fixes, config passes nix flake check .

This commit is contained in:
2026-06-21 22:40:03 -05:00
parent 1c7f690500
commit 3b813df802
11 changed files with 100 additions and 84 deletions
-1
View File
@@ -2,7 +2,6 @@
{
imports = [
./home.nix
./system.nix
];
}
+1 -1
View File
@@ -2,7 +2,7 @@
{
programs.hyprland.enable = true;
services.displayManager.sddm.enable = true;
services.displayManager.sddm.wayland.enable = true;
xdg.portal = {
enable = true;
+1 -1
View File
@@ -2,7 +2,7 @@
{
services.desktopManager.plasma6.enable = true;
services.displayManager.sddm.enable = true;
services.displayManager.sddm.wayland.enable = true;
xdg.portal.enable = true;
xdg.portal.extraPortals = [ pkgs.xdg-desktop-portal-kde ];
+1
View File
@@ -4,6 +4,7 @@
imports = [
./programs/bash.nix
./programs/git.nix
../desktops/hyprland/home.nix
];
home.username = "river";
+1 -1
View File
@@ -3,6 +3,6 @@
{
programs.eza = {
enable = true;
withIcons = true;
icons = "auto";
};
}
+8 -1
View File
@@ -3,6 +3,13 @@
{
programs.git = {
enable = true;
withDelta = true;
};
programs.delta = {
enable = true;
options = {
features = "decorations interactive";
navigate = true;
hyperlinks = true;
};
};
}
+24 -13
View File
@@ -16,23 +16,34 @@
];
boot = {
zfs.forceImportRoot = false;
supportedFilesystems = [ "zfs" ];
loader = {
initrd = {
systemd.enable = true;
luks.devices."cryptroot" = {
device = "/dev/disk/by-partlabel/luks";
allowDiscards = true;
};
initrd.availableKernelModules = [
"tpm_tis"
"tpm_crb"
];
initrd = {
luks.devices."cryptroot" = {
device = "/dev/disk/by-partlabel/luks";
allowDiscards = true;
};
efi.canTouchEfiVariables = true;
availableKernelModules = [
"tpm_tis"
"tpm_crb"
];
};
loader = {
efi = {
canTouchEfiVariables = true;
efiSysMountPoint = "/boot"; # Adjust if your EFI partition is mounted elsewhere (e.g., /boot/efi)
};
grub = {
enable = true;
device = "nodev"; # "nodev" is required for EFI installs
efiSupport = true;
useOSProber = true; # Set to true if you are dual-booting with Windows/other distros
};
};
kernelModules = [
"tpm_tis"
"tpm_crb"
+51 -54
View File
@@ -1,71 +1,68 @@
{ disk, ... }:
{
disko.devices.disk.main = {
type = "disk";
device = disk;
content = {
type = "gpt";
partitions = {
ESP = {
size = "1G";
type = "EF00";
content = {
type = "filesystem";
format = "vfat";
mountpoint = "/boot";
};
};
luks = {
size = "100%";
content = {
type = "luks";
name = "cryptroot";
# important: allow TPM-based unlocking
settings = {
allowDiscards = true;
};
# this is key for TPM workflows
initrdUnlock = true;
disko.devices = {
disk.main = {
type = "disk";
device = disk;
content = {
type = "gpt";
partitions = {
ESP = {
size = "1G";
type = "EF00";
content = {
type = "zfs";
pool = "rpool";
type = "filesystem";
format = "vfat";
mountpoint = "/boot";
};
};
luks = {
size = "100%";
content = {
type = "luks";
name = "cryptroot";
# important: allow TPM-based unlocking
settings = {
allowDiscards = true;
};
# this is key for TPM workflows
initrdUnlock = true;
content = {
type = "zfs";
pool = "rpool";
};
};
};
};
};
};
};
zpool.rpool = {
type = "zpool";
rootFsOptions = {
compression = "zstd";
"com.sun:auto-snapshot" = "true";
};
datasets = {
root = {
type = "zfs_fs";
mountpoint = "/";
# Moved inside disko.devices
zpool.rpool = {
type = "zpool";
rootFsOptions = {
compression = "zstd";
"com.sun:auto-snapshot" = "true";
};
datasets = {
root = {
type = "zfs_fs";
mountpoint = "/";
};
nix = {
type = "zfs_fs";
mountpoint = "/nix";
};
nix = {
type = "zfs_fs";
mountpoint = "/nix";
};
home = {
type = "zfs_fs";
mountpoint = "/home";
home = {
type = "zfs_fs";
mountpoint = "/home";
};
};
};
};
+12 -10
View File
@@ -12,16 +12,18 @@
services.resolved = {
enable = true;
dnssec = "true";
domains = [ "~." ];
fallbackDns = [
"192.168.1.193" # Pi-hole
"1.1.1.1" # Cloudflare
"1.0.0.1" # Cloudflare (Secondary)
];
extraConfig = ''
DNSOverTLS=yes
'';
settings.Resolve = {
dnssec = "true";
DNSOverTLS = "true";
domains = [ "~." ];
fallbackDns = [
"192.168.1.193" # Pi-hole
"1.1.1.1" # Cloudflare
"1.0.0.1" # Cloudflare (Secondary)
];
};
};
networking.nftables.enable = true;
+1 -1
View File
@@ -1,4 +1,4 @@
{ ... }:
{ config, ... }:
{
services.tailscale.enable = true;
-1
View File
@@ -6,7 +6,6 @@
virtualisation.libvirtd = {
enable = true;
qemu = {
ovmf.enable = true;
swtpm.enable = true;
};
};