pumpkin: syncoid: exclude Downloads
[julm/julm-nix.git] / hosts / patate.nix
index 65164e04de60c645ed0254a2666227a75976935e..474acf77feaa3e3de1a9a57f1450ec008e5ab2ed 100644 (file)
@@ -1,23 +1,28 @@
-{ config, pkgs, lib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 {
   imports = [
     ../nixos/profiles/graphical.nix
     ../nixos/profiles/lang-fr.nix
+    ../nixos/profiles/laptop.nix
     ../nixos/profiles/printing.nix
+    ../nixos/profiles/home.nix
     patate/backup.nix
     patate/hardware.nix
+    patate/nebula.nix
     patate/networking.nix
   ];
 
   # Lower kernel's security for better performances
-  boot.kernelParams = [ "mitigations=off" ];
+  security.kernel.mitigations = "off";
 
   home-manager.users.sevy = {
     imports = [ ../homes/sevy.nix ];
   };
-  systemd.services.home-manager-sevy.postStart = ''
-    ${pkgs.nix}/bin/nix-env --delete-generations +1 --profile /nix/var/nix/profiles/per-user/sevy/home-manager
-  '';
   users.users.sevy = {
     isNormalUser = true;
     uid = 1000;
     pkgs.riseup-vpn # Can't be installed by home-manager because it needs to install policy-kit rules
   ];
 
-  services.physlock = {
-    enable = true;
-    allowAnyUser = true;
-    # NOTE: xfconf-query -c xfce4-session -p /general/LockCommand -s "physlock" --create -t string
-  };
-
   services.xserver = {
     desktopManager = {
       mate.enable = true;
       xfce.enable = true;
       xterm.enable = false;
     };
-    displayManager = {
-      defaultSession = "mate";
-      autoLogin = {
-        user = config.users.users.sevy.name;
-      };
+  };
+
+  services.displayManager = {
+    defaultSession = "mate";
+    autoLogin = {
+      user = config.users.users.sevy.name;
     };
   };