mirror of
https://github.com/alyraffauf/nixcfg.git
synced 2024-11-22 10:33:55 -05:00
Aly Raffauf
c6b59d0e34
* flake: add secureboot * petalburg: enable lanzaboote * lavaridge: enable lanzaboote * flake: auto import lanzaboote * mauville: enable secureboot and auto luks unlocking * lavaridge,petalburg: disable autologin * README.md: add lanzaboote * hosts/README.md: add secure boot setup docs
72 lines
1.6 KiB
Nix
72 lines
1.6 KiB
Nix
# Framework Laptop 13 with AMD Ryzen 7640U, 32GB RAM, 1TB SSD.
|
|
{
|
|
config,
|
|
lib,
|
|
pkgs,
|
|
self,
|
|
...
|
|
}: {
|
|
imports = [
|
|
./disko.nix
|
|
./home.nix
|
|
./secrets.nix
|
|
./stylix.nix
|
|
self.inputs.nixhw.nixosModules.framework-13-amd-7000
|
|
self.nixosModules.common-auto-upgrade
|
|
self.nixosModules.common-base
|
|
self.nixosModules.common-locale
|
|
self.nixosModules.common-mauville-share
|
|
self.nixosModules.common-nix
|
|
self.nixosModules.common-overlays
|
|
self.nixosModules.common-pkgs
|
|
self.nixosModules.common-tailscale
|
|
self.nixosModules.common-wifi-profiles
|
|
];
|
|
|
|
boot = {
|
|
initrd.systemd.enable = true;
|
|
kernelPackages = lib.mkForce pkgs.linuxPackages_6_9;
|
|
|
|
lanzaboote = {
|
|
enable = true;
|
|
pkiBundle = "/etc/secureboot";
|
|
};
|
|
|
|
loader = {
|
|
efi.canTouchEfiVariables = true;
|
|
systemd-boot.enable = lib.mkForce false;
|
|
};
|
|
};
|
|
|
|
environment.variables.GDK_SCALE = "1.5";
|
|
networking.hostName = "lavaridge";
|
|
system.stateVersion = "24.05";
|
|
|
|
ar = {
|
|
apps = {
|
|
firefox.enable = true;
|
|
podman.enable = true;
|
|
steam.enable = true;
|
|
virt-manager.enable = true;
|
|
};
|
|
|
|
desktop = {
|
|
greetd.enable = true;
|
|
hyprland.enable = true;
|
|
sway.enable = true;
|
|
};
|
|
|
|
laptopMode = true;
|
|
|
|
users.aly = {
|
|
enable = true;
|
|
password = "$y$j9T$NSS7QcEtN4yiigPyofwlI/$nxdgz0lpySa0heDMjGlHe1gX3BWf48jK6Tkfg4xMEs6";
|
|
syncthing = {
|
|
enable = true;
|
|
certFile = config.age.secrets.syncthingCert.path;
|
|
keyFile = config.age.secrets.syncthingKey.path;
|
|
};
|
|
};
|
|
};
|
|
}
|