init

modules/audio/default.nix

@@ -0,0 +1,19 @@
+{ config, pkgs, ... }:
+
+{
+  sound.enable = true;
+  hardware.pulseaudio.enable = false;
+  security.rtkit.enable = true;
+  services.pipewire = {
+    enable = true;
+    alsa.enable = true;
+    alsa.support32Bit = true;
+    pulse.enable = true;
+    # If you want to use JACK applications, uncomment this
+    #jack.enable = true;
+
+    # use the example session manager (no others are packaged yet so this is enabled by default,
+    # no need to redefine it in your config for now)
+    #media-session.enable = true;
+  };
+}

modules/basic/default.nix

@@ -0,0 +1,18 @@
+{ config, pkgs, ... }:
+
+{
+  imports = [
+    ./locales.nix
+    ./nix.nix
+    ./security.nix
+  ];
+
+  services = {
+    fwupd.enable = true;
+
+    # override nixos-hardware profile
+    throttled.enable = false;
+    thermald.enable = true;
+  };
+}
+

modules/basic/locales.nix

@@ -0,0 +1,24 @@
+{ config, pkgs, ... }:
+
+{
+  console = {
+    font = "lat9w-16";
+    keyMap = "dk-latin1";
+  };
+
+  i18n.defaultLocale = "en_DK.UTF-8";
+
+  time.timeZone = "Europe/Copenhagen";
+
+  i18n.extraLocaleSettings = {
+    LC_ADDRESS = "da_DK.UTF-8";
+    LC_IDENTIFICATION = "da_DK.UTF-8";
+    LC_MEASUREMENT = "da_DK.UTF-8";
+    LC_MONETARY = "da_DK.UTF-8";
+    LC_NAME = "da_DK.UTF-8";
+    LC_NUMERIC = "da_DK.UTF-8";
+    LC_PAPER = "da_DK.UTF-8";
+    LC_TELEPHONE = "da_DK.UTF-8";
+    LC_TIME = "da_DK.UTF-8";
+  };
+}

modules/basic/network.nix

@@ -0,0 +1,5 @@
+{ config, pkgs, ... }:
+
+{
+  networking.networkmanager.enable = true;
+}

modules/basic/nix.nix

@@ -0,0 +1,16 @@
+{ config, pkgs, ... }:
+
+{
+  nixpkgs.config.allowUnfree = true;
+  nix = {
+    package = pkgs.nixUnstable;
+    settings = {
+      sandbox = true;
+      cores = 0;
+      trusted-users = [ "@wheel" ];
+      substituters = [ "https://cache.nixos.org/" ];
+      builders-use-substitutes = true;
+      experimental-features = [ "nix-command" "flakes" ];
+    };
+  };
+}

modules/basic/security.nix

@@ -0,0 +1,18 @@
+{ config, pkgs, ... }:
+
+{
+  # enable smart card reader driver
+  services.pcscd.enable = true;
+
+  # yubikey stuff
+  services.udev.packages = [ pkgs.yubikey-personalization ];
+  environment.systemPackages = [
+    pkgs.yubikey-personalization
+    pkgs.yubikey-personalization-gui
+    pkgs.yubikey-manager
+    pkgs.yubikey-manager-qt
+    pkgs.yubioath-flutter
+    pkgs.gnupg
+    pkgs.pinentry-gnome
+  ];
+}

modules/docker/default.nix

@@ -0,0 +1,10 @@
+{ config, pkgs, ... }:
+
+{
+  virtualisation.docker.enable = true;
+  users.groups.docker.members = [ "alice" ];
+
+  environment.systemPackages = with pkgs; [
+    docker-compose
+  ];
+}

modules/flatpak/default.nix

@@ -0,0 +1,5 @@
+{ config, pkgs, ... }:
+
+{
+  services.flatpak.enable = true;
+}

modules/gpu/intel/default.nix

@@ -0,0 +1,22 @@
+{ config, pkgs, ... }:
+
+{
+  nixpkgs.config.packageOverrides = pkgs: {
+    vaapiIntel = pkgs.vaapiIntel.override { enableHybridCodec = true; };
+  };
+  services.xserver.videoDrivers = [ "intel" ];  # modesetting didn't help
+  boot.blacklistedKernelModules = [ "nouveau" "nvidia" ];  # bbswitch
+  boot.kernelParams = [ "acpi_rev_override=5" "i915.enable_guc=2" ];  
+  boot.kernelModules = [ "kvm-intel" ];
+  hardware.opengl = {
+    enable = true;
+    driSupport = true;
+    extraPackages = with pkgs; [
+      intel-media-driver # LIBVA_DRIVER_NAME=iHD
+      #vaapiIntel         # LIBVA_DRIVER_NAME=i965 (older but works better for Firefox/Chromium)
+      vaapiVdpau
+      libvdpau-va-gl
+    ];
+  };
+  #hardware.opengl.extraPackages32 = with pkgs.pkgsi686Linux; [ vaapiIntel ];
+}

modules/laptop/default.nix

@@ -0,0 +1,11 @@
+{ config, pkgs, ... }:
+
+{
+  environment.systemPackages = with pkgs; [
+    pkgs.powertop
+    pkgs.acpi
+    pkgs.upower
+  ];
+
+  services.upower.enable = true;
+}

modules/samba/default.nix

@@ -0,0 +1,6 @@
+{ config, pkgs, ... }:
+
+{
+  services.gvfs.enable = true;
+  networking.firewall.extraCommands = ''iptables -t raw -A OUTPUT -p udp -m udp --dport 137 -j CT --helper netbios-ns'';
+}