modules/profiles/headful.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151

{
  config,
  inputs,
  lib,
  pkgs,
  this,
  ...
}:
with lib;
let
  cfg = config.nixfiles.modules.profiles.headful;
in
{
  options.nixfiles.modules.profiles.headful.enable = mkEnableOption "headful profile" // {
    default = this.isHeadful;
  };

  config = mkIf cfg.enable {
    nixfiles.modules = {
      profiles.dev.enable = true;

      alacritty.enable = mkDefault true;
      aria2.enable = true;
      chromium.enable = true;
      dwm.enable = mkDefault false;
      emacs.enable = true;
      firefox.enable = true;
      foot.enable = mkDefault true;
      kde.enable = mkDefault true;
      mpv.enable = true;
      nullmailer.enable = true;
      openssh.client.enable = true;
      password-store.enable = true;
      sound.enable = true;
      thunderbird.enable = true;
      vscode.enable = true;
      wayland.enable = mkDefault true;
      x11.enable = mkDefault true;
      zathura.enable = true;
    };

    hm = {
      imports = [ inputs.nix-index-database.hmModules.nix-index ];

      home = {
        file.".digrc".text = ''
          +answer
          +multiline
          +recurse
        '';

        packages = with pkgs; [
          element-desktop
          fd
          imv
          libreoffice-fresh
          mumble
          paper-plane
          ripgrep
          sd
          telegram-desktop
          tldr
          tor-browser-bundle-bin
          vesktop
        ];
      };

      programs = {
        bash.shellAliases.open = "xdg-open";

        nix-index-database.comma.enable = true;
      };
    };

    boot = {
      kernelPackages = mkDefault pkgs.linuxPackages_latest;

      kernelParams = [
        # https://wiki.archlinux.org/title/improving_performance#Watchdogs
        "nowatchdog"
        "kernel.nmi_watchdog=0"
        # A security risk I'm willing to take for a reason[1].
        #
        # [1]: https://www.phoronix.com/scan.php?page=article&item=spectre-meltdown-2&num=11
        "mitigations=off"
      ];

      loader = {
        efi.canTouchEfiVariables = true;

        systemd-boot = {
          enable = true;
          editor = false;
          configurationLimit = 10;
        };
      };
    };

    hardware.graphics.enable = true;

    nix = {
      daemonCPUSchedPolicy = "idle";
      daemonIOSchedClass = "idle";
      daemonIOSchedPriority = 7;

      gc.automatic = false;
      optimise.automatic = false;
    };

    programs = {
      dconf.enable = true;
      iftop.enable = true;
      mtr.enable = true;
    };

    services = {
      fwupd.enable = true;
      libinput.enable = true;
      psd.enable = true;
      upower.enable = true;
    };

    time.timeZone = "Europe/Moscow";

    environment.systemPackages = with pkgs; [
      arping
      dnsutils
      inetutils
      ldns
      lm_sensors
      socat
      tcpdump
      usbutils
    ];

    my.extraGroups = [
      "audio"
      "input"
      "render"
      "video"
    ];

    # https://github.com/NixOS/nix/issues/3995#issuecomment-2081164515
    system.extraDependencies =
      let
        collectFlakeInputs =
          input: [ input ] ++ concatMap collectFlakeInputs (attrValues (input.inputs or { }));
      in
      concatMap collectFlakeInputs (attrValues inputs);
  };
}