Initial commit

machines/lil-maid/configuration.nix

@@ -0,0 +1,10 @@
+{ pkgs, ... }:
+{
+  time.timeZone = "Europe/Moscow";
+
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+  boot.kernelPackages = pkgs.linuxKernel.packages.linux_zen;
+
+  system.stateVersion = "24.05";
+}

machines/lil-maid/default.nix

@@ -0,0 +1,15 @@
+{ inputs
+, modules
+, ... }:
+inputs.nixpkgs.lib.nixosSystem {
+  system = "x86_64-linux";
+  modules = [
+    inputs.home-manager.nixosModules.home-manager
+    inputs.sops-nix.nixosModules.sops
+    modules
+
+    ./configuration.nix
+    ./hardware
+    ./modules
+  ];
+}

machines/lil-maid/hardware/bluetooth.nix

@@ -0,0 +1,3 @@
+{
+  # TODO
+}

machines/lil-maid/hardware/configuration.nix

@@ -0,0 +1,31 @@
+
+{ config, lib, modulesPath, ... }:
+{
+  imports =
+    [ (modulesPath + "/installer/scan/not-detected.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "thunderbolt" "usb_storage" "sd_mod" ];
+  boot.initrd.kernelModules = [ "amdgpu" ];
+  boot.kernelModules = [ "kvm-amd" ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" =
+    { device = "/dev/disk/by-label/nixos";
+      fsType = "btrfs";
+    };
+
+  fileSystems."/boot" =
+    { device = "/dev/disk/by-label/boot";
+      fsType = "vfat";
+      options = [ "fmask=0077" "dmask=0077" ];
+    };
+
+  swapDevices =
+    [ { device = "/dev/disk/by-label/swap"; }
+    ];
+  networking.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}

machines/lil-maid/hardware/default.nix

@@ -0,0 +1,6 @@
+{
+  imports = [
+    ./configuration.nix
+    ./bluetooth.nix
+  ];
+}

machines/lil-maid/modules/default.nix

@@ -0,0 +1,8 @@
+{
+  imports = [
+    ./network
+    ./graphics.nix
+    ./sops.nix
+    ./users.nix
+  ];
+}

machines/lil-maid/modules/graphics.nix

@@ -0,0 +1,19 @@
+{ pkgs, ... }:
+{
+  services.desktopManager.plasma6 = {
+    enable = true;
+  };
+  services.displayManager.sddm = {
+    enable = true;
+    wayland.enable = true;
+  };
+
+  services.xserver.xkb.layout = "us";
+
+  environment.sessionVariables.NIXOS_OZONE_WL = "1";
+  environment.plasma6.excludePackages = with pkgs.kdePackages; [
+    plasma-browser-integration
+    konsole
+    oxygen
+  ];
+}

machines/lil-maid/modules/network/default.nix

@@ -0,0 +1,16 @@
+{
+  imports = [
+    ./firewall.nix
+    ./ssh.nix
+
+    ./vpn
+  ];
+
+  networking.networkmanager.enable = true;
+
+  networking.search = [
+    "8.8.8.8"
+    "8.8.4.4"
+  ];
+  networking.hostName = "lil-maid";
+}

machines/lil-maid/modules/network/firewall.nix

@@ -0,0 +1,5 @@
+{
+  networking.firewall = {
+    enable = true;
+  };
+}

machines/lil-maid/modules/network/ssh.nix

@@ -0,0 +1,9 @@
+{
+  services.openssh = {
+    enable = true;
+    settings = {
+      PasswordAuthentication = false;
+      Compression = "yes";
+    };
+  };
+}

machines/lil-maid/modules/network/vpn/default.nix

@@ -0,0 +1,5 @@
+{
+  imports = [
+    ./hft.nix
+  ];
+}

machines/lil-maid/modules/network/vpn/hft.nix

@@ -0,0 +1,4 @@
+{ config, ... }:
+{
+  systemd.services.openvpn-hft.wants = [ "shadowsocks-hft.service" ];
+}

machines/lil-maid/modules/sops.nix

@@ -0,0 +1,8 @@
+{
+  maid.sops = {
+    enable = true;
+
+    work.enable = true;
+    viendesu.enable = true;
+  };
+}

machines/lil-maid/modules/users.nix

@@ -0,0 +1,5 @@
+{
+  maid.masters.nero = {
+    enable = true;
+  };
+}