backup
This commit is contained in:
ltadeu6
parent
55c7c928e9
commit
0b4eacb4ba
15 changed files with 2371 additions and 4 deletions
484
hosts/Nixos/configuration.nix
Normal file
484
hosts/Nixos/configuration.nix
Normal file
|
|
@ -0,0 +1,484 @@
|
|||
# Edit this configuration file to define what should be installed on
|
||||
# your system. Help is available in the configuration.nix(5) man page
|
||||
# and in the NixOS manual (accessible by running ‘nixos-help’).
|
||||
|
||||
{ config, pkgs, lib, agenix, ... }:
|
||||
|
||||
{
|
||||
imports = [ # Include the results of the hardware scan.
|
||||
./hardware-configuration.nix
|
||||
];
|
||||
|
||||
age = {
|
||||
identityPaths = [ "/home/ltadeu6/.ssh/id_ed25519" ];
|
||||
secrets =
|
||||
{ }
|
||||
// lib.optionalAttrs (builtins.pathExists ../../secrets/openai_api_key.age) {
|
||||
openai_api_key.file = ../../secrets/openai_api_key.age;
|
||||
}
|
||||
// lib.optionalAttrs (builtins.pathExists ../../secrets/minecraft_rcon_password.age) {
|
||||
minecraft_rcon_password.file = ../../secrets/minecraft_rcon_password.age;
|
||||
}
|
||||
// lib.optionalAttrs (builtins.pathExists ../../secrets/syncthing_pixel_id.age) {
|
||||
syncthing_pixel_id.file = ../../secrets/syncthing_pixel_id.age;
|
||||
}
|
||||
// lib.optionalAttrs (builtins.pathExists ../../secrets/syncthing_tv_id.age) {
|
||||
syncthing_tv_id.file = ../../secrets/syncthing_tv_id.age;
|
||||
}
|
||||
// lib.optionalAttrs (builtins.pathExists ../../secrets/wireguard_private_key.age) {
|
||||
wireguard_private_key.file = ../../secrets/wireguard_private_key.age;
|
||||
};
|
||||
};
|
||||
|
||||
powerManagement.cpuFreqGovernor = "performance";
|
||||
# Bootloader.
|
||||
boot = {
|
||||
loader.systemd-boot.enable = true;
|
||||
loader.efi.canTouchEfiVariables = true;
|
||||
loader.timeout = 0;
|
||||
# plymouth.themePackages = [
|
||||
# (pkgs.adi1090x-plymouth-themes.override {
|
||||
# selected_themes = [ "colorful_loop" ];
|
||||
# })
|
||||
# ];
|
||||
plymouth.enable = true;
|
||||
# plymouth.theme = "colorful_loop";
|
||||
consoleLogLevel = 0;
|
||||
initrd.verbose = false;
|
||||
kernelParams = [
|
||||
"quiet"
|
||||
"splash"
|
||||
"rd.systemd.show_status=false"
|
||||
"rd.udev.log_level=3"
|
||||
"udev.log_priority=3"
|
||||
"boot.shell_on_fail"
|
||||
];
|
||||
};
|
||||
|
||||
networking = {
|
||||
hostName = "Nixos"; # Define your hostname.
|
||||
networkmanager.enable = true;
|
||||
firewall.enable = false;
|
||||
interfaces = {
|
||||
enp4s0.ipv4.addresses = [{
|
||||
address = "192.168.1.150";
|
||||
prefixLength = 16;
|
||||
}];
|
||||
};
|
||||
defaultGateway = "192.168.1.1";
|
||||
nameservers = [ "8.8.8.8" "1.1.1.1" ];
|
||||
extraHosts = ''
|
||||
191.252.194.81 vps
|
||||
'';
|
||||
# Enable WireGuard
|
||||
# wireguard.interfaces = {
|
||||
# wg0 = {
|
||||
# ips = [ "10.0.0.2/24" ];
|
||||
# listenPort = 51820;
|
||||
# privateKey = builtins.readFile config.age.secrets.wireguard_private_key.path;
|
||||
# peers = [{
|
||||
# publicKey = (import ../../secrets/secrets.nix).wireguard.peerPublicKey;
|
||||
# allowedIPs = [ "10.0.0.1" ];
|
||||
# endpoint = (import ../../secrets/secrets.nix).wireguard.endpoint;
|
||||
# persistentKeepalive = 25;
|
||||
# }];
|
||||
# };
|
||||
# };
|
||||
};
|
||||
|
||||
time.timeZone = "America/Sao_Paulo";
|
||||
|
||||
i18n = {
|
||||
defaultLocale = "pt_BR.UTF-8";
|
||||
extraLocaleSettings = {
|
||||
LC_ADDRESS = "pt_BR.UTF-8";
|
||||
LC_IDENTIFICATION = "pt_BR.UTF-8";
|
||||
LC_MEASUREMENT = "pt_BR.UTF-8";
|
||||
LC_MONETARY = "pt_BR.UTF-8";
|
||||
LC_NAME = "pt_BR.UTF-8";
|
||||
LC_NUMERIC = "pt_BR.UTF-8";
|
||||
LC_PAPER = "pt_BR.UTF-8";
|
||||
LC_TELEPHONE = "pt_BR.UTF-8";
|
||||
LC_TIME = "pt_BR.UTF-8";
|
||||
};
|
||||
};
|
||||
|
||||
programs = {
|
||||
|
||||
gamescope = {
|
||||
enable = true;
|
||||
# capSysNice = true;
|
||||
};
|
||||
|
||||
virt-manager.enable = true;
|
||||
|
||||
gnupg.agent.enable = true;
|
||||
nautilus-open-any-terminal = {
|
||||
enable = true;
|
||||
terminal = "kitty";
|
||||
};
|
||||
fish = {
|
||||
enable = true;
|
||||
shellAliases = {
|
||||
la = "exa --icons --git";
|
||||
ls = "exa --icons --git";
|
||||
tree = "exa --tree";
|
||||
rm = "trash";
|
||||
};
|
||||
};
|
||||
hyprland = {
|
||||
enable = true;
|
||||
xwayland.enable = true;
|
||||
};
|
||||
neovim = {
|
||||
enable = true;
|
||||
defaultEditor = true;
|
||||
};
|
||||
nix-ld = {
|
||||
enable = true;
|
||||
libraries = with pkgs; [ bash ];
|
||||
};
|
||||
dconf.enable = true;
|
||||
kdeconnect.enable = true;
|
||||
nano.enable = false;
|
||||
steam = {
|
||||
enable = true;
|
||||
# gamescopeSession.enable = true;
|
||||
};
|
||||
starship.enable = true;
|
||||
java.enable = true;
|
||||
htop.enable = true;
|
||||
git.enable = true;
|
||||
gamemode.enable = true;
|
||||
firefox.enable = true;
|
||||
adb.enable = true;
|
||||
};
|
||||
|
||||
security.polkit.enable = true;
|
||||
services = {
|
||||
home-assistant = {
|
||||
enable = true;
|
||||
openFirewall = true;
|
||||
extraComponents = [ "lg_thinq" ];
|
||||
config = {
|
||||
homeassistant = {
|
||||
name = "Casa";
|
||||
unit_system = "metric";
|
||||
time_zone = "America/Sao_Paulo";
|
||||
};
|
||||
|
||||
default_config = { };
|
||||
};
|
||||
};
|
||||
dbus.enable = true;
|
||||
displayManager.gdm.enable = true;
|
||||
# Optional but recommended if using Nautilus or Thunar
|
||||
gvfs.enable = true;
|
||||
gnome.gnome-keyring.enable = true;
|
||||
udisks2.enable = true;
|
||||
|
||||
mysql = {
|
||||
enable = false;
|
||||
package = pkgs.mariadb;
|
||||
};
|
||||
# getty.autologinUser = "ltadeu6";
|
||||
flatpak.enable = true;
|
||||
terraria = {
|
||||
enable = false;
|
||||
openFirewall = true;
|
||||
worldPath =
|
||||
"/var/lib/terraria/.local/share/Terraria/Worlds/Vision_of_the_Stooge.wld";
|
||||
|
||||
};
|
||||
minecraft-server = {
|
||||
enable = false;
|
||||
eula = true; # Accept Minecraft EULA
|
||||
package = pkgs.minecraft-server; # Use papermc for modded servers
|
||||
openFirewall = true; # Open port 25565
|
||||
|
||||
declarative = true;
|
||||
serverProperties = {
|
||||
motd = "Welcome to my NixOS Minecraft Server!";
|
||||
enable-command-block = true;
|
||||
gamemode = "survival";
|
||||
difficulty = "normal";
|
||||
max-players = 20;
|
||||
white-list = false;
|
||||
enable-rcon = true;
|
||||
online-mode = false;
|
||||
} // lib.optionalAttrs (config.services.minecraft-server.enable
|
||||
&& config.age.secrets ? minecraft_rcon_password) {
|
||||
"rcon.password" =
|
||||
builtins.readFile config.age.secrets.minecraft_rcon_password.path;
|
||||
};
|
||||
};
|
||||
|
||||
xserver = {
|
||||
enable = true;
|
||||
# desktopManager.gnome.enable = true;
|
||||
# evaluation warning: The option `services.xserver.displayManager.gdm.enable'
|
||||
# defined in `/etc/nixos/configuration.nix' has been renamed to `services.displayManager.gdm.enable'.
|
||||
};
|
||||
ollama = {
|
||||
enable = false;
|
||||
acceleration = "cuda";
|
||||
host = "[::]";
|
||||
# listenAddress = "10.0.0.2:11434";
|
||||
};
|
||||
open-webui = {
|
||||
enable = false;
|
||||
host = "0.0.0.0";
|
||||
};
|
||||
transmission = {
|
||||
enable = true;
|
||||
home = "/home/ltadeu6/Extra/Transmission/";
|
||||
package = pkgs.transmission_4;
|
||||
settings = {
|
||||
rpc-bind-address = "0.0.0.0";
|
||||
rpc-whitelist = "*.*.*.*";
|
||||
};
|
||||
};
|
||||
jupyterhub = {
|
||||
enable = false;
|
||||
port = 8000;
|
||||
host = "0.0.0.0";
|
||||
kernels = {
|
||||
python3 = let
|
||||
pyEnv = pkgs.python3.withPackages (ps:
|
||||
with ps; [
|
||||
ipykernel
|
||||
ipython
|
||||
ipython-sql
|
||||
sqlalchemy
|
||||
mysqlclient
|
||||
pandas # Optional — great for working with SQL results
|
||||
prettytable
|
||||
jinja2
|
||||
]);
|
||||
in {
|
||||
displayName = "Python 3 (SQL enabled)";
|
||||
argv = [
|
||||
"${pyEnv.interpreter}"
|
||||
"-m"
|
||||
"ipykernel_launcher"
|
||||
"-f"
|
||||
"{connection_file}"
|
||||
];
|
||||
language = "python";
|
||||
logo32 =
|
||||
"${pyEnv}/${pyEnv.sitePackages}/ipykernel/resources/logo-32x32.png";
|
||||
logo64 =
|
||||
"${pyEnv}/${pyEnv.sitePackages}/ipykernel/resources/logo-64x64.png";
|
||||
};
|
||||
|
||||
R = let
|
||||
rEnv = pkgs.rWrapper.override {
|
||||
packages = with pkgs.rPackages; [
|
||||
IRkernel # kernel do Jupyter
|
||||
ggplot2 # opcional, muito útil
|
||||
dplyr # idem
|
||||
tidyr
|
||||
readr
|
||||
];
|
||||
};
|
||||
in {
|
||||
displayName = "R";
|
||||
language = "R";
|
||||
argv = [
|
||||
"${rEnv}/bin/R"
|
||||
"--slave"
|
||||
"-e"
|
||||
"IRkernel::main()"
|
||||
"--args"
|
||||
"{connection_file}"
|
||||
];
|
||||
|
||||
# O IRkernel não inclui logos — pode deixar vazio ou remover
|
||||
};
|
||||
python3-sci = let
|
||||
sciEnv = pkgs.python3.withPackages (ps:
|
||||
with ps; [
|
||||
ipykernel
|
||||
numpy
|
||||
scipy
|
||||
ipython
|
||||
jinja2
|
||||
matplotlib
|
||||
pandas # opcional, bom para tabelas
|
||||
pillow # recomendado p/ alguns backends do matplotlib
|
||||
]);
|
||||
in {
|
||||
displayName = "Python 3 (SciPy + Matplotlib)";
|
||||
argv = [
|
||||
"${sciEnv.interpreter}"
|
||||
"-m"
|
||||
"ipykernel_launcher"
|
||||
"-f"
|
||||
"{connection_file}"
|
||||
];
|
||||
language = "python";
|
||||
logo32 =
|
||||
"${sciEnv}/${sciEnv.sitePackages}/ipykernel/resources/logo-32x32.png";
|
||||
logo64 =
|
||||
"${sciEnv}/${sciEnv.sitePackages}/ipykernel/resources/logo-64x64.png";
|
||||
};
|
||||
};
|
||||
extraConfig = ''
|
||||
c.Authenticator.allowed_users = {"ltadeu6"};
|
||||
c.JupyterHub.admin_users = {"ltadeu6"};
|
||||
'';
|
||||
};
|
||||
displayManager.autoLogin.enable = true;
|
||||
displayManager.autoLogin.user = "ltadeu6";
|
||||
|
||||
openssh = {
|
||||
enable = true;
|
||||
settings.PasswordAuthentication = false;
|
||||
};
|
||||
emacs = { enable = true; };
|
||||
printing.enable = true;
|
||||
pipewire = {
|
||||
enable = true;
|
||||
alsa.enable = true;
|
||||
alsa.support32Bit = true;
|
||||
pulse.enable = true;
|
||||
# If you want to use JACK applications, uncomment this
|
||||
jack.enable = true;
|
||||
|
||||
# use the example session manager (no others are packaged yet so this is enabled by default,
|
||||
# no need to redefine it in your config for now)
|
||||
#media-session.enable = true;
|
||||
};
|
||||
syncthing = {
|
||||
enable = false;
|
||||
user = "ltadeu6";
|
||||
dataDir = "/home/ltadeu6"; # Default folder for new synced folders
|
||||
configDir = "/home/ltadeu6/.config/syncthing";
|
||||
settings = {
|
||||
devices =
|
||||
{ }
|
||||
// lib.optionalAttrs (config.services.syncthing.enable
|
||||
&& config.age.secrets ? syncthing_pixel_id) {
|
||||
"Pixel" = {
|
||||
id = builtins.readFile config.age.secrets.syncthing_pixel_id.path;
|
||||
};
|
||||
}
|
||||
// lib.optionalAttrs (config.services.syncthing.enable
|
||||
&& config.age.secrets ? syncthing_tv_id) {
|
||||
"TV" = {
|
||||
id = builtins.readFile config.age.secrets.syncthing_tv_id.path;
|
||||
};
|
||||
};
|
||||
folders = {
|
||||
"RetroArch" = { # Name of folder in Syncthing, also the folder ID
|
||||
path =
|
||||
"/home/ltadeu6/.config/retroarch"; # Which folder to add to Syncthing
|
||||
devices = [ "Pixel" "TV" ]; # Which devices to share the folder with
|
||||
versioning = {
|
||||
type = "simple";
|
||||
params = {
|
||||
keep = "5";
|
||||
cleanoutDays = "15";
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
console.keyMap = "br-abnt2";
|
||||
|
||||
# Enable sound with pipewire.
|
||||
# sound.enable = true;
|
||||
services.pulseaudio.enable = false;
|
||||
hardware.bluetooth.enable = true;
|
||||
security.rtkit.enable = true;
|
||||
|
||||
environment.sessionVariables = { };
|
||||
|
||||
users.groups.libvirtd.members = [ "ltadeu6" ];
|
||||
|
||||
users.users.ltadeu6 = {
|
||||
isNormalUser = true;
|
||||
description = "Lucas Tadeu";
|
||||
extraGroups = [
|
||||
"terraria"
|
||||
"mysql"
|
||||
"networkmanager"
|
||||
"wheel"
|
||||
"syncthing"
|
||||
"transmission"
|
||||
"storage"
|
||||
];
|
||||
shell = pkgs.fish;
|
||||
};
|
||||
|
||||
system.autoUpgrade.enable = true;
|
||||
|
||||
systemd.services."getty@tty1".enable = false;
|
||||
systemd.services."autovt@tty1".enable = false;
|
||||
|
||||
nixpkgs.config.allowUnfree = true;
|
||||
|
||||
# nixpkgs.config.cudaSupport = true;
|
||||
|
||||
nix.settings.experimental-features = [ "nix-command" "flakes" ];
|
||||
|
||||
environment.systemPackages = with pkgs; [
|
||||
most
|
||||
agenix.packages.${pkgs.stdenv.hostPlatform.system}.default
|
||||
# mangohud
|
||||
hyfetch
|
||||
cacert
|
||||
hyprcursor
|
||||
dunst
|
||||
libnotify
|
||||
pulseaudio
|
||||
nautilus
|
||||
eog
|
||||
gnome-calculator
|
||||
qt6Packages.qtwayland
|
||||
glib
|
||||
gsettings-desktop-schemas
|
||||
wine64
|
||||
((emacsPackagesFor emacs).emacsWithPackages (epkgs: [ epkgs.vterm ]))
|
||||
libvterm
|
||||
(python3.withPackages (ps: with ps; [ requests ]))
|
||||
cmake
|
||||
gcc
|
||||
gnumake
|
||||
nodePackages.prettier
|
||||
nodePackages.pnpm
|
||||
fishPlugins.z
|
||||
];
|
||||
|
||||
# environment.loginShellInit = ''
|
||||
# [[ "$(tty)" = "/dev/tty1" ]] && ./gs.sh
|
||||
# '';
|
||||
|
||||
virtualisation.docker.enable = false;
|
||||
virtualisation.waydroid.enable = false;
|
||||
virtualisation.libvirtd.enable = true;
|
||||
# virtualisation.spiceUSBRedirection.enable = true;
|
||||
|
||||
fonts.packages = with pkgs; [ nerd-fonts.fira-code nerd-fonts.gohufont ];
|
||||
|
||||
xdg.portal = {
|
||||
enable = true;
|
||||
wlr.enable = true;
|
||||
extraPortals = [ pkgs.xdg-desktop-portal-gtk ];
|
||||
};
|
||||
# # wlr.enable = true;
|
||||
# # config.common.default = [ "gtk" ];
|
||||
# };
|
||||
|
||||
# This value determines the NixOS release from which the default
|
||||
# settings for stateful data, like file locations and database versions
|
||||
# on your system were taken. It‘s perfectly fine and recommended to leave
|
||||
# this value at the release version of the first install of this system.
|
||||
# Before changing this value read the documentation for this option
|
||||
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
|
||||
system.stateVersion = "23.11"; # Did you read the comment?
|
||||
|
||||
}
|
||||
101
hosts/Nixos/hardware-configuration.nix
Normal file
101
hosts/Nixos/hardware-configuration.nix
Normal file
|
|
@ -0,0 +1,101 @@
|
|||
# Do not modify this file! It was generated by ‘nixos-generate-config’
|
||||
# and may be overwritten by future invocations. Please make changes
|
||||
# to /etc/nixos/configuration.nix instead.
|
||||
{ config, lib, pkgs, modulesPath, ... }:
|
||||
|
||||
{
|
||||
imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
|
||||
|
||||
boot.initrd.availableKernelModules =
|
||||
[ "xhci_pci" "ahci" "usb_storage" "usbhid" "sd_mod" ];
|
||||
boot.initrd.kernelModules = [ ];
|
||||
boot.kernelModules = [ "kvm-amd" ];
|
||||
boot.extraModulePackages = [ ];
|
||||
|
||||
fileSystems."/" = {
|
||||
device = "/dev/disk/by-uuid/50622847-6ad1-4d3b-8a3e-8f1abe60d3ed";
|
||||
fsType = "ext4";
|
||||
};
|
||||
|
||||
fileSystems."/boot" = {
|
||||
device = "/dev/disk/by-uuid/168A-930E";
|
||||
fsType = "vfat";
|
||||
};
|
||||
|
||||
fileSystems."/mnt/games" = {
|
||||
device = "/home/ltadeu6/Extra";
|
||||
fsType = "none";
|
||||
options = [ "bind" "exec" ];
|
||||
};
|
||||
|
||||
fileSystems."/home/ltadeu6/Extra" = {
|
||||
device = "/dev/disk/by-label/games";
|
||||
fsType = "ext4";
|
||||
options = [ "exec" "users" "defaults" ];
|
||||
};
|
||||
|
||||
# fileSystems."/mnt/data" = {
|
||||
# device = "/dev/disk/by-uuid/a8c80fc2-b841-4427-b29b-0b6c07d0a2be";
|
||||
# fsType = "ext4";
|
||||
# options = [ "defaults" ];
|
||||
# };
|
||||
|
||||
# fileSystems."/mnt/backup" = {
|
||||
# device = "/dev/disk/by-uuid/f10bc836-ab7e-4278-b20a-40c366848871";
|
||||
# fsType = "ext4";
|
||||
# options = [ "defaults" ];
|
||||
# };
|
||||
|
||||
swapDevices =
|
||||
[{ device = "/dev/disk/by-uuid/0f489c58-6c10-40e8-b2d3-9c73712a9d73"; }];
|
||||
|
||||
# Enables DHCP on each ethernet and wireless interface. In case of scripted networking
|
||||
# (the default) this is the recommended approach. When using systemd-networkd it's
|
||||
# still possible to use this option, but it's recommended to use it in conjunction
|
||||
# with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
|
||||
networking.useDHCP = lib.mkDefault true;
|
||||
# networking.interfaces.enp3s0.useDHCP = lib.mkDefault true;
|
||||
# networking.interfaces.wlp1s0f0u7u2.useDHCP = lib.mkDefault true;
|
||||
|
||||
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
|
||||
hardware.cpu.amd.updateMicrocode =
|
||||
lib.mkDefault config.hardware.enableRedistributableFirmware;
|
||||
|
||||
# Enable OpenGL
|
||||
hardware.graphics = { enable = true; };
|
||||
|
||||
|
||||
# Load nvidia driver for Xorg and Wayland
|
||||
services.xserver.videoDrivers = [ "nvidia" ];
|
||||
|
||||
hardware.nvidia = {
|
||||
|
||||
# Modesetting is required.
|
||||
modesetting.enable = true;
|
||||
|
||||
# Nvidia power management. Experimental, and can cause sleep/suspend to fail.
|
||||
# Enable this if you have graphical corruption issues or application crashes after waking
|
||||
# up from sleep. This fixes it by saving the entire VRAM memory to /tmp/ instead
|
||||
# of just the bare essentials.
|
||||
powerManagement.enable = false;
|
||||
|
||||
# Fine-grained power management. Turns off GPU when not in use.
|
||||
# Experimental and only works on modern Nvidia GPUs (Turing or newer).
|
||||
powerManagement.finegrained = false;
|
||||
|
||||
# Use the NVidia open source kernel module (not to be confused with the
|
||||
# independent third-party "nouveau" open source driver).
|
||||
# Support is limited to the Turing and later architectures. Full list of
|
||||
# supported GPUs is at:
|
||||
# https://github.com/NVIDIA/open-gpu-kernel-modules#compatible-gpus
|
||||
# Only available from driver 515.43.04+
|
||||
open = true;
|
||||
|
||||
# Enable the Nvidia settings menu,
|
||||
# accessible via `nvidia-settings`.
|
||||
nvidiaSettings = true;
|
||||
|
||||
# Optionally, you may need to select the appropriate driver version for your specific GPU.
|
||||
package = config.boot.kernelPackages.nvidiaPackages.stable;
|
||||
};
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue