oldie: more updates

This commit is contained in:
Mateusz Słodkowicz 2026-06-14 09:07:33 +02:00
parent 71710a3aa0
commit 65f9c1bb9d
Signed by: materus
SSH Key Fingerprint: SHA256:rzVduzTiiszuYfLPYD0SDZV+g8lxhpcRgpbOZA1X0Uo
3 changed files with 125 additions and 5 deletions

View File

@ -24,6 +24,8 @@
boot.loader.grub = { boot.loader.grub = {
enable = true; enable = true;
efiSupport = true; efiSupport = true;
gfxmodeEfi = "1920x1080";
gfxmodeBios = "1920x1080";
device = "nodev"; device = "nodev";
useOSProber = true; useOSProber = true;
memtest86.enable = true; memtest86.enable = true;
@ -31,6 +33,7 @@
services.xserver.videoDrivers = [ "nvidia" ]; services.xserver.videoDrivers = [ "nvidia" ];
hardware.nvidia = { hardware.nvidia = {
modesetting.enable = true; modesetting.enable = true;
powerManagement.enable = true;
open = true; open = true;
nvidiaSettings = true; nvidiaSettings = true;
package = config.boot.kernelPackages.nvidiaPackages.stable; package = config.boot.kernelPackages.nvidiaPackages.stable;
@ -38,6 +41,14 @@
hardware.graphics = { hardware.graphics = {
enable = true; enable = true;
extraPackages = with pkgs; [ extraPackages = with pkgs; [
libva-vdpau-driver
nvidia-vaapi-driver
libvdpau-va-gl
];
extraPackages32 = with pkgs; [
libva-vdpau-driver
nvidia-vaapi-driver
libvdpau-va-gl
]; ];
}; };
# Use latest kernel. # Use latest kernel.
@ -59,6 +70,14 @@
networking.networkmanager.enable = true; networking.networkmanager.enable = true;
programs.firefox.enable = true; programs.firefox.enable = true;
programs.java.enable = true; programs.java.enable = true;
services.flatpak.enable = true;
hardware.bluetooth.enable = true;
services.gvfs.enable = true;
programs.kdeconnect.enable = true;
services.fstrim = {
enable = true;
interval = "weekly";
};
programs.steam = { programs.steam = {
enable = true; enable = true;
remotePlay.openFirewall = true; remotePlay.openFirewall = true;
@ -233,6 +252,15 @@
}; };
services.desktopManager.plasma6.enable = true; services.desktopManager.plasma6.enable = true;
services.desktopManager.plasma6.enableQt5Integration = true; services.desktopManager.plasma6.enableQt5Integration = true;
xdg.portal.enable = true;
xdg.portal.wlr.enable = true;
xdg.portal.xdgOpenUsePortal = true;
xdg.portal.extraPortals = [ pkgs.kdePackages.xdg-desktop-portal-kde ];
environment.plasma6.excludePackages = with pkgs.kdePackages; [
kwallet
kwalletmanager
kwallet-pam
];
programs.ssh.startAgent = true; programs.ssh.startAgent = true;
@ -252,6 +280,7 @@
# Enable sound. # Enable sound.
# services.pulseaudio.enable = true; # services.pulseaudio.enable = true;
# OR # OR
security.rtkit.enable = true;
services.pipewire = { services.pipewire = {
enable = true; enable = true;
audio.enable = true; audio.enable = true;
@ -261,6 +290,51 @@
systemWide = true; systemWide = true;
jack.enable = true; jack.enable = true;
}; };
virtualisation.podman = {
enable = true;
dockerCompat = true;
dockerSocket.enable = true;
};
virtualisation.libvirtd = {
enable = true;
onBoot = "ignore";
onShutdown = "shutdown";
qemu.runAsRoot = true;
qemu.swtpm.enable = true;
qemu.package = pkgs.qemu_full;
};
environment.sessionVariables = rec {
XDG_CACHE_HOME = "\${HOME}/.cache";
XDG_CONFIG_HOME = "\${HOME}/.config";
XDG_BIN_HOME = "\${HOME}/.local/bin";
XDG_DATA_HOME = "\${HOME}/.local/share";
#SSH_ASKPASS_REQUIRE = "prefer";
STEAM_EXTRA_COMPAT_TOOLS_PATHS = "\${HOME}/.steam/root/compatibilitytools.d";
MOZ_USE_XINPUT2 = "1";
PATH = [ "\${XDG_BIN_HOME}" ];
};
environment.shellInit = ''
if ! [ -z "$DISPLAY" ]; then ${pkgs.xhost}/bin/xhost +si:localuser:root &> /dev/null; fi;
if ! [ -z "$DISPLAY" ]; then ${pkgs.xhost}/bin/xhost +si:localuser:$USER &> /dev/null; fi;
'';
security.sudo = {
enable = true;
extraConfig = ''
Defaults pwfeedback
'';
};
i18n.inputMethod.enable = true;
i18n.inputMethod.type = "fcitx5";
i18n.inputMethod.fcitx5.addons = [
pkgs.qt6Packages.fcitx5-configtool
pkgs.fcitx5-lua
pkgs.fcitx5-mozc
pkgs.kdePackages.fcitx5-qt
];
# Enable touchpad support (enabled default in most desktopManager). # Enable touchpad support (enabled default in most desktopManager).
services.libinput.enable = true; services.libinput.enable = true;
@ -292,7 +366,6 @@
# }; # };
# List services that you want to enable: # List services that you want to enable:
# Enable the OpenSSH daemon. # Enable the OpenSSH daemon.
# services.openssh.enable = true; # services.openssh.enable = true;
@ -301,6 +374,27 @@
# networking.firewall.allowedUDPPorts = [ ... ]; # networking.firewall.allowedUDPPorts = [ ... ];
# Or disable the firewall altogether. # Or disable the firewall altogether.
networking.firewall.enable = true; networking.firewall.enable = true;
networking.firewall.allowedTCPPorts = [
24800
5900
5357
4656
#region Syncthing
22000
config.services.syncthing.relay.statusPort
config.services.syncthing.relay.port
#endregion
];
networking.firewall.allowedUDPPorts = [
24800
5900
3702
4656
#region Syncthing
22000
21027
#endregion
];
# Copy the NixOS configuration file and link it from the resulting system # Copy the NixOS configuration file and link it from the resulting system
# (/run/current-system/configuration.nix). This is useful in case you # (/run/current-system/configuration.nix). This is useful in case you
@ -326,7 +420,6 @@
hardware.uinput.enable = true; hardware.uinput.enable = true;
hardware.steam-hardware.enable = true; hardware.steam-hardware.enable = true;
sops.templates."networkmanager.env".content = '' sops.templates."networkmanager.env".content = ''
WIREGUARD_PRIVATEKEY="${config.sops.placeholder.wg-key}" WIREGUARD_PRIVATEKEY="${config.sops.placeholder.wg-key}"
''; '';
@ -362,7 +455,6 @@
}; };
}; };
# For more information, see `man configuration.nix` or https://nixos.org/manual/nixos/stable/options#opt-system.stateVersion . # For more information, see `man configuration.nix` or https://nixos.org/manual/nixos/stable/options#opt-system.stateVersion .
system.stateVersion = "26.05"; # Did you read the comment? system.stateVersion = "26.05"; # Did you read the comment?

View File

@ -25,6 +25,7 @@
boot.initrd.kernelModules = [ ]; boot.initrd.kernelModules = [ ];
boot.kernelModules = [ "kvm-intel" ]; boot.kernelModules = [ "kvm-intel" ];
boot.extraModulePackages = [ ]; boot.extraModulePackages = [ ];
boot.supportedFilesystems = [ "ntfs" ];
boot.initrd.systemd.enable = true; boot.initrd.systemd.enable = true;
boot.initrd.luks.devices."DECRYPTED_ROOT".device = boot.initrd.luks.devices."DECRYPTED_ROOT".device =
@ -90,6 +91,11 @@
swapDevices = [ swapDevices = [
{ device = "/dev/disk/by-uuid/9a5795a9-8ddb-4be0-b8f7-e59270ba8db9"; } { device = "/dev/disk/by-uuid/9a5795a9-8ddb-4be0-b8f7-e59270ba8db9"; }
]; ];
zramSwap = {
enable = true;
memoryPercent = 50;
priority = 10;
};
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux"; nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware; hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;

View File

@ -23,7 +23,7 @@
packwiz packwiz
ani-cli ani-cli
mpv
kitty kitty
keepassxc keepassxc
moonlight-qt moonlight-qt
@ -31,6 +31,21 @@
(vivaldi.override { proprietaryCodecs = true; }) (vivaldi.override { proprietaryCodecs = true; })
]; ];
programs.mpv = {
enable = true;
config = {
ytdl-format = "bestvideo+bestaudio";
slang = "pl,pol,Polish,Polski,en,eng,English";
alang = "ja,jp,jpn,Japanese,pl,pol,Polski,en,eng,English";
demuxer-max-bytes = "500MiB";
demuxer-max-back-bytes = "150MiB";
cache = "yes";
cache-pause-wait = "10";
cache-pause-initial = "yes";
keep-open = "yes";
};
};
programs.vscode = { programs.vscode = {
enable = true; enable = true;
mutableExtensionsDir = true; mutableExtensionsDir = true;
@ -43,9 +58,16 @@
user.name = "materus"; user.name = "materus";
commit.gpgsign = true; commit.gpgsign = true;
gpg.format = "ssh"; gpg.format = "ssh";
}; };
signing.signByDefault = true; signing.signByDefault = true;
signing.key = "/mkk/config/extra-files/ssh/materus.pub"; signing.key = "/mkk/config/extra-files/ssh/materus.pub";
}; };
programs.delta = {
enable = true;
enableGitIntegration = true;
};
programs.gitui.enable = true;
programs.yt-dlp.enable = true;
} }