103 lines
2.3 KiB
Nix
103 lines
2.3 KiB
Nix
{
|
|
pkgs,
|
|
config,
|
|
extraInfo,
|
|
...
|
|
}:
|
|
{
|
|
|
|
imports = [ ./hardware.nix ];
|
|
|
|
deployment.targetHost = null;
|
|
boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
|
|
|
|
# Custom udev rules for Nucleo's stlink interface
|
|
services.udev.extraRules = ''
|
|
ATTRS{idVendor}=="0483", ATTRS{idProduct}=="374b",MODE="660",GROUP="dialout",TAG+="uaccess"
|
|
ATTRS{idVendor}=="0483", ATTRS{idProduct}=="3748",MODE="660",GROUP="dialout",TAG+="uaccess"
|
|
'';
|
|
|
|
# Nix
|
|
nixpkgs.config.allowUnfree = true;
|
|
|
|
# System secrets
|
|
sops = {
|
|
gnupg.sshKeyPaths = [ ];
|
|
age = {
|
|
sshKeyPaths = [ ];
|
|
keyFile = "/var/lib/sops-nix/key.txt";
|
|
};
|
|
defaultSopsFile = ./secrets/secrets.yaml;
|
|
secrets.wg0_private = { };
|
|
};
|
|
|
|
# Wireguard
|
|
networking.wg-quick.interfaces.wg0 = {
|
|
address = [ "10.100.0.4/8" ];
|
|
dns = [ "10.100.0.1" ];
|
|
|
|
listenPort = 51820;
|
|
privateKeyFile = config.sops.secrets.wg0_private.path;
|
|
|
|
peers = [
|
|
{
|
|
# Rock Pro 64
|
|
publicKey = "XVmG3/rNsCqc8KCmOx3+UUn9DJOnJ40Uxid5JGdChR4=";
|
|
endpoint = "${extraInfo.wireguard.rockProEndpoint}:51820";
|
|
allowedIPs = [ "10.100.0.1" ];
|
|
persistentKeepalive = 25;
|
|
}
|
|
];
|
|
};
|
|
|
|
# User config
|
|
my.users = {
|
|
dala = {
|
|
description = "Dala";
|
|
groups = [
|
|
"docker"
|
|
"wheel"
|
|
"video"
|
|
"audio"
|
|
"seat"
|
|
"keys"
|
|
"lp"
|
|
"dialout"
|
|
"network"
|
|
];
|
|
uid = 1000;
|
|
shell = pkgs.fish;
|
|
hmConfig =
|
|
{ pkgs, ... }:
|
|
{
|
|
programs.helix.enable = true;
|
|
|
|
home.packages = with pkgs; [
|
|
cutter
|
|
ghidra
|
|
cutterPlugins.rz-ghidra
|
|
];
|
|
|
|
my.desktop.sway.monitors = [
|
|
{
|
|
name = "Iiyama North America PL2470H 0x0000047B";
|
|
resolution = "1920x1080@165.003Hz";
|
|
position = "1920 0";
|
|
defaultWorkspace = 1;
|
|
}
|
|
{
|
|
name = "Iiyama North America PL2530H 1154392601941";
|
|
resolution = "1920x1080@74.973Hz";
|
|
position = "0 0";
|
|
defaultWorkspace = 2;
|
|
}
|
|
];
|
|
|
|
nixpkgs.config.allowUnfree = true;
|
|
my.development.embedded-tools.enable = true;
|
|
my.games.wine.enable = true;
|
|
};
|
|
};
|
|
};
|
|
}
|