1{ config, pkgs, lib, ... }:
  2
  3{
  4  imports =
  5    [
  6      ./hardware-configuration.nix
  7    ];
  8
  9  boot.loader.systemd-boot.enable = true;
 10  boot.loader.efi.canTouchEfiVariables = true;
 11
 12  networking.hostName = "sini"; # Define your hostname.
 13
 14  networking.networkmanager.enable = true;
 15
 16  time.timeZone = "Europe/Helsinki";
 17
 18  i18n.defaultLocale = "en_US.UTF-8";
 19
 20  i18n.extraLocaleSettings = {
 21    LC_ADDRESS = "en_US.UTF-8";
 22    LC_IDENTIFICATION = "en_US.UTF-8";
 23    LC_MEASUREMENT = "en_US.UTF-8";
 24    LC_MONETARY = "en_US.UTF-8";
 25    LC_NAME = "en_US.UTF-8";
 26    LC_NUMERIC = "en_US.UTF-8";
 27    LC_PAPER = "en_US.UTF-8";
 28    LC_TELEPHONE = "en_US.UTF-8";
 29    LC_TIME = "en_US.UTF-8";
 30  };
 31
 32  sound.enable = true;
 33  hardware.pulseaudio.enable = true;
 34  hardware.opengl = {
 35    enable = true;
 36    extraPackages = with pkgs; [
 37      intel-media-driver
 38      vaapiIntel
 39      vaapiVdpau
 40      libvdpau-va-gl
 41      intel-compute-runtime
 42    ];
 43  };
 44
 45  security = {
 46    doas.enable = true;
 47    sudo.enable = true;
 48    doas.extraConfig = ''
 49      permit nopass :wheel
 50    '';
 51    doas.extraRules = [{
 52      users = [ "icy" ];
 53    }];
 54  };
 55
 56  users.users.icy = {
 57    isNormalUser = true;
 58    description = "icy";
 59    extraGroups = [ "networkmanager" "wheel" "docker" ];
 60    packages = with pkgs; [ ];
 61  };
 62
 63  users.users.git = {
 64    isNormalUser = true;
 65    description = "git";
 66    extraGroups = [ "networkmanager" "wheel" ];
 67    homeMode = "755";
 68    packages = with pkgs; [ ];
 69  };
 70
 71
 72  nixpkgs.config.allowUnfree = true;
 73  environment.systemPackages = with pkgs; [
 74    vim
 75    wget
 76    git
 77  ];
 78
 79  services = {
 80    openssh.enable = true;
 81    tailscale.enable = true;
 82    # nix-snapshotter.enable = true;
 83  };
 84
 85  services.pixelfed = {
 86    enable = true;
 87    domain = "ani.place";
 88    secretFile = "/home/icy/svc/pixelfed/.env";
 89    nginx.listen = [
 90      {
 91        addr = "0.0.0.0";
 92        port = 3535;
 93      }
 94    ];
 95  };
 96
 97  # building only
 98  virtualisation.docker.enable = true;
 99
100  services.k3s = let address = "100.85.88.64"; in {
101    enable = true;
102    extraFlags = "--disable=traefik --disable=servicelb --disable=metrics-server --bind-address=${address} --node-ip=${address} --node-external-ip=${address}";
103  };
104
105  services.dockerRegistry = {
106    enable = true;
107    listenAddress = "0.0.0.0";
108    port = 5000;
109    enableGarbageCollect = true;
110  };
111
112  nix.settings.experimental-features = [ "nix-command" "flakes" ];
113  system.stateVersion = "24.05";
114}
115