mirror of
https://github.com/ryan4yin/nix-config.git
synced 2026-03-19 07:54:28 +01:00
213 lines
7.2 KiB
Nix
213 lines
7.2 KiB
Nix
{
|
||
lib,
|
||
pkgs,
|
||
...
|
||
}: {
|
||
###################################################################################
|
||
#
|
||
# NixOS's core configuration suitable for my desktop computer
|
||
#
|
||
###################################################################################
|
||
|
||
imports = [
|
||
./core-server.nix
|
||
];
|
||
|
||
# to install chrome, you need to enable unfree packages
|
||
nixpkgs.config.allowUnfree = lib.mkForce true;
|
||
|
||
# Enable CUPS to print documents.
|
||
services.printing.enable = true;
|
||
|
||
# all fonts are linked to /nix/var/nix/profiles/system/sw/share/X11/fonts
|
||
fonts = {
|
||
# use fonts specified by user rather than default ones
|
||
enableDefaultFonts = false;
|
||
fontDir.enable = true;
|
||
|
||
fonts = with pkgs; [
|
||
# icon fonts
|
||
material-design-icons
|
||
font-awesome
|
||
|
||
# Noto 系列字体是 Google 主导的，名字的含义是「没有豆腐」（no tofu），因为缺字时显示的方框或者方框被叫作 tofu
|
||
# Noto 系列字族名只支持英文，命名规则是 Noto + Sans 或 Serif + 文字名称。
|
||
# 其中汉字部分叫 Noto Sans/Serif CJK SC/TC/HK/JP/KR，最后一个词是地区变种。
|
||
noto-fonts # 大部分文字的常见样式，不包含汉字
|
||
noto-fonts-cjk # 汉字部分
|
||
noto-fonts-emoji # 彩色的表情符号字体
|
||
noto-fonts-extra # 提供额外的字重和宽度变种
|
||
|
||
# 思源系列字体是 Adobe 主导的。其中汉字部分被称为「思源黑体」和「思源宋体」，是由 Adobe + Google 共同开发的
|
||
source-sans # 无衬线字体，不含汉字。字族名叫 Source Sans 3 和 Source Sans Pro，以及带字重的变体，加上 Source Sans 3 VF
|
||
source-serif # 衬线字体，不含汉字。字族名叫 Source Code Pro，以及带字重的变体
|
||
source-han-sans # 思源黑体
|
||
source-han-serif # 思源宋体
|
||
|
||
# nerdfonts
|
||
(nerdfonts.override {
|
||
fonts = [
|
||
"FiraCode"
|
||
"JetBrainsMono"
|
||
"Iosevka"
|
||
];
|
||
})
|
||
|
||
(pkgs.callPackage ../../fonts/icomoon-feather-icon-font.nix {})
|
||
];
|
||
|
||
# user defined fonts
|
||
# the reason there's Noto Color Emoji everywhere is to override DejaVu's
|
||
# B&W emojis that would sometimes show instead of some Color emojis
|
||
fontconfig.defaultFonts = {
|
||
serif = ["Noto Serif" "Noto Color Emoji"];
|
||
sansSerif = ["Noto Sans" "Noto Color Emoji"];
|
||
monospace = ["JetBrainsMono Nerd Font" "Noto Color Emoji"];
|
||
emoji = ["Noto Color Emoji"];
|
||
};
|
||
};
|
||
|
||
# dconf is a low-level configuration system.
|
||
programs.dconf.enable = true;
|
||
|
||
# networking.firewall.allowedTCPPorts = [ ... ];
|
||
# networking.firewall.allowedUDPPorts = [ ... ];
|
||
# Or disable the firewall altogether.
|
||
networking.firewall.enable = false;
|
||
|
||
# Enable the OpenSSH daemon.
|
||
services.openssh = {
|
||
enable = true;
|
||
settings = {
|
||
X11Forwarding = true;
|
||
PermitRootLogin = "no"; # disable root login
|
||
PasswordAuthentication = false; # disable password login
|
||
};
|
||
openFirewall = true;
|
||
};
|
||
|
||
# The OpenSSH agent remembers private keys for you
|
||
# so that you don’t have to type in passphrases every time you make an SSH connection.
|
||
# Use `ssh-add` to add a key to the agent.
|
||
programs.ssh.startAgent = true;
|
||
|
||
# List packages installed in system profile. To search, run:
|
||
# $ nix search wget
|
||
environment.systemPackages = with pkgs; [
|
||
# python, some times I may need to use python with root permission.
|
||
(python310.withPackages (ps:
|
||
with ps; [
|
||
ipython
|
||
pandas
|
||
requests
|
||
pyquery
|
||
pyyaml
|
||
]))
|
||
];
|
||
|
||
# PipeWire is a new low-level multimedia framework.
|
||
# It aims to offer capture and playback for both audio and video with minimal latency.
|
||
# It support for PulseAudio-, JACK-, ALSA- and GStreamer-based applications.
|
||
# PipeWire has a great bluetooth support, it can be a good alternative to PulseAudio.
|
||
# https://nixos.wiki/wiki/PipeWire
|
||
services.pipewire = {
|
||
enable = true;
|
||
alsa.enable = true;
|
||
alsa.support32Bit = true;
|
||
pulse.enable = true;
|
||
# If you want to use JACK applications, uncomment this
|
||
# jack.enable = true;
|
||
|
||
# use the example session manager (no others are packaged yet so this is enabled by default,
|
||
# no need to redefine it in your config for now)
|
||
#media-session.enable = true;
|
||
};
|
||
# rtkit is optional but recommended
|
||
security.rtkit.enable = true;
|
||
# Remove sound.enable or turn it off if you had it set previously, it seems to cause conflicts with pipewire
|
||
sound.enable = false;
|
||
# Disable pulseaudio, it conflicts with pipewire too.
|
||
hardware.pulseaudio.enable = false;
|
||
|
||
# enable bluetooth & gui paring tools - blueman
|
||
# or you can use cli:
|
||
# $ bluetoothctl
|
||
# [bluetooth] # power on
|
||
# [bluetooth] # agent on
|
||
# [bluetooth] # default-agent
|
||
# [bluetooth] # scan on
|
||
# ...put device in pairing mode and wait [hex-address] to appear here...
|
||
# [bluetooth] # pair [hex-address]
|
||
# [bluetooth] # connect [hex-address]
|
||
# Bluetooth devices automatically connect with bluetoothctl as well:
|
||
# [bluetooth] # trust [hex-address]
|
||
hardware.bluetooth.enable = true;
|
||
services.blueman.enable = true;
|
||
|
||
# https://flatpak.org/setup/NixOS
|
||
services.flatpak.enable = true;
|
||
|
||
# security with polkit
|
||
services.power-profiles-daemon = {
|
||
enable = true;
|
||
};
|
||
security.polkit.enable = true;
|
||
# security with gnome-kering
|
||
services.gnome.gnome-keyring.enable = true;
|
||
security.pam.services.greetd.enableGnomeKeyring = true;
|
||
|
||
# A key remapping daemon for linux.
|
||
# https://github.com/rvaiya/keyd
|
||
services.keyd = {
|
||
enable = true;
|
||
settings = {
|
||
main = {
|
||
# overloads the capslock key to function as both escape (when tapped) and control (when held)
|
||
capslock = "overload(control, esc)";
|
||
};
|
||
};
|
||
};
|
||
|
||
services = {
|
||
dbus.packages = [pkgs.gcr];
|
||
|
||
geoclue2.enable = true;
|
||
|
||
udev.packages = with pkgs; [
|
||
gnome.gnome-settings-daemon
|
||
platformio # udev rules for platformio
|
||
openocd # required by paltformio, see https://github.com/NixOS/nixpkgs/issues/224895
|
||
android-udev-rules
|
||
];
|
||
};
|
||
|
||
# android development tools, this will install adb/fastboot and other android tools and udev rules
|
||
# see https://github.com/NixOS/nixpkgs/blob/nixos-unstable/nixos/modules/programs/adb.nix
|
||
programs.adb.enable = true;
|
||
|
||
xdg.portal = {
|
||
enable = true;
|
||
wlr.enable = true;
|
||
# Sets environment variable NIXOS_XDG_OPEN_USE_PORTAL to 1
|
||
# This will make xdg-open use the portal to open programs,
|
||
# which resolves bugs involving programs opening inside FHS envs or with unexpected env vars set from wrappers.
|
||
# xdg-open is used by almost all programs to open a unknown file/uri
|
||
# alacritty as an example, it use xdg-open as default, but you can also custom this behavior
|
||
# and vscode has open like `External Uri Openers`
|
||
xdgOpenUsePortal = false;
|
||
extraPortals = with pkgs; [
|
||
xdg-desktop-portal-wlr # for wlroots based compositors(hyprland/sway)
|
||
xdg-desktop-portal-gtk # for gtk
|
||
# xdg-desktop-portal-kde # for kde
|
||
];
|
||
};
|
||
|
||
# add user's shell into /etc/shells
|
||
environment.shells = with pkgs; [
|
||
bash
|
||
nushell
|
||
];
|
||
# set user's default shell system-wide
|
||
users.defaultUserShell = pkgs.nushell;
|
||
}
|