hosts

system/audio.nix

@@ -0,0 +1,10 @@
+{...}: {
+  security.rtkit.enable = true;
+  services.pipewire = {
+    enable = true;
+    alsa.enable = true;
+    alsa.support32Bit = true;
+    pulse.enable = true;
+    # jack.enable = true;
+  };
+}

system/bluetooth.nix

@@ -0,0 +1,3 @@
+{...}: {
+  hardware.bluetooth.enable = true;
+}

system/boot.nix

@@ -0,0 +1,6 @@
+{pkgs, ...}: {
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+
+  boot.kernelPackages = pkgs.linuxPackages_latest;
+}

system/btrfs.nix

@@ -0,0 +1,10 @@
+{...}: {
+  services.btrfs.autoScrub = {
+    enable = true;
+    interval = "Fri 07:00";
+    fileSystems = [
+      "/persistent"
+      "/nix"
+    ];
+  };
+}

system/env.nix

@@ -0,0 +1,6 @@
+{...}: {
+  environment.variables = {
+    EDITOR = "hx";
+    VISUAL = "hx";
+  };
+}

system/fonts.nix

@@ -0,0 +1,5 @@
+{pkgs, ...}: {
+  fonts.packages = with pkgs; [
+    (nerdfonts.override {fonts = ["JetBrainsMono"];})
+  ];
+}

system/networking.nix

@@ -0,0 +1,26 @@
+{conf, ...}: {
+  networking.hostName = conf.hostname;
+  networking.networkmanager = {
+    enable = true;
+    wifi.macAddress = "random";
+    ethernet.macAddress = "random";
+  };
+
+  networking.firewall = {
+    enable = true;
+
+    allowedTCPPorts = [
+      22 # ssh
+      22000 # syncthing
+    ];
+
+    extraCommands = ''
+      ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --sport 51820 -j RETURN
+      ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --dport 51820 -j RETURN
+    '';
+    extraStopCommands = ''
+      ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --sport 51820 -j RETURN || true
+      ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --dport 51820 -j RETURN || true
+    '';
+  };
+}

system/nix.nix

@@ -0,0 +1,15 @@
+{nixpkgs, ...}: {
+  nixPath = ["nixpkgs=${nixpkgs}"];
+  gc = {
+    automatic = true;
+    dates = "05:30";
+    options = "--delete-older-than 7d";
+
+    settings = {
+      keep-outputs = true;
+      auto-optimise-store = true;
+      experimental-features = ["nix-command" "flakes"];
+      trusted-users = ["root" "@wheel"];
+    };
+  };
+}

system/persistence.nix

@@ -0,0 +1,39 @@
+{
+  conf,
+  impermanence,
+  ...
+}: {
+  imports = [impermanence.nixosModule];
+
+  environment.persistence."/persist/data" = {
+    hideMounts = true;
+    directories = [
+      "/etc/NetworkManager/system-connections"
+      "/var/log"
+      "/var/lib/bluetooth"
+      "/var/lib/nixos"
+      "/var/lib/systemd/coredump"
+      "/var/lib/bluetooth"
+    ];
+    files = [];
+
+    users.${conf.user} = (import ../home/persistence.nix).data;
+  };
+
+  environment.persistence."/persist/cache" = {
+    hideMounts = true;
+    directories = [
+      "/root/.cache/nix"
+      "/var/lib/btrfs"
+      "/var/lib/nixos"
+      "/var/lib/systemd/backlight"
+      "/var/lib/systemd/timers"
+      "/var/log"
+    ];
+    files = [
+      "/etc/machine-id"
+    ];
+
+    users.${conf.user} = (import ../home/persistence.nix).cache;
+  };
+}

system/steam.nix

@@ -0,0 +1,14 @@
+{
+  lib,
+  config,
+  ...
+}: {
+  options.gaming.enable = lib.mkEnableOption "Enable gaming";
+
+  config = lib.mkIf config.gaming.enable {
+    programs.steam = {
+      enable = true;
+      remotePlay.openFirewall = true;
+    };
+  };
+}