From 15d50528cf86e93bad19f65f1e4b47af49e94d71 Mon Sep 17 00:00:00 2001 From: Natasha Moongrave Date: Fri, 12 Jun 2026 13:37:13 +0200 Subject: Nuked everything --- system/audio.nix | 15 ------- system/bluetooth.nix | 15 ------- system/boot.nix | 45 -------------------- system/default.nix | 19 --------- system/desktop.nix | 16 ------- system/encryption.nix | 62 --------------------------- system/graphics.nix | 13 ------ system/ly/blackhole-smooth-240x67.dur | Bin 484298 -> 0 bytes system/networking.nix | 3 -- system/nix.nix | 43 ------------------- system/packages.nix | 76 ---------------------------------- system/programs.nix | 72 -------------------------------- system/services.nix | 36 ---------------- system/users.nix | 8 ---- system/virtualisation.nix | 12 ------ 15 files changed, 435 deletions(-) delete mode 100644 system/audio.nix delete mode 100644 system/bluetooth.nix delete mode 100644 system/boot.nix delete mode 100644 system/default.nix delete mode 100644 system/desktop.nix delete mode 100644 system/encryption.nix delete mode 100644 system/graphics.nix delete mode 100644 system/ly/blackhole-smooth-240x67.dur delete mode 100644 system/networking.nix delete mode 100644 system/nix.nix delete mode 100644 system/packages.nix delete mode 100644 system/programs.nix delete mode 100644 system/services.nix delete mode 100644 system/users.nix delete mode 100644 system/virtualisation.nix (limited to 'system') diff --git a/system/audio.nix b/system/audio.nix deleted file mode 100644 index 80dd60b..0000000 --- a/system/audio.nix +++ /dev/null @@ -1,15 +0,0 @@ -{pkgs, ...}: { - security.rtkit.enable = true; - - services.pipewire = { - enable = true; - alsa.enable = true; - alsa.support32Bit = true; - pulse.enable = true; - jack.enable = true; - }; - - environment.systemPackages = with pkgs; [ - pavucontrol - ]; -} diff --git a/system/bluetooth.nix b/system/bluetooth.nix deleted file mode 100644 index a4bc960..0000000 --- a/system/bluetooth.nix +++ /dev/null @@ -1,15 +0,0 @@ -{...}: { - hardware.bluetooth = { - enable = true; - powerOnBoot = true; - settings = { - General = { - Experimental = true; - FastConnectable = true; - }; - Policy = { - AutoEnable = true; - }; - }; - }; -} diff --git a/system/boot.nix b/system/boot.nix deleted file mode 100644 index af96d4e..0000000 --- a/system/boot.nix +++ /dev/null @@ -1,45 +0,0 @@ -{ - pkgs, - lib, - ... -}: { - boot = { - kernelPackages = lib.mkDefault pkgs.linuxPackages_latest; - - kernelModules = ["ntsync"]; - initrd = { - kernelModules = ["i915"]; - systemd.enable = true; - }; - - loader = { - efi = { - canTouchEfiVariables = true; - efiSysMountPoint = "/boot"; - }; - grub = { - enable = lib.mkDefault true; - device = "nodev"; - useOSProber = lib.mkDefault false; - efiSupport = true; - }; - systemd-boot = { - enable = false; - consoleMode = "keep"; - configurationLimit = 5; - }; - }; - - plymouth = { - enable = false; - theme = "deus_ex"; - themePackages = [ - (pkgs.adi1090x-plymouth-themes.override { - selected_themes = ["deus_ex"]; - }) - ]; - }; - }; - - fileSystems."/boot".options = ["fmask=0077" "dmask=0077"]; -} diff --git a/system/default.nix b/system/default.nix deleted file mode 100644 index bbeb009..0000000 --- a/system/default.nix +++ /dev/null @@ -1,19 +0,0 @@ -{...}: { - imports = [ - ./nix.nix - ./boot.nix - ./audio.nix - ./bluetooth.nix - ./graphics.nix - ./networking.nix - ./packages.nix - ./programs.nix - ./services.nix - ./users.nix - ./encryption.nix - ./virtualisation.nix - # Desktop and stylix are now configured per-rice in home/rices/*/system.nix - ]; - - system.stateVersion = "25.11"; -} diff --git a/system/desktop.nix b/system/desktop.nix deleted file mode 100644 index 0337478..0000000 --- a/system/desktop.nix +++ /dev/null @@ -1,16 +0,0 @@ -{...}: { - # X server and window manager - services.xserver = { - enable = true; - windowManager.i3.enable = true; - - # Czech QWERTZ layout - xkb = { - layout = "cz"; - options = "eurosign:e,caps:escape"; - }; - }; - - # Compositor (system-level service) - services.picom.enable = true; -} diff --git a/system/encryption.nix b/system/encryption.nix deleted file mode 100644 index d5555a2..0000000 --- a/system/encryption.nix +++ /dev/null @@ -1,62 +0,0 @@ -{pkgs, ...}: { - # The encrypted USB is NOT part of boot anymore - # We do NOT use crypttab or systemd-cryptsetup units at all - - systemd.tmpfiles.rules = [ - "d /mnt/ssh-keys 0755 root root -" - "d /mnt/nixos-config 0755 root root -" - "d /mnt/storage 0755 root root -" - "d /mnt/tools 0755 root root -" - "d /mnt/isos 0755 root root -" - ]; - - environment.systemPackages = with pkgs; [ - cryptsetup - # 🔓 Mount + unlock + load SSH key - (writeShellScriptBin "keys-mount" '' - set -e - DEVICE="/dev/disk/by-uuid/d5aa2823-2023-410b-a83e-a4f707db5f7c" - NAME="ssh-keys" - MNT="/mnt/ssh-keys" - MNT_CONFIG="/mnt/nixos-config" - MNT_STORAGE="/mnt/storage" - MNT_TOOLS="/mnt/tools" - echo "🔐 Unlocking encrypted USB..." - sudo cryptsetup open "$DEVICE" "$NAME" - echo "📂 Mounting partitions..." - sudo mount "/dev/mapper/$NAME" "$MNT" - sudo mount -L nixos-config "$MNT_CONFIG" - sudo mount -L storage "$MNT_STORAGE" - sudo mount -L tools "$MNT_TOOLS" - echo "🔑 Adding SSH keys..." - ssh-add "$MNT/poseidon" - ssh-add "$MNT/apollo" - ssh-add "$MNT/codeberg" - ssh-add "$MNT/gitlab-keys" - echo "🔑 Importing GPG key..." - gpg --import "$MNT/gpg-privkey.asc" - echo "✅ Done" - '') - # 🔒 Clean unmount + lock - (writeShellScriptBin "keys-umount" '' - set -e - MNT="/mnt/ssh-keys" - NAME="ssh-keys" - echo "🔑 Removing SSH keys..." - ssh-add -d "$MNT/poseidon" 2>/dev/null || true - ssh-add -d "$MNT/apollo" 2>/dev/null || true - ssh-add -d "$MNT/codeberg" 2>/dev/null || true - ssh-add -d "$MNT/gitlab-keys" 2>/dev/null || true - echo "🔑 Clearing GPG key..." - gpgconf --kill gpg-agent - echo "📤 Unmounting..." - sudo umount /mnt/nixos-config || true - sudo umount /mnt/storage || true - sudo umount /mnt/tools || true - sudo umount "$MNT" || true - echo "🔒 Closing encrypted device..." - sudo cryptsetup close "$NAME" || true - echo "✅ Done" - '') - ]; -} diff --git a/system/graphics.nix b/system/graphics.nix deleted file mode 100644 index e2d9629..0000000 --- a/system/graphics.nix +++ /dev/null @@ -1,13 +0,0 @@ -{pkgs, ...}: { - services.xserver.videoDrivers = ["intel"]; - - hardware.graphics = { - enable = true; - extraPackages = with pkgs; [ - intel-vaapi-driver - intel-media-driver - intel-compute-runtime - mesa - ]; - }; -} diff --git a/system/ly/blackhole-smooth-240x67.dur b/system/ly/blackhole-smooth-240x67.dur deleted file mode 100644 index d65c878..0000000 Binary files a/system/ly/blackhole-smooth-240x67.dur and /dev/null differ diff --git a/system/networking.nix b/system/networking.nix deleted file mode 100644 index e1e9450..0000000 --- a/system/networking.nix +++ /dev/null @@ -1,3 +0,0 @@ -{...}: { - networking.networkmanager.enable = true; -} diff --git a/system/nix.nix b/system/nix.nix deleted file mode 100644 index ff0512a..0000000 --- a/system/nix.nix +++ /dev/null @@ -1,43 +0,0 @@ -{pkgs, ...}: { - nix = { - package = pkgs.lixPackageSets.stable.lix; - - settings = { - trusted-users = ["root" "mun"]; - - substituters = [ - "https://cache.lix.systems" - "https://cache.nixos.org/" - ]; - - trusted-public-keys = [ - "cache.lix.systems-1:32QFpmvZsbQ8HhH3dBHDx1E8zFGbxqMNxjE2Rk5OGcQ=" - "cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=" - ]; - - experimental-features = ["nix-command" "flakes"]; - }; - gc = { - automatic = true; - dates = "weekly"; - options = "--delete-older-than 7d"; - }; - optimise = { - automatic = true; - dates = ["weekly"]; - }; - }; - - # Fix nixpkgs.overlays for Lix compatibility - nixpkgs.overlays = [ - (final: prev: { - inherit - (prev.lixPackageSets.stable) - nixpkgs-review - nix-eval-jobs - nix-fast-build - colmena - ; - }) - ]; -} diff --git a/system/packages.nix b/system/packages.nix deleted file mode 100644 index fcc194d..0000000 --- a/system/packages.nix +++ /dev/null @@ -1,76 +0,0 @@ -{pkgs, ...}: { - nixpkgs.config.allowUnfree = true; - - environment.systemPackages = with pkgs; [ - # Core - neovim - wget - git - lazygit - gnupg - pinentry-curses - - # CLI utilities - tree - ripgrep - fd - unzip - bzip2 - killall - acpi - - # System monitoring - btop - auto-cpufreq - - # Nix helpers - nh - nix-output-monitor - nvd - - # Audio/Media - alsa-utils - helvum - playerctl - pipewire - - # Bluetooth & Wireless - blueman - bluez - wirelesstools - - # Display & Graphics - feh - flameshot - xss-lock - brightnessctl - imagemagick - ghostscript - - # Development - stdenv - tree-sitter - clang - libgcc - lua - lua53Packages.luarocks - lua-language-server - stylua - nil - python314 - pyright - ruff - vtsls - ]; - - fonts = { - enableDefaultPackages = true; - packages = with pkgs; [ - fira-code - noto-fonts - noto-fonts-color-emoji - blackout - beon - ]; - }; -} diff --git a/system/programs.nix b/system/programs.nix deleted file mode 100644 index 9db68d9..0000000 --- a/system/programs.nix +++ /dev/null @@ -1,72 +0,0 @@ -{...}: { - # Fix firefox not being properly sandboxed and security - environment.etc."apparmor.d/firefox-local".text = '' - # This profile allows everything and only exists to give the - # application a name instead of having the label "unconfined" - abi , - include - profile firefox-local - /home/mun/bin/firefox/{firefox,firefox-bin,updater} - flags=(unconfined) { - userns, - # Site-specific additions and overrides. See local/README for details. - include if exists - } - ''; - - programs.firefox = { - enable = true; - languagePacks = ["en-GB" "cs" "sk" "de"]; - policies = { - DefaultDownloadDirectory = "\${home}/Downloads"; - Extensions.Install = map (name: "https://addons.mozilla.org/firefox/downloads/latest/${name}") [ - # Privacy - "ublock-origin" - "privacy-badger17" - "torproject-snowflake" - "clearurls" - "flagfox" - "user-agent-string-switcher" - "facebook-container" - - # QoL - "sidebery" - "onetab" - "bitwarden-password-manager" - - # YouTube - "return-youtube-dislikes" - "sponsorblock" - "youtube-recommended-videos" - "hide-members-only-videos" - - # Theming - "styl-us" - "firefox-color" - "darkreader" - ]; - Extensions.Uninstall = [ - "ddg@search.mozilla.org" - "google@search.mozilla.org" - "bing@search.mozilla.org" - "amazondotcom@search.mozilla.org" - "ebay@search.mozilla.org" - "twitter@search.mozilla.org" - ]; - DisableFirefoxStudies = true; - DisableTelemetry = true; - DisableFeedbackCommands = true; - DisablePocket = true; - }; - }; - programs.zsh.enable = true; - - programs.steam = { - enable = true; - remotePlay.openFirewall = true; - dedicatedServer.openFirewall = true; - localNetworkGameTransfers.openFirewall = true; - }; - - programs.ssh.startAgent = true; -} diff --git a/system/services.nix b/system/services.nix deleted file mode 100644 index c05e3b1..0000000 --- a/system/services.nix +++ /dev/null @@ -1,36 +0,0 @@ -{pkgs, ...}: { - security.pam.sshAgentAuth.enable = true; - - time.timeZone = "Europe/Prague"; - - services = { - displayManager.ly.enable = true; - printing.enable = true; - libinput.enable = true; - openssh.enable = true; - tailscale.enable = true; - gnome = { - gnome-keyring.enable = true; - gcr-ssh-agent.enable = false; - }; - # Setup MPD as the backend of RMPC - mpd = { - enable = true; - user = "mun"; - musicDirectory = "/home/mun/Music"; - extraConfig = '' - audio_output { - type "pipewire" - name "PipeWire" - } - audio_output { - type "fifo" - name "my_fifo" - path "/tmp/mpd.fifo" - format "44100:16:2" - } - ''; - }; - }; - systemd.services.mpd.environment.XDG_RUNTIME_DIR = "/run/user/1000"; -} diff --git a/system/users.nix b/system/users.nix deleted file mode 100644 index 5b84f9a..0000000 --- a/system/users.nix +++ /dev/null @@ -1,8 +0,0 @@ -{pkgs, ...}: { - users.groups.ssh-keys = {}; - users.users.mun = { - isNormalUser = true; - extraGroups = ["wheel" "bluetooth" "networkmanager" "kvm" "nixos" "ssh-keys"]; - shell = pkgs.zsh; - }; -} diff --git a/system/virtualisation.nix b/system/virtualisation.nix deleted file mode 100644 index eae69f7..0000000 --- a/system/virtualisation.nix +++ /dev/null @@ -1,12 +0,0 @@ -{pkgs, ...}: { - virtualisation.docker = { - enable = true; - autoPrune.enable = true; - package = pkgs.docker_29; - }; - virtualisation.oci-containers = { - backend = "docker"; - }; - - users.extraGroups.docker.members = ["mun"]; -} -- cgit v1.2.3