nixfiles/config/hosts/ryuuko/configuration.nix
2024-02-26 20:06:58 +01:00

74 lines
1.8 KiB
Nix

{ config, inputs, lib, pkgs, ... }: {
imports = [
inputs.nixos-hardware.nixosModules.lenovo-thinkpad-x1-extreme-gen4
../../common
../../profiles/graphical
./hardware-configuration.nix
];
boot.extraModprobeConfig = ''
options i915 enable_guc=3
'';
boot.initrd.kernelModules = [ "i915" ];
boot.kernelParams = [
"intel_iommu=on"
"i915.enable_guc=3"
"nohz=on"
"irqaffinity=9-15"
"nohz_full=1-14"
"rcu_nocbs=0-8"
];
boot.loader = {
systemd-boot.enable = true;
efi.canTouchEfiVariables = true;
};
deployment = {
targetHost = "192.168.122.159";
targetUser = "emily";
};
hardware.bluetooth.enable = true;
hardware.cpu.intel.updateMicrocode = true;
hardware.gpgSmartcards.enable = true;
hardware.nitrokey.enable = true;
hardware.opengl = {
driSupport32Bit = true;
extraPackages = [ pkgs.intel-media-driver pkgs.libvdpau-va-gl ];
};
hardware.sane = {
enable = true;
extraBackends = [ pkgs.utsushi ];
};
kyouma.machine-type.physical = true;
kyouma.machine-type.portable = true;
networking.hostName = "ryuuko";
networking.firewall.allowedTCPPorts = [ 22000 ];
networking.firewall.allowedUDPPorts = [ 22000 ];
networking.networkmanager.enable = true;
systemd.network.enable = lib.mkForce false;
services.avahi = {
enable = true;
ipv6 = true;
nssmdns4 = true;
publish.enable = true;
publish.userServices = true;
};
services.fprintd.enable = true;
services.fstrim.enable = true;
services.openssh.enable = true;
services.pcscd.enable = true;
services.printing = {
enable = true;
drivers = [ pkgs.hplip pkgs.brlaser ];
};
services.usbmuxd.enable = true;
users.mutableUsers = lib.mkForce true;
users.users.emily.extraGroups = [ "nitrokey" "scanner" "video" ];
}