aboutsummaryrefslogtreecommitdiff
path: root/share/system/client-common.nix
blob: 1f6f378041a640607a5c73f8f56513836b325ee8 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
# Common configuration options for client machines (i.e. not servers)
{
  inputs,
  options,
  pkgs,
  ...
}:
{
  imports = [
    ./steam.nix
    ../nixos-modules/iwd-ext.nix
  ];
  nixpkgs = {
    overlays = [
      inputs.niri-flake.overlays.niri
      inputs.xpkgs.overlays.default
      inputs.niri-flake.overlays.niri
    ];
    config.allowUnfree = true;
  };

  security.pki.certificateFiles = [
    ../../etc/certs/rootCA.crt
  ];

  documentation = {
    enable = true;
    dev.enable = true;
    doc.enable = true;
    info.enable = true;
    man = {
      enable = true;
      cache.enable = true;
    };
  };

  programs.nix-ld = {
    enable = true;
    libraries =
      options.programs.nix-ld.libraries.default
      ++ (with pkgs; [
        dbus # libdbus-1.so.3
        fontconfig # libfontconfig.so.1
        freetype # libfreetype.so.6
        glib # libglib-2.0.so.0
        libGL # libGL.so.1
        libxkbcommon # libxkbcommon.so.0
        libx11 # libX11.so.6
        wayland
      ]);
  };

  # programs.hyprland.enable = true;
  services.gvfs.enable = true;
  services.udisks2.enable = true;
  boot.supportedFilesystems = [
    "ntfs"
    "bcachefs"
  ];

  nix.gc = {
    dates = "daily";
    automatic = true;
    persistent = true;
    randomizedDelaySec = "15min";
    options = "--delete-older-than 7d";
  };

  services.mullvad-vpn.enable = true;

  virtualisation.docker = {
    enable = true;
    autoPrune.enable = true;
  };
  services.flatpak.enable = true;

  programs.gnupg.agent = {
    enable = true;
    enableSSHSupport = true;
    pinentryPackage = pkgs.pinentry-gnome3;
    settings = {
      default-cache-ttl = 1200;
    };
  };

  home-manager.backupFileExtension = "backup";

  services.pipewire = {
    enable = true;
    alsa.enable = true;
    pulse.enable = true;
  };

  fonts.packages = with pkgs; [
    noto-fonts
    noto-fonts-cjk-sans
    noto-fonts-color-emoji
    proggyfonts
    nerd-fonts.fira-code
    nerd-fonts.caskaydia-cove
    overpass
    inter
    recursive
  ];

  xdg = {
    mime.enable = true;
    menus.enable = true;
    icons.enable = true;
    sounds.enable = true;
    autostart.enable = true;
    portal = {
      enable = true;
      wlr.enable = true;
      config.common.default = [ "*" ];
    };
    terminal-exec.enable = true;
  };

  # services.earlyoom = {
  #   enable = true;
  #   freeMemThreshold = 5;
  #   extraArgs = [ "--prefer '(^|/)(firefox|chromium|signal|electron)$'" ];
  # };
}