andreijiroh.dev / nixops-config
NixOS + home-manager configs, mirrored from GitLab SaaS. gitlab.com/andreijiroh-dev/nixops-config
nix-flake nixos home-manager nixpkgs nix-flakes
1
fork

Configure Feed

Select the types of activity you want to include in your feed.

chore(nix): generally speaking update nix configs as usual

Also enable flatpaks btw

Signed-off-by: Andrei Jiroh Halili <ajhalili2006@andreijiroh.dev>

andreijiroh.dev 9f649761 db09a00b

+139 -58
+2
.gitignore
··· 1 + result 2 + *.iso
+39 -39
flake.lock
··· 13 13 "nixpkgs": "nixpkgs_3" 14 14 }, 15 15 "locked": { 16 - "lastModified": 1733950326, 17 - "narHash": "sha256-nUTutqzg/Z0eEXrC1ACTa4a9Ik5Iyxgqo8uL9DYib7I=", 18 - "rev": "657395244a854da1bc71e38454958ecd57c0e241", 19 - "revCount": 165, 16 + "lastModified": 1736809758, 17 + "narHash": "sha256-nSwg+bvWm2I1I2DnwjuSrBIghcIAjBb4hcBvi1Ay4hA=", 18 + "rev": "88619694aedda515548527729fb6eee1c9285433", 19 + "revCount": 170, 20 20 "type": "tarball", 21 - "url": "https://api.flakehub.com/f/pinned/DeterminateSystems/determinate/0.1.165%2Brev-657395244a854da1bc71e38454958ecd57c0e241/0193b781-6c27-7703-bca6-fc9648fca81d/source.tar.gz" 21 + "url": "https://api.flakehub.com/f/pinned/DeterminateSystems/determinate/0.1.170%2Brev-88619694aedda515548527729fb6eee1c9285433/019461f0-fc54-70be-8475-aa1c6ff4339c/source.tar.gz" 22 22 }, 23 23 "original": { 24 24 "type": "tarball", ··· 28 28 "determinate-nixd-aarch64-darwin": { 29 29 "flake": false, 30 30 "locked": { 31 - "narHash": "sha256-I03XaJRNQHh/N3ea2qpMU78DahTm7tSfF+urRABhKiQ=", 31 + "narHash": "sha256-yLy38fgeC+orxYylwUwLUuRUdgi9WLEflLX9j9NDIUI=", 32 32 "type": "file", 33 - "url": "https://install.determinate.systems/determinate-nixd/tag/v0.2.6/macOS" 33 + "url": "https://install.determinate.systems/determinate-nixd/tag/v0.3.0/macOS" 34 34 }, 35 35 "original": { 36 36 "type": "file", 37 - "url": "https://install.determinate.systems/determinate-nixd/tag/v0.2.6/macOS" 37 + "url": "https://install.determinate.systems/determinate-nixd/tag/v0.3.0/macOS" 38 38 } 39 39 }, 40 40 "determinate-nixd-aarch64-linux": { 41 41 "flake": false, 42 42 "locked": { 43 - "narHash": "sha256-yxF7hyInOc+S1BEaxjLBLHUFjSAjC0bRKh0glUt4ilo=", 43 + "narHash": "sha256-9/HjI0v/ZLoTqOy+5+viIQh8iGjf49qMLRVthVZ3V9U=", 44 44 "type": "file", 45 - "url": "https://install.determinate.systems/determinate-nixd/tag/v0.2.6/aarch64-linux" 45 + "url": "https://install.determinate.systems/determinate-nixd/tag/v0.3.0/aarch64-linux" 46 46 }, 47 47 "original": { 48 48 "type": "file", 49 - "url": "https://install.determinate.systems/determinate-nixd/tag/v0.2.6/aarch64-linux" 49 + "url": "https://install.determinate.systems/determinate-nixd/tag/v0.3.0/aarch64-linux" 50 50 } 51 51 }, 52 52 "determinate-nixd-x86_64-linux": { 53 53 "flake": false, 54 54 "locked": { 55 - "narHash": "sha256-/LPSCwR/ueorahCcyUSVym3y3lnRXkc6pqWwW2T/yT8=", 55 + "narHash": "sha256-cyvqGm+WT5l3N40wSO6FSJTm7Lxm9w1owpXjAYtGAm4=", 56 56 "type": "file", 57 - "url": "https://install.determinate.systems/determinate-nixd/tag/v0.2.6/x86_64-linux" 57 + "url": "https://install.determinate.systems/determinate-nixd/tag/v0.3.0/x86_64-linux" 58 58 }, 59 59 "original": { 60 60 "type": "file", 61 - "url": "https://install.determinate.systems/determinate-nixd/tag/v0.2.6/x86_64-linux" 61 + "url": "https://install.determinate.systems/determinate-nixd/tag/v0.3.0/x86_64-linux" 62 62 } 63 63 }, 64 64 "flake-compat": { ··· 164 164 ] 165 165 }, 166 166 "locked": { 167 - "lastModified": 1736421950, 168 - "narHash": "sha256-RyrX0WFXxFrYvzHNLTIyuk3NcNl3UBykuYru/P0zW5E=", 167 + "lastModified": 1736785676, 168 + "narHash": "sha256-TY0jUwR3EW0fnS0X5wXMAVy6h4Z7Y6a3m+Yq++C9AyE=", 169 169 "owner": "nix-community", 170 170 "repo": "home-manager", 171 - "rev": "d4aebb947a301b8da8654a804979a738c5c5da50", 171 + "rev": "fc52a210b60f2f52c74eac41a8647c1573d2071d", 172 172 "type": "github" 173 173 }, 174 174 "original": { ··· 201 201 "nixpkgs": "nixpkgs_2" 202 202 }, 203 203 "locked": { 204 - "lastModified": 1733248733, 205 - "narHash": "sha256-rOFE8TSwWoup+LPNbmtTs6oLy7lYZ12L9GN+aZuQQaA=", 206 - "rev": "98bbabc68ac8c897c2ad873c3557125691c45120", 207 - "revCount": 108, 204 + "lastModified": 1736808856, 205 + "narHash": "sha256-ccKmZxG1uoE1xjAvVGsWrOvhFDKB9h+uuzLFa7/EBF4=", 206 + "rev": "b3bb78eaaff9f18cc20b6adb1e5a324b047c641b", 207 + "revCount": 111, 208 208 "type": "tarball", 209 - "url": "https://api.flakehub.com/f/pinned/DeterminateSystems/nix/2.25.3/01939864-5191-788c-b898-163d916a3333/source.tar.gz" 209 + "url": "https://api.flakehub.com/f/pinned/DeterminateSystems/nix/2.25.4/019461e6-352f-72e8-8eed-6dcf3b8ea049/source.tar.gz" 210 210 }, 211 211 "original": { 212 212 "type": "tarball", ··· 220 220 ] 221 221 }, 222 222 "locked": { 223 - "lastModified": 1736154240, 224 - "narHash": "sha256-I8Ot6/CInJFphhK9L3T1558q4OOOXwl3f2d0SuKjYcE=", 223 + "lastModified": 1736757488, 224 + "narHash": "sha256-ebhswTzFJd/tp5UCbsf5L/e3BxL7AsylPZd6lrM0cH8=", 225 225 "owner": "Mic92", 226 226 "repo": "nix-ld", 227 - "rev": "8741cadfa29d9c7beeeb9b1308ef58c62c54e129", 227 + "rev": "0918d9288cd2ba52e271dbebf4256042a66edcd5", 228 228 "type": "github" 229 229 }, 230 230 "original": { ··· 244 244 "nixpkgs-regression": "nixpkgs-regression" 245 245 }, 246 246 "locked": { 247 - "lastModified": 1732881227, 248 - "narHash": "sha256-T+wFMm3cj8pGJSwXmPuxG5pz+1gRDJoToF9OBxtzocA=", 249 - "rev": "218cd6c16c0981cc32a45e3a15be1d3c1a68eb85", 250 - "revCount": 18724, 247 + "lastModified": 1736783724, 248 + "narHash": "sha256-cB/1vIYk8LWvL71hiKFu8froJHTUAfsYOOxBlBeNglI=", 249 + "rev": "5b32a021a901d6d1dbde19cf0b26d1df5a36b518", 250 + "revCount": 18801, 251 251 "type": "tarball", 252 - "url": "https://api.flakehub.com/f/pinned/NixOS/nix/2.25.3/01938786-bc70-79e3-b7ee-bb61f8e7f238/source.tar.gz" 252 + "url": "https://api.flakehub.com/f/pinned/NixOS/nix/2.25.4/01946096-6202-736c-ba97-f7c4e454ac80/source.tar.gz" 253 253 }, 254 254 "original": { 255 255 "type": "tarball", 256 - "url": "https://flakehub.com/f/NixOS/nix/%3D2.25.3" 256 + "url": "https://flakehub.com/f/NixOS/nix/%3D2.25.4" 257 257 } 258 258 }, 259 259 "nixos-hardware": { ··· 336 336 }, 337 337 "nixpkgs_3": { 338 338 "locked": { 339 - "lastModified": 1733686850, 340 - "narHash": "sha256-NQEO/nZWWGTGlkBWtCs/1iF1yl2lmQ1oY/8YZrumn3I=", 341 - "rev": "dd51f52372a20a93c219e8216fe528a648ffcbf4", 342 - "revCount": 719099, 339 + "lastModified": 1736134818, 340 + "narHash": "sha256-30sOEZ8CFK2nTTMdkhaNrfVlIi3rWTNV0Z5z+NmpFNI=", 341 + "rev": "3df3c47c19dc90fec35359e89ffb52b34d2b0e94", 342 + "revCount": 734028, 343 343 "type": "tarball", 344 - "url": "https://api.flakehub.com/f/pinned/DeterminateSystems/nixpkgs-weekly/0.1.719099%2Brev-dd51f52372a20a93c219e8216fe528a648ffcbf4/0193af12-b91a-77b9-9c72-3172a023752d/source.tar.gz" 344 + "url": "https://api.flakehub.com/f/pinned/DeterminateSystems/nixpkgs-weekly/0.1.734028%2Brev-3df3c47c19dc90fec35359e89ffb52b34d2b0e94/01943f43-1e0f-74e6-bbd6-7c42de3c9b30/source.tar.gz" 345 345 }, 346 346 "original": { 347 347 "type": "tarball", ··· 350 350 }, 351 351 "nixpkgs_4": { 352 352 "locked": { 353 - "lastModified": 1736344531, 354 - "narHash": "sha256-8YVQ9ZbSfuUk2bUf2KRj60NRraLPKPS0Q4QFTbc+c2c=", 353 + "lastModified": 1736798957, 354 + "narHash": "sha256-qwpCtZhSsSNQtK4xYGzMiyEDhkNzOCz/Vfu4oL2ETsQ=", 355 355 "owner": "NixOS", 356 356 "repo": "nixpkgs", 357 - "rev": "bffc22eb12172e6db3c5dde9e3e5628f8e3e7912", 357 + "rev": "9abb87b552b7f55ac8916b6fc9e5cb486656a2f3", 358 358 "type": "github" 359 359 }, 360 360 "original": {
+17 -2
flake.nix
··· 62 62 }; 63 63 homeConfigurations = { 64 64 gildedguy = home-manager.lib.homeManagerConfiguration { 65 - inherit (nixpkgs.legacyPackages.x86_64-linux) pkgs; 66 - 67 65 modules = [ 68 66 ./shared/home-manager/main.nix 69 67 { 70 68 home.username = "gildedguy"; 71 69 home.homeDirectory = "/home/gildedguy"; 70 + } 71 + ]; 72 + 73 + extraSpecialArgs = { 74 + home = { 75 + useUserPackages = true; 76 + useGlobalPkgs = true; 77 + }; 78 + }; 79 + }; 80 + 81 + ajhalili2006 = home-manager.lib.homeManagerConfiguration { 82 + modules = [ 83 + ./shared/home-manager/main.nix 84 + { 85 + home.username = "ajhalili2006"; 86 + home.homeDirectory = "/home/ajhalili2006"; 72 87 } 73 88 ]; 74 89
+15 -13
hosts/stellapent-cier/configuration.nix
··· 8 8 imports = 9 9 [ 10 10 ./hardware-configuration.nix 11 + ../../shared/desktop/bluetooth.nix 12 + ../../shared/desktop/firewall.nix 13 + ../../shared/desktop/kde-plasma.nix 14 + ../../shared/flatpak.nix 15 + ../../shared/gnupg.nix 16 + ../../shared/locale.nix 11 17 ../../shared/meta-configs.nix 12 - ../../shared/systemd.nix 13 18 ../../shared/networking.nix 14 - ../../shared/locale.nix 19 + ../../shared/server/ssh.nix 15 20 ../../shared/server/tailscale.nix 16 - ../../shared/server/ssh.nix 17 - ../../shared/desktop/kde-plasma.nix 18 - ../../shared/desktop/bluetooth.nix 19 - ../../shared/desktop/firewall.nix 21 + ../../shared/systemd.nix 22 + ../../shared/yubikey.nix 20 23 ]; 21 24 22 25 # Bootloader. ··· 118 121 broadcom-bt-firmware 119 122 btop 120 123 htop 121 - google-chrome 122 124 direnv 123 125 cachix 126 + icu 127 + devbox 128 + thunderbird 129 + google-chrome 130 + firefox 131 + kdePackages.kate 124 132 ]; 125 133 126 134 # Some programs need SUID wrappers, can be configured further or are 127 135 # started in user sessions. 128 136 programs.mtr.enable = true; 129 - 130 - # enable gpg-agent with SSH support 131 - programs.gnupg.agent = { 132 - enable = true; 133 - enableSSHSupport = true; 134 - }; 135 137 136 138 # This value determines the NixOS release from which the default 137 139 # settings for stateful data, like file locations and database versions
+17
shared/flatpak.nix
··· 1 + # Nix configuration related to flatpaks 2 + 3 + { pkgs, ... }: 4 + 5 + { 6 + # enable both flatpak and the builder 7 + services.flatpak.enable = true; 8 + environment.systemPackages = [ pkgs.flatpak-builder ]; 9 + 10 + systemd.services.flatpak-repo = { 11 + wantedBy = [ "multi-user.target" ]; 12 + path = [ pkgs.flatpak ]; 13 + script = '' 14 + flatpak remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo 15 + ''; 16 + }; 17 + }
+8
shared/gnupg.nix
··· 1 + { 2 + # enable gpg-agent with SSH support 3 + programs.gnupg.agent = { 4 + enable = true; 5 + enableSSHSupport = true; 6 + enableBrowserSocket = true; 7 + }; 8 + }
+27 -3
shared/home-manager/main.nix
··· 75 75 ]; 76 76 77 77 home.sessionPath = [ 78 - "${config.home.homeDirectory}/bin" 78 + "$HOME/bin" 79 79 ]; 80 80 81 81 # Home Manager is pretty good at managing dotfiles. The primary way to manage ··· 117 117 DOCKER_BUILDKIT = "1"; 118 118 }; 119 119 120 + # taken from https://github.com/andreijiroh-dev/dotfiles/blob/main/.config/aliases 121 + home.shellAliases = { 122 + signoff = "git commit --signoff"; 123 + status = "git status"; 124 + stats = "git status"; 125 + clone = "git clone"; 126 + stage = "git add"; 127 + unstage = "git restore --staged"; 128 + nuke-from-index = "git rm"; 129 + rename-branch = "git branch -m"; 130 + set-upstream = "git branch -u"; 131 + stash = "git stash push --keep-index"; 132 + apply-stash = "git stash apply"; 133 + pop-stash = "git stash pop"; 134 + drop-stash = "git stash drop"; 135 + yeet-stash = "git stash drop"; 136 + push = "git push"; 137 + fetch = "git fetch"; 138 + submodules = "git submdoule"; 139 + submodule = "git submodule"; 140 + }; 141 + 120 142 # Let Home Manager install and manage itself. 121 143 programs.home-manager.enable = true; 122 144 ··· 129 151 }; 130 152 userName = "Andrei Jiroh Halili"; 131 153 userEmail = "ajhalili2006@andreijiroh.dev"; 154 + signing = { 155 + key = "4D5E631758CB9CC45941B1CE67BFC91B3DA12BE8"; 156 + signByDefault = true; 157 + }; 132 158 aliases = { 133 159 signoff = "commit --signoff"; 134 160 amend = "commit -a --amend"; ··· 158 184 push = { 159 185 autoSetupRemote = true; 160 186 }; 161 - 162 - 163 187 }; 164 188 }; 165 189
+5
shared/home-manager/nest.nix
··· 1 + { ... }: 2 + 3 + { 4 + # TBD 5 + }
+2 -1
shared/networking.nix
··· 10 10 config.services.resolved = { 11 11 enable = true; 12 12 dnssec = "false"; # https://superuser.com/a/1493674 13 - domains = [ "~." "fawn-cod.ts.net" ]; 13 + # Commented this out since Tailscale do thee heavy work for MagicDNS 14 + #domains = [ "~." "fawn-cod.ts.net" ]; 14 15 # Use Cloudflare DNS resolver as fallback if things go wrong. 15 16 fallbackDns = [ "1.1.1.1#one.one.one.one" "1.0.0.1#one.one.one.one" ]; 16 17 dnsovertls = "true";
+7
shared/yubikey.nix
··· 1 + { pkgs, ... }: 2 + 3 + { 4 + # https://nixos.wiki/wiki/Yubikey 5 + services.yubikey-agent.enable = true; 6 + services.udev.packages = [ pkgs.yubikey-personalization ]; 7 + }