" =
|
fileSystems."/boot" = {
|
||||||
{ device = "/dev/disk/by-label/boot";
|
device = "/dev/disk/by-label/boot";
|
||||||
fsType = "vfat";
|
fsType = "vfat";
|
||||||
};
|
};
|
||||||
|
|
||||||
fileSystems."/data" =
|
fileSystems."/data" = {
|
||||||
{ device = "/dev/disk/by-label/ephemeral0";
|
device = "/dev/disk/by-label/ephemeral0";
|
||||||
fsType = "ext4";
|
fsType = "ext4";
|
||||||
options = [
|
options = [
|
||||||
"defaults"
|
"defaults"
|
||||||
|
@ -31,7 +35,7 @@
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
|
|
||||||
swapDevices = [ ];
|
swapDevices = [];
|
||||||
|
|
||||||
networking.useDHCP = lib.mkDefault false;
|
networking.useDHCP = lib.mkDefault false;
|
||||||
|
|
||||||
|
|
|
@ -1,6 +1,11 @@
|
||||||
{ config, inputs, lib, pkgs, profiles, ... }:
|
|
||||||
|
|
||||||
{
|
{
|
||||||
|
config,
|
||||||
|
inputs,
|
||||||
|
lib,
|
||||||
|
pkgs,
|
||||||
|
profiles,
|
||||||
|
...
|
||||||
|
}: {
|
||||||
imports = [
|
imports = [
|
||||||
# Include the results of the hardware scan.
|
# Include the results of the hardware scan.
|
||||||
./hardware-configuration.nix
|
./hardware-configuration.nix
|
||||||
|
|
|
@ -1,6 +1,7 @@
|
||||||
{ suites, ... }:
|
{suites, ...}: {
|
||||||
{
|
imports =
|
||||||
imports = [
|
[
|
||||||
./ryzensun.nix
|
./ryzensun.nix
|
||||||
] ++ suites.ryzensun;
|
]
|
||||||
|
++ suites.ryzensun;
|
||||||
}
|
}
|
||||||
|
|
|
@ -1,34 +1,35 @@
|
||||||
# Do not modify this file! It was generated by ‘nixos-generate-config’
|
# Do not modify this file! It was generated by ‘nixos-generate-config’
|
||||||
# and may be overwritten by future invocations. Please make changes
|
# and may be overwritten by future invocations. Please make changes
|
||||||
# to /etc/nixos/configuration.nix instead.
|
# to /etc/nixos/configuration.nix instead.
|
||||||
{ config, lib, pkgs, modulesPath, ... }:
|
|
||||||
|
|
||||||
{
|
{
|
||||||
imports =
|
config,
|
||||||
[
|
lib,
|
||||||
|
pkgs,
|
||||||
|
modulesPath,
|
||||||
|
...
|
||||||
|
}: {
|
||||||
|
imports = [
|
||||||
(modulesPath + "/installer/scan/not-detected.nix")
|
(modulesPath + "/installer/scan/not-detected.nix")
|
||||||
];
|
];
|
||||||
|
|
||||||
boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "ahci" "usbhid" "sd_mod" "sr_mod" ];
|
boot.initrd.availableKernelModules = ["nvme" "xhci_pci" "ahci" "usbhid" "sd_mod" "sr_mod"];
|
||||||
boot.initrd.kernelModules = [ ];
|
boot.initrd.kernelModules = [];
|
||||||
boot.kernelModules = [ "kvm-amd" ];
|
boot.kernelModules = ["kvm-amd"];
|
||||||
boot.extraModulePackages = [ ];
|
boot.extraModulePackages = [];
|
||||||
|
|
||||||
fileSystems."/" =
|
fileSystems."/" = {
|
||||||
{
|
|
||||||
device = "/dev/disk/by-uuid/bad2e49e-c8e7-4516-a6f8-77db999d12b0";
|
device = "/dev/disk/by-uuid/bad2e49e-c8e7-4516-a6f8-77db999d12b0";
|
||||||
fsType = "ext4";
|
fsType = "ext4";
|
||||||
};
|
};
|
||||||
|
|
||||||
boot.initrd.luks.devices."cryptroot".device = "/dev/disk/by-uuid/ef6c5bb0-0bcf-4af4-bbc9-02c849999e54";
|
boot.initrd.luks.devices."cryptroot".device = "/dev/disk/by-uuid/ef6c5bb0-0bcf-4af4-bbc9-02c849999e54";
|
||||||
|
|
||||||
fileSystems."/boot" =
|
fileSystems."/boot" = {
|
||||||
{
|
|
||||||
device = "/dev/disk/by-uuid/2C62-C8B5";
|
device = "/dev/disk/by-uuid/2C62-C8B5";
|
||||||
fsType = "vfat";
|
fsType = "vfat";
|
||||||
};
|
};
|
||||||
|
|
||||||
swapDevices = [ ];
|
swapDevices = [];
|
||||||
|
|
||||||
# high-resolution display
|
# high-resolution display
|
||||||
hardware.video.hidpi.enable = lib.mkDefault true;
|
hardware.video.hidpi.enable = lib.mkDefault true;
|
||||||
|
|
|
@ -1,5 +1,4 @@
|
||||||
{ ... }:
|
{...}: let
|
||||||
let
|
|
||||||
inherit (default.inputs.nixos) lib;
|
inherit (default.inputs.nixos) lib;
|
||||||
|
|
||||||
host = configs.${hostname} or configs.PubSolarOS;
|
host = configs.${hostname} or configs.PubSolarOS;
|
||||||
|
@ -7,4 +6,4 @@ let
|
||||||
default = (import ../.).defaultNix;
|
default = (import ../.).defaultNix;
|
||||||
hostname = lib.fileContents /etc/hostname;
|
hostname = lib.fileContents /etc/hostname;
|
||||||
in
|
in
|
||||||
host
|
host
|
||||||
|
|
|
@ -1,2 +1,2 @@
|
||||||
{ lib }:
|
{lib}:
|
||||||
lib.makeExtensible (self: { })
|
lib.makeExtensible (self: {})
|
||||||
|
|
|
@ -1,19 +1,23 @@
|
||||||
{ lib, config, pkgs, ... }:
|
{
|
||||||
with lib;
|
lib,
|
||||||
let
|
config,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}:
|
||||||
|
with lib; let
|
||||||
psCfg = config.pub-solar;
|
psCfg = config.pub-solar;
|
||||||
cfg = config.pub-solar.devops;
|
cfg = config.pub-solar.devops;
|
||||||
in
|
in {
|
||||||
{
|
|
||||||
options.pub-solar.arduino = {
|
options.pub-solar.arduino = {
|
||||||
enable = mkEnableOption "Life with home automation";
|
enable = mkEnableOption "Life with home automation";
|
||||||
};
|
};
|
||||||
config = mkIf cfg.enable {
|
config = mkIf cfg.enable {
|
||||||
users.users = pkgs.lib.setAttrByPath [ psCfg.user.name ] {
|
users.users = pkgs.lib.setAttrByPath [psCfg.user.name] {
|
||||||
extraGroups = [ "dialout" ];
|
extraGroups = ["dialout"];
|
||||||
};
|
};
|
||||||
|
|
||||||
home-manager = with pkgs; pkgs.lib.setAttrByPath [ "users" psCfg.user.name ] {
|
home-manager = with pkgs;
|
||||||
|
pkgs.lib.setAttrByPath ["users" psCfg.user.name] {
|
||||||
home.packages = [
|
home.packages = [
|
||||||
arduino
|
arduino
|
||||||
arduino-cli
|
arduino-cli
|
||||||
|
|
|
@ -1,5 +1,4 @@
|
||||||
pkgs:
|
pkgs: {
|
||||||
{
|
|
||||||
Service = {
|
Service = {
|
||||||
Type = "dbus";
|
Type = "dbus";
|
||||||
BusName = "com.github.wwmm.easyeffects";
|
BusName = "com.github.wwmm.easyeffects";
|
||||||
|
|
|
@ -8,10 +8,7 @@
|
||||||
{
|
{
|
||||||
"name": "libpipewire-module-rtkit",
|
"name": "libpipewire-module-rtkit",
|
||||||
"args": {},
|
"args": {},
|
||||||
"flags": [
|
"flags": ["ifexists", "nofail"]
|
||||||
"ifexists",
|
|
||||||
"nofail"
|
|
||||||
]
|
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
"name": "libpipewire-module-protocol-native"
|
"name": "libpipewire-module-protocol-native"
|
||||||
|
@ -28,10 +25,7 @@
|
||||||
{
|
{
|
||||||
"name": "libpipewire-module-protocol-pulse",
|
"name": "libpipewire-module-protocol-pulse",
|
||||||
"args": {
|
"args": {
|
||||||
"server.address": [
|
"server.address": ["unix:native", "tcp:4713"],
|
||||||
"unix:native",
|
|
||||||
"tcp:4713"
|
|
||||||
],
|
|
||||||
"vm.overrides": {
|
"vm.overrides": {
|
||||||
"pulse.min.quantum": "1024/48000"
|
"pulse.min.quantum": "1024/48000"
|
||||||
}
|
}
|
||||||
|
|
|
@ -1,10 +1,14 @@
|
||||||
{ lib, config, pkgs, self, ... }:
|
{
|
||||||
with lib;
|
lib,
|
||||||
let
|
config,
|
||||||
|
pkgs,
|
||||||
|
self,
|
||||||
|
...
|
||||||
|
}:
|
||||||
|
with lib; let
|
||||||
psCfg = config.pub-solar;
|
psCfg = config.pub-solar;
|
||||||
cfg = config.pub-solar.ci-runner;
|
cfg = config.pub-solar.ci-runner;
|
||||||
in
|
in {
|
||||||
{
|
|
||||||
options.pub-solar.ci-runner = {
|
options.pub-solar.ci-runner = {
|
||||||
enable = mkEnableOption "Enables a systemd service that runs drone-ci-runner";
|
enable = mkEnableOption "Enables a systemd service that runs drone-ci-runner";
|
||||||
};
|
};
|
||||||
|
@ -26,8 +30,8 @@ in
|
||||||
pkgs.libvirt
|
pkgs.libvirt
|
||||||
];
|
];
|
||||||
|
|
||||||
wantedBy = [ "multi-user.target" ];
|
wantedBy = ["multi-user.target"];
|
||||||
after = [ "network.target" "libvirtd.service" ];
|
after = ["network.target" "libvirtd.service"];
|
||||||
|
|
||||||
script = ''${pkgs.drone-runner-exec}/bin/drone-runner-exec daemon /run/agenix/drone-runner-exec-config'';
|
script = ''${pkgs.drone-runner-exec}/bin/drone-runner-exec daemon /run/agenix/drone-runner-exec-config'';
|
||||||
};
|
};
|
||||||
|
|
|
@ -1,9 +1,12 @@
|
||||||
{ config, pkgs, lib, ... }:
|
|
||||||
with lib;
|
|
||||||
let
|
|
||||||
cfg = config.pub-solar.core;
|
|
||||||
in
|
|
||||||
{
|
{
|
||||||
|
config,
|
||||||
|
pkgs,
|
||||||
|
lib,
|
||||||
|
...
|
||||||
|
}:
|
||||||
|
with lib; let
|
||||||
|
cfg = config.pub-solar.core;
|
||||||
|
in {
|
||||||
options.pub-solar.core.iso-options.enable = mkOption {
|
options.pub-solar.core.iso-options.enable = mkOption {
|
||||||
type = types.bool;
|
type = types.bool;
|
||||||
default = false;
|
default = false;
|
||||||
|
@ -36,7 +39,7 @@ in
|
||||||
kernelPackages = pkgs.linuxPackages_5_15;
|
kernelPackages = pkgs.linuxPackages_5_15;
|
||||||
|
|
||||||
# Support ntfs drives
|
# Support ntfs drives
|
||||||
supportedFilesystems = [ "ntfs" ];
|
supportedFilesystems = ["ntfs"];
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
|
@ -1,10 +1,11 @@
|
||||||
{ config, lib, ... }:
|
|
||||||
|
|
||||||
with lib;
|
|
||||||
let
|
|
||||||
cfg = config.pub-solar.core;
|
|
||||||
in
|
|
||||||
{
|
{
|
||||||
|
config,
|
||||||
|
lib,
|
||||||
|
...
|
||||||
|
}:
|
||||||
|
with lib; let
|
||||||
|
cfg = config.pub-solar.core;
|
||||||
|
in {
|
||||||
imports = [
|
imports = [
|
||||||
./boot.nix
|
./boot.nix
|
||||||
./hibernation.nix
|
./hibernation.nix
|
||||||
|
|
|
@ -1,12 +1,14 @@
|
||||||
{ config, pkgs, lib, ... }:
|
|
||||||
|
|
||||||
{
|
{
|
||||||
|
config,
|
||||||
|
pkgs,
|
||||||
|
lib,
|
||||||
|
...
|
||||||
|
}: {
|
||||||
fonts = {
|
fonts = {
|
||||||
fonts = with pkgs; [ powerline-fonts dejavu_fonts ];
|
fonts = with pkgs; [powerline-fonts dejavu_fonts];
|
||||||
fontconfig.defaultFonts = {
|
fontconfig.defaultFonts = {
|
||||||
monospace = [ "DejaVu Sans Mono for Powerline" ];
|
monospace = ["DejaVu Sans Mono for Powerline"];
|
||||||
sansSerif = [ "DejaVu Sans" ];
|
sansSerif = ["DejaVu Sans"];
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
|
@ -1,9 +1,12 @@
|
||||||
{ config, pkgs, lib, ... }:
|
|
||||||
with lib;
|
|
||||||
let
|
|
||||||
cfg = config.pub-solar.core.hibernation;
|
|
||||||
in
|
|
||||||
{
|
{
|
||||||
|
config,
|
||||||
|
pkgs,
|
||||||
|
lib,
|
||||||
|
...
|
||||||
|
}:
|
||||||
|
with lib; let
|
||||||
|
cfg = config.pub-solar.core.hibernation;
|
||||||
|
in {
|
||||||
options.pub-solar.core.hibernation = {
|
options.pub-solar.core.hibernation = {
|
||||||
enable = mkOption {
|
enable = mkOption {
|
||||||
type = types.bool;
|
type = types.bool;
|
||||||
|
@ -27,7 +30,7 @@ in
|
||||||
config = {
|
config = {
|
||||||
boot = mkIf cfg.enable {
|
boot = mkIf cfg.enable {
|
||||||
resumeDevice = cfg.resumeDevice;
|
resumeDevice = cfg.resumeDevice;
|
||||||
kernelParams = mkIf (cfg.resumeOffset != null) [ "resume_offset=${builtins.toString cfg.resumeOffset}" ];
|
kernelParams = mkIf (cfg.resumeOffset != null) ["resume_offset=${builtins.toString cfg.resumeOffset}"];
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
|
@ -1,6 +1,10 @@
|
||||||
{ config, pkgs, lib, ... }:
|
|
||||||
with lib;
|
|
||||||
{
|
{
|
||||||
|
config,
|
||||||
|
pkgs,
|
||||||
|
lib,
|
||||||
|
...
|
||||||
|
}:
|
||||||
|
with lib; {
|
||||||
config = {
|
config = {
|
||||||
# Set your time zone.
|
# Set your time zone.
|
||||||
time.timeZone = "Europe/Berlin";
|
time.timeZone = "Europe/Berlin";
|
||||||
|
|
|
@ -1,6 +1,9 @@
|
||||||
{ config, pkgs, lib, ... }:
|
|
||||||
|
|
||||||
{
|
{
|
||||||
|
config,
|
||||||
|
pkgs,
|
||||||
|
lib,
|
||||||
|
...
|
||||||
|
}: {
|
||||||
# For rage encryption, all hosts need a ssh key pair
|
# For rage encryption, all hosts need a ssh key pair
|
||||||
services.openssh = {
|
services.openssh = {
|
||||||
enable = true;
|
enable = true;
|
||||||
|
|
|
@ -1,22 +1,26 @@
|
||||||
{ lib, config, pkgs, ... }:
|
{
|
||||||
with lib;
|
lib,
|
||||||
let
|
config,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}:
|
||||||
|
with lib; let
|
||||||
psCfg = config.pub-solar;
|
psCfg = config.pub-solar;
|
||||||
cfg = config.pub-solar.crypto;
|
cfg = config.pub-solar.crypto;
|
||||||
in
|
in {
|
||||||
{
|
|
||||||
options.pub-solar.crypto = {
|
options.pub-solar.crypto = {
|
||||||
enable = mkEnableOption "Life in private";
|
enable = mkEnableOption "Life in private";
|
||||||
};
|
};
|
||||||
|
|
||||||
config = mkIf cfg.enable {
|
config = mkIf cfg.enable {
|
||||||
services.udev.packages = [ pkgs.yubikey-personalization ];
|
services.udev.packages = [pkgs.yubikey-personalization];
|
||||||
services.dbus.packages = [ pkgs.gcr ];
|
services.dbus.packages = [pkgs.gcr];
|
||||||
services.pcscd.enable = true;
|
services.pcscd.enable = true;
|
||||||
|
|
||||||
services.gnome.gnome-keyring.enable = true;
|
services.gnome.gnome-keyring.enable = true;
|
||||||
|
|
||||||
home-manager = with pkgs; pkgs.lib.setAttrByPath [ "users" psCfg.user.name ] {
|
home-manager = with pkgs;
|
||||||
|
pkgs.lib.setAttrByPath ["users" psCfg.user.name] {
|
||||||
systemd.user.services.polkit-gnome-authentication-agent = import ./polkit-gnome-authentication-agent.service.nix pkgs;
|
systemd.user.services.polkit-gnome-authentication-agent = import ./polkit-gnome-authentication-agent.service.nix pkgs;
|
||||||
|
|
||||||
services.gpg-agent = {
|
services.gpg-agent = {
|
||||||
|
|
|
@ -1,16 +1,15 @@
|
||||||
pkgs:
|
pkgs: {
|
||||||
{
|
|
||||||
Unit = {
|
Unit = {
|
||||||
Description = "Legacy polkit authentication agent for GNOME";
|
Description = "Legacy polkit authentication agent for GNOME";
|
||||||
Documentation = [ "https://gitlab.freedesktop.org/polkit/polkit/" ];
|
Documentation = ["https://gitlab.freedesktop.org/polkit/polkit/"];
|
||||||
BindsTo = [ "sway-session.target" ];
|
BindsTo = ["sway-session.target"];
|
||||||
After = [ "sway-session.target" ];
|
After = ["sway-session.target"];
|
||||||
};
|
};
|
||||||
Service = {
|
Service = {
|
||||||
Type = "simple";
|
Type = "simple";
|
||||||
ExecStart = "${pkgs.polkit_gnome}/libexec/polkit-gnome-authentication-agent-1";
|
ExecStart = "${pkgs.polkit_gnome}/libexec/polkit-gnome-authentication-agent-1";
|
||||||
};
|
};
|
||||||
Install = {
|
Install = {
|
||||||
WantedBy = [ "sway-session.target" ];
|
WantedBy = ["sway-session.target"];
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
|
@ -1,16 +1,20 @@
|
||||||
{ lib, config, pkgs, ... }:
|
{
|
||||||
with lib;
|
lib,
|
||||||
let
|
config,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}:
|
||||||
|
with lib; let
|
||||||
psCfg = config.pub-solar;
|
psCfg = config.pub-solar;
|
||||||
cfg = config.pub-solar.devops;
|
cfg = config.pub-solar.devops;
|
||||||
in
|
in {
|
||||||
{
|
|
||||||
options.pub-solar.devops = {
|
options.pub-solar.devops = {
|
||||||
enable = mkEnableOption "Life automated";
|
enable = mkEnableOption "Life automated";
|
||||||
};
|
};
|
||||||
|
|
||||||
config = mkIf cfg.enable {
|
config = mkIf cfg.enable {
|
||||||
home-manager = with pkgs; pkgs.lib.setAttrByPath [ "users" psCfg.user.name ] {
|
home-manager = with pkgs;
|
||||||
|
pkgs.lib.setAttrByPath ["users" psCfg.user.name] {
|
||||||
home.packages = [
|
home.packages = [
|
||||||
drone-cli
|
drone-cli
|
||||||
nmap
|
nmap
|
||||||
|
|
|
@ -1,16 +1,20 @@
|
||||||
{ lib, config, pkgs, ... }:
|
{
|
||||||
with lib;
|
lib,
|
||||||
let
|
config,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}:
|
||||||
|
with lib; let
|
||||||
psCfg = config.pub-solar;
|
psCfg = config.pub-solar;
|
||||||
cfg = config.pub-solar.email;
|
cfg = config.pub-solar.email;
|
||||||
in
|
in {
|
||||||
{
|
|
||||||
options.pub-solar.email = {
|
options.pub-solar.email = {
|
||||||
enable = mkEnableOption "Life in headers";
|
enable = mkEnableOption "Life in headers";
|
||||||
};
|
};
|
||||||
|
|
||||||
config = mkIf cfg.enable {
|
config = mkIf cfg.enable {
|
||||||
home-manager = with pkgs; pkgs.lib.setAttrByPath [ "users" psCfg.user.name ] {
|
home-manager = with pkgs;
|
||||||
|
pkgs.lib.setAttrByPath ["users" psCfg.user.name] {
|
||||||
home.packages = [
|
home.packages = [
|
||||||
w3m
|
w3m
|
||||||
urlscan
|
urlscan
|
||||||
|
|
|
@ -1 +0,0 @@
|
||||||
|
|
|
@ -1,10 +1,13 @@
|
||||||
{ lib, config, pkgs, ... }:
|
{
|
||||||
with lib;
|
lib,
|
||||||
let
|
config,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}:
|
||||||
|
with lib; let
|
||||||
psCfg = config.pub-solar;
|
psCfg = config.pub-solar;
|
||||||
cfg = config.pub-solar.gaming;
|
cfg = config.pub-solar.gaming;
|
||||||
in
|
in {
|
||||||
{
|
|
||||||
options.pub-solar.gaming = {
|
options.pub-solar.gaming = {
|
||||||
enable = mkEnableOption "Life in shooters";
|
enable = mkEnableOption "Life in shooters";
|
||||||
};
|
};
|
||||||
|
@ -12,10 +15,11 @@ in
|
||||||
config = mkIf cfg.enable {
|
config = mkIf cfg.enable {
|
||||||
programs.steam.enable = true;
|
programs.steam.enable = true;
|
||||||
nixpkgs.config.packageOverrides = pkgs: {
|
nixpkgs.config.packageOverrides = pkgs: {
|
||||||
steam = pkgs.steam.override { };
|
steam = pkgs.steam.override {};
|
||||||
};
|
};
|
||||||
|
|
||||||
home-manager = with pkgs; pkgs.lib.setAttrByPath [ "users" psCfg.user.name ] {
|
home-manager = with pkgs;
|
||||||
|
pkgs.lib.setAttrByPath ["users" psCfg.user.name] {
|
||||||
home.packages = [
|
home.packages = [
|
||||||
playonlinux
|
playonlinux
|
||||||
godot
|
godot
|
||||||
|
|
|
@ -1 +0,0 @@
|
||||||
|
|
|
@ -1,31 +1,34 @@
|
||||||
{ lib, config, pkgs, ... }:
|
{
|
||||||
with lib;
|
lib,
|
||||||
let
|
config,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}:
|
||||||
|
with lib; let
|
||||||
psCfg = config.pub-solar;
|
psCfg = config.pub-solar;
|
||||||
cfg = config.pub-solar.graphical;
|
cfg = config.pub-solar.graphical;
|
||||||
yamlFormat = pkgs.formats.yaml { };
|
yamlFormat = pkgs.formats.yaml {};
|
||||||
recursiveMerge = attrList:
|
recursiveMerge = attrList: let
|
||||||
let
|
|
||||||
f = attrPath:
|
f = attrPath:
|
||||||
zipAttrsWith (n: values:
|
zipAttrsWith (
|
||||||
if tail values == [ ]
|
n: values:
|
||||||
|
if tail values == []
|
||||||
then head values
|
then head values
|
||||||
else if all isList values
|
else if all isList values
|
||||||
then unique (concatLists values)
|
then unique (concatLists values)
|
||||||
else if all isAttrs values
|
else if all isAttrs values
|
||||||
then f (attrPath ++ [ n ]) values
|
then f (attrPath ++ [n]) values
|
||||||
else last values
|
else last values
|
||||||
);
|
);
|
||||||
in
|
in
|
||||||
f [ ] attrList;
|
f [] attrList;
|
||||||
in
|
in {
|
||||||
{
|
|
||||||
options.pub-solar.graphical = {
|
options.pub-solar.graphical = {
|
||||||
enable = mkEnableOption "Life in color";
|
enable = mkEnableOption "Life in color";
|
||||||
alacritty = {
|
alacritty = {
|
||||||
settings = mkOption {
|
settings = mkOption {
|
||||||
type = yamlFormat.type;
|
type = yamlFormat.type;
|
||||||
default = { };
|
default = {};
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
autologin.enable = mkOption {
|
autologin.enable = mkOption {
|
||||||
|
@ -71,7 +74,7 @@ in
|
||||||
|
|
||||||
# Required for running Gnome apps outside the Gnome DE, see https://nixos.wiki/wiki/GNOME#Running_GNOME_programs_outside_of_GNOME
|
# Required for running Gnome apps outside the Gnome DE, see https://nixos.wiki/wiki/GNOME#Running_GNOME_programs_outside_of_GNOME
|
||||||
programs.dconf.enable = true;
|
programs.dconf.enable = true;
|
||||||
services.udev.packages = with pkgs; [ gnome3.gnome-settings-daemon ];
|
services.udev.packages = with pkgs; [gnome3.gnome-settings-daemon];
|
||||||
# Enable Sushi, a quick previewer for nautilus
|
# Enable Sushi, a quick previewer for nautilus
|
||||||
services.gnome.sushi.enable = true;
|
services.gnome.sushi.enable = true;
|
||||||
# Enable GVfs, a userspace virtual filesystem
|
# Enable GVfs, a userspace virtual filesystem
|
||||||
|
@ -92,7 +95,8 @@ in
|
||||||
source-sans-pro
|
source-sans-pro
|
||||||
];
|
];
|
||||||
|
|
||||||
home-manager = with pkgs; setAttrByPath [ "users" psCfg.user.name ] {
|
home-manager = with pkgs;
|
||||||
|
setAttrByPath ["users" psCfg.user.name] {
|
||||||
home.packages = [
|
home.packages = [
|
||||||
alacritty
|
alacritty
|
||||||
foot
|
foot
|
||||||
|
@ -119,7 +123,7 @@ in
|
||||||
];
|
];
|
||||||
|
|
||||||
xdg.configFile."alacritty/alacritty.yml" = {
|
xdg.configFile."alacritty/alacritty.yml" = {
|
||||||
source = yamlFormat.generate "alacritty.yml" (recursiveMerge [ (import ./alacritty.nix) cfg.alacritty.settings ]);
|
source = yamlFormat.generate "alacritty.yml" (recursiveMerge [(import ./alacritty.nix) cfg.alacritty.settings]);
|
||||||
};
|
};
|
||||||
|
|
||||||
gtk = {
|
gtk = {
|
||||||
|
@ -141,7 +145,6 @@ in
|
||||||
gtk-xft-rgba = "rgb";
|
gtk-xft-rgba = "rgb";
|
||||||
gtk-application-prefer-dark-theme = "true";
|
gtk-application-prefer-dark-theme = "true";
|
||||||
};
|
};
|
||||||
|
|
||||||
};
|
};
|
||||||
|
|
||||||
# Fix KeepassXC rendering issue
|
# Fix KeepassXC rendering issue
|
||||||
|
|
|
@ -1,16 +1,15 @@
|
||||||
pkgs:
|
pkgs: {
|
||||||
{
|
|
||||||
Unit = {
|
Unit = {
|
||||||
Description = "Lightweight Wayland notification daemon";
|
Description = "Lightweight Wayland notification daemon";
|
||||||
BindsTo = [ "sway-session.target" ];
|
BindsTo = ["sway-session.target"];
|
||||||
After = [ "sway-session.target" ];
|
After = ["sway-session.target"];
|
||||||
# ConditionEnvironment requires systemd v247 to work correctly
|
# ConditionEnvironment requires systemd v247 to work correctly
|
||||||
ConditionEnvironment = [ "WAYLAND_DISPLAY" ];
|
ConditionEnvironment = ["WAYLAND_DISPLAY"];
|
||||||
};
|
};
|
||||||
Service = {
|
Service = {
|
||||||
ExecStart = "${pkgs.networkmanagerapplet}/bin/nm-applet --sm-disable --indicator";
|
ExecStart = "${pkgs.networkmanagerapplet}/bin/nm-applet --sm-disable --indicator";
|
||||||
};
|
};
|
||||||
Install = {
|
Install = {
|
||||||
WantedBy = [ "sway-session.target" ];
|
WantedBy = ["sway-session.target"];
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
|
@ -1,4 +1,4 @@
|
||||||
{ config, ... }: {
|
{config, ...}: {
|
||||||
home-manager.sharedModules = [
|
home-manager.sharedModules = [
|
||||||
{
|
{
|
||||||
home.sessionVariables = {
|
home.sessionVariables = {
|
||||||
|
|
|
@ -1,16 +1,20 @@
|
||||||
{ lib, config, pkgs, ... }:
|
{
|
||||||
with lib;
|
lib,
|
||||||
let
|
config,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}:
|
||||||
|
with lib; let
|
||||||
psCfg = config.pub-solar;
|
psCfg = config.pub-solar;
|
||||||
cfg = config.pub-solar.nextcloud;
|
cfg = config.pub-solar.nextcloud;
|
||||||
in
|
in {
|
||||||
{
|
|
||||||
options.pub-solar.nextcloud = {
|
options.pub-solar.nextcloud = {
|
||||||
enable = mkEnableOption "Life in sync";
|
enable = mkEnableOption "Life in sync";
|
||||||
};
|
};
|
||||||
|
|
||||||
config = mkIf cfg.enable {
|
config = mkIf cfg.enable {
|
||||||
home-manager = with pkgs; pkgs.lib.setAttrByPath [ "users" psCfg.user.name ] {
|
home-manager = with pkgs;
|
||||||
|
pkgs.lib.setAttrByPath ["users" psCfg.user.name] {
|
||||||
systemd.user.services.nextcloud-client = import ./nextcloud.service.nix pkgs;
|
systemd.user.services.nextcloud-client = import ./nextcloud.service.nix pkgs;
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
|
@ -1,12 +1,11 @@
|
||||||
pkgs:
|
pkgs: {
|
||||||
{
|
|
||||||
Unit = {
|
Unit = {
|
||||||
Description = "Nextcloud Client";
|
Description = "Nextcloud Client";
|
||||||
BindsTo = [ "sway-session.target" ];
|
BindsTo = ["sway-session.target"];
|
||||||
Wants = [ "graphical-session-pre.target" ];
|
Wants = ["graphical-session-pre.target"];
|
||||||
After = [ "graphical-session-pre.target" ];
|
After = ["graphical-session-pre.target"];
|
||||||
# ConditionEnvironment requires systemd v247 to work correctly
|
# ConditionEnvironment requires systemd v247 to work correctly
|
||||||
ConditionEnvironment = [ "WAYLAND_DISPLAY" ];
|
ConditionEnvironment = ["WAYLAND_DISPLAY"];
|
||||||
};
|
};
|
||||||
Service = {
|
Service = {
|
||||||
Type = "simple";
|
Type = "simple";
|
||||||
|
@ -16,6 +15,6 @@ pkgs:
|
||||||
Restart = "on-failure";
|
Restart = "on-failure";
|
||||||
};
|
};
|
||||||
Install = {
|
Install = {
|
||||||
WantedBy = [ "sway-session.target" ];
|
WantedBy = ["sway-session.target"];
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
|
@ -1,4 +1,8 @@
|
||||||
{ channel, inputs, ... }: {
|
{
|
||||||
|
channel,
|
||||||
|
inputs,
|
||||||
|
...
|
||||||
|
}: {
|
||||||
nix.nixPath = [
|
nix.nixPath = [
|
||||||
"nixpkgs=${channel.input}"
|
"nixpkgs=${channel.input}"
|
||||||
"nixos-config=${../lib/compat/nixos}"
|
"nixos-config=${../lib/compat/nixos}"
|
||||||
|
|
|
@ -1,10 +1,13 @@
|
||||||
{ lib, config, pkgs, ... }:
|
{
|
||||||
with lib;
|
lib,
|
||||||
let
|
config,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}:
|
||||||
|
with lib; let
|
||||||
psCfg = config.pub-solar;
|
psCfg = config.pub-solar;
|
||||||
cfg = config.pub-solar.office;
|
cfg = config.pub-solar.office;
|
||||||
in
|
in {
|
||||||
{
|
|
||||||
options.pub-solar.office = {
|
options.pub-solar.office = {
|
||||||
enable = mkEnableOption "Install office programs, also enables printing server";
|
enable = mkEnableOption "Install office programs, also enables printing server";
|
||||||
};
|
};
|
||||||
|
@ -14,7 +17,8 @@ in
|
||||||
|
|
||||||
# Gnome PDF viewer
|
# Gnome PDF viewer
|
||||||
programs.evince.enable = true;
|
programs.evince.enable = true;
|
||||||
home-manager = with pkgs; pkgs.lib.setAttrByPath [ "users" psCfg.user.name ] {
|
home-manager = with pkgs;
|
||||||
|
pkgs.lib.setAttrByPath ["users" psCfg.user.name] {
|
||||||
home.packages = [
|
home.packages = [
|
||||||
libreoffice-fresh
|
libreoffice-fresh
|
||||||
gnome.simple-scan
|
gnome.simple-scan
|
||||||
|
|
|
@ -1,11 +1,12 @@
|
||||||
{ config, lib, ... }:
|
{
|
||||||
|
config,
|
||||||
with lib;
|
lib,
|
||||||
let
|
...
|
||||||
|
}:
|
||||||
|
with lib; let
|
||||||
psCfg = config.pub-solar;
|
psCfg = config.pub-solar;
|
||||||
cfg = config.pub-solar.paranoia;
|
cfg = config.pub-solar.paranoia;
|
||||||
in
|
in {
|
||||||
{
|
|
||||||
options.pub-solar.paranoia = {
|
options.pub-solar.paranoia = {
|
||||||
enable = mkOption {
|
enable = mkOption {
|
||||||
description = ''
|
description = ''
|
||||||
|
@ -34,7 +35,7 @@ in
|
||||||
|
|
||||||
# Remove the complete default environment of packages like
|
# Remove the complete default environment of packages like
|
||||||
# nano, perl and rsync
|
# nano, perl and rsync
|
||||||
environment.defaultPackages = lib.mkForce [ ];
|
environment.defaultPackages = lib.mkForce [];
|
||||||
|
|
||||||
# fileSystems."/".options = [ "noexec" ];
|
# fileSystems."/".options = [ "noexec" ];
|
||||||
|
|
||||||
|
|
|
@ -1,10 +1,13 @@
|
||||||
{ lib, config, pkgs, ... }:
|
{
|
||||||
with lib;
|
lib,
|
||||||
let
|
config,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}:
|
||||||
|
with lib; let
|
||||||
psCfg = config.pub-solar;
|
psCfg = config.pub-solar;
|
||||||
cfg = config.pub-solar.printing;
|
cfg = config.pub-solar.printing;
|
||||||
in
|
in {
|
||||||
{
|
|
||||||
options.pub-solar.printing = {
|
options.pub-solar.printing = {
|
||||||
enable = mkEnableOption "CUPSSSss";
|
enable = mkEnableOption "CUPSSSss";
|
||||||
};
|
};
|
||||||
|
@ -16,8 +19,8 @@ in
|
||||||
services.avahi.publish.userServices = true;
|
services.avahi.publish.userServices = true;
|
||||||
services.printing.enable = true;
|
services.printing.enable = true;
|
||||||
services.printing.browsing = true;
|
services.printing.browsing = true;
|
||||||
services.printing.listenAddresses = [ "localhost:631" ];
|
services.printing.listenAddresses = ["localhost:631"];
|
||||||
services.printing.allowFrom = [ "all" ];
|
services.printing.allowFrom = ["all"];
|
||||||
services.printing.defaultShared = false;
|
services.printing.defaultShared = false;
|
||||||
services.printing.drivers = with pkgs; [
|
services.printing.drivers = with pkgs; [
|
||||||
gutenprint
|
gutenprint
|
||||||
|
|
|
@ -1,16 +1,20 @@
|
||||||
{ lib, config, pkgs, ... }:
|
{
|
||||||
with lib;
|
lib,
|
||||||
let
|
config,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}:
|
||||||
|
with lib; let
|
||||||
psCfg = config.pub-solar;
|
psCfg = config.pub-solar;
|
||||||
cfg = config.pub-solar.social;
|
cfg = config.pub-solar.social;
|
||||||
in
|
in {
|
||||||
{
|
|
||||||
options.pub-solar.social = {
|
options.pub-solar.social = {
|
||||||
enable = mkEnableOption "Life with others";
|
enable = mkEnableOption "Life with others";
|
||||||
};
|
};
|
||||||
|
|
||||||
config = mkIf cfg.enable {
|
config = mkIf cfg.enable {
|
||||||
home-manager = with pkgs; pkgs.lib.setAttrByPath [ "users" psCfg.user.name ] {
|
home-manager = with pkgs;
|
||||||
|
pkgs.lib.setAttrByPath ["users" psCfg.user.name] {
|
||||||
home.packages = [
|
home.packages = [
|
||||||
gurk-rs
|
gurk-rs
|
||||||
signal-desktop
|
signal-desktop
|
||||||
|
|
|
@ -1,23 +1,45 @@
|
||||||
{ pkgs, psCfg, ... }: ''
|
{
|
||||||
|
pkgs,
|
||||||
|
psCfg,
|
||||||
|
...
|
||||||
|
}:
|
||||||
|
''
|
||||||
# Set shut down, restart and locking features
|
# Set shut down, restart and locking features
|
||||||
'' + (if psCfg.core.hibernation.enable && !psCfg.paranoia.enable then ''
|
''
|
||||||
|
+ (
|
||||||
|
if psCfg.core.hibernation.enable && !psCfg.paranoia.enable
|
||||||
|
then ''
|
||||||
set $mode_system (e)xit, (h)ibernate, (l)ock, (s)uspend, (r)eboot, (Shift+s)hutdown
|
set $mode_system (e)xit, (h)ibernate, (l)ock, (s)uspend, (r)eboot, (Shift+s)hutdown
|
||||||
'' else if psCfg.paranoia.enable then ''
|
''
|
||||||
|
else if psCfg.paranoia.enable
|
||||||
|
then ''
|
||||||
set $mode_system (e)xit, (h)ibernate, (r)eboot, (Shift+s)hutdown
|
set $mode_system (e)xit, (h)ibernate, (r)eboot, (Shift+s)hutdown
|
||||||
'' else ''
|
''
|
||||||
|
else ''
|
||||||
set $mode_system (e)xit, (l)ock, (s)uspend, (r)eboot, (Shift+s)hutdown
|
set $mode_system (e)xit, (l)ock, (s)uspend, (r)eboot, (Shift+s)hutdown
|
||||||
'')
|
''
|
||||||
|
)
|
||||||
+ ''
|
+ ''
|
||||||
bindsym $mod+0 mode "$mode_system"
|
bindsym $mod+0 mode "$mode_system"
|
||||||
mode "$mode_system" {
|
mode "$mode_system" {
|
||||||
bindsym e exec swaymsg exit, mode "default"
|
bindsym e exec swaymsg exit, mode "default"
|
||||||
'' + (if psCfg.core.hibernation.enable then ''
|
''
|
||||||
|
+ (
|
||||||
|
if psCfg.core.hibernation.enable
|
||||||
|
then ''
|
||||||
bindsym h exec systemctl hibernate, mode "default"
|
bindsym h exec systemctl hibernate, mode "default"
|
||||||
'' else "")
|
''
|
||||||
+ (if !psCfg.paranoia.enable then ''
|
else ""
|
||||||
|
)
|
||||||
|
+ (
|
||||||
|
if !psCfg.paranoia.enable
|
||||||
|
then ''
|
||||||
bindsym l exec ${pkgs.swaylock-bg}/bin/swaylock-bg, mode "default"
|
bindsym l exec ${pkgs.swaylock-bg}/bin/swaylock-bg, mode "default"
|
||||||
bindsym s exec systemctl suspend, mode "default"
|
bindsym s exec systemctl suspend, mode "default"
|
||||||
'' else "") + ''
|
''
|
||||||
|
else ""
|
||||||
|
)
|
||||||
|
+ ''
|
||||||
bindsym r exec systemctl reboot, mode "default"
|
bindsym r exec systemctl reboot, mode "default"
|
||||||
bindsym Shift+s exec systemctl poweroff, mode "default"
|
bindsym Shift+s exec systemctl poweroff, mode "default"
|
||||||
|
|
||||||
|
|
|
@ -1,5 +1,8 @@
|
||||||
{ config, pkgs, ... }:
|
{
|
||||||
''
|
config,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}: ''
|
||||||
# Default config for sway
|
# Default config for sway
|
||||||
#
|
#
|
||||||
# Copy this to ~/.config/sway/config and edit it to your liking.
|
# Copy this to ~/.config/sway/config and edit it to your liking.
|
||||||
|
|
|
@ -1,18 +1,17 @@
|
||||||
{ pkgs, ... }:
|
{pkgs, ...}: {
|
||||||
{
|
|
||||||
Unit = {
|
Unit = {
|
||||||
Description = "set color temperature of display according to time of day";
|
Description = "set color temperature of display according to time of day";
|
||||||
Documentation = [ "man:gammastep(1)" ];
|
Documentation = ["man:gammastep(1)"];
|
||||||
BindsTo = [ "sway-session.target" ];
|
BindsTo = ["sway-session.target"];
|
||||||
After = [ "sway-session.target" ];
|
After = ["sway-session.target"];
|
||||||
# ConditionEnvironment requires systemd v247 to work correctly
|
# ConditionEnvironment requires systemd v247 to work correctly
|
||||||
ConditionEnvironment = [ "WAYLAND_DISPLAY" ];
|
ConditionEnvironment = ["WAYLAND_DISPLAY"];
|
||||||
};
|
};
|
||||||
Service = {
|
Service = {
|
||||||
Type = "simple";
|
Type = "simple";
|
||||||
ExecStart = "${pkgs.gammastep}/bin/gammastep -l geoclue2 -m wayland -v";
|
ExecStart = "${pkgs.gammastep}/bin/gammastep -l geoclue2 -m wayland -v";
|
||||||
};
|
};
|
||||||
Install = {
|
Install = {
|
||||||
WantedBy = [ "sway-session.target" ];
|
WantedBy = ["sway-session.target"];
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
|
@ -1,10 +1,9 @@
|
||||||
{ pkgs, ... }:
|
{pkgs, ...}: {
|
||||||
{
|
|
||||||
Unit = {
|
Unit = {
|
||||||
Description = "Actions gestures on your touchpad using libinput";
|
Description = "Actions gestures on your touchpad using libinput";
|
||||||
Documentation = [ "https://github.com/bulletmark/libinput-gestures" ];
|
Documentation = ["https://github.com/bulletmark/libinput-gestures"];
|
||||||
BindsTo = [ "sway-session.target" ];
|
BindsTo = ["sway-session.target"];
|
||||||
After = [ "sway-session.target" ];
|
After = ["sway-session.target"];
|
||||||
};
|
};
|
||||||
Service = {
|
Service = {
|
||||||
Type = "simple";
|
Type = "simple";
|
||||||
|
@ -14,6 +13,6 @@
|
||||||
TimeoutStopSec = "10";
|
TimeoutStopSec = "10";
|
||||||
};
|
};
|
||||||
Install = {
|
Install = {
|
||||||
WantedBy = [ "sway-session.target" ];
|
WantedBy = ["sway-session.target"];
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
|
@ -1,10 +1,9 @@
|
||||||
{ pkgs, ... }:
|
{pkgs, ...}: {
|
||||||
{
|
|
||||||
Unit = {
|
Unit = {
|
||||||
Description = "sway compositor session";
|
Description = "sway compositor session";
|
||||||
Documentation = [ "man:systemd.special(7)" ];
|
Documentation = ["man:systemd.special(7)"];
|
||||||
BindsTo = [ "graphical-session.target" ];
|
BindsTo = ["graphical-session.target"];
|
||||||
Wants = [ "graphical-session-pre.target" ];
|
Wants = ["graphical-session-pre.target"];
|
||||||
After = [ "graphical-session-pre.target" ];
|
After = ["graphical-session-pre.target"];
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
|
@ -1,11 +1,10 @@
|
||||||
{ pkgs, ... }:
|
{pkgs, ...}: {
|
||||||
{
|
|
||||||
Unit = {
|
Unit = {
|
||||||
Description = "sway - SirCmpwn's Wayland window manager";
|
Description = "sway - SirCmpwn's Wayland window manager";
|
||||||
Documentation = [ "man:sway(5)" ];
|
Documentation = ["man:sway(5)"];
|
||||||
BindsTo = [ "graphical-session.target" ];
|
BindsTo = ["graphical-session.target"];
|
||||||
Wants = [ "graphical-session-pre.target" ];
|
Wants = ["graphical-session-pre.target"];
|
||||||
After = [ "graphical-session-pre.target" ];
|
After = ["graphical-session-pre.target"];
|
||||||
};
|
};
|
||||||
Service = {
|
Service = {
|
||||||
Type = "simple";
|
Type = "simple";
|
||||||
|
|
|
@ -1,27 +1,36 @@
|
||||||
{ pkgs, psCfg, ... }:
|
|
||||||
{
|
{
|
||||||
|
pkgs,
|
||||||
|
psCfg,
|
||||||
|
...
|
||||||
|
}: {
|
||||||
Unit = {
|
Unit = {
|
||||||
Description = "Idle manager for Wayland";
|
Description = "Idle manager for Wayland";
|
||||||
Documentation = [ "man:swayidle(1)" ];
|
Documentation = ["man:swayidle(1)"];
|
||||||
BindsTo = [ "graphical-session.target" ];
|
BindsTo = ["graphical-session.target"];
|
||||||
Wants = [ "graphical-session-pre.target" ];
|
Wants = ["graphical-session-pre.target"];
|
||||||
After = [ "graphical-session-pre.target" ];
|
After = ["graphical-session-pre.target"];
|
||||||
};
|
};
|
||||||
Service = {
|
Service = {
|
||||||
Type = "simple";
|
Type = "simple";
|
||||||
Environment = "PATH=/run/current-system/sw/bin:${pkgs.sway}/bin:${pkgs.swaylock-bg}/bin:${pkgs.swayidle}/bin";
|
Environment = "PATH=/run/current-system/sw/bin:${pkgs.sway}/bin:${pkgs.swaylock-bg}/bin:${pkgs.swayidle}/bin";
|
||||||
ExecStart = ''${pkgs.swayidle}/bin/swayidle -w \
|
ExecStart =
|
||||||
|
'' ${pkgs.swayidle}/bin/swayidle -w \
|
||||||
after-resume 'swaymsg "output * dpms on"' \
|
after-resume 'swaymsg "output * dpms on"' \
|
||||||
after-resume '${pkgs.brightnessctl}/bin/brightnessctl -d gmux_backlight set 60%' \
|
after-resume '${pkgs.brightnessctl}/bin/brightnessctl -d gmux_backlight set 60%' \
|
||||||
before-sleep 'swaylock-bg' '' + (if psCfg.paranoia.enable then '' \
|
before-sleep 'swaylock-bg' ''
|
||||||
|
+ (
|
||||||
|
if psCfg.paranoia.enable
|
||||||
|
then '' \
|
||||||
timeout 120 'swaymsg "output * dpms off"' resume 'swaymsg "output * dpms on"' \
|
timeout 120 'swaymsg "output * dpms off"' resume 'swaymsg "output * dpms on"' \
|
||||||
timeout 150 'systemctl hibernate'
|
timeout 150 'systemctl hibernate'
|
||||||
'' else '' \
|
''
|
||||||
|
else '' \
|
||||||
timeout 600 'swaylock-bg' \
|
timeout 600 'swaylock-bg' \
|
||||||
timeout 900 'swaymsg "output * dpms off"' resume 'swaymsg "output * dpms on"'
|
timeout 900 'swaymsg "output * dpms off"' resume 'swaymsg "output * dpms on"'
|
||||||
'');
|
''
|
||||||
|
);
|
||||||
};
|
};
|
||||||
Install = {
|
Install = {
|
||||||
WantedBy = [ "sway-session.target" ];
|
WantedBy = ["sway-session.target"];
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
|
@ -1,13 +1,12 @@
|
||||||
pkgs:
|
pkgs: {
|
||||||
{
|
|
||||||
Unit = {
|
Unit = {
|
||||||
Description = "Swaync notification daemon";
|
Description = "Swaync notification daemon";
|
||||||
Documentation = "https://github.com/ErikReider/SwayNotificationCenter";
|
Documentation = "https://github.com/ErikReider/SwayNotificationCenter";
|
||||||
BindsTo = [ "sway-session.target" ];
|
BindsTo = ["sway-session.target"];
|
||||||
After = [ "sway-session.target" ];
|
After = ["sway-session.target"];
|
||||||
Requisite = [ "graphical-session.target" ];
|
Requisite = ["graphical-session.target"];
|
||||||
# ConditionEnvironment requires systemd v247 to work correctly
|
# ConditionEnvironment requires systemd v247 to work correctly
|
||||||
ConditionEnvironment = [ "WAYLAND_DISPLAY" ];
|
ConditionEnvironment = ["WAYLAND_DISPLAY"];
|
||||||
};
|
};
|
||||||
Service = {
|
Service = {
|
||||||
Type = "dbus";
|
Type = "dbus";
|
||||||
|
@ -17,6 +16,6 @@ pkgs:
|
||||||
Restart = "on-failure";
|
Restart = "on-failure";
|
||||||
};
|
};
|
||||||
Install = {
|
Install = {
|
||||||
WantedBy = [ "sway-session.target" ];
|
WantedBy = ["sway-session.target"];
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
|
@ -1,12 +1,11 @@
|
||||||
{ pkgs, ... }:
|
{pkgs, ...}: {
|
||||||
{
|
|
||||||
Unit = {
|
Unit = {
|
||||||
Description = "Highly customizable Wayland bar for Sway and Wlroots based compositors.";
|
Description = "Highly customizable Wayland bar for Sway and Wlroots based compositors.";
|
||||||
Documentation = "https://github.com/Alexays/Waybar/wiki/";
|
Documentation = "https://github.com/Alexays/Waybar/wiki/";
|
||||||
BindsTo = [ "sway-session.target" ];
|
BindsTo = ["sway-session.target"];
|
||||||
After = [ "sway-session.target" "network-online.target" ];
|
After = ["sway-session.target" "network-online.target"];
|
||||||
Wants = [ "graphical-session-pre.target" "network-online.target" "blueman-applet.service" ];
|
Wants = ["graphical-session-pre.target" "network-online.target" "blueman-applet.service"];
|
||||||
ConditionEnvironment = [ "WAYLAND_DISPLAY" ];
|
ConditionEnvironment = ["WAYLAND_DISPLAY"];
|
||||||
};
|
};
|
||||||
|
|
||||||
Service = {
|
Service = {
|
||||||
|
@ -17,6 +16,6 @@
|
||||||
};
|
};
|
||||||
|
|
||||||
Install = {
|
Install = {
|
||||||
WantedBy = [ "sway-session.target" ];
|
WantedBy = ["sway-session.target"];
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
|
@ -1,12 +1,11 @@
|
||||||
{ pkgs, ... }:
|
{pkgs, ...}: {
|
||||||
{
|
|
||||||
Unit = {
|
Unit = {
|
||||||
Description = "X Settings Daemon";
|
Description = "X Settings Daemon";
|
||||||
Documentation = [ "https://github.com/derat/xsettingsd/wiki/Installation" ];
|
Documentation = ["https://github.com/derat/xsettingsd/wiki/Installation"];
|
||||||
BindsTo = [ "sway-session.target" ];
|
BindsTo = ["sway-session.target"];
|
||||||
After = [ "sway-session.target" ];
|
After = ["sway-session.target"];
|
||||||
# ConditionEnvironment requires systemd v247 to work correctly
|
# ConditionEnvironment requires systemd v247 to work correctly
|
||||||
ConditionEnvironment = [ "WAYLAND_DISPLAY" ];
|
ConditionEnvironment = ["WAYLAND_DISPLAY"];
|
||||||
};
|
};
|
||||||
Service = {
|
Service = {
|
||||||
Type = "simple";
|
Type = "simple";
|
||||||
|
@ -14,6 +13,6 @@
|
||||||
ExecStop = "/run/current-system/sw/bin/env pkill xsettingsd";
|
ExecStop = "/run/current-system/sw/bin/env pkill xsettingsd";
|
||||||
};
|
};
|
||||||
Install = {
|
Install = {
|
||||||
WantedBy = [ "sway-session.target" ];
|
WantedBy = ["sway-session.target"];
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
|
@ -1,10 +1,9 @@
|
||||||
{ pkgs, ... }:
|
{pkgs, ...}: {
|
||||||
{
|
|
||||||
Unit = {
|
Unit = {
|
||||||
Description = "ydotool - Generic command-line automation tool (no X!)";
|
Description = "ydotool - Generic command-line automation tool (no X!)";
|
||||||
Documentation = [ "https://github.com/ReimuNotMoe/ydotool" ];
|
Documentation = ["https://github.com/ReimuNotMoe/ydotool"];
|
||||||
BindsTo = [ "sway-session.target" ];
|
BindsTo = ["sway-session.target"];
|
||||||
After = [ "sway-session.target" ];
|
After = ["sway-session.target"];
|
||||||
};
|
};
|
||||||
Service = {
|
Service = {
|
||||||
Type = "simple";
|
Type = "simple";
|
||||||
|
@ -14,6 +13,6 @@
|
||||||
TimeoutStopSec = "10";
|
TimeoutStopSec = "10";
|
||||||
};
|
};
|
||||||
Install = {
|
Install = {
|
||||||
WantedBy = [ "sway-session.target" ];
|
WantedBy = ["sway-session.target"];
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
|
@ -1,10 +1,14 @@
|
||||||
{ lib, config, pkgs, self, ... }:
|
{
|
||||||
with lib;
|
lib,
|
||||||
let
|
config,
|
||||||
|
pkgs,
|
||||||
|
self,
|
||||||
|
...
|
||||||
|
}:
|
||||||
|
with lib; let
|
||||||
psCfg = config.pub-solar;
|
psCfg = config.pub-solar;
|
||||||
cfg = config.pub-solar.terminal-life;
|
cfg = config.pub-solar.terminal-life;
|
||||||
in
|
in {
|
||||||
{
|
|
||||||
options.pub-solar.terminal-life = {
|
options.pub-solar.terminal-life = {
|
||||||
enable = mkEnableOption "Life in black and white";
|
enable = mkEnableOption "Life in black and white";
|
||||||
|
|
||||||
|
@ -21,7 +25,7 @@ in
|
||||||
programs.command-not-found.enable = false;
|
programs.command-not-found.enable = false;
|
||||||
|
|
||||||
# Needed to get zsh completion for system packages (e.g. systemd).
|
# Needed to get zsh completion for system packages (e.g. systemd).
|
||||||
environment.pathsToLink = [ "/share/zsh" ];
|
environment.pathsToLink = ["/share/zsh"];
|
||||||
|
|
||||||
environment.shells = with pkgs; [
|
environment.shells = with pkgs; [
|
||||||
zsh
|
zsh
|
||||||
|
@ -30,7 +34,8 @@ in
|
||||||
screen
|
screen
|
||||||
];
|
];
|
||||||
|
|
||||||
home-manager = with pkgs; pkgs.lib.setAttrByPath [ "users" psCfg.user.name ] {
|
home-manager = with pkgs;
|
||||||
|
pkgs.lib.setAttrByPath ["users" psCfg.user.name] {
|
||||||
home.packages = [
|
home.packages = [
|
||||||
ack
|
ack
|
||||||
asciinema
|
asciinema
|
||||||
|
@ -49,9 +54,19 @@ in
|
||||||
watson
|
watson
|
||||||
];
|
];
|
||||||
|
|
||||||
programs.neovim = import ./nvim { inherit config; inherit pkgs; };
|
programs.neovim = import ./nvim {
|
||||||
programs.fzf = import ./fzf { inherit config; inherit pkgs; };
|
inherit config;
|
||||||
programs.zsh = import ./zsh { inherit config; inherit pkgs; inherit self; };
|
inherit pkgs;
|
||||||
|
};
|
||||||
|
programs.fzf = import ./fzf {
|
||||||
|
inherit config;
|
||||||
|
inherit pkgs;
|
||||||
|
};
|
||||||
|
programs.zsh = import ./zsh {
|
||||||
|
inherit config;
|
||||||
|
inherit pkgs;
|
||||||
|
inherit self;
|
||||||
|
};
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
|
@ -1,5 +1,8 @@
|
||||||
{ config, pkgs, ... }:
|
|
||||||
{
|
{
|
||||||
|
config,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}: {
|
||||||
enable = true;
|
enable = true;
|
||||||
defaultCommand = "fd --hidden --type f --exclude .git";
|
defaultCommand = "fd --hidden --type f --exclude .git";
|
||||||
defaultOptions = [
|
defaultOptions = [
|
||||||
|
|
|
@ -1,12 +1,14 @@
|
||||||
{ config, pkgs, ... }:
|
{
|
||||||
let
|
config,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}: let
|
||||||
psCfg = config.pub-solar;
|
psCfg = config.pub-solar;
|
||||||
cfg = config.pub-solar.terminal-life;
|
cfg = config.pub-solar.terminal-life;
|
||||||
xdg = config.home-manager.users."${psCfg.user.name}".xdg;
|
xdg = config.home-manager.users."${psCfg.user.name}".xdg;
|
||||||
|
|
||||||
preview-file = pkgs.writeShellScriptBin "preview-file" (import ./preview-file.nix pkgs);
|
preview-file = pkgs.writeShellScriptBin "preview-file" (import ./preview-file.nix pkgs);
|
||||||
in
|
in {
|
||||||
{
|
|
||||||
enable = true;
|
enable = true;
|
||||||
|
|
||||||
viAlias = true;
|
viAlias = true;
|
||||||
|
@ -17,7 +19,8 @@ in
|
||||||
withRuby = true;
|
withRuby = true;
|
||||||
withPython3 = true;
|
withPython3 = true;
|
||||||
|
|
||||||
extraPackages = with pkgs; lib.mkIf (!cfg.lite) [
|
extraPackages = with pkgs;
|
||||||
|
lib.mkIf (!cfg.lite) [
|
||||||
ccls
|
ccls
|
||||||
gopls
|
gopls
|
||||||
nodejs
|
nodejs
|
||||||
|
|
|
@ -1,29 +1,30 @@
|
||||||
self: with self; ''
|
self:
|
||||||
IFS=':' read -r -a INPUT <<< "$1"
|
with self; ''
|
||||||
FILE=''${INPUT[0]}
|
IFS=':' read -r -a INPUT <<< "$1"
|
||||||
CENTER=''${INPUT[1]}
|
FILE=''${INPUT[0]}
|
||||||
|
CENTER=''${INPUT[1]}
|
||||||
|
|
||||||
if [[ "$1" =~ ^[A-Za-z]:\\ ]]; then
|
if [[ "$1" =~ ^[A-Za-z]:\\ ]]; then
|
||||||
FILE=$FILE:''${INPUT[1]}
|
FILE=$FILE:''${INPUT[1]}
|
||||||
CENTER=''${INPUT[2]}
|
CENTER=''${INPUT[2]}
|
||||||
fi
|
fi
|
||||||
|
|
||||||
if [[ -n "$CENTER" && ! "$CENTER" =~ ^[0-9] ]]; then
|
if [[ -n "$CENTER" && ! "$CENTER" =~ ^[0-9] ]]; then
|
||||||
exit 1
|
exit 1
|
||||||
fi
|
fi
|
||||||
CENTER=''${CENTER/[^0-9]*/}
|
CENTER=''${CENTER/[^0-9]*/}
|
||||||
|
|
||||||
FILE="''${FILE/#\~\//$HOME/}"
|
FILE="''${FILE/#\~\//$HOME/}"
|
||||||
if [ ! -r "$FILE" ]; then
|
if [ ! -r "$FILE" ]; then
|
||||||
echo "File not found ''${FILE}"
|
echo "File not found ''${FILE}"
|
||||||
exit 1
|
exit 1
|
||||||
fi
|
fi
|
||||||
|
|
||||||
if [ -z "$CENTER" ]; then
|
if [ -z "$CENTER" ]; then
|
||||||
CENTER=0
|
CENTER=0
|
||||||
fi
|
fi
|
||||||
|
|
||||||
exec cat "$FILE" \
|
exec cat "$FILE" \
|
||||||
| sed -e '/[#|\/\/ ?]-- copyright/,/[#\/\/]++/c\\' \
|
| sed -e '/[#|\/\/ ?]-- copyright/,/[#\/\/]++/c\\' \
|
||||||
| ${pkgs.coreutils}/bin/tr -s '\n' \
|
| ${pkgs.coreutils}/bin/tr -s '\n' \
|
||||||
| ${pkgs.bat}/bin/bat \
|
| ${pkgs.bat}/bin/bat \
|
||||||
|
|
|
@ -1,9 +1,12 @@
|
||||||
{ config, pkgs, self, ... }:
|
{
|
||||||
let
|
config,
|
||||||
|
pkgs,
|
||||||
|
self,
|
||||||
|
...
|
||||||
|
}: let
|
||||||
psCfg = config.pub-solar;
|
psCfg = config.pub-solar;
|
||||||
xdg = config.home-manager.users."${psCfg.user.name}".xdg;
|
xdg = config.home-manager.users."${psCfg.user.name}".xdg;
|
||||||
in
|
in {
|
||||||
{
|
|
||||||
enable = true;
|
enable = true;
|
||||||
enableAutosuggestions = true;
|
enableAutosuggestions = true;
|
||||||
enableCompletion = true;
|
enableCompletion = true;
|
||||||
|
@ -64,7 +67,8 @@ in
|
||||||
}
|
}
|
||||||
];
|
];
|
||||||
|
|
||||||
initExtra = ''
|
initExtra =
|
||||||
|
''
|
||||||
bindkey -v
|
bindkey -v
|
||||||
bindkey -v 'jj' vi-cmd-mode
|
bindkey -v 'jj' vi-cmd-mode
|
||||||
bindkey -a 'i' up-line
|
bindkey -a 'i' up-line
|
||||||
|
@ -109,8 +113,7 @@ in
|
||||||
''
|
''
|
||||||
+ builtins.readFile ./base16.zsh
|
+ builtins.readFile ./base16.zsh
|
||||||
+ builtins.readFile ./p10k.zsh
|
+ builtins.readFile ./p10k.zsh
|
||||||
+
|
+ ''
|
||||||
''
|
|
||||||
source ${pkgs.fzf}/share/fzf/key-bindings.zsh
|
source ${pkgs.fzf}/share/fzf/key-bindings.zsh
|
||||||
source ${pkgs.fzf}/share/fzf/completion.zsh
|
source ${pkgs.fzf}/share/fzf/completion.zsh
|
||||||
source ${pkgs.git-bug}/share/zsh/site-functions/git-bug
|
source ${pkgs.git-bug}/share/zsh/site-functions/git-bug
|
||||||
|
|
|
@ -1,10 +1,13 @@
|
||||||
{ lib, config, pkgs, ... }:
|
{
|
||||||
with lib;
|
lib,
|
||||||
let
|
config,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}:
|
||||||
|
with lib; let
|
||||||
psCfg = config.pub-solar;
|
psCfg = config.pub-solar;
|
||||||
cfg = config.pub-solar.uhk;
|
cfg = config.pub-solar.uhk;
|
||||||
in
|
in {
|
||||||
{
|
|
||||||
options.pub-solar.uhk = {
|
options.pub-solar.uhk = {
|
||||||
enable = mkEnableOption "Ultimate Hacking Keyboard";
|
enable = mkEnableOption "Ultimate Hacking Keyboard";
|
||||||
};
|
};
|
||||||
|
|
|
@ -1,9 +1,12 @@
|
||||||
{ lib, config, pkgs, ... }:
|
|
||||||
with lib;
|
|
||||||
let
|
|
||||||
cfg = config.pub-solar;
|
|
||||||
in
|
|
||||||
{
|
{
|
||||||
|
lib,
|
||||||
|
config,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}:
|
||||||
|
with lib; let
|
||||||
|
cfg = config.pub-solar;
|
||||||
|
in {
|
||||||
options.pub-solar = {
|
options.pub-solar = {
|
||||||
user = {
|
user = {
|
||||||
name = mkOption {
|
name = mkOption {
|
||||||
|
@ -24,7 +27,7 @@ in
|
||||||
publicKeys = mkOption {
|
publicKeys = mkOption {
|
||||||
description = "User SSH public keys";
|
description = "User SSH public keys";
|
||||||
type = types.listOf types.str;
|
type = types.listOf types.str;
|
||||||
default = [ ];
|
default = [];
|
||||||
};
|
};
|
||||||
fullName = mkOption {
|
fullName = mkOption {
|
||||||
description = "User full name";
|
description = "User full name";
|
||||||
|
|
|
@ -1,12 +1,18 @@
|
||||||
{ lib, config, pkgs, ... }:
|
{
|
||||||
with lib;
|
lib,
|
||||||
let
|
config,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}:
|
||||||
|
with lib; let
|
||||||
psCfg = config.pub-solar;
|
psCfg = config.pub-solar;
|
||||||
cfg = config.pub-solar.virtualisation;
|
cfg = config.pub-solar.virtualisation;
|
||||||
doesGaming = config.pub-solar.gaming.enable;
|
doesGaming = config.pub-solar.gaming.enable;
|
||||||
extraObsPlugins = if doesGaming then [ pkgs.obs-studio-plugins.looking-glass-obs ] else [ ];
|
extraObsPlugins =
|
||||||
in
|
if doesGaming
|
||||||
{
|
then [pkgs.obs-studio-plugins.looking-glass-obs]
|
||||||
|
else [];
|
||||||
|
in {
|
||||||
options.pub-solar.virtualisation = {
|
options.pub-solar.virtualisation = {
|
||||||
enable = mkEnableOption "Life in libvirt";
|
enable = mkEnableOption "Life in libvirt";
|
||||||
};
|
};
|
||||||
|
@ -22,8 +28,8 @@ in
|
||||||
enable = true;
|
enable = true;
|
||||||
qemu.ovmf.enable = true;
|
qemu.ovmf.enable = true;
|
||||||
};
|
};
|
||||||
users.users = pkgs.lib.setAttrByPath [ psCfg.user.name ] {
|
users.users = pkgs.lib.setAttrByPath [psCfg.user.name] {
|
||||||
extraGroups = [ "libvirtd" ];
|
extraGroups = ["libvirtd"];
|
||||||
};
|
};
|
||||||
|
|
||||||
environment.systemPackages = with pkgs; [
|
environment.systemPackages = with pkgs; [
|
||||||
|
@ -43,7 +49,8 @@ in
|
||||||
lgcl
|
lgcl
|
||||||
];
|
];
|
||||||
|
|
||||||
home-manager = with pkgs; pkgs.lib.setAttrByPath [ "users" psCfg.user.name ] {
|
home-manager = with pkgs;
|
||||||
|
pkgs.lib.setAttrByPath ["users" psCfg.user.name] {
|
||||||
xdg.dataFile."libvirt/.keep".text = "# this file is here to generate the directory";
|
xdg.dataFile."libvirt/.keep".text = "# this file is here to generate the directory";
|
||||||
home.packages = extraObsPlugins;
|
home.packages = extraObsPlugins;
|
||||||
};
|
};
|
||||||
|
|
|
@ -1,5 +1,5 @@
|
||||||
final: prev: {
|
final: prev: {
|
||||||
manix = prev.manix.overrideAttrs (o: rec{
|
manix = prev.manix.overrideAttrs (o: rec {
|
||||||
inherit (prev.sources.manix) pname version src;
|
inherit (prev.sources.manix) pname version src;
|
||||||
});
|
});
|
||||||
}
|
}
|
||||||
|
|
|
@ -1,5 +1,7 @@
|
||||||
final: prev: {
|
final: prev: {
|
||||||
vimPlugins = prev.vimPlugins // {
|
vimPlugins =
|
||||||
|
prev.vimPlugins
|
||||||
|
// {
|
||||||
instant-nvim-nvfetcher = prev.vimUtils.buildVimPluginFrom2Nix {
|
instant-nvim-nvfetcher = prev.vimUtils.buildVimPluginFrom2Nix {
|
||||||
inherit (prev.sources.instant-nvim-nvfetcher) pname version src;
|
inherit (prev.sources.instant-nvim-nvfetcher) pname version src;
|
||||||
};
|
};
|
||||||
|
|
|
@ -1,4 +1,5 @@
|
||||||
final: prev: with prev.python310Packages; {
|
final: prev:
|
||||||
|
with prev.python310Packages; {
|
||||||
python-wiki-fetch = buildPythonPackage rec {
|
python-wiki-fetch = buildPythonPackage rec {
|
||||||
inherit (prev.sources.wik) pname version src;
|
inherit (prev.sources.wik) pname version src;
|
||||||
|
|
||||||
|
@ -18,7 +19,7 @@ final: prev: with prev.python310Packages; {
|
||||||
description = "wik is a tool to view wikipedia pages from your terminal";
|
description = "wik is a tool to view wikipedia pages from your terminal";
|
||||||
homepage = "https://github.com/yashsinghcodes/wik";
|
homepage = "https://github.com/yashsinghcodes/wik";
|
||||||
license = licenses.mit;
|
license = licenses.mit;
|
||||||
maintainers = with maintainers; [ teutat3s ];
|
maintainers = with maintainers; [teutat3s];
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
|
@ -1,7 +1,7 @@
|
||||||
final: prev:
|
final: prev:
|
||||||
with final; {
|
with final; {
|
||||||
# keep sources this first
|
# keep sources this first
|
||||||
sources = prev.callPackage (import ./_sources/generated.nix) { };
|
sources = prev.callPackage (import ./_sources/generated.nix) {};
|
||||||
# then, call packages with `final.callPackage`
|
# then, call packages with `final.callPackage`
|
||||||
gpu-switch = writeShellScriptBin "gpu-switch" (import ./gpu-switch.nix final);
|
gpu-switch = writeShellScriptBin "gpu-switch" (import ./gpu-switch.nix final);
|
||||||
import-gtk-settings = writeShellScriptBin "import-gtk-settings" (import ./import-gtk-settings.nix final);
|
import-gtk-settings = writeShellScriptBin "import-gtk-settings" (import ./import-gtk-settings.nix final);
|
||||||
|
|
|
@ -1,4 +1,5 @@
|
||||||
self: with self; ''
|
self:
|
||||||
|
with self; ''
|
||||||
case $1 in
|
case $1 in
|
||||||
start)
|
start)
|
||||||
${self.docker}/bin/docker run --detach \
|
${self.docker}/bin/docker run --detach \
|
||||||
|
|
|
@ -1,4 +1,5 @@
|
||||||
self: with self; ''
|
self:
|
||||||
|
with self; ''
|
||||||
# Copyright (c) 2014-2015 Bruno Bierbaumer, Andreas Heider
|
# Copyright (c) 2014-2015 Bruno Bierbaumer, Andreas Heider
|
||||||
|
|
||||||
readonly sysfs_efi_vars='/sys/firmware/efi/efivars'
|
readonly sysfs_efi_vars='/sys/firmware/efi/efivars'
|
||||||
|
|
|
@ -1,4 +1,5 @@
|
||||||
self: with self; ''
|
self:
|
||||||
|
with self; ''
|
||||||
# usage: import-gsettings <gsettings key>:<settings.ini key> <gsettings key>:<settings.ini key> ...
|
# usage: import-gsettings <gsettings key>:<settings.ini key> <gsettings key>:<settings.ini key> ...
|
||||||
|
|
||||||
expression=""
|
expression=""
|
||||||
|
|
|
@ -1,9 +1,8 @@
|
||||||
self: with self;
|
self:
|
||||||
let
|
with self; let
|
||||||
looking-glass-client = self.looking-glass-client.overrideAttrs (old: {
|
looking-glass-client = self.looking-glass-client.overrideAttrs (old: {
|
||||||
meta.platforms = [ "x86_64-linux" "aarch64-linux" ];
|
meta.platforms = ["x86_64-linux" "aarch64-linux"];
|
||||||
});
|
});
|
||||||
in
|
in ''
|
||||||
''
|
|
||||||
${looking-glass-client}/bin/looking-glass-client -f /dev/shm/looking-glass input:ignoreWindowsKeys=yes input:grabKeyboardOnFocus=no
|
${looking-glass-client}/bin/looking-glass-client -f /dev/shm/looking-glass input:ignoreWindowsKeys=yes input:grabKeyboardOnFocus=no
|
||||||
''
|
''
|
||||||
|
|
|
@ -1,4 +1,5 @@
|
||||||
self: with self; ''
|
self:
|
||||||
|
with self; ''
|
||||||
mkdir -p $XDG_CACHE_HOME/log
|
mkdir -p $XDG_CACHE_HOME/log
|
||||||
|
|
||||||
LOGFILE=$XDG_CACHE_HOME/log/mailto.log
|
LOGFILE=$XDG_CACHE_HOME/log/mailto.log
|
||||||
|
|
|
@ -1,5 +1,5 @@
|
||||||
self: with self;
|
self:
|
||||||
let
|
with self; let
|
||||||
websocket-client = python39.pkgs.buildPythonPackage rec {
|
websocket-client = python39.pkgs.buildPythonPackage rec {
|
||||||
pname = "websocket-client";
|
pname = "websocket-client";
|
||||||
version = "1.2.1";
|
version = "1.2.1";
|
||||||
|
@ -10,7 +10,7 @@ let
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
in
|
in
|
||||||
python39.pkgs.buildPythonPackage rec {
|
python39.pkgs.buildPythonPackage rec {
|
||||||
pname = "Mopidy-Jellyfin";
|
pname = "Mopidy-Jellyfin";
|
||||||
version = "1.0.2";
|
version = "1.0.2";
|
||||||
doCheck = false;
|
doCheck = false;
|
||||||
|
@ -26,4 +26,4 @@ python39.pkgs.buildPythonPackage rec {
|
||||||
inherit pname version;
|
inherit pname version;
|
||||||
sha256 = "sha256-5XimIIQSpvNyQbSOFtSTkA0jhA0V68BbyQEQNnov+0g=";
|
sha256 = "sha256-5XimIIQSpvNyQbSOFtSTkA0jhA0V68BbyQEQNnov+0g=";
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
|
@ -1,3 +1,4 @@
|
||||||
self: with self; ''
|
self:
|
||||||
|
with self; ''
|
||||||
exec ${alacritty}/bin/alacritty --class mu_vimpc --option dimensions.columns=120 --option dimensions.lines=80 -e vimpc -- "$@"
|
exec ${alacritty}/bin/alacritty --class mu_vimpc --option dimensions.columns=120 --option dimensions.lines=80 -e vimpc -- "$@"
|
||||||
''
|
''
|
||||||
|
|
|
@ -1,4 +1,5 @@
|
||||||
self: with self; ''
|
self:
|
||||||
|
with self; ''
|
||||||
#
|
#
|
||||||
# ack recursively through notes
|
# ack recursively through notes
|
||||||
#
|
#
|
||||||
|
|
|
@ -1,5 +1,6 @@
|
||||||
self: with self;
|
self:
|
||||||
stdenv.mkDerivation rec {
|
with self;
|
||||||
|
stdenv.mkDerivation rec {
|
||||||
pname = "psos-docs";
|
pname = "psos-docs";
|
||||||
version = "0.0.1";
|
version = "0.0.1";
|
||||||
buildInputs = [
|
buildInputs = [
|
||||||
|
@ -9,7 +10,7 @@ stdenv.mkDerivation rec {
|
||||||
|
|
||||||
src = ../docs/..; # wut
|
src = ../docs/..; # wut
|
||||||
|
|
||||||
phases = [ "buildPhase" "installPhase" ];
|
phases = ["buildPhase" "installPhase"];
|
||||||
|
|
||||||
buildPhase = ''
|
buildPhase = ''
|
||||||
cp -r $src/doc ./doc
|
cp -r $src/doc ./doc
|
||||||
|
@ -23,4 +24,4 @@ stdenv.mkDerivation rec {
|
||||||
mkdir -p $out/lib/
|
mkdir -p $out/lib/
|
||||||
cp -r doc/book $out/lib/html
|
cp -r doc/book $out/lib/html
|
||||||
'';
|
'';
|
||||||
}
|
}
|
||||||
|
|
|
@ -1,4 +1,5 @@
|
||||||
self: with self; ''
|
self:
|
||||||
|
with self; ''
|
||||||
case $1 in
|
case $1 in
|
||||||
rebuild)
|
rebuild)
|
||||||
shift;
|
shift;
|
||||||
|
|
|
@ -1,4 +1,5 @@
|
||||||
self: with self; ''
|
self:
|
||||||
|
with self; ''
|
||||||
mkdir -p "$HOME/Videos/Screenrecordings"
|
mkdir -p "$HOME/Videos/Screenrecordings"
|
||||||
GEOMETRY="$(slurp -d -b \#ffffff11)"
|
GEOMETRY="$(slurp -d -b \#ffffff11)"
|
||||||
RESOLUTION="$(echo $GEOMETRY | awk '{print $2}')"
|
RESOLUTION="$(echo $GEOMETRY | awk '{print $2}')"
|
||||||
|
|
Some files were not shown because too many files have changed in this diff Show more
Loading…
Reference in a new issue