Code refactor

This commit is contained in:
2026-01-31 21:19:32 +01:00
parent c26d9bf209
commit 26f641b191
13 changed files with 84 additions and 75 deletions

View File

@@ -8,18 +8,7 @@
boot.loader.systemd-boot.enable = true; boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true; boot.loader.efi.canTouchEfiVariables = true;
networking.networkmanager.enable = true;
time.timeZone = "Europe/Rome"; time.timeZone = "Europe/Rome";
nixpkgs.config.allowUnfree = true; nixpkgs.config.allowUnfree = true;
services = {
openssh.enable = true;
udisks2.enable = true;
};
networking.firewall.allowedTCPPorts = [ 22 ];
networking.firewall.allowedUDPPorts = [ ];
networking.firewall.enable = true;
} }

View File

@@ -3,6 +3,8 @@
imports = [ imports = [
./configuration.nix ./configuration.nix
./hardware.nix ./hardware.nix
./networking.nix
./services.nix
./virtualisation.nix ./virtualisation.nix
]; ];

View File

@@ -0,0 +1,11 @@
{ ... }:
{
networking = {
networkmanager.enable = true;
firewall = {
allowedTCPPorts = [ 22 ];
allowedUDPPorts = [ ];
enable = true;
};
};
}

View File

@@ -0,0 +1,6 @@
{ ... }:
{
services = {
openssh.enable = true;
};
}

View File

@@ -1,12 +1,16 @@
{ ... }: { ... }:
{ {
networking.networkmanager.enable = true; networking = {
networking.firewall = { networkmanager.enable = true;
checkReversePath = false; wireguard.enable = true;
allowedUDPPorts = [ 25565 1194 ]; firewall = {
allowedTCPPorts = [ 25565 443 ]; checkReversePath = false;
allowedUDPPorts = [ 25565 ];
allowedTCPPorts = [ 25565 ];
};
};
hardware.bluetooth = {
enable = true;
powerOnBoot = true;
}; };
hardware.bluetooth.enable = true;
hardware.bluetooth.powerOnBoot = true;
networking.wireguard.enable = true;
} }

View File

@@ -1,18 +1,20 @@
{ config, ... }: { config, ... }:
{ {
hardware.graphics.enable = true; hardware = {
hardware.nvidia = { graphics.enable = true;
modesetting.enable = true; nvidia = {
package = config.boot.kernelPackages.nvidiaPackages.beta; modesetting.enable = true;
open = true; package = config.boot.kernelPackages.nvidiaPackages.beta;
prime = { open = true;
offload = { prime = {
enable = true; offload = {
enableOffloadCmd = true; enable = true;
}; enableOffloadCmd = true;
};
intelBusId = "PCI:0:2:0"; intelBusId = "PCI:0:2:0";
nvidiaBusId = "PCI:1:0:0"; nvidiaBusId = "PCI:1:0:0";
};
}; };
}; };
} }

View File

@@ -1,11 +1,10 @@
{ ... }: { ... }:
{ {
services.flatpak.enable = true; services = {
services.xserver.videoDrivers = ["nvidia"]; flatpak.enable = true;
printing.enable = true;
# Enable CUPS to print documents. # Required for piper to work
services.printing.enable = true; ratbagd.enable = true;
xserver.videoDrivers = ["nvidia"];
# Required for piper to work };
services.ratbagd.enable = true;
} }

View File

@@ -1,11 +1,10 @@
{ currentSystemUser, ... }: { currentSystemUser, ... }:
{ {
# virtualisation.podman.enable = true;
# virtualisation.podman.dockerCompat = true;
virtualisation.docker.enable = true;
#
programs.virt-manager.enable = true; programs.virt-manager.enable = true;
users.groups.libvirtd.members = ["${currentSystemUser}"]; users.groups.libvirtd.members = ["${currentSystemUser}"];
virtualisation.libvirtd.enable = true; virtualisation = {
virtualisation.spiceUSBRedirection.enable = true; docker.enable = true;
libvirtd.enable = true;
spiceUSBRedirection.enable = true;
};
} }

View File

@@ -9,8 +9,10 @@
networking.hostName = "workstation"; # Define your hostname. networking.hostName = "workstation"; # Define your hostname.
boot.loader.systemd-boot.enable = true; boot.loader = {
boot.loader.efi.canTouchEfiVariables = true; systemd-boot.enable = true;
efi.canTouchEfiVariables = true;
};
system.stateVersion = "24.11"; # Did you read the comment? system.stateVersion = "24.11"; # Did you read the comment?
} }

View File

@@ -1,16 +1,9 @@
{ ... }: { ... }:
{ {
networking.networkmanager.enable = true; networking = {
networking.firewall.allowedUDPPorts = [ 8000 23 ]; networkmanager.enable = true;
networking.firewall.allowedTCPPorts = [ 8000 23 ]; firewall.allowedUDPPorts = [ 8000 ];
# networking.bridges = { firewall.allowedTCPPorts = [ 8000 ];
# "br0" = { nameservers = [ "1.1.1.1" "1.0.0.1" ];
# interfaces = [ "eno1" ]; };
# };
# };
# networking.interfaces.br0.ipv4.addresses = [{
# address = "192.168.1.235";
# prefixLength = 24;
# }];
networking.nameservers = [ "1.1.1.1" "1.0.0.1" ];
} }

View File

@@ -1,15 +1,17 @@
{ ... }: { ... }:
{ {
services.flatpak.enable = true; services = {
flatpak.enable = true;
# Enable CUPS to print documents. # Enable CUPS to print documents.
services.printing.enable = true; printing.enable = true;
services.openssh = { openssh = {
enable = true; enable = true;
ports = [ 22 ]; ports = [ 22 ];
settings = { settings = {
PasswordAuthentication = true; PasswordAuthentication = true;
PermitRootLogin = "no"; PermitRootLogin = "no";
};
}; };
}; };
} }

View File

@@ -1,11 +1,10 @@
{ currentSystemUser, ... }: { currentSystemUser, ... }:
{ {
# virtualisation.podman.enable = true;
# virtualisation.podman.dockerCompat = true;
virtualisation.docker.enable = true;
programs.virt-manager.enable = true; programs.virt-manager.enable = true;
users.groups.libvirtd.members = ["${currentSystemUser}"]; users.groups.libvirtd.members = ["${currentSystemUser}"];
virtualisation.libvirtd.enable = true; virtualisation = {
virtualisation.spiceUSBRedirection.enable = true; docker.enable = true;
libvirtd.enable = true;
spiceUSBRedirection.enable = true;
};
} }

View File

@@ -60,6 +60,7 @@
mpv mpv
nextcloud-client nextcloud-client
piper piper
spotube
telegram-desktop telegram-desktop
thunderbird thunderbird
] else []) ] else [])