Initial commit

lil-maid/default.nix

@@ -0,0 +1,54 @@
+{
+  programs.bash.shellAliases = {
+    e = "emacs -nw";
+  };
+  maid = {
+    sys = {
+      enable = true;
+      hostname = "lil-maid";
+
+      bluetooth.enable = true;
+    };
+    masters.nero.enable = true;
+
+    sops = {
+      enable = true;
+
+      viendesu.enable = true;
+      work.enable = true;
+    };
+
+    sddm.enable = true;
+    hm.enable = true;
+    hypr.enable = true;
+    # kde.enable = true;
+
+    rust.enable = true;
+
+    firefox.enable = true;
+    vpn.hft.enable = true;
+
+    unfree = [
+      "obsidian"
+      "slack"
+      "discord"
+      "terraform"
+      "yandex-cloud"
+
+      "steam"
+      "steam-original"
+      "steam-unwrapped"
+      "steam-run"
+      "xow_dongle-firmware"
+    ];
+  };
+
+  imports = [
+    ./modules
+
+    ./hw.nix
+    ./fs.nix
+  ];
+
+  system.stateVersion = "24.05";
+}

lil-maid/fs.nix

@@ -0,0 +1,22 @@
+{
+  fileSystems = {
+    "/" =
+      { device = "/dev/disk/by-label/nixos";
+        fsType = "btrfs";
+      };
+    "/boot" =
+      { device = "/dev/disk/by-label/boot";
+        fsType = "vfat";
+        options = [ "fmask=0077" "dmask=0077" ];
+      };
+    "/secrets" =
+      { device = "/dev/disk/by-label/secrets";
+        fsType = "btrfs";
+        options = [ "nofail" ];
+      };
+  };
+
+  swapDevices =
+    [ { device = "/dev/disk/by-label/swap"; }
+    ];
+}

lil-maid/hw.nix

@@ -0,0 +1,47 @@
+{ pkgs, config, lib, modulesPath, ... }:
+{
+  environment.systemPackages = with pkgs; [
+    # Brightness control for display.
+    brightnessctl
+  ];
+
+  imports =
+    [ (modulesPath + "/installer/scan/not-detected.nix")
+    ];
+
+  systemd.tmpfiles.settings = {
+    "10-secrets" = {
+      "/secrets".v = {
+        user = "nero";
+        mode = "0760";
+      };
+    };
+  };
+
+  services.blueman.enable = true;
+
+  boot.kernelPackages = pkgs.linuxPackages_latest;
+  boot.kernelModules = [ "btusb" "kvm-amd" ];
+
+  boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "thunderbolt" "usb_storage" "sd_mod" ];
+  boot.initrd.kernelModules = [ "amdgpu" ];
+  boot.extraModulePackages = [ ];
+
+  networking.useDHCP = lib.mkDefault true;
+
+  hardware.graphics = {
+    enable = true;
+    enable32Bit = true;
+
+    extraPackages = with pkgs; [
+      amdvlk
+    ];
+    extraPackages32 = with pkgs; [
+      driversi686Linux.amdvlk
+    ];
+  };
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  hardware.enableRedistributableFirmware = true;
+  hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}

lil-maid/modules/boot.nix

@@ -0,0 +1,4 @@
+{
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+}

lil-maid/modules/default.nix

@@ -0,0 +1,12 @@
+{
+  imports = [
+    ./net.nix
+    ./firewall.nix
+    ./boot.nix
+    ./steam.nix
+    ./fonts.nix
+    ./social.nix
+    ./stash.nix
+    ./net.nix
+  ];
+}

lil-maid/modules/firewall.nix

@@ -0,0 +1,5 @@
+{
+  networking.firewall = {
+    enable = false;
+  };
+}

lil-maid/modules/fonts.nix

@@ -0,0 +1,6 @@
+{ pkgs, ... }:
+{
+  fonts.packages = with pkgs; [
+    nerdfonts
+  ];
+}

lil-maid/modules/net.nix

@@ -0,0 +1,22 @@
+{
+  networking.networkmanager.enable = true;
+  services.ivpn.enable = true;
+
+  # services.zapret = {
+  #   enable = true;
+  #   params = [
+  #     "--wf-tcp=443"
+  #     "--wf-udp=443,50000-65535"
+  #     "--dpi-desync=fake,split"
+  #     "--dpi-desync-repeats=3"
+  #     "--dpi-desync-udplen-increment=12"
+  #     "--dpi-desync-udplen-pattern=0xF00F"
+  #     "--dpi-desync-fake-quic=${./zapret/quic_initial_www_google_com.bin}"
+  #     "--dpi-desync-any-protocol"
+  #     "--dpi-desync-cutoff=d3"
+  #     "--dpi-desync-autottl=2"
+  #     "--dpi-desync-fooling=badseq"
+  #     "--dpi-desync-fake-tls=${./zapret/tls_clienthello_www_google_com.bin}"
+  #   ];
+  # };
+}

lil-maid/modules/social.nix

@@ -0,0 +1,16 @@
+{ pkgs, ... }:
+{
+  environment.systemPackages = with pkgs; [
+    # Slack
+    slack
+
+    # Telegram
+    telegram-desktop
+
+    # # Discord
+    # (discord.override {
+    #   withOpenASAR = true;
+    #   withVencord = true;
+    # })
+  ];
+}

lil-maid/modules/stash.nix

@@ -0,0 +1,50 @@
+{ pkgs, inputs, ... }:
+{
+  imports = [ inputs.vnj.nixosModules.x86_64-linux.default ];
+  programs.adb.enable = true;
+
+  services.vnj =
+    let
+      mkCfg = port: {
+        app = {
+          secret = "1337";
+          log_level = "debug";
+          journal = "/home/nero/vnj";
+        };
+
+        http.listen = "0.0.0.0:${builtins.toString port}";
+      };
+    in
+    {
+      enable = true;
+      user = "nero";
+      instances = {
+        ru = mkCfg 1337;
+      };
+    };
+
+  virtualisation.docker.enable = true;
+
+  environment.systemPackages = with pkgs; [
+    obsidian
+    git
+    # element-desktop
+    # monero-gui
+    emacs
+    fd
+    ripgrep
+    signal-desktop
+    terraform
+    pavucontrol
+    vlc
+    wine
+    winetricks
+    yandex-cloud
+    qbittorrent
+  ];
+
+  fonts.packages = with pkgs; [
+    fira-code
+    fira-code-symbols
+  ];
+}

lil-maid/modules/steam.nix

@@ -0,0 +1,15 @@
+{
+  programs = {
+    gamescope = {
+      enable = true;
+      capSysNice = true;
+    };
+
+    steam = {
+      enable = true;
+      gamescopeSession.enable = true;
+    };
+  };
+
+  hardware.xone.enable = true;
+}