Merge branch 'main' of git.firelilith.org:lilith/nixos

system/core/default.nix

@@ -16,6 +16,8 @@
     ./syncthing.nix
     ./users.nix
     ./zsh.nix
+
+    ./virtualization.nix
   ];
 
   environment.systemPackages = with pkgs; [ distrobox ];

system/core/env.nix

@@ -1,9 +1,12 @@
-{...}: {
+{ ... }:
+{
   time.timeZone = "Europe/Berlin";
 
   environment.variables = {
     EDITOR = "hx";
     VISUAL = "hx";
     FLAKE = "/home/lilith/nixos";
+
+    ELECTRON_OZONE_PLATFORM_HINT = "wayland";
   };
 }

system/core/users.nix

@@ -15,8 +15,9 @@ in
       hashedPasswordFile = config.sops.secrets."user/password".path;
     };
 
-    remotebuilder = {
-      isSystemUser = true;
+    nixremote = {
+      isNormalUser = true;
+      createHome = false;
       group = "users";
       extraGroups = [ ];
       openssh.authorizedKeys.keys = [

system/core/virtualization.nix

@@ -0,0 +1,9 @@
+{ pkgs, ... }:
+{
+  virtualisation.podman = {
+    enable = true;
+    dockerCompat = true;
+  };
+
+  environment.systemPackages = [ pkgs.distrobox ];
+}

system/optional/gaming.nix

@@ -18,6 +18,10 @@
       steam = {
         enable = true;
         gamescopeSession.enable = true;
+
+        remotePlay.openFirewall = true;
+        dedicatedServer.openFirewall = true;
+        localNetworkGameTransfers.openFirewall = true;
       };
 
       gamemode.enable = true;
@@ -32,5 +36,17 @@
         protontricks
       ];
     };
+
+    # SteamVR kernel patch for AMDGPU
+    boot.kernelPatches = [
+      {
+        name = "amdgpu-ignore-ctx-privileges";
+        patch = pkgs.fetchpatch {
+          name = "cap_sys_nice_begone.patch";
+          url = "https://github.com/Frogging-Family/community-patches/raw/master/linux61-tkg/cap_sys_nice_begone.mypatch";
+          hash = "sha256-Y3a0+x2xvHsfLax/uwycdJf3xLxvVfkfDVqjkxNaYEo=";
+        };
+      }
+    ];
   };
 }