mirror of
https://github.com/Gerg-L/nixos.git
synced 2025-12-10 00:43:56 -05:00
use switch-to-configuration-ng and nixos-rebuild-ng
migrate secureboot key /etc/secureboot -> /var/lib/sbctl hardware.pulseaudio -> services.pulseaudio enable machine-learning for immich
This commit is contained in:
parent
8a55bc5ebd
commit
6d187cd057
5 changed files with 39 additions and 31 deletions
|
|
@ -23,6 +23,9 @@ in
|
||||||
reboot
|
reboot
|
||||||
'')
|
'')
|
||||||
];
|
];
|
||||||
|
systemd.tmpfiles.rules = [
|
||||||
|
"L+ /var/lib/sbctl - - - - /persist/secureboot"
|
||||||
|
];
|
||||||
|
|
||||||
boot = {
|
boot = {
|
||||||
initrd = {
|
initrd = {
|
||||||
|
|
@ -58,7 +61,7 @@ in
|
||||||
|
|
||||||
lanzaboote = {
|
lanzaboote = {
|
||||||
enable = true;
|
enable = true;
|
||||||
pkiBundle = "/etc/secureboot";
|
pkiBundle = "/var/lib/sbctl";
|
||||||
configurationLimit = 10;
|
configurationLimit = 10;
|
||||||
package = lib.mkForce (
|
package = lib.mkForce (
|
||||||
pkgs.writeShellApplication {
|
pkgs.writeShellApplication {
|
||||||
|
|
|
||||||
|
|
@ -9,7 +9,7 @@
|
||||||
createDB = true;
|
createDB = true;
|
||||||
};
|
};
|
||||||
mediaLocation = "/persist/services/immich";
|
mediaLocation = "/persist/services/immich";
|
||||||
machine-learning.enable = false;
|
machine-learning.enable = true;
|
||||||
settings = null;
|
settings = null;
|
||||||
port = 2283;
|
port = 2283;
|
||||||
host = "0.0.0.0";
|
host = "0.0.0.0";
|
||||||
|
|
|
||||||
|
|
@ -6,9 +6,7 @@
|
||||||
{
|
{
|
||||||
#link some stuff
|
#link some stuff
|
||||||
systemd.tmpfiles.rules = [
|
systemd.tmpfiles.rules = [
|
||||||
|
|
||||||
"L+ /etc/zfs/zpool.cache - - - - /persist/zfs/zpool.cache"
|
"L+ /etc/zfs/zpool.cache - - - - /persist/zfs/zpool.cache"
|
||||||
"L+ /etc/secureboot - - - - /persist/secureboot"
|
|
||||||
"L+ /etc/ssh/ssh_host_ed25519_key - - - - /persist/ssh/ssh_host_ed25519_key"
|
"L+ /etc/ssh/ssh_host_ed25519_key - - - - /persist/ssh/ssh_host_ed25519_key"
|
||||||
"L+ /etc/ssh/ssh_host_ed25519_key.pub - - - - /persist/ssh/ssh_host_ed25519_key.pub"
|
"L+ /etc/ssh/ssh_host_ed25519_key.pub - - - - /persist/ssh/ssh_host_ed25519_key.pub"
|
||||||
"L /etc/nixos/flake.nix - - - - /home/gerg/Projects/nixos/flake.nix"
|
"L /etc/nixos/flake.nix - - - - /home/gerg/Projects/nixos/flake.nix"
|
||||||
|
|
|
||||||
|
|
@ -16,8 +16,9 @@ in
|
||||||
})
|
})
|
||||||
(lib.mkIf (!cfg.sound.disable) {
|
(lib.mkIf (!cfg.sound.disable) {
|
||||||
security.rtkit.enable = true;
|
security.rtkit.enable = true;
|
||||||
hardware.pulseaudio.enable = lib.mkForce false; # disable pulseAudio
|
services = {
|
||||||
services.pipewire = {
|
pulseaudio.enable = lib.mkForce false; # disable pulseAudio
|
||||||
|
pipewire = {
|
||||||
enable = true;
|
enable = true;
|
||||||
alsa = {
|
alsa = {
|
||||||
enable = true;
|
enable = true;
|
||||||
|
|
@ -26,6 +27,7 @@ in
|
||||||
pulse.enable = true;
|
pulse.enable = true;
|
||||||
jack.enable = false;
|
jack.enable = false;
|
||||||
};
|
};
|
||||||
|
};
|
||||||
})
|
})
|
||||||
|
|
||||||
{
|
{
|
||||||
|
|
|
||||||
|
|
@ -11,24 +11,20 @@
|
||||||
};
|
};
|
||||||
|
|
||||||
config = {
|
config = {
|
||||||
|
|
||||||
nixpkgs.config = {
|
nixpkgs.config = {
|
||||||
allowAliases = false;
|
allowAliases = false;
|
||||||
allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) config.local.allowedUnfree;
|
allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) config.local.allowedUnfree;
|
||||||
};
|
};
|
||||||
|
|
||||||
programs.git.enable = true;
|
local.packages = {
|
||||||
# Mr sandro why
|
|
||||||
services.libinput.enable = true;
|
|
||||||
programs.nano.enable = false;
|
|
||||||
|
|
||||||
environment.defaultPackages = lib.mkForce (
|
|
||||||
builtins.attrValues {
|
|
||||||
inherit (pkgs)
|
inherit (pkgs)
|
||||||
bottom # view tasks
|
bottom # view tasks
|
||||||
efibootmgr # efi editor
|
efibootmgr # efi editor
|
||||||
nix-output-monitor # nom nom nom nom;
|
nix-output-monitor # nom nom nom nom;
|
||||||
nix-tree # view packages
|
nix-tree # view packages
|
||||||
pciutils # lspci
|
pciutils # lspci
|
||||||
|
nixos-rebuild-ng
|
||||||
;
|
;
|
||||||
nix-janitor = pkgs.symlinkJoin {
|
nix-janitor = pkgs.symlinkJoin {
|
||||||
name = "nix-janitor";
|
name = "nix-janitor";
|
||||||
|
|
@ -39,8 +35,15 @@
|
||||||
--suffix PATH : ${lib.makeBinPath [ config.nix.package ]}
|
--suffix PATH : ${lib.makeBinPath [ config.nix.package ]}
|
||||||
'';
|
'';
|
||||||
};
|
};
|
||||||
}
|
|
||||||
);
|
};
|
||||||
|
|
||||||
|
programs.git.enable = true;
|
||||||
|
# Mr sandro why
|
||||||
|
services.libinput.enable = true;
|
||||||
|
programs.nano.enable = false;
|
||||||
|
|
||||||
|
environment.defaultPackages = lib.mkForce [ ];
|
||||||
|
|
||||||
#enable ssh
|
#enable ssh
|
||||||
programs.mtr.enable = true; # ping and traceroute
|
programs.mtr.enable = true; # ping and traceroute
|
||||||
|
|
@ -78,5 +81,7 @@
|
||||||
documentation.nixos.enable = false;
|
documentation.nixos.enable = false;
|
||||||
# Useless with flakes (without configuring)
|
# Useless with flakes (without configuring)
|
||||||
programs.command-not-found.enable = false;
|
programs.command-not-found.enable = false;
|
||||||
|
|
||||||
|
system.switch.enableNg = true;
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue