Archived
beatzaplentyandClaude Sonnet 5
0ba837817e
Adds nested vars.nfsShares (subpath + mountpoint per dataset, previously duplicated independently across server.nix's NFS exports, mount-data.nix's client mounts, docker.nix's tmpfiles rules, traefik's log rotation path, and hosts/server/host.nix's beszel config), vars.ports (every literal port in modules/ and hosts/, kept as separate entries per service even where numbers coincide so changing one can't silently change another), plus vars.proxmoxImageSize, vars.nixCacheGcMaxAge, vars.traefikLogRotate, and raspberryPiHost/raspiNfsPath/raspiMountpoint for the Pi's own NFS export. Also fixes docker.nix/minimal.nix/gui.nix hardcoding the literal "nixos" username instead of the existing vars.primaryUser, found during the sweep. system.stateVersion is deliberately left untouched everywhere -- per NixOS's own docs that value must stay fixed from first install, not follow any shared variable. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01La55Nsss8jZ7ZuzUV9mfot
74 lines
1.6 KiB
Nix
74 lines
1.6 KiB
Nix
{ config, pkgs, lib, inputs, vars, ... }:
|
|
|
|
{
|
|
environment.systemPackages = with pkgs; [
|
|
inputs.nixos-conf-editor.packages.${pkgs.stdenv.hostPlatform.system}.nixos-conf-editor
|
|
nodejs
|
|
appimage-run
|
|
seahorse
|
|
vscode
|
|
p7zip
|
|
popsicle # balena-etcher
|
|
shotcut
|
|
gimp
|
|
pdfarranger
|
|
terminator
|
|
libreoffice-qt
|
|
transmission_4-qt
|
|
];
|
|
|
|
boot.loader.grub.useOSProber = true;
|
|
|
|
services = {
|
|
xserver = {
|
|
enable = true;
|
|
|
|
displayManager = {
|
|
lightdm.enable = true;
|
|
sessionCommands = ''
|
|
eval $(gnome-keyring-daemon --start --components=secrets,ssh)
|
|
export SSH_AUTH_SOCK
|
|
'';
|
|
};
|
|
|
|
desktopManager.cinnamon.enable = true;
|
|
|
|
xkb = {
|
|
layout = "au";
|
|
variant = "";
|
|
};
|
|
};
|
|
|
|
printing.enable = true;
|
|
|
|
pipewire = {
|
|
enable = true;
|
|
alsa.enable = true;
|
|
alsa.support32Bit = true;
|
|
pulse.enable = true;
|
|
};
|
|
|
|
xrdp = {
|
|
enable = true;
|
|
defaultWindowManager = "cinnamon-session";
|
|
openFirewall = true;
|
|
};
|
|
|
|
gnome.gnome-keyring.enable = true;
|
|
};
|
|
|
|
security = {
|
|
rtkit.enable = true;
|
|
pam.services.login.enableGnomeKeyring = true;
|
|
};
|
|
|
|
# The networkmanager group only exists when NM is actually enabled — the
|
|
# lxc platform module force-disables it, so don't add the user to a group
|
|
# that won't exist there.
|
|
users.users.${vars.primaryUser}.extraGroups = lib.mkIf config.networking.networkmanager.enable [ "networkmanager" ];
|
|
|
|
programs.firefox.enable = true;
|
|
|
|
nixpkgs.config.allowUnfree = true;
|
|
}
|