{ config, pkgs, lib, inputs, config', ... }: { nixpkgs = { config = { permittedInsecurePackages = [ "python-2.7.18.6" ]; allowUnfree = true; }; overlays = [ inputs.nur.overlay inputs.neovim-nightly-overlay.overlay ]; }; boot = { loader = { systemd-boot = { enable = true; memtest86.enable = true; }; efi.canTouchEfiVariables = true; }; kernelPackages = pkgs.linuxPackages_xanmod_latest; extraModulePackages = with config.boot.kernelPackages; [ ( ddcci-driver.overrideAttrs (o: { patches = (o.patches or [ ]) ++ [ ./ddcci_semaphore_fix.patch ]; }) ) ]; kernelModules = [ "ddcci" ]; initrd.kernelModules = [ "amdgpu" ]; kernelParams = [ "video=eDP-1:2560x1440@165" "video=HDMI-A-1:2560x1440@144" ]; }; documentation = { enable = true; dev.enable = true; doc.enable = true; info.enable = true; man = { enable = true; generateCaches = true; man-db.enable = false; mandoc.enable = true; }; nixos = { includeAllModules = true; }; }; networking = { hostName = config'.hostname; networkmanager.enable = true; firewall.checkReversePath = "loose"; }; # don't wait for network to boot faster # https://old.reddit.com/r/NixOS/comments/vdz86j/how_to_remove_boot_dependency_on_network_for_a systemd = { targets.network-online.wantedBy = lib.mkForce []; # default is [ "multi-user.target" ] services.NetworkManager-wait-online.wantedBy = lib.mkForce []; # default is [ "network-online.target" ] }; systemd.oomd = { enable = true; enableUserServices = true; }; time.timeZone = "Europe/Warsaw"; nix = { settings = { experimental-features = [ "flakes" "nix-command" ]; substituters = [ "https://hyprland.cachix.org" "https://nix-gaming.cachix.org" "https://anyrun.cachix.org" "https://nix-community.cachix.org" "https://nixpkgs-wayland.cachix.org" "https://helix.cachix.org" ]; trusted-public-keys = [ "hyprland.cachix.org-1:a7pgxzMz7+chwVL3/pzj6jIBMioiJM7ypFP8PwtkuGc=" "nix-gaming.cachix.org-1:nbjlureqMbRAxR1gJ/f3hxemL9svXaZF/Ees8vCUUs4=" "anyrun.cachix.org-1:pqBobmOjI7nKlsUMV25u9QHa9btJK65/C8vnO3p346s=" "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=" "nixpkgs-wayland.cachix.org-1:3lwxaILxMRkVhehr5StQprHdEo4IrE8sRho9R9HOLYA=" "helix.cachix.org-1:ejp9KQpR1FBI2onstMQ34yogDm4OgU2ru6lIwPvuCVs=" ]; keep-outputs = true; keep-derivations = true; }; }; virtualisation = { libvirtd = { enable = true; onBoot = "ignore"; qemu = { ovmf.enable = true; runAsRoot = false; swtpm.enable = true; }; }; }; networking.firewall.trustedInterfaces = [ "virbr0" ]; programs.dconf.enable = true; # https://github.com/NixOS/nixpkgs/issues/158025 security.pam.services = { swaylock.text = "auth include login"; gtklock.text = "auth include login"; }; security.sudo.package = pkgs.sudo.override { withInsults = true; }; fonts.packages = with pkgs; [ material-design-icons (nerdfonts.override { fonts = [ "JetBrainsMono" "Iosevka" ]; }) noto-fonts noto-fonts-cjk-sans noto-fonts-cjk-serif noto-fonts-emoji ]; users.users.${config'.username} = { isNormalUser = true; extraGroups = [ "wheel" "networkmanager" "libvirtd" ]; shell = pkgs.zsh; }; programs.zsh.enable = true; environment = { shells = [ pkgs.zsh ]; pathsToLink = [ "/share/zsh" ]; enableAllTerminfo = true; sessionVariables = { TERM = "foot"; EDITOR = "${pkgs.neovim}/bin/nvim"; GTK_IM_MODULE = "fcitx"; QT_IM_MODULE = "fcitx"; XMODIFIERS = "@im=fcitx"; LIBSEAT_BACKEND = "logind"; QT_QPA_PLATFORMTHEME = "qt5ct"; GOPATH = "\$HOME/.local/share/go"; XDG_CURRENT_DESKTOP = "Hyprland"; XDG_SESSION_TYPE = "wayland"; XDG_SESSION_DESKTOP = "Hyprland"; QT_QPA_PLATFORM = "wayland"; MOZ_ENABLE_WAYLAND = "1"; MOZ_DRM_DEVICE = "/dev/dri/card0"; SDL_VIDEODRIVER = "wayland"; _JAVA_AWT_WM_NONEREPARENTING = "1"; CLUTTER_BACKEND = "wayland"; GDK_BACKEND = "wayland"; XCURSOR_THEME = "Bibata-Modern-Classic"; XCURSOR_SIZE = "24"; XDG_DATA_HOME = "\$HOME/.local/share"; XDG_CONFIG_HOME = "\$HOME/.config"; XDG_STATE_HOME = "\$HOME/.local/state"; XDG_CACHE_HOME = "\$HOME/.cache"; HISTFILE = "\${XDG_STATE_HOME}/bash/history"; CARGO_HOME = "\${XDG_DATA_HOME}/cargo"; GTK2_RC_FILES = "\${XDG_CONFIG_HOME}/gtk-2.0/gtkrc"; CHROME_EXECUTABLE = "${pkgs.ungoogled-chromium}/bin/chromium"; }; systemPackages = with pkgs; [ man-pages man-pages-posix ]; }; services = { blueman.enable = true; mullvad-vpn.enable = true; pcscd.enable = true; udev.packages = [ pkgs.yubikey-personalization ]; udisks2.enable = true; dbus.enable = true; }; programs.gnupg.agent = { enable = true; pinentryFlavor = "qt"; enableSSHSupport = true; }; hardware = { opentabletdriver = { enable = true; daemon.enable = true; }; bluetooth.enable = true; opengl = { enable = true; driSupport = true; driSupport32Bit = true; }; }; xdg.portal = { enable = true; extraPortals = with pkgs; [ xdg-desktop-portal-hyprland xdg-desktop-portal-gtk ]; }; services.btrfs = { autoScrub = { enable = true; interval = "weekly"; }; }; services.psd = { enable = true; resyncTimer = "30m"; }; services.journald = { extraConfig = '' SystemMaxUse=100M ''; }; system.stateVersion = "23.11"; }