nix-config/nixos/workstation/floki/default.nix

131 lines
4.1 KiB
Nix
Raw Normal View History

# Motherboard: LENOVO 21DE001EUS ver: SDK0T76528 WIN ssn: W1CG27P023B
# CPU: 12th Gen Intel(R) Core(TM) i9-12900H
# GPU: NVIDIA GeForce RTX 3080 Ti
# RAM: 32GB DDR5
# SATA: WD_BLACK SN850X 4TB (624331WD) SSD
2024-06-02 19:22:07 +00:00
{ inputs, config, lib, pkgs, ... }:
{
imports = [
(import ./disks.nix)
#./hardware-configuration.nix
inputs.nixos-hardware.nixosModules.common-cpu-intel
inputs.nixos-hardware.nixosModules.common-gpu-nvidia
inputs.nixos-hardware.nixosModules.common-pc
inputs.nixos-hardware.nixosModules.common-pc-laptop-ssd
inputs.nixos-hardware.nixosModules.lenovo-thinkpad-x1-extreme-gen4
../../_mixins/desktop/daw.nix
../../_mixins/desktop/ente.nix
../../_mixins/desktop/logseq.nix
../../_mixins/hardware/systemd-boot.nix
../../_mixins/hardware/disable-nm-wait.nix
# ../../_mixins/hardware/intel.accelerated-video-playback.nix
../../_mixins/hardware/rtx-3080ti.nix
../../_mixins/hardware/roccat.nix
../../_mixins/services/bluetooth.nix
../../_mixins/services/pipewire.nix
../../_mixins/virt
];
boot = {
initrd = {
availableKernelModules = [
"ahci"
"nvme"
"rtsx_pci_sdmmc"
"sd_mod"
"thunderbolt"
"usb_storage"
"xhci_pci"
];
};
kernelModules = [ "kvm-intel" "nvidia" ];
2024-08-15 05:29:41 +00:00
#kernelPackages = pkgs.linuxPackages_latest;
kernelPackages = pkgs.linuxPackages;
};
# https://nixos.wiki/wiki/Nvidia
hardware.nvidia.prime = {
offload.enable = false;
sync.enable = true;
# nix-shell -p lshw.out --run 'sudo lshw -c display'
intelBusId = "PCI:0:2:0"; # pci@0000:00:02.0
nvidiaBusId = "PCI:1:0:0"; # pci@0000:01:00.0
};
console.keyMap = lib.mkForce "us";
services.kmscon.extraConfig = lib.mkForce ''
font-size=12
xkb-layout=us
'';
2024-06-06 15:17:28 +00:00
services.xserver.xkb.layout = lib.mkForce "us";
services.xserver.xkb.options = "ctrl:swapcaps";
environment.systemPackages = with pkgs; [
2024-06-06 15:17:28 +00:00
nvtopPackages.full
man-pages
man-pages-posix
];
networking.hostName = "floki";
powerManagement.powertop.enable = true;
powerManagement.cpuFreqGovernor = "powersave";
documentation.nixos.enable = lib.mkForce true;
documentation.doc.enable = false;
documentation.info.enable = false;
documentation.dev.enable = true;
documentation.man.generateCaches = true;
services = {
hardware.openrgb = {
enable = true;
motherboard = "intel";
package = pkgs.openrgb-with-all-plugins;
};
# Lid settings
logind = {
lidSwitch = "suspend";
lidSwitchExternalPower = "lock";
};
};
virtualisation.docker.storageDriver = "btrfs";
# virtualisation.podman.storageDriver = "btrfs";
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
# support for cross-platform NixOS builds
boot.binfmt.emulatedSystems = [ "armv7l-linux" "aarch64-linux" ];
# setup and use the fingerprint reader (setup with fprintd-enroll)
services.fprintd.enable = true;
services.fprintd.tod.enable = true;
services.fprintd.tod.driver = pkgs.libfprint-2-tod1-goodix;
2024-06-02 19:22:07 +00:00
security.pam.services.login.fprintAuth = true;
# similarly to how other distributions handle the fingerprinting login
2024-06-13 09:20:51 +00:00
security.pam.services.gdm-fingerprint = lib.mkIf config.services.fprintd.enable {
2024-06-02 19:22:07 +00:00
text = ''
auth required pam_shells.so
auth requisite pam_nologin.so
auth requisite pam_faillock.so preauth
auth required ${pkgs.fprintd}/lib/security/pam_fprintd.so
auth optional pam_permit.so
auth required pam_env.so
auth [success=ok default=1] ${pkgs.gnome.gdm}/lib/security/pam_gdm.so
auth optional ${pkgs.gnome.gnome-keyring}/lib/security/pam_gnome_keyring.so
account include login
password required pam_deny.so
session include login
session optional ${pkgs.gnome.gnome-keyring}/lib/security/pam_gnome_keyring.so auto_start
'';
};
}