{ config, pkgs, lib, ... }:
{
imports = [
- ../nixos/profiles/dnscrypt-proxy2.nix
../nixos/profiles/graphical.nix
../nixos/profiles/lang-fr.nix
+ ../nixos/profiles/laptop.nix
../nixos/profiles/printing.nix
- ../nixos/profiles/wireguard/wg-intra.nix
+ ../nixos/profiles/home.nix
patate/backup.nix
patate/hardware.nix
- patate/wireguard.nix
+ patate/nebula.nix
+ patate/networking.nix
];
# Lower kernel's security for better performances
- boot.kernelParams = [ "mitigations=off" ];
+ security.kernel.mitigations = "off";
home-manager.users.sevy = {
imports = [ ../homes/sevy.nix ];
};
- systemd.services.home-manager-sevy.postStart = ''
- ${pkgs.nix}/bin/nix-env --delete-generations +1 --profile /nix/var/nix/profiles/per-user/sevy/home-manager
- '';
users.users.sevy = {
isNormalUser = true;
uid = 1000;
nix = {
settings = {
- trusted-users = [ config.users.users."sevy".name ];
substituters = [
#"ssh://nix-ssh@losurdo.wg?priority=30"
#"ssh://nix-ssh@oignon.wg?priority=10"
];
};
};
- install.substituteOnDestination = false;
environment.systemPackages = [
pkgs.riseup-vpn # Can't be installed by home-manager because it needs to install policy-kit rules
];
- services.physlock = {
- enable = true;
- allowAnyUser = true;
- # NOTE: xfconf-query -c xfce4-session -p /general/LockCommand -s "physlock" --create -t string
- };
-
services.xserver = {
desktopManager = {
mate.enable = true;
xfce.enable = true;
xterm.enable = false;
};
- displayManager = {
- defaultSession = "mate";
- autoLogin = {
- user = config.users.users.sevy.name;
- };
+ };
+
+ services.displayManager = {
+ defaultSession = "mate";
+ autoLogin = {
+ user = config.users.users.sevy.name;
};
};
virtualisation.virtualbox.host.enable = true;
- services.openssh.openFirewall = true;
-
# This value determines the NixOS release with which your system is to be
# compatible, in order to avoid breaking some software such as database
# servers. You should change this only after NixOS release notes say you should.