this repo has no description
Setup encryption and secure boot on homelab and laptop. Flatpak get the fuck out and finally i have a wallpaper on reboot TwT
+73
-24
+5
-1
hosts/vulpes/core/boot.nix
+5
-1
hosts/vulpes/core/boot.nix
+10
-2
hosts/work/core/boot.nix
+10
-2
hosts/work/core/boot.nix
···
13
13
"amdgpu.ppfeaturemask=0xffffffff"
14
14
];
15
15
16
+
lanzaboote = {
17
+
enable = true;
18
+
pkiBundle = "/var/lib/sbctl";
19
+
};
20
+
16
21
loader = {
17
22
systemd-boot = {
18
-
enable = true;
23
+
enable = false;
19
24
consoleMode = "auto";
20
25
configurationLimit = 3;
21
26
};
···
28
33
initrd = {
29
34
kernelModules = [
30
35
"dm-snapshot"
36
+
"amdgpu"
31
37
];
32
38
availableKernelModules = [
33
39
"nvme"
···
37
43
"usb_storage"
38
44
"sd_mod"
39
45
];
46
+
systemd = {
47
+
enable = true;
48
+
};
40
49
};
41
50
42
51
kernelModules = [
43
52
"kvm-amd"
44
-
"amdgpu"
45
53
"usbmon"
46
54
];
47
55
+52
-5
hosts/work/core/hardware.nix
+52
-5
hosts/work/core/hardware.nix
···
9
9
(modulesPath + "/installer/scan/not-detected.nix")
10
10
];
11
11
12
-
fileSystems = {
12
+
boot.initrd.luks = {
13
+
devices = {
14
+
crypt_root = {
15
+
device = "/dev/disk/by-label/crypt_root";
16
+
allowDiscards = true;
17
+
};
18
+
};
19
+
};
13
20
21
+
fileSystems = {
14
22
"/" = {
15
-
device = "/dev/disk/by-uuid/368f8b9b-b87e-4344-bc7e-962d62a5eba8";
23
+
device = "/dev/mapper/crypt_root";
16
24
fsType = "btrfs";
25
+
options = [
26
+
"subvol=@"
27
+
"compress=zstd"
28
+
"noatime"
29
+
];
17
30
};
18
31
19
32
"/home" = {
20
-
device = "/dev/disk/by-uuid/b69233ba-e1b2-4036-b32e-ade5ef35e10b";
33
+
device = "/dev/mapper/crypt_root";
34
+
fsType = "btrfs";
35
+
options = [
36
+
"subvol=@home"
37
+
"compress=zstd"
38
+
"noatime"
39
+
];
40
+
};
41
+
42
+
"/var" = {
43
+
device = "/dev/mapper/crypt_root";
44
+
fsType = "btrfs";
45
+
options = [
46
+
"subvol=@var"
47
+
"compress=zstd"
48
+
"noatime"
49
+
];
50
+
};
51
+
52
+
"/nix" = {
53
+
device = "/dev/mapper/crypt_root";
21
54
fsType = "btrfs";
22
-
neededForBoot = true;
55
+
options = [
56
+
"subvol=@nix"
57
+
"compress=zstd"
58
+
"noatime"
59
+
];
60
+
};
61
+
62
+
"/.snapshots" = {
63
+
device = "/dev/mapper/crypt_root";
64
+
fsType = "btrfs";
65
+
options = [
66
+
"subvol=@snapshots"
67
+
"compress=zstd"
68
+
"noatime"
69
+
];
23
70
};
24
71
25
72
"/boot" = {
26
-
device = "/dev/disk/by-uuid/76AE-AD29";
73
+
device = "/dev/disk/by-label/efi";
27
74
fsType = "vfat";
28
75
options = [
29
76
"fmask=0022"
-13
hosts/work/core/services.nix
-13
hosts/work/core/services.nix
···
126
126
};
127
127
};
128
128
};
129
-
130
-
flatpak = {
131
-
enable = true;
132
-
remotes = {
133
-
"flathub" = "https://dl.flathub.org/repo/flathub.flatpakrepo";
134
-
};
135
-
packages = [
136
-
"flathub:app/com.collaboraoffice.Office//stable"
137
-
"flathub:app/com.github.tchx84.Flatseal//stable"
138
-
"flathub:app/page.codeberg.JakobDev.jdDBusDebugger//stable"
139
-
"flathub:app/io.github.vani_tty1.memerist//stable"
140
-
];
141
-
};
142
129
};
143
130
systemd.services.netbird-work = {
144
131
serviceConfig = {
+1
-1
hosts/work/default.nix
+1
-1
hosts/work/default.nix
+5
-2
hosts/work/hjem-rum/niri.nix
+5
-2
hosts/work/hjem-rum/niri.nix
···
1
1
{ pkgs, ... }:
2
2
{
3
-
# mode "2560x1440@144.002"
4
-
5
3
niri = {
6
4
enable = true;
7
5
spawn-at-startup = [
···
9
7
"quickshell"
10
8
"--config"
11
9
"/home/roufpup/.config/quickshell/shell/"
10
+
]
11
+
[
12
+
"swww"
13
+
"img"
14
+
"/home/roufpup/Pictures/Wallpapers/03_bg_look_a_plane.png_52758.png"
12
15
]
13
16
];
14
17
config = ''