nixos-config/sets/base.nix
Artemis Tosini d1728f9c73
flake.lock: Update
Flake lock file updates:

• Updated input 'artemist':
    'git+https://git.mildlyfunctional.gay/artemist/packages.git?ref=refs/heads/canon&rev=6656b07f2cbd2e5343afdd82eb9967c4a3f1bb0f' (2024-07-10)
  → 'git+https://git.mildlyfunctional.gay/artemist/packages.git?ref=refs/heads/canon&rev=01959e74e880876233f75658a3d763d4b46560b5' (2024-07-15)
• Removed input 'artemist/utils'
• Updated input 'fonts':
    'git+https://git.mildlyfunctional.gay/artemist/fonts.git?ref=refs/heads/canon&rev=af26c827792d79cc728134ad508ddab4bd28c038' (2024-02-21)
  → 'git+https://git.mildlyfunctional.gay/artemist/fonts.git?ref=refs/heads/canon&rev=587fad82e8315cea705cfdcae1328e0da3756555' (2024-07-15)
• Removed input 'fonts/flake-utils'
• Updated input 'lix':
    'a8f443d960.tar.gz?narHash=sha256-YZ7043PFS6LalHAyGeO7qRLeZIevwjHRbbMkpixjwhM%3D' (2024-07-12)
  → '1eb5d22132.tar.gz?narHash=sha256-fueWQn/bzWcYeR01UWAhjMejgpQc2mjSPt3gb5tpoMs%3D' (2024-07-14)
• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/7e7c39ea35c5cdd002cd4588b03a3fb9ece6fad9' (2024-07-12)
  → 'github:nixos/nixpkgs/693bc46d169f5af9c992095736e82c3488bf7dbb' (2024-07-14)
• Updated input 'nixvim':
    'github:nix-community/nixvim/ac9a1cbf9c7145687e66a1c033d68fc72eca3fd8' (2024-07-13)
  → 'github:nix-community/nixvim/b9ed90003273f0a75151b32948e16b44891f403c' (2024-07-15)
2024-07-15 20:36:32 +00:00

96 lines
1.9 KiB
Nix

{
config,
lib,
inputs,
...
}:
{
imports = [
inputs.lix-module.nixosModules.default
inputs.private.nixosModules.base
inputs.private.nixosModules.substituter
./xonsh.nix
];
nix = {
settings = {
auto-optimise-store = true;
experimental-features = [
"nix-command"
"flakes"
"ca-derivations"
];
use-xdg-base-directories = true;
};
};
nixpkgs = {
overlays = [
inputs.artemist.overlays.default
inputs.fonts.overlays.default
(final: prev: { kicad = prev.kicad.override { python3 = final.python311; }; })
];
config.allowUnfreePredicate =
pkg:
(pkg ? passthru && pkg.passthru ? font && pkg.passthru.font)
|| (builtins.elem (lib.getName pkg) [
"1password"
"brscan5"
"brscan5-etc-files"
"celeste64"
"corefonts"
"google-chrome"
"jlink"
"makemkv"
"steam"
"steam-jupiter-original"
"steam-original"
"steam-run"
"steamdeck-hw-theme"
"uhk-agent"
"uhk-udev-rules"
"unrar"
]);
};
console = {
keyMap = "us";
earlySetup = true;
};
time.timeZone = "Etc/UTC";
environment.shellAliases.cp = "cp --reflink=auto --sparse=always";
networking.firewall.enable = false;
programs.fish.enable = true;
users = {
users.artemis = {
isNormalUser = true;
description = "Artemis Tosini";
uid = 1000;
extraGroups = [
"wheel"
"artemis"
];
shell = "/run/current-system/sw/bin/fish";
# hashedPassword set in private
};
groups.artemis.gid = config.users.users.artemis.uid;
mutableUsers = false;
};
security.sudo.execWheelOnly = true;
systemd.extraConfig = "DefaultLimitCORE=infinity";
security.pam.loginLimits = [
{
domain = "*";
item = "core";
type = "hard";
value = "infinity";
}
];
}