nixos-config/system/desktop.nix
Christoph Heiss a169c5e3f6
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
system: desktop: set stable-uuid for IPv6 DUID for NM by default
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-07-18 22:07:00 +02:00

70 lines
1.7 KiB
Nix

{ lib, ... }:
{
imports = [ ../common ../system/home-manager ../services/openssh.nix ];
boot.kernelParams = [ "audit=0" ];
boot.loader.grub = {
efiSupport = true;
device = "nodev";
};
documentation = {
man.generateCaches = true;
man.man-db.enable = true;
dev.enable = true;
nixos.enable = true;
};
environment.pathsToLink = [ "/share/zsh" ];
fonts.enableDefaultPackages = true;
hardware.keyboard.zsa.enable = true;
hardware.graphics.enable = true;
home-manager.users.christoph.imports = [ ./home-manager/desktop.nix ];
# NetworkManager for easier setup and management of dynamic networks on desktops
networking.networkmanager = {
enable = true;
# https://wiki.archlinux.org/title/NetworkManager#Configure_a_unique_DUID_per_connection
connectionConfig."ipv6.dhcp-duid" = lib.mkDefault "stable-uuid";
};
users.users.christoph.extraGroups = [ "networkmanager" ];
programs.ssh = {
pubkeyAcceptedKeyTypes = [ "ssh-ed25519" "ssh-rsa" ];
startAgent = true;
};
services.fwupd.enable = true;
# Fixes swaylock installed through home-manager.
# https://github.com/NixOS/nixpkgs/issues/158025#issuecomment-1344766809
security.pam.services.swaylock = { };
services.pipewire = {
enable = true;
alsa.enable = true;
pulse.enable = true;
};
security.rtkit.enable = true;
# gpg stuff and such
services.pcscd.enable = true;
hardware.gpgSmartcards.enable = true;
virtualisation.podman = {
enable = true;
autoPrune.enable = true;
defaultNetwork.settings.ipv6_enabled = true;
};
environment.sessionVariables.DOCKER_HOST =
"unix:///run/user/$UID/podman/podman.sock";
}