nix-conf/hosts/Nixstation/default.nix
Thiago Sposito ea25b5b515 fix: add flake.lock back and update host configs
- Added `flake.lock` to pin dependencies (nixpkgs, home-manager, nixvim, flake-utils, etc.)
- Cleaned up `.gitignore`: stop ignoring `*.lock`
- Removed unused `flake-utils.inputs.nixpkgs.follows`
- Nixstation host:
  - Removed `keychron.nix`, Wacom tablet config, and redundant session variables
  - Simplified GDM/GNOME configuration and XKB layout
  - Commented out virtualisation setup
- Common NVIDIA host config:
  - Added explicit kernel modules, parameters, blacklists, and kernel version
  - Ensured GNOME + GDM configuration present
  - Updated NVIDIA driver settings and CUDA support
2025-08-25 15:04:45 -03:00

162 lines
3.3 KiB
Nix

{ pkgs
, ...
}:
{
imports = [
../common/default.nix
../common/network.nix
../common/nvidia/default.nix
./hardware-configuration.nix
];
boot = {
loader.systemd-boot.enable = true;
loader.efi.canTouchEfiVariables = true;
};
environment = {
systemPackages = with pkgs; [
act
btrfs-progs
cudatoolkit
networkmanagerapplet
libwacom
wacomtablet
gnome-tweaks
gnome-session
];
variables = {
NIXOS_HOST = "nixstation";
NIXOS_DE = "wayland";
};
};
hardware = {
sane.enable = true;
graphics.enable = true;
};
i18n.defaultLocale = "en_US.UTF-8";
i18n.extraLocaleSettings = {
LC_ADDRESS = "pt_BR.UTF-8";
LC_IDENTIFICATION = "pt_BR.UTF-8";
LC_MEASUREMENT = "pt_BR.UTF-8";
LC_MONETARY = "pt_BR.UTF-8";
LC_NAME = "pt_BR.UTF-8";
LC_NUMERIC = "pt_BR.UTF-8";
LC_PAPER = "pt_BR.UTF-8";
LC_TELEPHONE = "pt_BR.UTF-8";
LC_TIME = "pt_BR.UTF-8";
};
networking.firewall = {
enable = true;
allowPing = true;
allowedTCPPorts = [
11434
8888
8000
8080
];
};
nix = {
settings = {
auto-optimise-store = true;
};
};
programs = {
# steam = {
# enable = true;
# remotePlay.openFirewall = true;
# dedicatedServer.openFirewall = true;
# localNetworkGameTransfers.openFirewall = true;
# };
dconf.enable = true;
virt-manager.enable = true;
};
security.pam.services.gdm.enableGnomeKeyring = true;
security.rtkit.enable = true;
services = {
xserver = {
xkb = {
layout = "us";
variant = "alt-intl";
};
};
desktopManager.gnome.enable = true;
displayManager.gdm.enable = true;
displayManager.gdm.wayland = true;
displayManager.defaultSession = "gnome";
udev.packages = [ pkgs.libwacom ];
avahi = {
enable = true;
nssmdns4 = true;
openFirewall = true;
extraConfig = ''
[server]
allow-interfaces=wlp7s0
'';
};
earlyoom = {
enable = true;
freeMemThreshold = 5;
freeSwapThreshold = 10;
};
flatpak.enable = true;
pipewire = {
enable = true;
alsa.enable = true;
alsa.support32Bit = true;
pulse.enable = true;
};
};
systemd = {
services."getty@tty1".enable = false;
services."autovt@tty1".enable = false;
};
systemd.timers.btrfs-scrub = {
description = "Run Btrfs Scrub Daily";
wantedBy = [ "timers.target" ];
timerConfig = {
OnCalendar = "daily";
Persistent = true;
};
};
systemd.services = {
btrfs-scrub = {
description = "Daily Btrfs Scrub";
serviceConfig = {
Type = "oneshot";
Nice = 19;
IOSchedulingClass = "idle";
ExecStart = "${pkgs.btrfs-progs}/bin/btrfs scrub start -n 2 -B / && ${pkgs.btrfs-progs}/bin/btrfs scrub start -n 2 -B /mnt/hdd0";
};
};
};
system.stateVersion = "25.11"; # keep it!
time.timeZone = "America/Sao_Paulo";
# virtualisation = {
# vmware.host.enable = false;
# spiceUSBRedirection.enable = true;
# libvirtd = {
# enable = true;
# qemu.ovmf.enable = true;
# # qemu.package = pkgs.qemu_full;
# };
# };
zramSwap = {
enable = true;
memoryPercent = 25;
algorithm = "zstd";
};
}