80 lines
2.3 KiB
Nix
80 lines
2.3 KiB
Nix
|
{ config, pkgs, ... }:
|
|||
|
|
|
|||
|
|
{
|
|||
|
|
imports =
|
|||
|
|
[ # Include the results of the hardware scan.
|
|||
|
|
./hardware-configuration.nix
|
|||
|
|
];
|
|||
|
|
|
|||
|
|
boot.loader.grub.enable = true;
|
|||
|
|
boot.loader.grub.version = 2;
|
|||
|
|
# Define on which hard drive you want to install Grub.
|
|||
|
|
boot.loader.grub.device = "/dev/sda"; # or "nodev" for efi only
|
|||
|
|
|
|||
|
|
# Minimal list of modules to use the EFI system partition and the YubiKey
|
|||
|
|
boot.initrd.kernelModules = [ "vfat" "nls_cp437" "nls_iso8859-1" "usbhid" ];
|
|||
|
|
|
|||
|
|
# Enable support for the YubiKey PBA
|
|||
|
|
boot.initrd.luks.yubikeySupport = true;
|
|||
|
|
|
|||
|
|
# Configuration to use your Luks device
|
|||
|
|
boot.initrd.luks.devices = {
|
|||
|
|
"crypthome" = {
|
|||
|
|
device = "/dev/sda2";
|
|||
|
|
preLVM = true; # You may want to set this to false if you need to start a network service first
|
|||
|
|
yubikey = {
|
|||
|
|
slot = 2;
|
|||
|
|
twoFactor = true; # Set to false if you did not set up a user password.
|
|||
|
|
storage = {
|
|||
|
|
device = "/dev/sda1";
|
|||
|
|
};
|
|||
|
|
};
|
|||
|
|
};
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
# nix = {
|
|||
|
|
# package = pkgs.nixUnstable;
|
|||
|
|
# extraOptions = "experimental-features = nix-command flakes";
|
|||
|
|
# };
|
|||
|
|
|
|||
|
|
networking.hostName = "curve"; # Define your hostname.
|
|||
|
|
networking.wireless.enable = true; # Enables wireless support via wpa_supplicant.
|
|||
|
|
|
|||
|
|
time.timeZone = "Australia/Brisbane";
|
|||
|
|
|
|||
|
|
networking.useDHCP = false;
|
|||
|
|
networking.interfaces.enp0s31f6.useDHCP = true;
|
|||
|
|
networking.interfaces.wlp3s0.useDHCP = true;
|
|||
|
|
|
|||
|
|
# Select internationalisation properties.
|
|||
|
|
i18n.defaultLocale = "en_US.UTF-8";
|
|||
|
|
# console = {
|
|||
|
|
# font = "Lat2-Terminus16";
|
|||
|
|
# keyMap = "us";
|
|||
|
|
# };
|
|||
|
|
|
|||
|
|
services.xserver.layout = "us,dvorak";
|
|||
|
|
|
|||
|
|
sound.enable = true;
|
|||
|
|
hardware.pulseaudio.enable = true;
|
|||
|
|
|
|||
|
|
services.xserver.libinput.enable = true;
|
|||
|
|
|
|||
|
|
users.users.anish = {
|
|||
|
|
isNormalUser = true;
|
|||
|
|
extraGroups = [ "wheel" ];
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
# Enable the OpenSSH daemon.
|
|||
|
|
# services.openssh.enable = true;
|
|||
|
|
|
|||
|
|
# This value determines the NixOS release from which the default
|
|||
|
|
# settings for stateful data, like file locations and database versions
|
|||
|
|
# on your system were taken. It‘s perfectly fine and recommended to leave
|
|||
|
|
# this value at the release version of the first install of this system.
|
|||
|
|
# Before changing this value read the documentation for this option
|
|||
|
|
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
|
|||
|
|
system.stateVersion = "21.05"; # Did you read the comment?
|
|||
|
|
}
|
|||
|
|
|