Jules/nixos-config
1
0
Fork 0
forked from Bun/nixos-config
Code Pull requests Activity

Add smtp to pretty much every service on the server

Browse source
This commit is contained in:
Jimbo 2024-08-06 05:27:33 -04:00
parent 8eb0724768
commit 963e056b93
7 changed files with 277 additions and 93 deletions
Download patch file Download diff file Expand all files Collapse all files

44
PC/configuration.nix
View file

@ -67,10 +67,11 @@ in
# Set all boot options
boot = {
# Set a kernel version and load/blacklist drivers
kernelPackages = pkgs.linuxPackages_xanmod_latest;
kernelPackages = pkgs.unstable.linuxPackages_zen;
blacklistedKernelModules = [ "pcspkr" ];
kernelParams = commonKernelParams ++ [ "vfio-pci.ids=10de:13c2,10de:0fbb" ];
initrd.kernelModules = [ "vfio" "vfio_pci" "vfio_iommu_type1" ];
kernel.sysctl."vm.max_map_count" = 2147483642;
# Manage supported filesystems
supportedFilesystems = {
@ -101,7 +102,12 @@ in
hardware.enableRedistributableFirmware = true;
# Enable the Nouveau drivers
services.xserver.videoDrivers = [ "nouveau" ];
services.xserver.videoDrivers = [ "nvidia" ];
hardware.nvidia = {
modesetting.enable = true;
nvidiaSettings = false;
package = config.boot.kernelPackages.nvidiaPackages.beta;
};
# Enable a permissioning system
security = {
@ -124,18 +130,21 @@ in
# Timezone
time.timeZone = "America/New_York";
# Define a user account
# Define user accounts
users.users.jimbo = {
description = "Jimbo Awesome";
isNormalUser = true;
hashedPassword =
"$6$gYpE.pG/zPXgin06$2kydjDfd0K62Dhf9P0PFvJhRNz6xIC/bHYaf/XYqyKcLyZNzPQpy8uy9tCRcSYlj1wwBhzVtTRyItwajOHCEj0";
openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIKC8Uqxb09V3msBgDv6lD/nETMYr/X0OgtpDo8ldcMK jimbo@JimDebianServer"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDLe/HioxCOkszFQdm1vb3ZwuzLzsOThqHNvEI4IXeXZ JimPhone"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEuCYrIZlD6LNpFh3XTYbXaPQWYysr1oZAX4DL3gF28l jimbo@DV-JHAMPTON"
];
extraGroups = [
"wheel" "audio" "video" "input" "disk" "dialout"
"networkmanager" "kvm" "libvirtd" "qemu-libvirtd"
"wheel" "audio" "video" "input" "disk"
"dialout" "networkmanager" "rtkit"
"kvm" "libvirtd" "qemu-libvirtd"
];
uid = 1000;
shell = pkgs.zsh;
@ -163,8 +172,6 @@ in
# Enable OpenGL
hardware.opengl = {
enable = true;
package = pkgs.unstable.mesa.drivers;
package32 = pkgs.unstable.pkgsi686Linux.mesa.drivers;
driSupport = true;
driSupport32Bit = true;
extraPackages = with pkgs; [
@ -204,14 +211,18 @@ in
];
allowPing = false;
};
extraHosts = ''
192.168.1.18 pc
192.168.1.17 server
192.168.2.2 vm
'';
# Set hostnames
hosts = {
"192.168.2.10" = [ "pc" ];
"192.168.2.11" = [ "server" ];
"172.16.0.2" = [ "vm" ];
};
# Set nameserver
nameservers = [
"1.1.1.1"
"9.9.9.9"
"1.1.1.1"
];
};
@ -242,7 +253,7 @@ in
pdpRules = pkgs.writeTextFile {
name = "10-pdp.rules";
text = ''
SUBSYSTEM=="usb", ATTR{idVendor}=="2833", MODE="0666", GROUP="plugdev"
SUBSYSTEM=="usb", ATTR{idVendor}=="2833", MODE="0666"
'';
destination = "/etc/udev/rules.d/10-pdp.rules";
};
@ -390,6 +401,9 @@ in
# Enable AppArmor
security.apparmor.enable = true;
# Enable a keying agent
services.gnome.gnome-keyring.enable = true;
# Enable Polkit for authentication
security.polkit.enable = true;
@ -402,7 +416,7 @@ in
# Attempt to automount USB drives
services.udisks2.enable = true;
# Used for Seneca VPN
# Enable school VPN
services.globalprotect.enable = true;
# Define the initial install version and allow auto-upgrades