the configuration for all my nixos machines (hacky! bad! ugly!)
added prospero, home manager config to repo
+453
-129
+145
dt-common.nix
+145
dt-common.nix
···
1
+
# dt-common.nix: configuration common to every computer where I have a desktop
2
+
# environment.
3
+
{ config, pkgs, lib, ... }:
4
+
{
5
+
nix.settings.experimental-features = ["nix-command" "flakes"];
6
+
networking.networkmanager.enable = true;
7
+
8
+
virtualisation = {
9
+
containers.enable = true;
10
+
docker = {
11
+
enable = true;
12
+
};
13
+
};
14
+
15
+
systemd.services."user@".serviceConfig.Delegate="cpu cpuset io memory pids";
16
+
17
+
systemd.packages = [(
18
+
pkgs.writeTextFile {
19
+
name = "delegate.conf";
20
+
text = ''
21
+
[Service]
22
+
Delegate=yes
23
+
'';
24
+
destination = "/etc/systemd/system/user@.service.d/delegate.conf";
25
+
}
26
+
)];
27
+
28
+
# Set your time zone.
29
+
time.timeZone = "America/New_York";
30
+
31
+
# Select internationalisation properties.
32
+
i18n.defaultLocale = "en_US.UTF-8";
33
+
34
+
i18n.extraLocaleSettings = {
35
+
LC_ADDRESS = "en_US.UTF-8";
36
+
LC_IDENTIFICATION = "en_US.UTF-8";
37
+
LC_MEASUREMENT = "en_US.UTF-8";
38
+
LC_MONETARY = "en_US.UTF-8";
39
+
LC_NAME = "en_US.UTF-8";
40
+
LC_NUMERIC = "en_US.UTF-8";
41
+
LC_PAPER = "en_US.UTF-8";
42
+
LC_TELEPHONE = "en_US.UTF-8";
43
+
LC_TIME = "en_US.UTF-8";
44
+
};
45
+
46
+
# TODO move to niri
47
+
# Enable the X11 windowing system.
48
+
# You can disable this if you're only using the Wayland session.
49
+
services.xserver.enable = true;
50
+
51
+
# Enable the KDE Plasma Desktop Environment.
52
+
services.displayManager.sddm.enable = true;
53
+
services.desktopManager.plasma6.enable = true;
54
+
55
+
# Configure keymap in X11
56
+
services.xserver.xkb = {
57
+
layout = "us";
58
+
variant = "";
59
+
};
60
+
61
+
# Enable CUPS to print documents.
62
+
services.printing.enable = true;
63
+
64
+
# Enable sound with pipewire.
65
+
services.pulseaudio.enable = false;
66
+
security.rtkit.enable = true;
67
+
services.pipewire = {
68
+
enable = true;
69
+
alsa.enable = true;
70
+
alsa.support32Bit = true;
71
+
pulse.enable = true;
72
+
# If you want to use JACK applications, uncomment this
73
+
#jack.enable = true;
74
+
75
+
# use the example session manager (no others are packaged yet so this is enabled by default,
76
+
# no need to redefine it in your config for now)
77
+
#media-session.enable = true;
78
+
};
79
+
users.users.joshua = {
80
+
subUidRanges = [ { startUid = 100000; count = 65536; } ];
81
+
subGidRanges = [ { startGid = 100000; count = 65536; } ];
82
+
isNormalUser = true;
83
+
description = "Joshua Barrett";
84
+
shell = pkgs.zsh;
85
+
extraGroups = [ "networkmanager" "wheel" "docker" ];
86
+
packages = with pkgs; [
87
+
88
+
];
89
+
};
90
+
home-manager.useGlobalPkgs = true;
91
+
home-manager.useUserPackages = true;
92
+
home-manager.users.joshua = ./home-manager/home.nix;
93
+
94
+
# Install firefox.
95
+
programs.firefox.enable = true;
96
+
programs.zsh.enable = true;
97
+
programs.foot.enable = true;
98
+
programs.git.enable = true;
99
+
programs.ssh.startAgent = true;
100
+
101
+
# Install steam
102
+
programs.steam = {
103
+
enable = true;
104
+
remotePlay.openFirewall = true;
105
+
localNetworkGameTransfers.openFirewall = true;
106
+
};
107
+
108
+
# Allow unfree packages
109
+
nixpkgs.config.allowUnfree = true;
110
+
111
+
services.syncthing.openDefaultPorts = true;
112
+
113
+
environment.systemPackages = with pkgs; [
114
+
gcc
115
+
gnumake
116
+
bison
117
+
flex
118
+
autoconf
119
+
automake
120
+
libtool
121
+
discord
122
+
calibre
123
+
libreoffice
124
+
enchant
125
+
rustup
126
+
pkg-config
127
+
passt
128
+
# vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
129
+
# wget
130
+
];
131
+
networking.nftables.enable = true;
132
+
networking.firewall = {
133
+
enable = true;
134
+
trustedInterfaces = [ "tailscale0" ];
135
+
allowedUDPPorts = [ config.services.tailscale.port ];
136
+
};
137
+
138
+
systemd.services.tailscaled.serviceConfig.Environment = [
139
+
"TS_DEBUG_FIREWALL_MODE=nftables"
140
+
];
141
+
services.tailscale.enable = true;
142
+
services.resolved.enable = true;
143
+
systemd.network.wait-online.enable = false;
144
+
boot.initrd.systemd.network.wait-online.enable = false;
145
+
}
+21
flake.lock
+21
flake.lock
···
1
1
{
2
2
"nodes": {
3
+
"home-manager": {
4
+
"inputs": {
5
+
"nixpkgs": [
6
+
"nixpkgs"
7
+
]
8
+
},
9
+
"locked": {
10
+
"lastModified": 1772985285,
11
+
"narHash": "sha256-wEEmvfqJcl9J0wyMgMrj1TixOgInBW/6tLPhWGoZE3s=",
12
+
"owner": "nix-community",
13
+
"repo": "home-manager",
14
+
"rev": "5be5d8245cbc7bc0c09fbb5f38f23f223c543f85",
15
+
"type": "github"
16
+
},
17
+
"original": {
18
+
"owner": "nix-community",
19
+
"repo": "home-manager",
20
+
"type": "github"
21
+
}
22
+
},
3
23
"nixpkgs": {
4
24
"locked": {
5
25
"lastModified": 1771574726,
···
18
38
},
19
39
"root": {
20
40
"inputs": {
41
+
"home-manager": "home-manager",
21
42
"nixpkgs": "nixpkgs"
22
43
}
23
44
}
+19
-5
flake.nix
+19
-5
flake.nix
···
1
1
{
2
2
inputs = {
3
3
nixpkgs.url = "github:NixOS/nixpkgs/nixos-25.11";
4
+
home-manager = {
5
+
url = "github:nix-community/home-manager";
6
+
inputs.nixpkgs.follows = "nixpkgs";
7
+
};
4
8
};
5
9
6
-
outputs = {self, nixpkgs, ...}: {
7
-
nixosConfigurations.prospero = nixpkgs.lib.nixosSystem {
8
-
system = "x86_64-linux";
9
-
modules = [ ./prospero/configuration.nix ];
10
+
outputs = {self, home-manager, nixpkgs, ...}:
11
+
{
12
+
#TODO put home-manager in dtcommon
13
+
nixosConfigurations.prospero = nixpkgs.lib.nixosSystem {
14
+
system = "x86_64-linux";
15
+
modules = [ home-manager.nixosModules.home-manager
16
+
./dt-common.nix
17
+
./prospero/configuration.nix ];
18
+
};
19
+
nixosConfigurations.uruk = nixpkgs.lib.nixosSystem {
20
+
system = "x86_64-linux";
21
+
modules = [ home-manager.nixosModules.home-manager
22
+
./dt-common.nix
23
+
./uruk/configuration.nix ];
24
+
};
10
25
};
11
-
};
12
26
}
+1
home-manager/#default.nix#
+1
home-manager/#default.nix#
···
1
+
{}
+1
home-manager/.#default.nix
+1
home-manager/.#default.nix
···
1
+
joshua@prospero.1084246:1771686841
home-manager/default.nix
home-manager/default.nix
This is a binary file and will not be displayed.
+99
home-manager/home.nix
+99
home-manager/home.nix
···
1
+
{ config, pkgs, ... }:
2
+
3
+
{
4
+
# Home Manager needs a bit of information about you and the paths it should
5
+
# manage.
6
+
home.username = "joshua";
7
+
home.homeDirectory = "/home/joshua";
8
+
9
+
# This value determines the Home Manager release that your configuration is
10
+
# compatible with. This helps avoid breakage when a new Home Manager release
11
+
# introduces backwards incompatible changes.
12
+
#
13
+
# You should not change this value, even if you update Home Manager. If you do
14
+
# want to update the value, then make sure to first check the Home Manager
15
+
# release notes.
16
+
home.stateVersion = "25.05"; # Please read the comment before changing.
17
+
18
+
# The home.packages option allows you to install Nix packages into your
19
+
# environment.
20
+
home.packages = with pkgs; [
21
+
# # Adds the 'hello' command to your environment. It prints a friendly
22
+
# # "Hello, world!" when run.
23
+
rsync
24
+
keepassxc
25
+
syncthing
26
+
terminus_font
27
+
jujutsu
28
+
ripgrep
29
+
goose-cli
30
+
kubectl
31
+
k3d
32
+
tilt
33
+
# # It is sometimes useful to fine-tune packages, for example, by applying
34
+
# # overrides. You can do that directly here, just don't forget the
35
+
# # parentheses. Maybe you want to install Nerd Fonts with a limited number of
36
+
# # fonts?
37
+
# (pkgs.nerdfonts.override { fonts = [ "FantasqueSansMono" ]; })
38
+
39
+
# # You can also create simple shell scripts directly inside your
40
+
# # configuration. For example, this adds a command 'my-hello' to your
41
+
# # environment:
42
+
# (pkgs.writeShellScriptBin "my-hello" ''
43
+
# echo "Hello, ${config.home.username}!"
44
+
# '')
45
+
];
46
+
47
+
# Home Manager is pretty good at managing dotfiles. The primary way to manage
48
+
# plain files is through 'home.file'.
49
+
home.file = {
50
+
# # Building this configuration will create a copy of 'dotfiles/screenrc' in
51
+
# # the Nix store. Activating the configuration will then make '~/.screenrc' a
52
+
# # symlink to the Nix store copy.
53
+
# ".screenrc".source = dotfiles/screenrc;
54
+
55
+
# # You can also set the file content immediately.
56
+
# ".gradle/gradle.properties".text = ''
57
+
# org.gradle.console=verbose
58
+
# org.gradle.daemon.idletimeout=3600000
59
+
# '';
60
+
};
61
+
62
+
# Home Manager can also manage your environment variables through
63
+
# 'home.sessionVariables'. These will be explicitly sourced when using a
64
+
# shell provided by Home Manager. If you don't want to manage your shell
65
+
# through Home Manager then you have to manually source 'hm-session-vars.sh'
66
+
# located at either
67
+
#
68
+
# ~/.nix-profile/etc/profile.d/hm-session-vars.sh
69
+
#
70
+
# or
71
+
#
72
+
# ~/.local/state/nix/profiles/profile/etc/profile.d/hm-session-vars.sh
73
+
#
74
+
# or
75
+
#
76
+
# /etc/profiles/per-user/joshua/etc/profile.d/hm-session-vars.sh
77
+
#
78
+
home.sessionVariables = {
79
+
80
+
};
81
+
82
+
# Let Home Manager install and manage itself.
83
+
programs.home-manager.enable = true;
84
+
programs.zsh.enable = true;
85
+
programs.emacs.enable = true;
86
+
programs.atuin ={
87
+
enable = true;
88
+
flags = [ "--disable-up-arrow" ];
89
+
};
90
+
programs.direnv = {
91
+
enable = true;
92
+
enableZshIntegration = true;
93
+
nix-direnv.enable = true;
94
+
};
95
+
services.emacs.enable = true;
96
+
services.emacs.defaultEditor = true;
97
+
services.emacs.startWithUserSession = "graphical";
98
+
}
99
+
-124
prospero/configuration.nix
-124
prospero/configuration.nix
···
5
5
{ config, lib, pkgs, ... }:
6
6
7
7
{
8
-
nixpkgs.overlays = [ (final: prev: {
9
-
inherit (prev.lixPackageSets.stable)
10
-
nixpkgs-review
11
-
nix-eval-jobs
12
-
nix-fast-build
13
-
colmena;
14
-
}) ];
15
-
nix.package = pkgs.lixPackageSets.stable.lix;
16
8
nix.settings.experimental-features = ["nix-command" "flakes"];
17
9
imports =
18
10
[ # Include the results of the hardware scan.
···
40
32
41
33
# Enable networking
42
34
networking.networkmanager.enable = true;
43
-
44
-
virtualisation = {
45
-
containers.enable = true;
46
-
docker = {
47
-
enable = true;
48
-
};
49
-
};
50
-
51
-
systemd.services."user@".serviceConfig.Delegate="cpu cpuset io memory pids";
52
-
53
-
systemd.packages = [(
54
-
pkgs.writeTextFile {
55
-
name = "delegate.conf";
56
-
text = ''
57
-
[Service]
58
-
Delegate=yes
59
-
'';
60
-
destination = "/etc/systemd/system/user@.service.d/delegate.conf";
61
-
}
62
-
)];
63
-
64
-
# Set your time zone.
65
-
time.timeZone = "America/New_York";
66
-
67
-
# Select internationalisation properties.
68
-
i18n.defaultLocale = "en_US.UTF-8";
69
-
70
-
i18n.extraLocaleSettings = {
71
-
LC_ADDRESS = "en_US.UTF-8";
72
-
LC_IDENTIFICATION = "en_US.UTF-8";
73
-
LC_MEASUREMENT = "en_US.UTF-8";
74
-
LC_MONETARY = "en_US.UTF-8";
75
-
LC_NAME = "en_US.UTF-8";
76
-
LC_NUMERIC = "en_US.UTF-8";
77
-
LC_PAPER = "en_US.UTF-8";
78
-
LC_TELEPHONE = "en_US.UTF-8";
79
-
LC_TIME = "en_US.UTF-8";
80
-
};
81
-
82
-
# Enable the X11 windowing system.
83
-
# You can disable this if you're only using the Wayland session.
84
-
services.xserver.enable = true;
85
-
86
-
# Enable the KDE Plasma Desktop Environment.
87
-
services.displayManager.sddm.enable = true;
88
-
services.desktopManager.plasma6.enable = true;
89
-
90
-
# Configure keymap in X11
91
-
services.xserver.xkb = {
92
-
layout = "us";
93
-
variant = "";
94
-
};
95
-
96
-
# Enable CUPS to print documents.
97
-
services.printing.enable = true;
98
-
99
-
# Enable sound with pipewire.
100
-
services.pulseaudio.enable = false;
101
-
security.rtkit.enable = true;
102
-
services.pipewire = {
103
-
enable = true;
104
-
alsa.enable = true;
105
-
alsa.support32Bit = true;
106
-
pulse.enable = true;
107
-
# If you want to use JACK applications, uncomment this
108
-
#jack.enable = true;
109
-
110
-
# use the example session manager (no others are packaged yet so this is enabled by default,
111
-
# no need to redefine it in your config for now)
112
-
#media-session.enable = true;
113
-
};
114
35
115
36
# Enable touchpad support (enabled default in most desktopManager).
116
37
# services.xserver.libinput.enable = true;
117
38
118
39
# Define a user account. Don't forget to set a password with ‘passwd’.
119
-
users.users.joshua = {
120
-
subUidRanges = [ { startUid = 100000; count = 65536; } ];
121
-
subGidRanges = [ { startGid = 100000; count = 65536; } ];
122
-
isNormalUser = true;
123
-
description = "Joshua Barrett";
124
-
shell = pkgs.zsh;
125
-
extraGroups = [ "networkmanager" "wheel" "docker" ];
126
-
packages = with pkgs; [
127
-
128
-
];
129
-
};
130
-
131
-
# Install firefox.
132
-
programs.firefox.enable = true;
133
-
programs.zsh.enable = true;
134
-
programs.foot.enable = true;
135
-
# Install steam
136
-
programs.steam = {
137
-
enable = true;
138
-
remotePlay.openFirewall = true;
139
-
localNetworkGameTransfers.openFirewall = true;
140
-
};
141
-
142
-
# Allow unfree packages
143
-
nixpkgs.config.allowUnfree = true;
144
40
145
41
# List packages installed in system profile. To search, run:
146
42
# $ nix search wget
···
162
58
# vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
163
59
# wget
164
60
];
165
-
166
-
# Some programs need SUID wrappers, can be configured further or are
167
-
# started in user sessions.
168
-
programs.git.enable = true;
169
-
programs.ssh.startAgent = true;
170
61
171
62
# programs.mtr.enable = true;
172
63
# programs.gnupg.agent = {
···
178
69
# Enable the OpenSSH daemon.
179
70
# services.openssh.enable = true;
180
71
# syncthing gets run as a user service, but we need the ports open up here
181
-
services.syncthing.openDefaultPorts = true;
182
72
# Open ports in the firewall.
183
73
# networking.firewall.allowedTCPPorts = [ ... ];
184
74
# networking.firewall.allowedUDPPorts = [ ... ];
185
75
# Or disable the firewall altogether.
186
-
networking.nftables.enable = true;
187
-
networking.firewall = {
188
-
enable = true;
189
-
trustedInterfaces = [ "tailscale0" ];
190
-
allowedUDPPorts = [ config.services.tailscale.port ];
191
-
};
192
-
193
-
systemd.services.tailscaled.serviceConfig.Environment = [
194
-
"TS_DEBUG_FIREWALL_MODE=nftables"
195
-
];
196
-
services.tailscale.enable = true;
197
-
services.resolved.enable = true;
198
-
systemd.network.wait-online.enable = false;
199
-
boot.initrd.systemd.network.wait-online.enable = false;
200
76
201
77
# This value determines the NixOS release from which the default
202
78
# settings for stateful data, like file locations and database versions
+116
uruk/configuration.nix
+116
uruk/configuration.nix
···
1
+
# Edit this configuration file to define what should be installed on
2
+
# your system. Help is available in the configuration.nix(5) man page, on
3
+
# https://search.nixos.org/options and in the NixOS manual (`nixos-help`).
4
+
5
+
{ config, lib, pkgs, ... }:
6
+
7
+
{
8
+
imports =
9
+
[ # Include the results of the hardware scan.
10
+
./hardware-configuration.nix
11
+
];
12
+
13
+
# Use the systemd-boot EFI boot loader.
14
+
boot.loader.systemd-boot.enable = true;
15
+
boot.loader.efi.canTouchEfiVariables = true;
16
+
networking.hostId = "5398fbbf";
17
+
networking.hostName = "uruk"; # Define your hostname.
18
+
19
+
# Configure network connections interactively with nmcli or nmtui.
20
+
21
+
# Set your time zone.
22
+
# time.timeZone = "Europe/Amsterdam";
23
+
24
+
# Configure network proxy if necessary
25
+
# networking.proxy.default = "http://user:password@proxy:port/";
26
+
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
27
+
28
+
# Select internationalisation properties.
29
+
# i18n.defaultLocale = "en_US.UTF-8";
30
+
#console = {
31
+
# font = "Lat2-Terminus16";
32
+
# keyMap = "us";
33
+
# useXkbConfig = true; # use xkb.options in tty.
34
+
#};
35
+
36
+
# Configure keymap in X11
37
+
# services.xserver.xkb.layout = "us";
38
+
# services.xserver.xkb.options = "eurosign:e,caps:escape";
39
+
40
+
# Enable CUPS to print documents.
41
+
# services.printing.enable = true;
42
+
43
+
# Enable sound.
44
+
# services.pulseaudio.enable = true;
45
+
# OR
46
+
# services.pipewire = {
47
+
# enable = true;
48
+
# pulse.enable = true;
49
+
# };
50
+
51
+
# Enable touchpad support (enabled default in most desktopManager).
52
+
# services.libinput.enable = true;
53
+
54
+
# Define a user account. Don't forget to set a password with ‘passwd’.
55
+
# users.users.alice = {
56
+
# isNormalUser = true;
57
+
# extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.
58
+
# packages = with pkgs; [
59
+
# tree
60
+
# ];
61
+
# };
62
+
63
+
# programs.firefox.enable = true;
64
+
65
+
# List packages installed in system profile.
66
+
# You can use https://search.nixos.org/ to find more packages (and options).
67
+
# environment.systemPackages = with pkgs; [
68
+
# vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
69
+
# wget
70
+
# ];
71
+
72
+
# Some programs need SUID wrappers, can be configured further or are
73
+
# started in user sessions.
74
+
# programs.mtr.enable = true;
75
+
# programs.gnupg.agent = {
76
+
# enable = true;
77
+
# enableSSHSupport = true;
78
+
# };
79
+
80
+
# List services that you want to enable:
81
+
82
+
# Enable the OpenSSH daemon.
83
+
# services.openssh.enable = true;
84
+
85
+
# Open ports in the firewall.
86
+
# networking.firewall.allowedTCPPorts = [ ... ];
87
+
# networking.firewall.allowedUDPPorts = [ ... ];
88
+
# Or disable the firewall altogether.
89
+
# networking.firewall.enable = false;
90
+
91
+
# Copy the NixOS configuration file and link it from the resulting system
92
+
# (/run/current-system/configuration.nix). This is useful in case you
93
+
# accidentally delete configuration.nix.
94
+
# system.copySystemConfiguration = true;
95
+
96
+
# This option defines the first version of NixOS you have installed on this particular machine,
97
+
# and is used to maintain compatibility with application data (e.g. databases) created on older NixOS versions.
98
+
#
99
+
# Most users should NEVER change this value after the initial install, for any reason,
100
+
# even if you've upgraded your system to a new NixOS release.
101
+
#
102
+
# This value does NOT affect the Nixpkgs version your packages and OS are pulled from,
103
+
# so changing it will NOT upgrade your system - see https://nixos.org/manual/nixos/stable/#sec-upgrading for how
104
+
# to actually do that.
105
+
#
106
+
# This value being lower than the current NixOS release does NOT mean your system is
107
+
# out of date, out of support, or vulnerable.
108
+
#
109
+
# Do NOT change this value unless you have manually inspected all the changes it would make to your configuration,
110
+
# and migrated your data accordingly.
111
+
#
112
+
# For more information, see `man configuration.nix` or https://nixos.org/manual/nixos/stable/options#opt-system.stateVersion .
113
+
system.stateVersion = "25.11"; # Did you read the comment?
114
+
115
+
}
116
+
+51
uruk/hardware-configuration.nix
+51
uruk/hardware-configuration.nix
···
1
+
# Do not modify this file! It was generated by ‘nixos-generate-config’
2
+
# and may be overwritten by future invocations. Please make changes
3
+
# to /etc/nixos/configuration.nix instead.
4
+
{ config, lib, pkgs, modulesPath, ... }:
5
+
6
+
{
7
+
imports =
8
+
[ (modulesPath + "/installer/scan/not-detected.nix")
9
+
];
10
+
11
+
boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "ahci" "usb_storage" "usbhid" "sd_mod" ];
12
+
boot.initrd.kernelModules = [ ];
13
+
boot.kernelModules = [ "kvm-amd" ];
14
+
boot.extraModulePackages = [ ];
15
+
boot.zfs.extraPools = [ "datastore" ];
16
+
fileSystems."/" =
17
+
{ device = "zpool/root";
18
+
fsType = "zfs";
19
+
};
20
+
fileSystems."/boot" =
21
+
{
22
+
device = "/dev/disk/by-id/nvme-INTEL_SSDPEKNW010T9_BTNR014314861P0B-part1";
23
+
fsType = "vfat";
24
+
};
25
+
fileSystems."/nix" =
26
+
{ device = "zpool/nix";
27
+
fsType = "zfs";
28
+
};
29
+
30
+
fileSystems."/var" =
31
+
{ device = "zpool/var";
32
+
fsType = "zfs";
33
+
};
34
+
35
+
fileSystems."/home" =
36
+
{ device = "zpool/home";
37
+
fsType = "zfs";
38
+
};
39
+
40
+
swapDevices = [{
41
+
device = "/dev/disk/by-id/nvme-INTEL_SSDPEKNW010T9_BTNR014314861P0B-part3";
42
+
randomEncryption = true;
43
+
}
44
+
{
45
+
device = "/dev/disk/by-id/nvme-TEAM_TM8FP6001T_112301031502314-part3";
46
+
randomEncryption = true;
47
+
}];
48
+
49
+
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
50
+
hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
51
+
}