Olivier
4034a6d81d
- Introduced a new secrets file for git-crypt personal documents. - Updated .sops.yaml to include new key groups for host-specific secrets. - Configured Sops settings in client-services.nix for managing secrets. - Removed redundant Sops configurations from multiple host configurations (14900k, ideapad, t2mbp, uConsole) to streamline secret management. - Added git-crypt to desktop-home-base package list.
91 lines
2.8 KiB
Nix
91 lines
2.8 KiB
Nix
{ self, inputs, ... }: {
|
|
flake.nixosModules.uConsoleConfiguration =
|
|
{
|
|
self,
|
|
lib,
|
|
pkgs,
|
|
modulesPath,
|
|
config,
|
|
inputs,
|
|
...
|
|
}:
|
|
{
|
|
# Workaround for NixOS/nixpkgs#398456.
|
|
disabledModules = [ (modulesPath + "/rename.nix") ];
|
|
|
|
imports = [
|
|
# Workaround for NixOS/nixpkgs#398456.
|
|
(lib.mkAliasOptionModule
|
|
[ "environment" "checkConfigurationOptions" ]
|
|
[ "_module" "check" ])
|
|
|
|
self.nixosModules.uConsoleHardware
|
|
inputs.home-manager.nixosModules.home-manager
|
|
inputs.sops-nix.nixosModules.sops
|
|
|
|
self.nixosModules.system
|
|
self.nixosModules.desktop
|
|
self.nixosModules.users
|
|
|
|
self.nixosModules."client-services"
|
|
./_private/platform.nix
|
|
./_private/raspberrypi-utils-overlay.nix
|
|
./_private/wifi-brcmfmac.nix
|
|
./_private/services.nix
|
|
./_private/cockpit.nix
|
|
./_private/activation.nix
|
|
./_private/4g/default.nix
|
|
];
|
|
|
|
nix.settings = {
|
|
experimental-features = [ "nix-command" "flakes" ];
|
|
require-sigs = false;
|
|
};
|
|
|
|
chiasson.system.librepods.enable = true;
|
|
chiasson.system.palera1n.enable = true;
|
|
|
|
# ─────────────────────── Attic (pull + push + CLI token) ────────────────────
|
|
chiasson.system.caching.attic = {
|
|
enable = true;
|
|
cacheName = "nixos-new";
|
|
endpoint = "http://192.168.2.238:8080/";
|
|
publicKey = "nixos-new:8NySIcT0HP7KvGQKgBRWoWESxxRA8BVYo8S85UNpNX0=";
|
|
tokenFile = config.sops.secrets."caching/attic/token".path;
|
|
push.enable = true;
|
|
userCli.enable = true;
|
|
};
|
|
# ─────────────────────── Display Server & Desktop ──────────────────────────
|
|
|
|
chiasson.desktop = {
|
|
# Pi 5 + RP1 DSI: see `modules/desktop/niri/pi5-workarounds.nix` and `chiasson.desktop.niri.raspberryPi5DrmWorkaround`.
|
|
# After login, `niri msg outputs` — add `outputs."…"` under `extraSettings` only if you need mode/transform.
|
|
niri = {
|
|
enable = true;
|
|
raspberryPi5DrmWorkaround = true;
|
|
};
|
|
defaultSession = "niri";
|
|
shell = "dms";
|
|
shells.dms = {
|
|
enableWvkbdToggle = true;
|
|
};
|
|
};
|
|
chiasson.system = {
|
|
audio.enable = true;
|
|
networking = {
|
|
hostName = "uConsole";
|
|
networkManager = {
|
|
enable = true;
|
|
unmanaged = [ ];
|
|
};
|
|
wifi.tools.enabled = true;
|
|
};
|
|
extraPackages = with pkgs; [ gitMinimal ];
|
|
};
|
|
|
|
chiasson.users.enabled = [ "olivier" ];
|
|
|
|
console.packages = with pkgs; [ terminus_font ];
|
|
};
|
|
}
|