c'est le bordel un peu
This commit is contained in:
@@ -5,6 +5,7 @@
|
||||
{
|
||||
pkgs,
|
||||
customConfig,
|
||||
self,
|
||||
...
|
||||
}: {
|
||||
nix.settings = {
|
||||
@@ -18,11 +19,13 @@
|
||||
];
|
||||
};
|
||||
|
||||
nix.registry.tex.flake = self;
|
||||
|
||||
programs.nh = {
|
||||
enable = true;
|
||||
clean.enable = true;
|
||||
clean.extraArgs = "--keep-since 4d --keep 3";
|
||||
flake = builtins.toString customConfig.configFlakePath;
|
||||
flake = toString customConfig.configFlakePath;
|
||||
};
|
||||
|
||||
nixpkgs.config.allowUnfree = true;
|
||||
@@ -48,6 +51,8 @@
|
||||
unzip
|
||||
|
||||
scream
|
||||
nixd
|
||||
alejandra
|
||||
];
|
||||
|
||||
fonts.packages = with pkgs; [
|
||||
@@ -9,23 +9,70 @@
|
||||
feh --bg-fill --no-xinerama Downloads/fire1.png
|
||||
'';
|
||||
in {
|
||||
services.xserver.enable = true;
|
||||
services.xserver.windowManager.i3.enable = true;
|
||||
services.xserver.autorun = true;
|
||||
services.xserver = {
|
||||
enable = true;
|
||||
windowManager.i3.enable = true;
|
||||
autorun = true;
|
||||
};
|
||||
|
||||
services.displayManager.defaultSession = "none+i3";
|
||||
|
||||
programs.i3lock.enable = true;
|
||||
programs.xss-lock = {
|
||||
enable = true;
|
||||
lockerCommand = "${pkgs.i3lock}/bin/i3lock --nofork -c 000000";
|
||||
extraOptions = ["--transfer-sleep-lock"];
|
||||
};
|
||||
|
||||
services.logind.settings.Login = {
|
||||
IdleAction = "suspend";
|
||||
IdleActionSec = "15min";
|
||||
|
||||
HandleLidSwitch = "suspend";
|
||||
};
|
||||
|
||||
services.picom = {
|
||||
enable = true;
|
||||
|
||||
backend = "glx";
|
||||
vSync = true;
|
||||
|
||||
shadow = true;
|
||||
shadowOpacity = 0.8;
|
||||
shadowOffsets = [(-5) (-5)];
|
||||
|
||||
fade = true;
|
||||
fadeDelta = 10;
|
||||
fadeSteps = [0.03 0.03];
|
||||
|
||||
opacityRules = [
|
||||
"80:class_g = 'Alacritty'"
|
||||
];
|
||||
|
||||
settings = {
|
||||
use-damage = true;
|
||||
|
||||
shadow-radius = 10;
|
||||
|
||||
frame-opacity = 1.0;
|
||||
corner-radius = 20;
|
||||
|
||||
rounded-corners-exclude = [
|
||||
"class_g = 'i3-frame'"
|
||||
"class_g = 'Polybar'"
|
||||
];
|
||||
};
|
||||
};
|
||||
|
||||
environment.systemPackages = with pkgs; [
|
||||
alacritty
|
||||
tint2
|
||||
awesome
|
||||
maim
|
||||
xclip
|
||||
dunst
|
||||
xss-lock
|
||||
dex
|
||||
rofi
|
||||
polybarFull
|
||||
oh-my-posh
|
||||
picom
|
||||
playerctl
|
||||
zscroll
|
||||
feh
|
||||
@@ -20,8 +20,6 @@
|
||||
minisign_key = 'RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3'
|
||||
refresh_delay = 72
|
||||
'';
|
||||
|
||||
userHome = "/home/${customConfig.username}";
|
||||
in {
|
||||
networking.nftables.enable = true;
|
||||
networking.firewall = {
|
||||
11
modules/common/obs.nix
Normal file
11
modules/common/obs.nix
Normal file
@@ -0,0 +1,11 @@
|
||||
{pkgs, ...}: {
|
||||
programs.obs-studio = {
|
||||
enable = true;
|
||||
|
||||
enableVirtualCamera = true;
|
||||
|
||||
plugins = with pkgs.obs-studio-plugins; [
|
||||
obs-pipewire-audio-capture
|
||||
];
|
||||
};
|
||||
}
|
||||
@@ -31,8 +31,6 @@
|
||||
tcpdump
|
||||
pandoc
|
||||
libsecret
|
||||
nixd
|
||||
alejandra
|
||||
|
||||
# Communication
|
||||
slack
|
||||
@@ -49,6 +47,7 @@
|
||||
prismlauncher # Minecraft launcher
|
||||
# widelands # Strategy game
|
||||
wasistlos # Game
|
||||
signal-desktop
|
||||
moonlight-qt # Game streaming
|
||||
|
||||
# System & Cloud
|
||||
@@ -1,5 +1,6 @@
|
||||
# Module: YubiKey Authentication
|
||||
# Description: Enables YubiKey-based PAM auth for login and sudo across systems
|
||||
# TODO
|
||||
{pkgs, ...}: {
|
||||
security.pam.services = {
|
||||
login.u2fAuth = true;
|
||||
@@ -1,18 +0,0 @@
|
||||
# Module: Wireless Networks Configuration (Encrypted)
|
||||
# Description: WiFi networks configuration fully encrypted with sops-nix
|
||||
# Security: Network names, SSIDs, and all configuration stored in encrypted secrets
|
||||
# Files: ~/.config/secrets/wifi-networks.yaml (encrypted with sops)
|
||||
# Note: The actual networks are loaded at runtime from the encrypted file
|
||||
{
|
||||
config,
|
||||
lib,
|
||||
pkgs,
|
||||
...
|
||||
}: {
|
||||
# WiFi networks are loaded from encrypted file at runtime
|
||||
# The file is in wpa_supplicant.conf format and gets included by wpa_supplicant
|
||||
# This approach keeps network names and configuration completely private
|
||||
|
||||
# Note: If wifi-networks secret doesn't exist yet, this won't cause errors
|
||||
# You can still use the old method (networking.wireless.networks in Nix) if needed
|
||||
}
|
||||
Reference in New Issue
Block a user