base.nix

@@ -5,8 +5,8 @@
   boot.loader.efi.canTouchEfiVariables = true;
 
   networking = {
-    domain = lib.mkDefault "home.feal.no";
+    domain = "home.feal.no";
-    nameservers = lib.mkDefault [ "192.168.10.175" "192.168.10.1" "1.1.1.1" ];
+    nameservers = [ "192.168.10.175" "192.168.10.1" "1.1.1.1" ];
     useDHCP = lib.mkDefault false;
   };
 
@@ -40,6 +40,7 @@
   programs.zsh.enable = true;
 
   environment.systemPackages = with pkgs; [
+    bat
     bottom
     duf
     eza
@@ -50,12 +51,14 @@
     htop
     iotop
     lm_sensors
+    neofetch
     nix-output-monitor
     p7zip
     python3
     ripgrep
     rsync
     screen
+    sshfs
     unzip
     usbutils
     vim
@@ -82,12 +85,12 @@
 
   users.users.felixalb = {
     isNormalUser = true;
-    extraGroups = lib.mkDefault [
+    extraGroups = [
       "wheel"
       "docker"
     ];
-    uid = lib.mkDefault 1000;
+    uid = 1000;
-    openssh.authorizedKeys.keys = lib.mkDefault [
+    openssh.authorizedKeys.keys = [
       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDKzPICGew7uN0cmvRmbwkwTCodTBUgEhkoftQnZuO4Q felixalbrigtsen@gmail.com"
       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBTXSL0w7OUcz1LzEt1T3I3K5RgyNV+MYz0x/1RbpDHQ felixalb@worf"
       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFiPHhj0YbklJnJNcxD0IlzPxLTGfv095H5zyS/1Wb64 felixalb@edison.home.feal.no"

flake.nix

@@ -47,27 +47,6 @@
     in
     {
       nixosConfigurations = {
-        # Networking / VPN Gateway
-        burnham = nixpkgs.lib.nixosSystem {
-          system = "x86_64-linux";
-          specialArgs = {
-            inherit inputs;
-          };
-          modules = [
-            # Overlays-module makes "pkgs.unstable" available in configuration.nix
-            ({ config, pkgs, ... }: { nixpkgs.overlays = [ pkgs-overlay ]; })
-
-            ./hosts/burnham/configuration.nix
-            ./common/domeneshop-dyndns.nix
-            sops-nix.nixosModules.sops
-            home-manager.nixosModules.home-manager {
-              home-manager.useGlobalPkgs = true;
-              home-manager.useUserPackages = true;
-              home-manager.users."felixalb" = import ./hosts/burnham/home.nix;
-            }
-          ];
-        };
-        # Media / storage server
         challenger = nixpkgs.lib.nixosSystem {
           system = "x86_64-linux";
           specialArgs = {
@@ -87,7 +66,6 @@
             }
           ];
         };
-        # General application server
         defiant = nixpkgs.lib.nixosSystem {
           system = "x86_64-linux";
           specialArgs = {
@@ -108,8 +86,7 @@
             }
           ];
         };
-        # Work desktop
+        edison = nixpkgs.lib.nixosSystem {
-        felixalbpc = nixpkgs.lib.nixosSystem {
           system = "x86_64-linux";
           specialArgs = {
             inherit inputs;
@@ -118,16 +95,35 @@
             # Overlays-module makes "pkgs.unstable" available in configuration.nix
             ({ config, pkgs, ... }: { nixpkgs.overlays = [ pkgs-overlay ]; })
 
-            ./hosts/felixalbpc/configuration.nix
+            ./hosts/edison/configuration.nix
             sops-nix.nixosModules.sops
             home-manager.nixosModules.home-manager {
               home-manager.useGlobalPkgs = true;
               home-manager.useUserPackages = true;
-              home-manager.users."felixalb" = import ./hosts/felixalbpc/home.nix;
+              home-manager.users."felixalb" = import ./hosts/edison/home.nix;
             }
           ];
         };
-        # Web host
+        burnham = nixpkgs.lib.nixosSystem {
+          system = "x86_64-linux";
+          specialArgs = {
+            inherit inputs;
+          };
+          modules = [
+            # Overlays-module makes "pkgs.unstable" available in configuration.nix
+            ({ config, pkgs, ... }: { nixpkgs.overlays = [ pkgs-overlay ]; })
+
+            ./hosts/burnham/configuration.nix
+            ./common/domeneshop-dyndns.nix
+            sops-nix.nixosModules.sops
+            home-manager.nixosModules.home-manager {
+              home-manager.useGlobalPkgs = true;
+              home-manager.useUserPackages = true;
+              home-manager.users."felixalb" = import ./hosts/burnham/home.nix;
+            }
+          ];
+        };
+
         malcolm = nixpkgs.lib.nixosSystem {
           system = "x86_64-linux";
           specialArgs = {
@@ -147,7 +143,7 @@
           ];
         };
       };
-      # Daily driver macbook
+
       darwinConfigurations.worf = nix-darwin.lib.darwinSystem {
         system = "aarch64-darwin";
         specialArgs = {

home/base.nix

@@ -1,4 +1,4 @@
-{ pkgs, lib, ... }:
+{ pkgs, ... }:
 {
   imports = [
     ./neovim.nix
@@ -7,12 +7,9 @@
 
   home = {
     packages = with pkgs; [
-      bat
       bottom
-      ncdu
+      unstable.ncdu
       neofetch
-      sshfs
-      sshuttle
     ];
 
     sessionVariables = {
@@ -38,7 +35,7 @@
 
       user = {
         name = "Felix Albrigtsen";
-        email = lib.mkDefault "felix@albrigtsen.it";
+        email = "felix@albrigtsen.it";
       };
     };
     ignores = [

home/neovim.nix

@@ -21,6 +21,7 @@ in {
       telescope-nvim
 
       nvim-lspconfig
+      # copilot-vim
       nvim-treesitter
 
       coc-css
@@ -31,7 +32,6 @@ in {
       coc-pyright
 
       vim-nix
-      vim-puppet
     ];
 
     withNodeJs = true;
@@ -122,11 +122,6 @@ in {
 
       " Disable search highlights
       map <Leader><Space> :noh<CR>
-
-      " Start with copilot disabled
-      if exists("*Copilot")
-        autocmd VimEnter *  Copilot disable
-      endif
     '';
   };
 

home/zsh.nix

@@ -2,7 +2,6 @@
   programs = {
     zsh = {
       enable = true;
-      history.extended = true;
 
       prezto = {
         enable = true;
@@ -22,7 +21,6 @@
           "terminal"
           "editor"
           "history"
-          "history-substring-search"
           # "directory"
           "spectrum"
           # "utility"
@@ -30,6 +28,7 @@
           "git"
           "autosuggestions"
           "syntax-highlighting"
+          "history-substring-search"
           "prompt"
         ];
       };

hosts/edison/configuration.nix

@@ -0,0 +1,55 @@
+{ config, pkgs, lib, ... }:
+
+{
+  imports =
+    [
+      ../../base.nix
+      ../../common/metrics-exporters.nix
+      ./hardware-configuration.nix
+      ./desktop
+  ];
+
+  virtualisation.docker.enable = true;
+  systemd.coredump.enable = true;
+
+  networking = {
+    hostName = "edison";
+    defaultGateway = "192.168.10.1";
+
+    interfaces.enp4s0.useDHCP = false;
+    interfaces.enp4s0.ipv4.addresses = [
+      { address = "192.168.10.170"; prefixLength = 24; }
+    ];
+
+    hostId = "8e84b281";
+  };
+
+  console.keyMap = "us";
+
+  # sops.defaultSopsFile = ../../secrets/edison/edison.yaml;
+
+  environment.variables = { EDITOR = "vim"; };
+  environment.systemPackages = with pkgs; [
+    discord
+    gimp
+    gparted
+    openvpn
+    pavucontrol
+    unstable.element-desktop
+    unstable.hydrus
+  ];
+
+  programs.steam.enable = true;
+
+  nixpkgs.config.allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) [
+    "discord"
+    "nvidia-x11"
+    "nvidia-settings"
+    "steam"
+    "steam-original"
+    "steam-run"
+  ];
+
+  system.stateVersion = "23.05";
+}
+

hosts/edison/desktop/default.nix

@@ -1,38 +1,30 @@
 { config, pkgs, lib, ... }:
 {
+  imports = [
+    ./remote.nix
+    ./gnome.nix
+    ./xfce.nix
+  ];
+
   services.xserver = {
     enable = true;
     displayManager.gdm = {
       enable = true;
       wayland = true;
     };
-    xkb = {
+    videoDrivers = [ "nvidia" ];
-      options = "ctrl:nocaps";
+    xkbOptions = "ctrl:nocaps";
-      variant = "intl";
+    layout = "no,us";
-      layout = "no,us";
+    xkbVariant = "intl";
-    };
-    windowManager.qtile.enable = true;
   };
 
-  programs.hyprland.enable = true;
+  #hardware.nvidia.modesetting.enable = true; # TODO: Fix this. Steam crashes, and textures/fonts unload when suspended.
-
   hardware.keyboard.zsa.enable = true;
   environment.sessionVariables.NIXOS_OZONE_WL = "1";
 
-  home-manager.users.felixalb = {
+  environment.systemPackages = with pkgs; [
-    services = {
+    xclip
-      dunst.enable = true;
+  ];
-    };
-    home.packages = with pkgs; [
-      i3lock
-      libnotify
-      pamixer
-      pavucontrol
-      sxhkd
-      xclip
-      xss-lock
-    ];
-  };
 
   hardware.opengl.enable = true;
 
@@ -63,28 +55,28 @@
     ];
   };
 
-  # # Dark mode
+  # Dark mode
-  # home-manager.users.felixalb = {
+  home-manager.users.felixalb = {
-  #   dconf.settings = {
+    dconf.settings = {
-  #     "org/gnome/desktop/interface" = {
+      "org/gnome/desktop/interface" = {
-  #       color-scheme = "prefer-dark";
+        color-scheme = "prefer-dark";
-  #     };
+      };
-  #   };
+    };
 
-  #   gtk = {
+    gtk = {
-  #     enable = true;
+      enable = true;
-  #     theme = {
+      theme = {
-  #       name = "Adwaita-dark";
+        name = "Adwaita-dark";
-  #       package = pkgs.gnome.gnome-themes-extra;
+        package = pkgs.gnome.gnome-themes-extra;
-  #     };
+      };
-  #   };
+    };
-  # };
+  };
 
-  # qt = {
+  qt = {
-  #   enable = true;
+    enable = true;
-  #   platformTheme = "gnome";
+    platformTheme = "gnome";
-  #   style = "adwaita-dark";
+    style = "adwaita-dark";
-  # };
+  };
 
   # Misc:
   xdg.portal = {
@@ -93,5 +85,7 @@
   };
   location.provider = "geoclue2";
   security.polkit.enable = true;
-  services.openssh.settings.X11Forwarding = true;
+  services.flatpak.enable = true;
+  services.redshift.enable = true;
+  users.users."felixalb".packages = [ pkgs.flatpak ];
 }

hosts/edison/desktop/gnome.nix

@@ -0,0 +1,10 @@
+{ config, pkgs, lib, ... }:
+{
+  services.xserver.desktopManager.gnome.enable = true;
+  environment.systemPackages = with pkgs; [
+    gnomeExtensions.appindicator
+    gnome.adwaita-icon-theme
+  ];
+  services.udev.packages = with pkgs; [ gnome.gnome-settings-daemon ];
+  programs.dconf.enable = true;
+}

hosts/edison/desktop/remote.nix

@@ -0,0 +1,12 @@
+{ config, pkgs, lib, ... }:
+{
+  # Microsoft-style Remote Desktop:
+  services.xrdp = {
+    enable = true;
+    defaultWindowManager = "xfce4-session"; # Avoid fancy animations, no hyprland/GNOME!
+    openFirewall = true;
+  };
+
+  # X window forwarding with `ssh -Y`
+  services.openssh.settings.X11Forwarding = true;
+}

hosts/edison/desktop/xfce.nix

@@ -0,0 +1,10 @@
+{ config, pkgs, lib, ... }:
+{
+  services.xserver = {
+    desktopManager.xfce.enable = true;
+  };
+
+  environment.systemPackages = with pkgs; [
+    xfce.xfce4-pulseaudio-plugin
+  ];
+}

hosts/edison/email.nix

@@ -0,0 +1,52 @@
+{ config, pkgs, lib, ... }:
+{
+  programs.neomutt = {
+    enable = true;
+    sidebar = {
+      enable = true;
+      width = 30;
+    };
+    sort = "reverse-threads";
+    vimKeys = true;
+    checkStatsInterval = 60;
+  };
+
+  programs.mbsync.enable = true;
+  programs.notmuch = {
+    enable = true;
+    hooks = {
+      preNew = "mbsync --all";
+    };
+  };
+  # programs.msmtp.enable = true;
+
+  accounts.email = {
+    accounts.felix-albrigtsen-it = rec {
+      address = "felix@albrigtsen.it";
+      userName = address;
+      primary = true;
+      realName = "Felix Albrigtsen";
+      signature = {
+        text = ''
+          Med vennlig hilsen
+          ${realName}
+        '';
+        showSignature = "append";
+      };
+
+      imap.host = "imap.migadu.com";
+      smtp.host = "smtp.migadu.com";
+      passwordCommand = "cat ~/.secrets/email/migadu"; # yolo / TODO
+
+      mbsync = {
+        enable = true;
+        create = "maildir"; # Create subfolders locally
+        # expugne = "both";
+      };
+      msmtp.enable = true;
+      notmuch.enable = true;
+      neomutt.enable = true;
+    };
+  };
+}
+

hosts/edison/hardware-configuration.nix

@@ -0,0 +1,46 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports =
+    [ (modulesPath + "/installer/scan/not-detected.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "usbhid" "usb_storage" "sd_mod" "sr_mod" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ "kvm-intel" ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" =
+    { device = "/dev/disk/by-uuid/14b254e1-d94f-4b9b-a910-7fcf7e33af46";
+      fsType = "ext4";
+    };
+
+  fileSystems."/boot" =
+    { device = "/dev/disk/by-uuid/A197-7913";
+      fsType = "vfat";
+    };
+
+  fileSystems."/data" =
+    { device = "/dev/disk/by-uuid/ebbdf34e-adec-4df3-bbed-20d80455f3f7";
+      fsType = "ext4";
+    };
+
+  swapDevices =
+    [ { device = "/dev/disk/by-uuid/d56040a0-3009-4899-95fa-1b82e60e32e4"; }
+    ];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault false;
+  # networking.interfaces.enp4s0.useDHCP = lib.mkDefault true;
+  # networking.interfaces.wlp3s0.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  powerManagement.cpuFreqGovernor = lib.mkDefault "powersave";
+  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}

hosts/edison/home.nix

@@ -0,0 +1,30 @@
+{ pkgs, lib, ... }:
+{
+  home.packages = with pkgs; [
+    nix-index
+    unstable.snicat
+
+    python3
+  ] ++ (with python3Packages; [
+      beautifulsoup4
+      numpy
+      pillow
+      pwntools
+      pycryptodome
+      requests
+    ]);
+
+  imports = [
+    ./../../home/base.nix
+    ./email.nix
+  ];
+
+  programs = {
+    zsh.shellAliases."rebuild" = "sudo nixos-rebuild switch --flake /config";
+    alacritty.enable = true;
+    firefox.enable = true;
+    rofi.enable = true;
+    };
+
+  home.stateVersion = "23.05";
+}

hosts/felixalbpc/configuration.nix

@@ -1,40 +0,0 @@
-{ config, pkgs, lib, ... }:
-
-{
-  imports =
-    [
-      ../../base.nix
-      ./hardware-configuration.nix
-      ./desktop
-  ];
-
-  networking = {
-    interfaces.eno1 = {
-      useDHCP = true;
-      ipv6.addresses = [
-        { address = "2001:700:300:22::15"; prefixLength = 64; }
-      ];
-    };
-
-    tempAddresses = "disabled";
-    hostName = "felixalbpc";
-    nameservers = [ "129.241.0.200" "129.241.0.201" "2001:700:300::200" "2001:700:300::201" ];
-    domain = "it.ntnu.no";
-    hostId = "f458d6aa";
-  };
-
-  console.keyMap = "no";
-
-  nixpkgs.config.allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) [
-    "copilot.vim"
-  ];
-
-  users.users.felixalb = {
-    uid = 1328256;
-    extraGroups = [ "wheel" ];
-    openssh.authorizedKeys.keys = [ ];
-  };
-
-  system.stateVersion = "24.05";
-}
-

hosts/felixalbpc/hardware-configuration.nix

@@ -1,35 +0,0 @@
-{ config, lib, pkgs, modulesPath, ... }:
-
-{
-  imports =
-    [ (modulesPath + "/installer/scan/not-detected.nix")
-    ];
-
-  boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "usbhid" "usb_storage" "sd_mod" "rtsx_pci_sdmmc" ];
-  boot.initrd.kernelModules = [ "dm-snapshot" ];
-  boot.kernelModules = [ "kvm-intel" ];
-  boot.extraModulePackages = [ ];
-
-  boot.initrd.luks.devices."cryptlvm".device = "/dev/disk/by-uuid/7516ebdb-14c3-4cb5-9d06-5e9d0e34b798";
-
-  fileSystems."/" =
-    { device = "/dev/disk/by-uuid/02ac773e-31ff-4579-ad9a-859ba74f2a9e";
-      fsType = "ext4";
-    };
-
-  fileSystems."/boot" =
-    { device = "/dev/disk/by-uuid/77ED-720D";
-      fsType = "vfat";
-      options = [ "fmask=0077" "dmask=0077" ];
-    };
-
-  swapDevices =
-    [ { device = "/dev/disk/by-label/swap"; }
-    ];
-
-  # networking.interfaces.eno1.useDHCP = lib.mkDefault true;
-  # networking.interfaces.wlp0s20f3.useDHCP = lib.mkDefault true;
-
-  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
-  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
-}

hosts/felixalbpc/home.nix

@@ -1,56 +0,0 @@
-{ pkgs, lib, ... }:
-{
-  imports = [
-    ./../../home/base.nix
-    ./../../home/alacritty.nix
-  ];
-
-  home.packages = with pkgs; [
-    catimg
-    chromium
-    dante
-    dig
-    element-desktop
-    jq
-    maim
-    mpv
-    oauth2ms
-    openssl
-    openstackclient
-    pwgen
-    remmina
-    w3m
-
-    (python311.withPackages (ps: with ps; [
-      numpy
-      pycryptodome
-      python-novaclient
-      requests
-    ]))
-  ];
-
-  programs = {
-    aerc.enable = true;
-    alacritty.enable = true;
-    firefox.enable = true;
-    git.extraConfig.user.email = "felix.albrigtsen@ntnu.no";
-    rofi.enable = true;
-    zsh.shellAliases."rebuild" = "sudo nixos-rebuild switch --flake /config";
-
-    neovim.plugins = with pkgs.vimPlugins; [ copilot-vim ];
-  };
-
-  xdg.mimeApps = {
-    enable = true;
-
-    defaultApplications = {
-      "text/html" = "firefox.desktop";
-      "x-scheme-handler/http" = "firefox.desktop";
-      "x-scheme-handler/https" = "firefox.desktop";
-      "x-scheme-handler/about" = "firefox.desktop";
-      "x-scheme-handler/unknown" = "firefox.desktop";
-    };
-  };
-
-  home.stateVersion = "24.05";
-}

hosts/worf/home.nix

@@ -18,12 +18,14 @@
     spotify
 
     aerc
+    bat
     borgbackup
     catimg
     cocoapods
     gnutar
     nix-index
     nodejs
+    sshuttle
     tldr
     unstable.snicat
     w3m
@@ -41,11 +43,8 @@
     prezto.pmodules = [ "ssh" ];
   };
 
-  programs.neovim.plugins = with pkgs.vimPlugins; [
+  # Ctrl+y + ,
-    coc-emmet
+  programs.neovim.plugins = with pkgs.vimPlugins; [ coc-emmet emmet-vim ];
-    copilot-vim
-    emmet-vim # Ctrl+y + ,
-  ];
 
   # Copy Applications to ~/Applications to allow them to be launched from Spotlight
   disabledModules = [ "targets/darwin/linkapps.nix" ];