ahhhhh

2026-09-12 17:11:21 -04:00
parent b8bdb7276c
commit 7142cba4c2
5 changed files with 137 additions and 6 deletions
@@ -0,0 +1,92 @@
+{ config, pkgs, ... }:
+
+{
+  imports =
+    [
+      ./hardware-configuration.nix
+    ];
+
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+
+  nix.settings.experimental-features = [ "nix-command" "flakes" ];
+
+  networking.hostName = "laptop";
+  networking.networkmanager.enable = true;
+
+  time.timeZone = "America/Toronto";
+  i18n.defaultLocale = "en_US.UTF-8";
+  i18n.extraLocaleSettings = {
+    LC_ADDRESS = "en_US.UTF-8";
+    LC_IDENTIFICATION = "en_US.UTF-8";
+    LC_MEASUREMENT = "en_US.UTF-8";
+    LC_MONETARY = "en_US.UTF-8";
+    LC_NAME = "en_US.UTF-8";
+    LC_NUMERIC = "en_US.UTF-8";
+    LC_PAPER = "en_US.UTF-8";
+    LC_TELEPHONE = "en_US.UTF-8";
+    LC_TIME = "en_US.UTF-8";
+  };
+
+  services.xserver.enable = true;
+  services.displayManager.sddm.enable = true;
+  services.desktopManager.plasma6.enable = true;
+  services.xserver.xkb = {
+    layout = "us";
+    variant = "";
+  };
+
+  services.pulseaudio.enable = false;
+  security.rtkit.enable = true;
+  services.pipewire = {
+    enable = true;
+    alsa.enable = true;
+    alsa.support32Bit = true;
+    pulse.enable = true;
+  };
+  users.users.lilac = {
+    isNormalUser = true;
+        group = "lilac";
+        extraGroups = [ "networkmanager" "wheel" "render" "video" "input" "uinput" ];
+  };
+  users.groups.lilac = {};
+  home-manager = {
+    useGlobalPkgs = true;
+    useUserPackages = true;
+
+    users.lilac = import ../../home/lilac.nix;
+  };
+  programs.zsh.enable = true;
+  users.users.lilac.shell = pkgs.zsh;
+  security.sudo.wheelNeedsPassword = false;
+
+  environment.systemPackages = with pkgs; [
+    vim
+    tor-browser
+  ];
+
+  networking = {
+    firewall = {
+      enable = true;
+      allowedUDPPorts = [ 51820 ];
+      trustedInterfaces = [ "wg0" ];
+    };
+
+    wireguard.interfaces."wg0" = {
+      ips = [ "10.0.0.1/24" ];
+      generatePrivateKeyFile = true;
+      privateKeyFile = "/var/lib/wireguard/wg0.key";
+      peers = [{
+        publicKey = "Tst6SiqoGLSoOAF9l5vT2vvR2RGJ/mFcoBL3BL5n90k=";
+        allowedIPs = [ "10.0.0.0/24" ];
+        endpoint = "216.128.177.13:51820";
+        persistentKeepalive = 25;
+      }];
+    };
+  };
+
+  services.openssh.enable = true;
+
+  nixpkgs.config.allowUnfree = true;
+  system.stateVersion = "26.05";
+}