# Edit this configuration file to define what should be installed on

# your system. Help is available in the configuration.nix(5) man page

# and in the NixOS manual (accessible by running ‘nixos-help’).

{ pkgs, inputs, ... }:

{

imports = [

./modules/firefox.nix

./modules/quietboot.nix

./modules/printing.nix

./modules/gnome.nix

./modules/cosmic.nix

./modules/ptyxis-generic-icon.nix

./modules/virt.nix

./modules/jdk-fx.nix

./modules/celeste.nix

./modules/vault.nix

./modules/android-studio.nix

./modules/unfree.nix

];

printing-module.enable = true;

gnome-module.enable = true;

cosmic-module.enable = false;

ptyxis-generic-icon-module.enable = false;

virt-module.enable = true;

jdk-fx-module.enable = false;

celeste-game.enable = true;

vault.enable = true;

android-studio-module.enable = false;

nix = {

settings = {

auto-optimise-store = true;

warn-dirty = false;

# download-buffer-size = 1073741824; # 1 GiB in bytes

experimental-features = [

"flakes"

"nix-command"

];

};

gc = {

automatic = true;

# options = "--delete-older-than-5d";

};

optimise.automatic = true;

};

system.autoUpgrade = {

enable = true;

flake = inputs.self.outPath;

dates = "12:30";

};

# Bootloader.

boot = {

loader.systemd-boot.enable = true;

loader.efi.canTouchEfiVariables = true;

kernelPackages = pkgs.linuxPackages_latest;

};

networking.hostName = "lonepine";

# Enable networking

networking.networkmanager.enable = true;

networking.networkmanager.plugins = with pkgs; [

networkmanager-openvpn

];

# Set your time zone.

time.timeZone = "Europe/Amsterdam";

# Select internationalisation properties.

i18n.defaultLocale = "nl_NL.UTF-8";

i18n.extraLocaleSettings = {

LC_ADDRESS = "nl_NL.UTF-8";

LC_IDENTIFICATION = "nl_NL.UTF-8";

LC_MEASUREMENT = "nl_NL.UTF-8";

LC_MONETARY = "nl_NL.UTF-8";

LC_NAME = "nl_NL.UTF-8";

LC_NUMERIC = "nl_NL.UTF-8";

LC_PAPER = "nl_NL.UTF-8";

LC_TELEPHONE = "nl_NL.UTF-8";

LC_TIME = "nl_NL.UTF-8";

};

# Enable the X11 windowing system.

services.xserver.enable = true;

# Enable Ozone Wayland support in Chromium and Electron based applications.

environment.sessionVariables.NIXOS_OZONE_WL = "1";

# Configure keymap in X11

services.xserver.xkb = {

layout = "us";

variant = "altgr-intl";

};

# Configure console keymap

console.keyMap = "us-acentos";

# Enable sound with pipewire.

services.pulseaudio.enable = false;

security.rtkit.enable = true;

services.pipewire = {

enable = true;

alsa.enable = true;

alsa.support32Bit = true;

pulse.enable = true;

};

security.sudo-rs.enable = true;

# Define a user account. Don't forget to set a password with ‘passwd’.

users.users.marijnk = {

isNormalUser = true;

description = "Marijn Kok";

extraGroups = [

"networkmanager"

"wheel"

"docker"

"i2c"

];

};

programs.bash = {

shellAliases = {

ls = "ls --color --group-directories-first";

c = "wl-copy --trim-newline";

o = "xdg-open .";

e = "zeditor $HOME/nix";

emake = "(cd $HOME/nix; make update)";

vl = "vault-login";

};

promptInit = ''

# Provide a nice prompt if the terminal supports it.

if [ "$TERM" != "dumb" ] || [ -n "$INSIDE_EMACS" ]; then

PROMPT_COLOR="1;31m"

((UID)) && PROMPT_COLOR="1;32m"

if [ -n "$INSIDE_EMACS" ]; then

# Emacs term mode doesn't support xterm title escape sequence (\e]0;)

PS1="\[\033[$PROMPT_COLOR\][\u@\h:\w]\\$\[\033[0m\] "

else

PS1="\[\033[$PROMPT_COLOR\][\[\e]0;\u@\h: \w\a\]\u@\h:\w]\\$\[\033[0m\] "

fi

if test "$TERM" = "xterm"; then

PS1="\[\033]2;\h:\u:\w\007\]$PS1"

fi

fi

'';

};

programs.neovim = {

enable = true;

defaultEditor = true;

vimAlias = true;

};

# Enable fingerprint.

services.fprintd.enable = true;

systemd.services.fprintd = {

wantedBy = [ "multi-user.target" ];

serviceConfig.Type = "simple";

};

# Hardware acceleration

hardware.graphics = {

enable = true;

extraPackages = with pkgs; [

#vpl-gpu-rt

intel-media-driver

];

};

environment.sessionVariables.LIBVA_DRIVER_NAME = "iHD";

environment.sessionVariables.GST_PLUGIN_SYSTEM_PATH_1_0 =

pkgs.lib.makeSearchPathOutput "lib" "lib/gstreamer-1.0"

(

with pkgs.gst_all_1;

[

gst-plugins-good

gst-libav

]

);

# Enable dynamic linker to execute dynamic binaries.

# Needed for Zed to download and execute language servers.

# Needed for pre-commit to execute downloaded git hooks.

programs.nix-ld.enable = true;

programs.git.config.init.defaultBranch = "main";

virtualisation.docker.enable = true;

services.flatpak.enable = true;

# Allow Docker containers to reach host services

# https://github.com/NixOS/nixpkgs/issues/417641#issuecomment-3403484920

networking.firewall = {

enable = true;

allowedTCPPorts = [

53317 # localsend

];

allowedUDPPorts = [

53317

];

trustedInterfaces = [ "br+" ];

};

# Fix for certificates not being loaded when using uv

# https://discourse.nixos.org/t/fix-ssl-sslcertverificationerror-with-uvs-standalone-python/71138

environment.etc.certfile = {

source = "/etc/ssl/certs/ca-bundle.crt";

target = "ssl/cert.pem";

};

services.xserver.excludePackages = [ pkgs.xterm ];

hardware.i2c.enable = true;

nixpkgs.overlays = [

(final: prev: {

gradia = prev.gradia.overrideAttrs (old: {

patches = (old.patches or [ ]) ++ [

(prev.fetchpatch {

url = "https://github.com/sonicnkt/Gradia/commit/f51f0fdeff9272fef77936dbe3c769bb4667d365.patch";

hash = "sha256-06FGFGpdPtlxEgK457pIrG6+ziNe7KJtPBEnCmJD2TU=";

})

];

});

})

];

environment.systemPackages = with pkgs; [

tree

android-tools

wl-clipboard

neovim

chezmoi

ddcutil

ffmpeg

yt-dlp

adw-gtk3

rclone

filen-cli

fuse3

killall

zip

unzip

jq

scrcpy

# fonts

lora

# apps

localsend

vlc

mitmproxy

p11-kit # For certificates

rustdesk-flutter

gradia

pixelorama

inkscape

popsicle

libreoffice

eyedropper

upscayl

showtime

gnome-obfuscate

gnome-sound-recorder

clapgrep

thunderbird

brave

pinta

papers

buffer

shortwave

identity

prismlauncher

signal-desktop

picard

jmc2obj

unstable.simplenote

# (callPackage ./derivations/avvie.nix { })

# (callPackage ./derivations/codd.nix {

# rustc = unstable.rustc;

# cargo = unstable.cargo;

# })

# (callPackage ./derivations/dynamic-wallpaper.nix { })

(callPackage ./derivations/touchhle.nix { })

# (callPackage ./derivations/swagger-preview.nix { })

# (callPackage ./derivations/apk-mitm.nix { })

(callPackage ./derivations/voipgrid-install-deps.nix { uv = unstable.uv; })

(callPackage ./derivations/vault-login.nix { })

(callPackage ./derivations/madbfs.nix { })

# development

glab

open-policy-agent

javaPackages.compiler.temurin-bin.jdk-25

# unstable.rustc

# unstable.cargo

git

delta # beautiful git diffs

gcc

kubectl

kubelogin-oidc

gnupg

gnumake

just

just-lsp

natscli

unstable.uv

postgresql

go

nodejs_26

unstable.python314

unstable.zed-editor

bubblewrap # For Zed agent sandboxing

nixd # nix LSP

nixfmt

basedpyright

# unstable.vscodium

];

# This value determines the NixOS release from which the default

# settings for stateful data, like file locations and database versions

# on your system were taken. It‘s perfectly fine and recommended to leave

# this value at the release version of the first install of this system.

# Before changing this value read the documentation for this option

# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).

system.stateVersion = "25.05"; # Did you read the comment?

}