aaron
450559f8c6
- increase security by restricting /boot to root only - add data-drives for encrypted drives that will get mounted through crypttab rather than the initrd Reviewed-on: #87 Co-authored-by: aaron <aaron@0x29a.ch>
55 lines
1.6 KiB
Nix
55 lines
1.6 KiB
Nix
# argon: desktop with an amd gpu and three luks-encrypted data drives.
|
|
|
|
{ pkgs, ... }:
|
|
|
|
{
|
|
imports = [
|
|
../../modules/nixos/appimage.nix
|
|
../../modules/nixos/astro.nix
|
|
../../modules/nixos/audio.nix
|
|
../../modules/nixos/bootloader.nix
|
|
../../modules/nixos/certificates.nix
|
|
../../modules/nixos/data-drives.nix
|
|
../../modules/nixos/gnupg.nix
|
|
../../modules/nixos/greetd.nix
|
|
../../modules/nixos/locales.nix
|
|
../../modules/nixos/networking.nix
|
|
../../modules/nixos/niri.nix
|
|
../../modules/nixos/noctalia.nix
|
|
../../modules/nixos/openssh.nix
|
|
../../modules/nixos/packages.nix
|
|
../../modules/nixos/protonvpn.nix
|
|
../../modules/nixos/services.nix
|
|
../../modules/nixos/settings.nix
|
|
../../modules/nixos/steam.nix
|
|
../../modules/nixos/thunar.nix
|
|
../../modules/nixos/users.nix
|
|
../../modules/nixos/vial.nix
|
|
];
|
|
|
|
# host-specific niri config (outputs, input devices)
|
|
home-manager.users.aaron.imports = [ ./niri.nix ];
|
|
|
|
# amd gpu: mesa/vulkan, and amdgpu in the initrd for plymouth
|
|
hardware.graphics = {
|
|
enable = true;
|
|
enable32Bit = true;
|
|
};
|
|
hardware.amdgpu.initrd.enable = true;
|
|
|
|
# encrypted data drives, see data-drives.nix
|
|
local.dataDrives = {
|
|
data1 = "dfae62cc-bad1-4879-bf9a-461bde833625";
|
|
data2 = "8312edae-9247-481b-a313-52a7f848f027";
|
|
nvmecache = "2352250e-4ebe-4f9a-bf66-0d4aaa961bd8";
|
|
};
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
amdgpu_top
|
|
calibre # ebook management and kobo syncing
|
|
];
|
|
|
|
networking.hostName = "argon";
|
|
system.stateVersion = "25.11"; # don't change
|
|
}
|