me like nix
0

Configure Feed

Select the types of activity you want to include in your feed.

split into multiple system configs

+402 -282
-281
configuration.nix
··· 1 - { 2 - pkgs, 3 - ... 4 - }: 5 - 6 - { 7 - imports = [ 8 - # Include the results of the hardware scan. 9 - ./hardware-configuration.nix 10 - ]; 11 - 12 - nix.settings.experimental-features = [ 13 - "nix-command" 14 - "flakes" 15 - ]; 16 - 17 - # Bootloader. 18 - boot.loader.systemd-boot.enable = true; 19 - boot.loader.efi.canTouchEfiVariables = true; 20 - 21 - # Use latest kernel. 22 - boot.kernelPackages = pkgs.linuxPackages_latest; 23 - 24 - networking.hostName = "nixos"; # Define your hostname. 25 - # networking.wireless.enable = true; # Enables wireless support via wpa_supplicant. 26 - 27 - # Configure network proxy if necessary 28 - # networking.proxy.default = "http://user:password@proxy:port/"; 29 - # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain"; 30 - 31 - # Enable networking 32 - networking.networkmanager.enable = true; 33 - 34 - # Set your time zone. 35 - time.timeZone = "America/New_York"; 36 - 37 - # Select internationalisation properties. 38 - i18n.defaultLocale = "en_US.UTF-8"; 39 - 40 - i18n.extraLocaleSettings = { 41 - LC_ADDRESS = "en_US.UTF-8"; 42 - LC_IDENTIFICATION = "en_US.UTF-8"; 43 - LC_MEASUREMENT = "en_US.UTF-8"; 44 - LC_MONETARY = "en_US.UTF-8"; 45 - LC_NAME = "en_US.UTF-8"; 46 - LC_NUMERIC = "en_US.UTF-8"; 47 - LC_PAPER = "en_US.UTF-8"; 48 - LC_TELEPHONE = "en_US.UTF-8"; 49 - LC_TIME = "en_US.UTF-8"; 50 - }; 51 - 52 - programs.niri = { 53 - enable = true; 54 - package = pkgs.niri; 55 - }; 56 - 57 - services.greetd = { 58 - enable = true; 59 - settings = { 60 - default_session = { 61 - command = "${pkgs.greetd.tuigreet}/bin/tuigreet --time --cmd niri-session"; 62 - user = "greeter"; 63 - }; 64 - }; 65 - }; 66 - 67 - # xdg.portal = { 68 - # enable = true; 69 - # xdgOpenUsePortal = true; 70 - # config = { 71 - # common = { 72 - # default = [ 73 - # "gnome" 74 - # "gtk" 75 - # ]; 76 - 77 - # "org.freedesktop.impl.portal.ScreenCast" = "gnome"; 78 - # "org.freedesktop.impl.portal.Screenshot" = "gnome"; 79 - # "org.freedesktop.impl.portal.RemoteDesktop" = "gnome"; 80 - # }; 81 - # }; 82 - 83 - # # Specify the backends you want to use. 84 - # # The order matters, the first one is the primary. 85 - # extraPortals = with pkgs; [ 86 - # xdg-desktop-portal-gtk 87 - # xdg-desktop-portal-gnome 88 - # ]; 89 - # }; 90 - 91 - # Enable CUPS to print documents. 92 - services.printing.enable = true; 93 - 94 - # Enable sound with pipewire. 95 - security.polkit.enable = true; 96 - security.rtkit.enable = true; 97 - services.pipewire = { 98 - enable = true; 99 - alsa.enable = true; 100 - alsa.support32Bit = true; 101 - pulse.enable = true; 102 - # If you want to use JACK applications, uncomment this 103 - #jack.enable = true; 104 - 105 - # use the example session manager (no others are packaged yet so this is enabled by default, 106 - # no need to redefine it in your config for now) 107 - #media-session.enable = true; 108 - }; 109 - 110 - services.udisks2.enable = true; 111 - services.tailscale.enable = true; 112 - services.openssh = { 113 - enable = true; 114 - ports = [ 5431 ]; 115 - settings = { 116 - PasswordAuthentication = false; 117 - KbdInteractiveAuthentication = false; 118 - PermitRootLogin = "no"; 119 - AllowUsers = [ "sean" ]; 120 - }; 121 - }; 122 - 123 - # Define a user account. Don't forget to set a password with ‘passwd’. 124 - users.groups.storage = { }; 125 - users.users.sean = { 126 - openssh.authorizedKeys.keys = [ 127 - "ssh-rsa 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" 128 - ]; 129 - isNormalUser = true; 130 - description = "Sean Aye"; 131 - extraGroups = [ 132 - "docker" 133 - "networkmanager" 134 - "wheel" 135 - "video" 136 - "disk" 137 - "storage" 138 - "input" 139 - ]; 140 - shell = pkgs.fish; 141 - }; 142 - 143 - programs.fish.enable = true; 144 - programs._1password.enable = true; 145 - programs._1password-gui = { 146 - enable = true; 147 - polkitPolicyOwners = [ "sean" ]; 148 - }; 149 - 150 - programs.steam = { 151 - enable = true; 152 - }; 153 - virtualisation.docker.enable = true; 154 - 155 - # Allow unfree packages 156 - nixpkgs.config.allowUnfree = true; 157 - 158 - # List packages installed in system profile. To search, run: 159 - # $ nix search wget 160 - environment.systemPackages = with pkgs; [ 161 - wl-clipboard 162 - ]; 163 - environment.variables = { 164 - EDITOR = "hx"; 165 - VISUAL = "hx"; 166 - SUDO_EDITOR = "hx"; 167 - }; 168 - 169 - # List services that you want to enable: 170 - nixarr = { 171 - enable = true; 172 - mediaDir = "/mnt/storage1/nixarr/media"; 173 - vpn = { 174 - enable = true; 175 - wgConf = "/mnt/storage1/nixarr/wireguard.conf"; 176 - }; 177 - 178 - jellyfin = { 179 - enable = true; 180 - openFirewall = true; 181 - }; 182 - 183 - transmission = { 184 - enable = true; 185 - vpn.enable = true; 186 - }; 187 - sabnzbd = { 188 - enable = true; 189 - vpn.enable = true; 190 - openFirewall = true; 191 - }; 192 - 193 - prowlarr.enable = true; 194 - radarr.enable = true; 195 - sonarr.enable = true; 196 - jellyseerr = { 197 - enable = true; 198 - openFirewall = true; 199 - }; 200 - 201 - recyclarr = { 202 - enable = true; 203 - configuration = { 204 - sonarr = { 205 - series = { 206 - base_url = "http://localhost:8989"; 207 - api_key = "!env_var SONARR_API_KEY"; 208 - quality_definition = { 209 - type = "series"; 210 - }; 211 - delete_old_custom_formats = true; 212 - custom_formats = [ 213 - { 214 - trash_ids = [ 215 - "85c61753df5da1fb2aab6f2a47426b09" # BR-DISK 216 - "9c11cd3f07101cdba90a2d81cf0e56b4" # LQ 217 - ]; 218 - assign_scores_to = [ 219 - { 220 - name = "WEB-DL (1080p)"; 221 - score = -10000; 222 - } 223 - ]; 224 - } 225 - ]; 226 - }; 227 - }; 228 - radarr = { 229 - movies = { 230 - base_url = "http://localhost:7878"; 231 - api_key = "!env_var RADARR_API_KEY"; 232 - quality_definition = { 233 - type = "movie"; 234 - }; 235 - delete_old_custom_formats = true; 236 - custom_formats = [ 237 - { 238 - trash_ids = [ 239 - "570bc9ebecd92723d2d21500f4be314c" # Remaster 240 - "eca37840c13c6ef2dd0262b141a5482f" # 4K Remaster 241 - ]; 242 - assign_scores_to = [ 243 - { 244 - name = "HD Bluray + WEB"; 245 - score = 25; 246 - } 247 - ]; 248 - } 249 - ]; 250 - }; 251 - }; 252 - }; 253 - }; 254 - }; 255 - 256 - # Enable the OpenSSH daemon. 257 - # services.openssh.enable = true; 258 - 259 - # Open ports in the firewall. 260 - networking.firewall.allowedTCPPorts = [ 261 - 8096 262 - 5055 263 - 3000 264 - ]; 265 - networking.firewall.allowedUDPPorts = [ 266 - 8096 267 - 5055 268 - 3000 269 - ]; 270 - # Or disable the firewall altogether. 271 - # networking.firewall.enable = false; 272 - 273 - # This value determines the NixOS release from which the default 274 - # settings for stateful data, like file locations and database versions 275 - # on your system were taken. It‘s perfectly fine and recommended to leave 276 - # this value at the release version of the first install of this system. 277 - # Before changing this value read the documentation for this option 278 - # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html). 279 - system.stateVersion = "25.05"; # Did you read the comment? 280 - 281 - }
+20
flake.nix
··· 56 56 ]; 57 57 specialArgs = { inherit inputs; }; 58 58 }; 59 + framework16 = nixpkgs.lib.nixosSystem { 60 + system = "x86_64-linux"; 61 + modules = [ 62 + # Your main configuration file 63 + ./configuration.nix 64 + catppuccin.nixosModules.catppuccin 65 + 66 + ({ 67 + nixpkgs.overlays = [ niri.overlays.niri ]; 68 + }) 69 + 70 + # Home Manager module 71 + home-manager.nixosModules.home-manager 72 + { 73 + home-manager.extraSpecialArgs = { inherit inputs; }; 74 + home-manager.users.sean = import ./home.nix; 75 + } 76 + ]; 77 + specialArgs = { inherit inputs; }; 78 + }; 59 79 }; 60 80 }; 61 81 }
hardware-configuration.nix hosts/mira/hardware-configuration.nix
-1
home.nix
··· 83 83 }; 84 84 }; 85 85 86 - nixpkgs.config.allowUnfree = true; 87 86 nixpkgs.config.permittedInsecurePackages = [ 88 87 "libsoup-2.74.3" 89 88 ];
+121
hosts/common/common.nix
··· 1 + { pkgs, ... }: 2 + 3 + { 4 + 5 + nix.settings.experimental-features = [ 6 + "nix-command" 7 + "flakes" 8 + ]; 9 + 10 + # Bootloader. 11 + boot.loader.systemd-boot.enable = true; 12 + boot.loader.efi.canTouchEfiVariables = true; 13 + 14 + # Use latest kernel. 15 + boot.kernelPackages = pkgs.linuxPackages_latest; 16 + 17 + # Enable networking 18 + networking.networkmanager.enable = true; 19 + 20 + 21 + # Set your time zone. 22 + # time.timeZone = "America/New_York"; 23 + time.timeZone = "Canada/Toronto"; 24 + 25 + # Select internationalisation properties. 26 + i18n.defaultLocale = "en_US.UTF-8"; 27 + 28 + i18n.extraLocaleSettings = { 29 + LC_ADDRESS = "en_US.UTF-8"; 30 + LC_IDENTIFICATION = "en_US.UTF-8"; 31 + LC_MEASUREMENT = "en_US.UTF-8"; 32 + LC_MONETARY = "en_US.UTF-8"; 33 + LC_NAME = "en_US.UTF-8"; 34 + LC_NUMERIC = "en_US.UTF-8"; 35 + LC_PAPER = "en_US.UTF-8"; 36 + LC_TELEPHONE = "en_US.UTF-8"; 37 + LC_TIME = "en_US.UTF-8"; 38 + }; 39 + 40 + programs.niri = { 41 + enable = true; 42 + package = pkgs.niri; 43 + }; 44 + 45 + services.greetd = { 46 + enable = true; 47 + settings = { 48 + default_session = { 49 + command = "${pkgs.tuigreet}/bin/tuigreet --time --cmd niri-session"; 50 + user = "greeter"; 51 + }; 52 + }; 53 + }; 54 + 55 + # Enable CUPS to print documents. 56 + services.printing.enable = true; 57 + 58 + 59 + # Enable sound with pipewire. 60 + services.pulseaudio.enable = false; 61 + 62 + security.polkit.enable = true; 63 + security.rtkit.enable = true; 64 + services.pipewire = { 65 + enable = true; 66 + alsa.enable = true; 67 + alsa.support32Bit = true; 68 + pulse.enable = true; 69 + # If you want to use JACK applications, uncomment this 70 + #jack.enable = true; 71 + 72 + # use the example session manager (no others are packaged yet so this is enabled by default, 73 + # no need to redefine it in your config for now) 74 + #media-session.enable = true; 75 + }; 76 + 77 + 78 + services.udisks2.enable = true; 79 + services.tailscale.enable = true; 80 + 81 + # Define a user account. Don't forget to set a password with ‘passwd’. 82 + users.groups.storage = { }; 83 + users.users.sean = { 84 + isNormalUser = true; 85 + description = "Sean Aye"; 86 + extraGroups = [ 87 + "docker" 88 + "networkmanager" 89 + "wheel" 90 + "video" 91 + "disk" 92 + "storage" 93 + "input" 94 + ]; 95 + shell = pkgs.fish; 96 + }; 97 + 98 + 99 + programs.fish.enable = true; 100 + programs._1password.enable = true; 101 + programs._1password-gui = { 102 + enable = true; 103 + polkitPolicyOwners = [ "sean" ]; 104 + }; 105 + 106 + virtualisation.docker.enable = true; 107 + 108 + # Allow unfree packages 109 + nixpkgs.config.allowUnfree = true; 110 + 111 + # List packages installed in system profile. To search, run: 112 + # $ nix search wget 113 + environment.systemPackages = with pkgs; [ 114 + wl-clipboard 115 + ]; 116 + environment.variables = { 117 + EDITOR = "hx"; 118 + VISUAL = "hx"; 119 + SUDO_EDITOR = "hx"; 120 + }; 121 + }
+65
hosts/framework16/configuration.nix
··· 1 + # Edit this configuration file to define what should be installed on 2 + # your system. Help is available in the configuration.nix(5) man page 3 + # and in the NixOS manual (accessible by running ‘nixos-help’). 4 + 5 + { pkgs, ... }: 6 + 7 + { 8 + imports = 9 + [ # Include the results of the hardware scan. 10 + ./hardware-configuration.nix 11 + ../common/common.nix 12 + ]; 13 + 14 + 15 + boot.initrd.luks.devices."luks-ee306bda-c450-4a56-b4fe-537899e38e0d".device = "/dev/disk/by-uuid/ee306bda-c450-4a56-b4fe-537899e38e0d"; 16 + networking.hostName = "framework16"; # Define your hostname. 17 + # networking.wireless.enable = true; # Enables wireless support via wpa_supplicant. 18 + 19 + # Configure network proxy if necessary 20 + # networking.proxy.default = "http://user:password@proxy:port/"; 21 + # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain"; 22 + 23 + 24 + # Enable touchpad support (enabled default in most desktopManager). 25 + # services.xserver.libinput.enable = true; 26 + 27 + # List packages installed in system profile. To search, run: 28 + # $ nix search wget 29 + environment.systemPackages = with pkgs; [ 30 + # vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default. 31 + # wget 32 + ]; 33 + 34 + # Some programs need SUID wrappers, can be configured further or are 35 + # started in user sessions. 36 + # programs.mtr.enable = true; 37 + # programs.gnupg.agent = { 38 + # enable = true; 39 + # enableSSHSupport = true; 40 + # }; 41 + 42 + # List services that you want to enable: 43 + 44 + # Enable the OpenSSH daemon. 45 + # services.openssh.enable = true; 46 + 47 + # Open ports in the firewall. 48 + networking.firewall.allowedTCPPorts = [ 49 + 3000 50 + ]; 51 + networking.firewall.allowedUDPPorts = [ 52 + 3000 53 + ]; 54 + # Or disable the firewall altogether. 55 + # networking.firewall.enable = false; 56 + 57 + # This value determines the NixOS release from which the default 58 + # settings for stateful data, like file locations and database versions 59 + # on your system were taken. It‘s perfectly fine and recommended to leave 60 + # this value at the release version of the first install of this system. 61 + # Before changing this value read the documentation for this option 62 + # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html). 63 + system.stateVersion = "25.05"; # Did you read the comment? 64 + 65 + }
+42
hosts/framework16/hardware-configuration.nix
··· 1 + # Do not modify this file! It was generated by ‘nixos-generate-config’ 2 + # and may be overwritten by future invocations. Please make changes 3 + # to /etc/nixos/configuration.nix instead. 4 + { config, lib, pkgs, modulesPath, ... }: 5 + 6 + { 7 + imports = 8 + [ (modulesPath + "/installer/scan/not-detected.nix") 9 + ]; 10 + 11 + boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "thunderbolt" "usb_storage" "usbhid" "sd_mod" ]; 12 + boot.initrd.kernelModules = [ ]; 13 + boot.kernelModules = [ "kvm-amd" ]; 14 + boot.extraModulePackages = [ ]; 15 + 16 + fileSystems."/" = 17 + { device = "/dev/disk/by-uuid/2c281977-7c4d-40a4-af72-ec7dddeae913"; 18 + fsType = "ext4"; 19 + }; 20 + 21 + boot.initrd.luks.devices."luks-17e0181f-d40d-4d21-a014-0b75154e9668".device = "/dev/disk/by-uuid/17e0181f-d40d-4d21-a014-0b75154e9668"; 22 + 23 + fileSystems."/boot" = 24 + { device = "/dev/disk/by-uuid/D830-50AC"; 25 + fsType = "vfat"; 26 + options = [ "fmask=0077" "dmask=0077" ]; 27 + }; 28 + 29 + swapDevices = 30 + [ { device = "/dev/disk/by-uuid/06b535a2-5695-450b-84a3-f759474d0b04"; } 31 + ]; 32 + 33 + # Enables DHCP on each ethernet and wireless interface. In case of scripted networking 34 + # (the default) this is the recommended approach. When using systemd-networkd it's 35 + # still possible to use this option, but it's recommended to use it in conjunction 36 + # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`. 37 + networking.useDHCP = lib.mkDefault true; 38 + # networking.interfaces.wlp1s0.useDHCP = lib.mkDefault true; 39 + 40 + nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux"; 41 + hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware; 42 + }
+154
hosts/mira/configuration.nix
··· 1 + { 2 + pkgs, 3 + ... 4 + }: 5 + 6 + { 7 + imports = [ 8 + # Include the results of the hardware scan. 9 + ./hardware-configuration.nix 10 + ../common/common.nix 11 + ]; 12 + 13 + 14 + 15 + 16 + networking.hostName = "mira"; # Define your hostname. 17 + # networking.wireless.enable = true; # Enables wireless support via wpa_supplicant. 18 + 19 + # Configure network proxy if necessary 20 + # networking.proxy.default = "http://user:password@proxy:port/"; 21 + # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain"; 22 + 23 + 24 + services.openssh = { 25 + enable = true; 26 + ports = [ 5431 ]; 27 + settings = { 28 + PasswordAuthentication = false; 29 + KbdInteractiveAuthentication = false; 30 + PermitRootLogin = "no"; 31 + AllowUsers = [ "sean" ]; 32 + }; 33 + }; 34 + 35 + 36 + users.users.sean.openssh.authorizedKeys.keys = [ 37 + "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDCIqgZ7kedxo+mOW7YG73Vp3zel3h180y3GKvHtRsXfGlpIIvRDy7pgCBQ4AGXYD4y78URQmFohYSAPqCPOPaWcU2un3XG9KvCzEsHmsbskPonitUmCiKvrKkb6oW4jCBtd7AEtBn+AiajAQFtPZ7NN2Df3AmTypvR6Irg7R+nxnfc9NTIHmGvxSDyWcbb4pguL20sctUSqGL6xGh8q/bqhdOThSimM+z9bEUNxK/5rPhwkNniMrp4pJcUrUiAh5/4DiRFG6KT+oeg+/myoz/Z1sPvAs7u/8JDQI4RshRD8Hu0oTkRBN6Hxj478q2SXbeBUZlD6IdjP3RhGpmSecoDdtWqKbpuV3eVRtQtba3KL86GBeV/bugaOdJ1Aud+1SOFJreAAuvxzMMKT+cdQZk6oOPP148DA/No+mDm/2S43lcdCXh79wA6YRAmKQ8jmZxTCtPutrvuZK1rguvvUlEoG/vhdNHh7eDa4Td07V6bjCRPUl8qk/e4M0E3pwsTlZc=" 38 + ]; 39 + 40 + programs.steam = { 41 + enable = true; 42 + }; 43 + 44 + # List services that you want to enable: 45 + nixarr = { 46 + enable = true; 47 + mediaDir = "/mnt/storage1/nixarr/media"; 48 + vpn = { 49 + enable = true; 50 + wgConf = "/mnt/storage1/nixarr/wireguard.conf"; 51 + }; 52 + 53 + jellyfin = { 54 + enable = true; 55 + openFirewall = true; 56 + }; 57 + 58 + transmission = { 59 + enable = true; 60 + vpn.enable = true; 61 + }; 62 + sabnzbd = { 63 + enable = true; 64 + vpn.enable = true; 65 + openFirewall = true; 66 + }; 67 + 68 + prowlarr.enable = true; 69 + radarr.enable = true; 70 + sonarr.enable = true; 71 + jellyseerr = { 72 + enable = true; 73 + openFirewall = true; 74 + }; 75 + 76 + recyclarr = { 77 + enable = true; 78 + configuration = { 79 + sonarr = { 80 + series = { 81 + base_url = "http://localhost:8989"; 82 + api_key = "!env_var SONARR_API_KEY"; 83 + quality_definition = { 84 + type = "series"; 85 + }; 86 + delete_old_custom_formats = true; 87 + custom_formats = [ 88 + { 89 + trash_ids = [ 90 + "85c61753df5da1fb2aab6f2a47426b09" # BR-DISK 91 + "9c11cd3f07101cdba90a2d81cf0e56b4" # LQ 92 + ]; 93 + assign_scores_to = [ 94 + { 95 + name = "WEB-DL (1080p)"; 96 + score = -10000; 97 + } 98 + ]; 99 + } 100 + ]; 101 + }; 102 + }; 103 + radarr = { 104 + movies = { 105 + base_url = "http://localhost:7878"; 106 + api_key = "!env_var RADARR_API_KEY"; 107 + quality_definition = { 108 + type = "movie"; 109 + }; 110 + delete_old_custom_formats = true; 111 + custom_formats = [ 112 + { 113 + trash_ids = [ 114 + "570bc9ebecd92723d2d21500f4be314c" # Remaster 115 + "eca37840c13c6ef2dd0262b141a5482f" # 4K Remaster 116 + ]; 117 + assign_scores_to = [ 118 + { 119 + name = "HD Bluray + WEB"; 120 + score = 25; 121 + } 122 + ]; 123 + } 124 + ]; 125 + }; 126 + }; 127 + }; 128 + }; 129 + }; 130 + 131 + # Enable the OpenSSH daemon. 132 + # services.openssh.enable = true; 133 + 134 + # Open ports in the firewall. 135 + networking.firewall.allowedTCPPorts = [ 136 + 8096 137 + 5055 138 + 3000 139 + ]; 140 + networking.firewall.allowedUDPPorts = [ 141 + 8096 142 + 5055 143 + 3000 144 + ]; 145 + 146 + # This value determines the NixOS release from which the default 147 + # settings for stateful data, like file locations and database versions 148 + # on your system were taken. It‘s perfectly fine and recommended to leave 149 + # this value at the release version of the first install of this system. 150 + # Before changing this value read the documentation for this option 151 + # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html). 152 + system.stateVersion = "25.05"; # Did you read the comment? 153 + 154 + }