nix-tree: only on x86_64 where ghc is in the binary caches
[julm/julm-nix.git] / hosts / patate.nix
index ea448a47ce2907e711c57f4619d0654e8ea2f855..8b264c9fae5e88151087d8b92a7f113348882210 100644 (file)
@@ -1,14 +1,14 @@
 { config, pkgs, lib, ... }:
 {
   imports = [
-    ../nixos/profiles/dnscrypt-proxy2.nix
     ../nixos/profiles/graphical.nix
     ../nixos/profiles/lang-fr.nix
+    ../nixos/profiles/laptop.nix
     ../nixos/profiles/printing.nix
-    ../nixos/profiles/wireguard/wg-intra.nix
     patate/backup.nix
     patate/hardware.nix
-    patate/wireguard.nix
+    patate/nebula.nix
+    patate/networking.nix
   ];
 
   # Lower kernel's security for better performances
@@ -17,9 +17,6 @@
   home-manager.users.sevy = {
     imports = [ ../homes/sevy.nix ];
   };
-  systemd.services.home-manager-sevy.postStart = ''
-    ${pkgs.nix}/bin/nix-env --delete-generations +1 --profile /nix/var/nix/profiles/per-user/sevy/home-manager
-  '';
   users.users.sevy = {
     isNormalUser = true;
     uid = 1000;
 
   nix = {
     settings = {
-      trusted-users = [ config.users.users."sevy".name ];
       substituters = [
         #"ssh://nix-ssh@losurdo.wg?priority=30"
-        "ssh://nix-ssh@oignon.wg?priority=10"
+        #"ssh://nix-ssh@oignon.wg?priority=10"
       ];
       trusted-public-keys = map lib.readFile [
         ../users/root/nix/losurdo.pub
     pkgs.riseup-vpn # Can't be installed by home-manager because it needs to install policy-kit rules
   ];
 
-  services.physlock = {
-    enable = true;
-    allowAnyUser = true;
-    # NOTE: xfconf-query -c xfce4-session -p /general/LockCommand -s "physlock" --create -t string
-  };
-
   services.xserver = {
     desktopManager = {
       mate.enable = true;