Initial release of my NixOS configuration
This commit is contained in:
commit
5f271a7194
GPG key ID:
4CFE0A42FA409C22
20 changed files with 2341 additions and 0 deletions
20
.sops.yaml
Normal file
20
.sops.yaml
Normal file
|
|
@ -0,0 +1,20 @@
|
|||
keys:
|
||||
- &admin_knazarov DDB4423999505236CF585F9B0560020C9C577C1B
|
||||
- &server_mira age1le98v5v0xnlnc4y0ydgj9kwfftt8g5wduws8zsadgc97pj0fzecs55tjvz
|
||||
- &server_framework age1rkmhgep2jhdnma24x7ufzr686cwq6p3nk7mmedykan0d7c36xaus2y58sw
|
||||
- &server_knazarovcom age1esdg28lplhhvrj6vmqu9x0adyxj5trp2dp7my3k57kjhkstkk9cqkg5qkj
|
||||
creation_rules:
|
||||
- path_regex: secrets\.yaml$
|
||||
key_groups:
|
||||
- pgp:
|
||||
- *admin_knazarov
|
||||
age:
|
||||
- *server_mira
|
||||
- *server_framework
|
||||
|
||||
- path_regex: secrets-knazarovcom\.yaml$
|
||||
key_groups:
|
||||
- pgp:
|
||||
- *admin_knazarov
|
||||
age:
|
||||
- *server_knazarovcom
|
||||
19
README.md
Normal file
19
README.md
Normal file
|
|
@ -0,0 +1,19 @@
|
|||
# My NixOS configuration
|
||||
|
||||
This configuration is used to provision both of my "desktop" machines, and a personal website.
|
||||
|
||||
Most important features this configuration provides:
|
||||
|
||||
- PGP, commit signing, U2F
|
||||
- Secret management with [SOPS](https://github.com/getsops/sops)
|
||||
- Email / mbsync configuration
|
||||
- VPN with [Mullvad](https://mullvad.net)
|
||||
|
||||
# Updating machine configuration
|
||||
|
||||
There are solutions that allow to push configuration to remote hosts, but I find them a bit heavy,
|
||||
so a simple shell script does the trick for me:
|
||||
|
||||
```
|
||||
./switch.sh <machine name>
|
||||
```
|
||||
572
configuration.nix
Normal file
572
configuration.nix
Normal file
|
|
@ -0,0 +1,572 @@
|
|||
# Edit this configuration file to define what should be installed on
|
||||
# your system. Help is available in the configuration.nix(5) man page
|
||||
# and in the NixOS manual (accessible by running ‘nixos-help’).
|
||||
|
||||
{ config, lib, nixpkgs, pkgs, home-manager, ... }:
|
||||
|
||||
let
|
||||
|
||||
in
|
||||
{
|
||||
imports =
|
||||
[
|
||||
#./gnupg.nix
|
||||
];
|
||||
nix.settings.experimental-features = [ "nix-command" "flakes" ];
|
||||
nix.extraOptions = ''
|
||||
!include ${config.sops.secrets.github_token.path}
|
||||
bash-prompt = (nix:$name)\040\[\033[1;32m\][\u@\h:\w]\$\[\033[0m\]\040
|
||||
'';
|
||||
|
||||
sops = {
|
||||
environment.SOPS_GPG_EXEC = "${pkgs.gnupg}/bin/gpg";
|
||||
defaultSopsFile = ./secrets.yaml;
|
||||
secrets = {
|
||||
fastmail_password = {
|
||||
owner = config.users.users.knazarov.name;
|
||||
group = config.users.users.knazarov.group;
|
||||
};
|
||||
github_token = {
|
||||
owner = config.users.users.knazarov.name;
|
||||
group = config.users.users.knazarov.group;
|
||||
};
|
||||
mullvad_account = {};
|
||||
};
|
||||
};
|
||||
|
||||
# networking.wireless.enable = true; # Enables wireless support via wpa_supplicant.
|
||||
|
||||
# Configure network proxy if necessary
|
||||
# networking.proxy.default = "http://user:password@proxy:port/";
|
||||
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
|
||||
|
||||
# Enable networking
|
||||
networking.networkmanager.enable = true;
|
||||
|
||||
# Set your time zone.
|
||||
time.timeZone = "Europe/London";
|
||||
|
||||
# Select internationalisation properties.
|
||||
i18n.defaultLocale = "en_US.UTF-8";
|
||||
|
||||
i18n.extraLocaleSettings = {
|
||||
LC_ADDRESS = "en_US.UTF-8";
|
||||
LC_IDENTIFICATION = "en_US.UTF-8";
|
||||
LC_MEASUREMENT = "en_US.UTF-8";
|
||||
LC_MONETARY = "en_US.UTF-8";
|
||||
LC_NAME = "en_US.UTF-8";
|
||||
LC_NUMERIC = "en_US.UTF-8";
|
||||
LC_PAPER = "en_US.UTF-8";
|
||||
LC_TELEPHONE = "en_US.UTF-8";
|
||||
LC_TIME = "en_US.UTF-8";
|
||||
};
|
||||
|
||||
# Mainly to access SMB shares on local network
|
||||
services.gvfs = {
|
||||
enable = true;
|
||||
package = lib.mkForce pkgs.gnome3.gvfs;
|
||||
};
|
||||
|
||||
|
||||
# Configure keymap in X11
|
||||
services.xserver = {
|
||||
layout = "us";
|
||||
xkbVariant = "";
|
||||
};
|
||||
|
||||
# Define a user account. Don't forget to set a password with ‘passwd’.
|
||||
users.users.knazarov = {
|
||||
isNormalUser = true;
|
||||
description = "Konstantin Nazarov";
|
||||
extraGroups = [
|
||||
"networkmanager"
|
||||
"wheel"
|
||||
config.users.groups.keys.name
|
||||
];
|
||||
packages = with pkgs; [];
|
||||
openssh.authorizedKeys.keys = [
|
||||
"ssh-rsa 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 knazarov"
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHkDvP2BO1uV0AwEjABYFEiA2BbGo1IsSht4emYMRLgi root@mira"
|
||||
];
|
||||
};
|
||||
|
||||
nixpkgs.config.allowUnfree = true;
|
||||
|
||||
environment.systemPackages = with pkgs; [
|
||||
# needed to request polkit access (for instance, for SMB shares)
|
||||
lxqt.lxqt-policykit
|
||||
vim
|
||||
waybar
|
||||
foot
|
||||
wayland
|
||||
xdg-utils
|
||||
glib
|
||||
dracula-theme
|
||||
gnome3.adwaita-icon-theme
|
||||
swaylock
|
||||
swayidle
|
||||
wl-clipboard
|
||||
qutebrowser
|
||||
keyd
|
||||
tdesktop
|
||||
git
|
||||
source-code-pro
|
||||
pavucontrol
|
||||
brightnessctl
|
||||
sops
|
||||
age
|
||||
ssh-to-age
|
||||
syncthing
|
||||
pass
|
||||
pkgs.gnupg
|
||||
pciutils
|
||||
slack
|
||||
q-sh
|
||||
transmission-gtk
|
||||
mpv
|
||||
imv
|
||||
okular
|
||||
yt-dlp
|
||||
evince # document viewer
|
||||
firefox
|
||||
gthumb
|
||||
unzip
|
||||
somafm-cli
|
||||
yubikey-manager
|
||||
yubikey-manager-qt
|
||||
gnome.gedit # temporary
|
||||
ripgrep
|
||||
file
|
||||
zoom-us
|
||||
obs-studio
|
||||
gnome.nautilus
|
||||
xfce.thunar
|
||||
zig
|
||||
morph
|
||||
gomuks
|
||||
nheko
|
||||
mullvad-vpn
|
||||
mullvad
|
||||
clang-tools # mainly for clang-format
|
||||
(emacsWithPackagesFromUsePackage {
|
||||
config = ./emacs.el;
|
||||
defaultInitFile = true;
|
||||
package = emacs-unstable-pgtk.overrideAttrs (old: {
|
||||
withTreeSitter = true;
|
||||
});
|
||||
alwaysEnsure = true;
|
||||
extraEmacsPackages = epkgs: [
|
||||
pkgs.mu
|
||||
epkgs.treesit-grammars.with-all-grammars
|
||||
];
|
||||
})
|
||||
# wget
|
||||
];
|
||||
|
||||
services.mullvad-vpn = {
|
||||
enable = true;
|
||||
};
|
||||
systemd.services."mullvad-daemon".postStart = let
|
||||
mullvad = config.services.mullvad-vpn.package;
|
||||
in ''
|
||||
while ! ${mullvad}/bin/mullvad status >/dev/null; do sleep 1; done
|
||||
${mullvad}/bin/mullvad account login `cat /var/run/secrets/mullvad_account`
|
||||
${mullvad}/bin/mullvad auto-connect set on
|
||||
${mullvad}/bin/mullvad tunnel ipv6 set on
|
||||
'';
|
||||
|
||||
services.gnome.gnome-keyring.enable = true;
|
||||
services.emacs.package = nixpkgs.emacsUnstablePgtk;
|
||||
|
||||
# Enables wayland support in electron apps (e.g. slack)
|
||||
environment.sessionVariables.NIXOS_OZONE_WL = "1";
|
||||
|
||||
# Set default browser to qutebrowser in electron apps
|
||||
environment.sessionVariables.DEFAULT_BROWSER = "${pkgs.qutebrowser}/bin/qutebrowser";
|
||||
|
||||
# Set default browser to qutebrowser everywhere else
|
||||
xdg.mime.defaultApplications = {
|
||||
"text/html" = "org.qutebrowser.qutebrowser.desktop";
|
||||
"x-scheme-handler/http" = "org.qutebrowser.qutebrowser.desktop";
|
||||
"x-scheme-handler/https" = "org.qutebrowser.qutebrowser.desktop";
|
||||
"x-scheme-handler/about" = "org.qutebrowser.qutebrowser.desktop";
|
||||
"x-scheme-handler/unknown" = "org.qutebrowser.qutebrowser.desktop";
|
||||
};
|
||||
|
||||
# Enable screen sharing on Wayland
|
||||
xdg = {
|
||||
portal = {
|
||||
enable = true;
|
||||
extraPortals = with pkgs; [
|
||||
xdg-desktop-portal-wlr
|
||||
xdg-desktop-portal-gtk
|
||||
];
|
||||
};
|
||||
};
|
||||
|
||||
|
||||
|
||||
|
||||
# Some programs need SUID wrappers, can be configured further or are
|
||||
# started in user sessions.
|
||||
# programs.mtr.enable = true;
|
||||
programs.gnupg.package = pkgs.gnupg;
|
||||
programs.gnupg.agent = {
|
||||
enable = true;
|
||||
enableSSHSupport = true;
|
||||
};
|
||||
|
||||
programs.sway = {
|
||||
enable = true;
|
||||
wrapperFeatures.gtk = true;
|
||||
};
|
||||
|
||||
# List services that you want to enable:
|
||||
|
||||
services.pipewire = {
|
||||
enable = true;
|
||||
alsa.enable = true;
|
||||
alsa.support32Bit = true;
|
||||
pulse.enable = true;
|
||||
};
|
||||
services.dbus.enable = true;
|
||||
|
||||
services.greetd = {
|
||||
enable = true;
|
||||
settings = rec {
|
||||
initial_session = {
|
||||
command = "${pkgs.sway}/bin/sway";
|
||||
user = "knazarov";
|
||||
};
|
||||
default_session = initial_session;
|
||||
};
|
||||
};
|
||||
|
||||
services.keyd = {
|
||||
enable = true;
|
||||
keyboards = {
|
||||
default = {
|
||||
ids = [ "*" ];
|
||||
settings = {
|
||||
main = {
|
||||
capslock = "overload(control, esc)";
|
||||
leftalt = "layer(meta_mac)";
|
||||
leftmeta = "layer(alt)";
|
||||
};
|
||||
"meta_mac:M" = {
|
||||
c = "C-insert";
|
||||
v = "S-insert";
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
# Enable the OpenSSH daemon.
|
||||
services.openssh = {
|
||||
enable = true;
|
||||
# settings = {
|
||||
# passwordAuthentication = false;
|
||||
# kbdInteractiveAuthentication = false;
|
||||
# };
|
||||
};
|
||||
|
||||
networking.firewall.allowedTCPPorts = [
|
||||
# Syncthing
|
||||
8384 22000
|
||||
];
|
||||
|
||||
networking.firewall.allowedUDPPorts = [
|
||||
# Syncthing
|
||||
22000 21027
|
||||
];
|
||||
|
||||
# This value determines the NixOS release from which the default
|
||||
# settings for stateful data, like file locations and database versions
|
||||
# on your system were taken. It‘s perfectly fine and recommended to leave
|
||||
# this value at the release version of the first install of this system.
|
||||
# Before changing this value read the documentation for this option
|
||||
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
|
||||
system.stateVersion = "23.05"; # Did you read the comment?
|
||||
|
||||
# needed for sway
|
||||
security.polkit.enable = true;
|
||||
# needed for pipewire
|
||||
security.rtkit.enable = true;
|
||||
|
||||
# allow remote rebuilds
|
||||
nix.settings.trusted-users = [ "@wheel" ];
|
||||
|
||||
# needed for YubiKey smartcard support
|
||||
services.pcscd.enable = true;
|
||||
|
||||
fonts.fontDir.enable = true;
|
||||
fonts.packages = with pkgs; [
|
||||
dejavu_fonts
|
||||
source-code-pro
|
||||
font-awesome # for waybar indicators
|
||||
];
|
||||
|
||||
|
||||
home-manager.users.knazarov = {
|
||||
/* The home.stateVersion option does not have a default and must be set */
|
||||
home.stateVersion = "23.05";
|
||||
|
||||
programs.bash = {
|
||||
enable = true;
|
||||
bashrcExtra = ''
|
||||
if [[ "$INSIDE_EMACS" = 'vterm' ]] \
|
||||
&& [[ -n ''${EMACS_VTERM_PATH} ]] \
|
||||
&& [[ -f ''${EMACS_VTERM_PATH}/etc/emacs-vterm-bash.sh ]]; then
|
||||
source ''${EMACS_VTERM_PATH}/etc/emacs-vterm-bash.sh
|
||||
fi
|
||||
'';
|
||||
};
|
||||
|
||||
programs.direnv = {
|
||||
enable = true;
|
||||
nix-direnv = {
|
||||
enable = true;
|
||||
};
|
||||
};
|
||||
|
||||
programs.gpg = {
|
||||
enable = true;
|
||||
package = pkgs.gnupg;
|
||||
publicKeys = [{source = ./gpg_public_key.asc; trust="ultimate"; }];
|
||||
settings = {
|
||||
default-key = "0x0560020C9C577C1B";
|
||||
};
|
||||
mutableKeys = false;
|
||||
mutableTrust = false;
|
||||
};
|
||||
|
||||
programs.git = {
|
||||
enable = true;
|
||||
userName = "Konstantin Nazarov";
|
||||
userEmail = "mail@knazarov.com";
|
||||
signing = {
|
||||
gpgPath = "${pkgs.gnupg}/bin/gpg2";
|
||||
key = "0x0560020C9C577C1B";
|
||||
signByDefault = true;
|
||||
};
|
||||
};
|
||||
|
||||
accounts.email = {
|
||||
maildirBasePath = "${config.users.users.knazarov.home}/Maildir";
|
||||
accounts = {
|
||||
personal = let account = "mail@knazarov.com"; in {
|
||||
primary = true;
|
||||
flavor = "fastmail.com";
|
||||
address = account;
|
||||
userName = account;
|
||||
realName = "Konstantin Nazarov";
|
||||
passwordCommand = "cat /run/secrets/fastmail_password";
|
||||
gpg = {
|
||||
key = "0x0560020C9C577C1B";
|
||||
signByDefault = true;
|
||||
};
|
||||
mu.enable = true;
|
||||
msmtp.enable = true;
|
||||
mbsync = {
|
||||
enable = true;
|
||||
# Folders existing on the server, but not locally, will be created.
|
||||
create = "maildir";
|
||||
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
programs.mu = {
|
||||
enable = true;
|
||||
};
|
||||
programs.msmtp.enable = true;
|
||||
|
||||
programs.mbsync = {
|
||||
enable = true;
|
||||
};
|
||||
|
||||
#services.easyeffects = {
|
||||
# enable = true;
|
||||
#};
|
||||
|
||||
services.swayidle = {
|
||||
enable = true;
|
||||
timeouts = [
|
||||
{ timeout = 300; command = "${pkgs.swaylock}/bin/swaylock -f -c 000000";}
|
||||
{ timeout = 600;
|
||||
command = "${pkgs.sway}/bin/swaymsg \"output * dpms off\"";
|
||||
resumeCommand = "${pkgs.sway}/bin/swaymsg \"output * dpms on\"";}
|
||||
];
|
||||
events = [
|
||||
{ event = "before-sleep"; command = "${pkgs.swaylock}/bin/swaylock -f -c 000000"; }
|
||||
];
|
||||
};
|
||||
|
||||
wayland.windowManager.sway = {
|
||||
enable = true;
|
||||
xwayland = true;
|
||||
config = rec {
|
||||
modifier = "Mod4";
|
||||
terminal = "foot";
|
||||
bars = [{
|
||||
"command" = "waybar";
|
||||
}];
|
||||
keybindings = pkgs.lib.mkOptionDefault {
|
||||
"XF86AudioRaiseVolume" = "exec wpctl set-volume @DEFAULT_AUDIO_SINK@ 5%+";
|
||||
"XF86AudioLowerVolume" = "exec wpctl set-volume @DEFAULT_AUDIO_SINK@ 5%-";
|
||||
"XF86AudioMute" = "exec wpctl set-mute @DEFAULT_AUDIO_SINK@ toggle";
|
||||
"XF86AudioMicMute" = "exec pactl set-source-mute @DEFAULT_SOURCE@ toggle";
|
||||
"XF86MonBrightnessUp" = "exec brightnessctl s +5%";
|
||||
"XF86MonBrightnessDown" = "exec brightnessctl s 5%-";
|
||||
"Mod4+Return" = "exec emacs --eval '(progn (setq confirm-kill-processes nil) (vterm))'";
|
||||
"Mod4+space" = "exec ${pkgs.foot}/bin/foot -T mylauncher -a mylauncher ${pkgs.q-sh}/bin/q";
|
||||
"Mod4+p" = "exec '${pkgs.grim}/bin/grim -g \"$$(${pkgs.slurp}/bin/slurp)\" - | ${pkgs.wl-clipboard}/bin/wl-copy -t image/png'";
|
||||
};
|
||||
output = {
|
||||
"*" = { bg = "${./wallpaper.jpg} fill";};
|
||||
"Lenovo Group Limited LEN T32p-20 VNA4VRNY" = { scale = "1.5"; };
|
||||
};
|
||||
input = {
|
||||
"type:keyboard" = {
|
||||
xkb_layout = "us,ru";
|
||||
xkb_options = "grp:alt_space_toggle";
|
||||
};
|
||||
};
|
||||
gaps = {
|
||||
inner = 10;
|
||||
outer = 5;
|
||||
};
|
||||
colors.unfocused = {border = "#dddddd";
|
||||
background = "#dddddd";
|
||||
text = "#888888";
|
||||
indicator = "#888888";
|
||||
childBorder = "#888888";};
|
||||
};
|
||||
extraConfig = ''
|
||||
for_window [title="mylauncher"] floating enable
|
||||
default_border pixel 3
|
||||
'';
|
||||
};
|
||||
programs.foot = {
|
||||
enable = true;
|
||||
settings = {
|
||||
main = {
|
||||
font="monospace:size=10";
|
||||
};
|
||||
|
||||
colors = {
|
||||
background="feffff";
|
||||
foreground="333333";
|
||||
|
||||
regular0="333333";
|
||||
regular1="bd4436";
|
||||
regular2="008700";
|
||||
regular3="cdcc42";
|
||||
regular4="0017f5";
|
||||
regular5="b92cc6";
|
||||
regular6="5bbdf9";
|
||||
regular7="c7c7c7";
|
||||
|
||||
bright0="333333";
|
||||
bright1="bd4436";
|
||||
bright2="008700";
|
||||
bright3="cdcc42";
|
||||
bright4="0017f5";
|
||||
bright5="b92cc6";
|
||||
bright6="5bbdf9";
|
||||
bright7="feffff";
|
||||
};
|
||||
key-bindings = {
|
||||
clipboard-copy="Control+Insert";
|
||||
clipboard-paste="Shift+Insert";
|
||||
primary-paste="Control+Shift+v";
|
||||
};
|
||||
};
|
||||
};
|
||||
programs.qutebrowser = {
|
||||
enable = true;
|
||||
searchEngines = {
|
||||
DEFAULT = "https://kagi.com/search?q={}";
|
||||
g = "https://www.google.com/search?hl=en&q={}";
|
||||
};
|
||||
#config.set('content.media.video_capture', True, 'https://www.meet.google.com')
|
||||
settings = {
|
||||
tabs.position = "left";
|
||||
content.cookies.accept = "no-3rdparty";
|
||||
};
|
||||
extraConfig = ''
|
||||
config.set('content.javascript.can_access_clipboard', True, 'amazon.com')
|
||||
config.set('content.javascript.can_access_clipboard', True, 'awsapps.com')
|
||||
config.set('content.media.audio_capture', True, 'https://meet.google.com')
|
||||
config.set('content.media.video_capture', True, 'https://meet.google.com')
|
||||
config.set('content.media.audio_video_capture', True, 'https://meet.google.com')
|
||||
config.set('content.notifications.enabled', False, 'https://meet.google.com')
|
||||
config.set('content.register_protocol_handler', False, 'https://calendar.google.com?cid=%25s')
|
||||
'';
|
||||
keyBindings = {
|
||||
insert = {
|
||||
"<Shift+Ins>" = "insert-text -- {clipboard}";
|
||||
};
|
||||
};
|
||||
};
|
||||
programs.waybar = {
|
||||
enable = true;
|
||||
settings = [{
|
||||
layer = "top";
|
||||
position = "top";
|
||||
height = 24;
|
||||
modules-left = ["sway/workspaces" "sway/mode"];
|
||||
modules-center = ["sway/window"];
|
||||
modules-right =
|
||||
[ "idle_inhibitor" "battery" "clock" "tray" ];
|
||||
clock.format = "{:%Y-%m-%d %H:%M}";
|
||||
battery = {
|
||||
states = {
|
||||
# good = 95;
|
||||
warning = 30;
|
||||
critical = 15;
|
||||
};
|
||||
format = "{capacity}% {icon}";
|
||||
format-charging = "{capacity}% ";
|
||||
format-plugged = "{capacity}% ";
|
||||
format-alt = "{time} {icon}";
|
||||
format-icons = ["" "" "" "" ""];
|
||||
};
|
||||
idle_inhibitor = {
|
||||
format = "{icon}";
|
||||
format-icons = {
|
||||
activated = "";
|
||||
deactivated = "";
|
||||
};
|
||||
};
|
||||
}];
|
||||
};
|
||||
services.syncthing = {
|
||||
enable = true;
|
||||
};
|
||||
home.pointerCursor = {
|
||||
name = "Adwaita";
|
||||
package = pkgs.gnome.adwaita-icon-theme;
|
||||
size = 24;
|
||||
x11 = {
|
||||
enable = true;
|
||||
defaultCursor = "Adwaita";
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
virtualisation = {
|
||||
podman = {
|
||||
enable = true;
|
||||
dockerCompat = true;
|
||||
defaultNetwork.settings = {
|
||||
dns_enabled = true;
|
||||
};
|
||||
};
|
||||
};
|
||||
services.udev.packages = [
|
||||
pkgs.android-udev-rules
|
||||
];
|
||||
}
|
||||
929
emacs.el
Executable file
929
emacs.el
Executable file
|
|
@ -0,0 +1,929 @@
|
|||
;; -------- Speed up load time -------
|
||||
|
||||
;; I don't use emacs-server, so startup times are very important to me.
|
||||
|
||||
;; Garbage collection is triggered very often during start up, and it
|
||||
;; slows the whole thing down. It is safe to increase threshold
|
||||
;; temporarily to prevent aggressive GC, and then re-enable it at the
|
||||
;; end.
|
||||
|
||||
(setq gc-cons-threshold 402653184
|
||||
gc-cons-percentage 0.6)
|
||||
|
||||
|
||||
;; There are special ways to handle files (via SSH or in archives),
|
||||
;; but this is not necessary during startup, and it also slows down
|
||||
;; the load significantly, as emacs is going through lots of files.
|
||||
(defvar saved--file-name-handler-alist file-name-handler-alist)
|
||||
(setq file-name-handler-alist nil)
|
||||
|
||||
;; Restore defaults after initialization has completed
|
||||
(add-hook 'after-init-hook #'(lambda ()
|
||||
(setq gc-cons-threshold 16777216
|
||||
gc-cons-percentage 0.1)
|
||||
(setq file-name-handler-alist saved--file-name-handler-alist)))
|
||||
|
||||
;; -------- Default directories --------
|
||||
|
||||
(setq default-directory "~/")
|
||||
(setq command-line-default-directory "~/")
|
||||
|
||||
;; -------- State files --------
|
||||
|
||||
;; By default emacs leaves lots of trash around your filesystem while
|
||||
;; you are editing. This section cleans up the basics.
|
||||
|
||||
;; Don't leave =yourfile~= temporary files nearby, and put them to a
|
||||
;; separate directory instead.
|
||||
|
||||
(setq backup-directory-alist '(("." . "~/.emacs.d/backups")))
|
||||
(setq auto-save-file-name-transforms
|
||||
'((".*" "~/.emacs.d/backups" t)))
|
||||
|
||||
;; -------- Command history --------
|
||||
|
||||
;; Save command history so that when emacs is restarted, the history
|
||||
;; is preserved.
|
||||
|
||||
(setq savehist-file "~/.emacs.d/savehist")
|
||||
(savehist-mode +1)
|
||||
(setq savehist-save-minibuffer-history +1)
|
||||
(setq savehist-additional-variables
|
||||
'(kill-ring
|
||||
search-ring
|
||||
regexp-search-ring))
|
||||
|
||||
;; -------- Recent files --------
|
||||
|
||||
;; Recent files are convenient to record because you can use them to
|
||||
;; quickly jump to what you've been editing recently.
|
||||
|
||||
(setq recentf-save-file "~/.emacs.d/recentf"
|
||||
recentf-max-menu-items 0
|
||||
recentf-max-saved-items 300
|
||||
recentf-filename-handlers '(file-truename)
|
||||
recentf-exclude
|
||||
(list "^/tmp/" "^/ssh:" "\\.?ido\\.last$" "\\.revive$" "/TAGS$"
|
||||
"^/var/folders/.+$"
|
||||
))
|
||||
|
||||
(recentf-mode 1)
|
||||
|
||||
;; -------- De-clutter --------
|
||||
|
||||
;; Toolbar and scrollbars are only useful to novices. The same for
|
||||
;; startup screen and menu bar.
|
||||
|
||||
(tool-bar-mode -1)
|
||||
(scroll-bar-mode -1)
|
||||
(setq inhibit-startup-screen t)
|
||||
|
||||
(if (not (eq window-system 'mac))
|
||||
(menu-bar-mode -1))
|
||||
|
||||
;; More reliable inter-window border
|
||||
;; The native border "consumes" a pixel of the fringe on righter-most splits,
|
||||
;; ~window-divider~ does not. Available since Emacs 25.1.
|
||||
|
||||
(setq-default window-divider-default-places t
|
||||
window-divider-default-bottom-width 0
|
||||
window-divider-default-right-width 1)
|
||||
(window-divider-mode +1)
|
||||
|
||||
;; Remove continuation arrow on right fringe
|
||||
|
||||
(setq fringe-indicator-alist (delq (assq 'continuation fringe-indicator-alist)
|
||||
fringe-indicator-alist))
|
||||
|
||||
;; No more typing the whole yes or no. Just y or n will do.
|
||||
(fset 'yes-or-no-p 'y-or-n-p)
|
||||
|
||||
;; Makes *scratch* empty.
|
||||
(setq initial-scratch-message "")
|
||||
|
||||
;; Hide modeline in the vterm mode
|
||||
(use-package hide-mode-line)
|
||||
(add-hook 'vterm-mode-hook #'hide-mode-line-mode)
|
||||
|
||||
;; -------- Cursor and movement --------
|
||||
|
||||
;; On emacs mac port use Alt as meta key
|
||||
|
||||
(if (eq window-system 'mac)
|
||||
(progn
|
||||
(setq mac-option-modifier 'meta)
|
||||
(setq mac-command-modifier nil)
|
||||
(setq mac-pass-command-to-system 't)))
|
||||
|
||||
;; Blinking cursor is inconvenient
|
||||
|
||||
(blink-cursor-mode -1)
|
||||
|
||||
;; Disable bell ring when moving outside of available area
|
||||
|
||||
(setq ring-bell-function 'ignore)
|
||||
|
||||
;; Disable annoying blink-matching-paren
|
||||
|
||||
(setq blink-matching-paren nil)
|
||||
|
||||
;; -------- Window decoration --------
|
||||
|
||||
;; This makes the header transparent on Emacs 26.1+ under OS X
|
||||
|
||||
(add-to-list 'default-frame-alist '(ns-transparent-titlebar . t))
|
||||
(add-to-list 'default-frame-alist '(ns-appearance . dark))
|
||||
(setq ns-use-proxy-icon nil)
|
||||
|
||||
;; -------- Minor modes --------
|
||||
|
||||
;; Hide some miror modes from sight to not clutter the modeline
|
||||
|
||||
(use-package diminish)
|
||||
(require 'diminish)
|
||||
|
||||
(diminish 'company-mode)
|
||||
(diminish 'projectile-mode)
|
||||
(diminish 'editorconfig-mode)
|
||||
(diminish 'eldoc-mode)
|
||||
(diminish 'flycheck-mode)
|
||||
(diminish 'which-key-mode)
|
||||
|
||||
;; -------- Theme --------
|
||||
|
||||
;; - I don't like that fringes are visible, so I set them to regular
|
||||
;; background color
|
||||
;; - Panels look better without outset/inset shadows
|
||||
|
||||
(use-package modus-themes)
|
||||
(load-theme 'modus-operandi t)
|
||||
|
||||
(set-face-attribute 'fringe nil
|
||||
:foreground (face-foreground 'default)
|
||||
:background (face-background 'default))
|
||||
|
||||
;; On many OSs the modeline has an outset border (lighter on top and
|
||||
;; darker on the bottom). This doesn't look pretty on a flat theme.
|
||||
|
||||
(set-face-attribute 'mode-line nil :box nil)
|
||||
(set-face-attribute 'mode-line-inactive nil :box nil)
|
||||
|
||||
;; -------- Font --------
|
||||
|
||||
;; Some time ago I've purchased a great font called Pragmata Pro,
|
||||
;; which is easy on the eyes and tailored for programmers. It may
|
||||
;; not be available everywhere though, hence conditional load.
|
||||
|
||||
(when window-system
|
||||
(if (not (null (x-list-fonts "PragmataPro")))
|
||||
(add-to-list 'default-frame-alist
|
||||
'(font . "PragmataPro-15"))
|
||||
(add-to-list 'default-frame-alist
|
||||
'(font . "Source Code Pro-11"))
|
||||
))
|
||||
|
||||
|
||||
;; -------- Packages --------
|
||||
|
||||
(diminish 'company-mode)
|
||||
(diminish 'projectile-mode)
|
||||
(diminish 'editorconfig-mode)
|
||||
(diminish 'eldoc-mode)
|
||||
(diminish 'flycheck-mode)
|
||||
(diminish 'which-key-mode)
|
||||
|
||||
;; -------- Navigation --------
|
||||
|
||||
;; Quickly find my way around emacs
|
||||
|
||||
;; Default scheme for uniquifying buffer names is not convenient.
|
||||
;; It's better to have a regular path-like structure.
|
||||
|
||||
;;(require 'uniquify)
|
||||
(setq uniquify-buffer-name-style 'forward)
|
||||
(setq uniquify-separator "/")
|
||||
(setq uniquify-after-kill-buffer-p t) ; rename after killing uniquified
|
||||
(setq uniquify-ignore-buffers-re "^\\*") ; don't muck with special buffers
|
||||
|
||||
|
||||
;; If you stop after typing a part of keybinding, shows available
|
||||
;; options in minibuffer.
|
||||
|
||||
|
||||
(use-package which-key)
|
||||
(add-hook 'after-init-hook 'which-key-mode)
|
||||
(with-eval-after-load 'which-key
|
||||
(which-key-setup-side-window-bottom))
|
||||
|
||||
;; persp-mode allows you to have tagged workspaces akin to
|
||||
;; Linux tiled-window managers.
|
||||
|
||||
(use-package persp-mode)
|
||||
;; persp-mode clashes with corfu
|
||||
(setq persp-auto-resume-time 0)
|
||||
(add-hook 'after-init-hook 'persp-mode)
|
||||
(global-set-key (kbd "C-x x s") 'persp-switch)
|
||||
|
||||
;; vertico-mode allows for easy navigation between buffers and files
|
||||
|
||||
(use-package vertico)
|
||||
(add-hook 'after-init-hook 'vertico-mode)
|
||||
(setq completion-ignore-case t)
|
||||
(setq completion-styles '(basic substring partial-completion flex))
|
||||
|
||||
(use-package marginalia)
|
||||
(add-hook 'after-init-hook 'marginalia-mode)
|
||||
|
||||
;; ripgrep search with consult
|
||||
|
||||
(use-package consult)
|
||||
(global-set-key (kbd "M-s r") 'consult-ripgrep)
|
||||
|
||||
;; Navigation when in russian layout
|
||||
|
||||
(cl-loop
|
||||
for from across "йцукенгшщзхъфывапролджэячсмитьбюЙЦУКЕНГШЩЗХЪФЫВАПРОЛДЖ\ЭЯЧСМИТЬБЮ№"
|
||||
for to across "qwertyuiop[]asdfghjkl;'zxcvbnm,.QWERTYUIOP{}ASDFGHJKL:\"ZXCVBNM<>#"
|
||||
do
|
||||
(eval `(define-key key-translation-map (kbd ,(concat "C-" (string from))) (kbd ,(concat "C-" (string to)))))
|
||||
(eval `(define-key key-translation-map (kbd ,(concat "M-" (string from))) (kbd ,(concat "M-" (string to))))))
|
||||
|
||||
|
||||
;; -------- Editor basics --------
|
||||
|
||||
;; Use 4 spaces to indent by default
|
||||
|
||||
(setq-default indent-tabs-mode nil)
|
||||
(setq-default tab-width 4)
|
||||
|
||||
;; Clean up trailing whitespace on file save
|
||||
|
||||
(add-hook 'before-save-hook 'whitespace-cleanup)
|
||||
|
||||
;; But use editorconfig to guess proper project-wide indentation rules
|
||||
|
||||
(use-package editorconfig)
|
||||
(add-hook 'prog-mode-hook #'editorconfig-mode)
|
||||
|
||||
|
||||
;; Speed up comint buffers by disabling bidirectional language support
|
||||
|
||||
(setq-default bidi-display-reordering nil)
|
||||
|
||||
;; -------- Tools and environment --------
|
||||
|
||||
;; By default, Emacs doesn't add system path to its search places
|
||||
|
||||
(use-package exec-path-from-shell)
|
||||
(require 'exec-path-from-shell)
|
||||
(setenv "PATH" (concat "/usr/local/bin:" (getenv "PATH")))
|
||||
|
||||
;; On a mac, this will set up PATH and MANPATH from your environment
|
||||
(when (memq window-system '(mac ns x pgtk))
|
||||
(exec-path-from-shell-initialize))
|
||||
|
||||
;; -------- Org roam --------
|
||||
|
||||
(use-package org)
|
||||
(use-package org-contrib)
|
||||
(use-package org-roam)
|
||||
(use-package consult-org-roam)
|
||||
|
||||
(setq org-roam-completion-everywhere t)
|
||||
(setq org-roam-directory "~/notes")
|
||||
(setq org-roam-node-default-sort 'file-mtime)
|
||||
(setq consult-org-roam-grep-func #'consult-ripgrep)
|
||||
|
||||
(global-set-key (kbd "C-c n l") 'org-roam-buffer-toggle)
|
||||
(global-set-key (kbd "C-c n i") 'org-roam-node-insert)
|
||||
(global-set-key (kbd "C-c n f") 'org-roam-node-find)
|
||||
(global-set-key (kbd "C-c n r") 'consult-org-roam-search)
|
||||
|
||||
(autoload 'org-roam-buffer-toggle "org-roam" "\
|
||||
Enable org-roam
|
||||
" t nil)
|
||||
(autoload 'org-roam-setup "org-roam" "\
|
||||
Enable org-roam
|
||||
" t nil)
|
||||
|
||||
(setq org-roam-capture-templates
|
||||
`(("d" "default" plain "%?"
|
||||
:target (file+head "%<%Y%m%d%H%M%S>-${slug}.org"
|
||||
"#+title: ${title}\n")
|
||||
:unnarrowed t)
|
||||
("i" "interview" plain "%?"
|
||||
:target (file+head "%<%Y%m%d%H%M%S>-${slug}.org"
|
||||
,(concat "#+title: ${title}\n"
|
||||
"#+filetags: Interview\n"
|
||||
"\n"))
|
||||
:unnarrowed t)
|
||||
|
||||
))
|
||||
|
||||
(setq org-roam-node-display-template
|
||||
(concat "${title:80} " (propertize "${tags:20}" 'face 'org-tag))
|
||||
org-roam-node-annotation-function
|
||||
(lambda (node) (marginalia--time (org-roam-node-file-mtime node))))
|
||||
|
||||
(add-hook 'after-init-hook 'org-roam-setup)
|
||||
|
||||
(defun roam-extra:get-filetags ()
|
||||
(split-string (or (org-roam-get-keyword "filetags") "")))
|
||||
|
||||
(defun roam-extra:add-filetag (tag)
|
||||
(let* ((new-tags (cons tag (roam-extra:get-filetags)))
|
||||
(new-tags-str (combine-and-quote-strings new-tags)))
|
||||
(org-roam-set-keyword "filetags" new-tags-str)))
|
||||
|
||||
(defun roam-extra:del-filetag (tag)
|
||||
(let* ((new-tags (seq-difference (roam-extra:get-filetags) `(,tag)))
|
||||
(new-tags-str (combine-and-quote-strings new-tags)))
|
||||
(org-roam-set-keyword "filetags" new-tags-str)))
|
||||
|
||||
(defun roam-extra:todo-p ()
|
||||
"Return non-nil if current buffer has any TODO entry.
|
||||
|
||||
TODO entries marked as done are ignored, meaning the this
|
||||
function returns nil if current buffer contains only completed
|
||||
tasks."
|
||||
(org-element-map
|
||||
(org-element-parse-buffer 'headline)
|
||||
'headline
|
||||
(lambda (h)
|
||||
(eq (org-element-property :todo-type h)
|
||||
'todo))
|
||||
nil 'first-match))
|
||||
|
||||
(defun roam-extra:update-todo-tag ()
|
||||
"Update TODO tag in the current buffer."
|
||||
(when (and (not (active-minibuffer-window))
|
||||
(org-roam-file-p))
|
||||
(org-with-point-at 1
|
||||
(let* ((tags (roam-extra:get-filetags))
|
||||
(is-todo (roam-extra:todo-p)))
|
||||
(cond ((and is-todo (not (seq-contains-p tags "todo")))
|
||||
(roam-extra:add-filetag "todo"))
|
||||
((and (not is-todo) (seq-contains-p tags "todo"))
|
||||
(roam-extra:del-filetag "todo")))))))
|
||||
|
||||
(defun roam-extra:todo-files ()
|
||||
"Return a list of roam files containing todo tag."
|
||||
(org-roam-db-sync)
|
||||
(let ((todo-nodes (seq-filter (lambda (n)
|
||||
(seq-contains-p (org-roam-node-tags n) "todo"))
|
||||
(org-roam-node-list))))
|
||||
(seq-uniq (seq-map #'org-roam-node-file todo-nodes))))
|
||||
|
||||
(defun roam-extra:update-todo-files (&rest _)
|
||||
"Update the value of `org-agenda-files'."
|
||||
(setq org-agenda-files (roam-extra:todo-files)))
|
||||
|
||||
(add-hook 'find-file-hook #'roam-extra:update-todo-tag)
|
||||
(add-hook 'before-save-hook #'roam-extra:update-todo-tag)
|
||||
(advice-add 'org-agenda :before #'roam-extra:update-todo-files)
|
||||
|
||||
|
||||
(defun org-roam-week (&optional other-window)
|
||||
"Opens or creates a weekly note."
|
||||
(interactive)
|
||||
(let* ((title (format-time-string "Week %U %Y"))
|
||||
(nodes (org-roam-node-list))
|
||||
(node (seq-find (lambda (n) (string-equal (org-roam-node-title n) title)) nodes)))
|
||||
(if (and node (org-roam-node-file node))
|
||||
(org-roam-node-visit node other-window)
|
||||
(org-roam-capture-
|
||||
:node (org-roam-node-create :title title)
|
||||
:templates
|
||||
`(("w" "week" plain "* Goals\n\n%?\n\n* Tasks\n\n"
|
||||
:if-new (file+head "%<%Y%m%d%H%M%S>-${slug}.org" "#+title: ${title}\n#+category: ${title}\n#+filetags: Week")
|
||||
:unnarrowed t))
|
||||
:props '(:finalize find-file))
|
||||
)
|
||||
)
|
||||
)
|
||||
|
||||
(global-set-key (kbd "C-c n w") 'org-roam-week)
|
||||
|
||||
;; -------- Org mode ---------
|
||||
|
||||
(use-package org-modern)
|
||||
(with-eval-after-load 'org (global-org-modern-mode))
|
||||
|
||||
(setq org-modules '(org-w3m org-bbdb org-bibtex org-docview
|
||||
org-gnus org-info org-irc org-mhe
|
||||
org-rmail org-checklist org-mu4e))
|
||||
|
||||
;; Sometimes I sit at night until 4 AM, and I still want org to treat it
|
||||
;; as "today"
|
||||
(setq org-extend-today-until 4)
|
||||
|
||||
;; navigate with (org-goto) by offering the full list of targets in ido-mode
|
||||
(setq org-goto-interface 'outline-path-completion) ;; don't search incrementally
|
||||
(setq org-outline-path-complete-in-steps nil) ;; see whole path at once
|
||||
|
||||
;; avoid inadvertently editing hidden text
|
||||
(setq org-catch-invisible-edits 'show-and-error)
|
||||
|
||||
;; hide empty spaces between folded subtrees
|
||||
(setq org-cycle-separator-lines 0)
|
||||
|
||||
;; use hours in clocktable instead of days and hours
|
||||
(setq org-time-clocksum-format "%d:%02d")
|
||||
|
||||
;; After a recurring task is marked as done, reset it to TODO. This
|
||||
;; is important because I have the "INBOX" state first in the sequence
|
||||
;; of states.
|
||||
(setq org-todo-repeat-to-state "TODO")
|
||||
|
||||
;; Default format for column view
|
||||
(setq org-columns-default-format "%38ITEM(Details) %TAGS(Context) %7TODO(To Do) %5Effort(Time){:} %6CLOCKSUM(Total){:}")
|
||||
|
||||
;; Better source code editing
|
||||
|
||||
(setq org-src-fontify-natively t
|
||||
org-src-window-setup 'current-window
|
||||
org-src-strip-leading-and-trailing-blank-lines t
|
||||
org-src-preserve-indentation t
|
||||
org-src-tab-acts-natively t)
|
||||
|
||||
;; Default tags
|
||||
(setq org-tag-alist '((:startgroup . nil)
|
||||
("WORK" . ?w) ("HOME" . ?h)
|
||||
(:endgroup . nil)
|
||||
("PROJECT" . ?p)
|
||||
("PHONE" . ?n)
|
||||
("MEETING" . ?m)
|
||||
("DOC" . ?d)
|
||||
("GOOGLE" . ?g)
|
||||
("QUICK" . ?q)))
|
||||
|
||||
;; Default todo sequence
|
||||
(setq org-todo-keywords
|
||||
'((sequence "INBOX(i)" "TODO(t)" "ERRAND(k)"
|
||||
"SOMEDAY(s)" "WAITING(w@/!)" "APPT(a)" "|"
|
||||
"DONE(d!)" "CANCELLED(c!)")))
|
||||
|
||||
;; Babel and code block embedding
|
||||
(setq org-confirm-babel-evaluate nil)
|
||||
(org-babel-do-load-languages
|
||||
'org-babel-load-languages
|
||||
'((emacs-lisp . t)
|
||||
(python . t)))
|
||||
|
||||
;; Log TODO state changes and clock-ins into the LOGBOOK drawer
|
||||
(setq org-clock-into-drawer t)
|
||||
(setq org-log-into-drawer t)
|
||||
|
||||
;; Quickly creating new tasks
|
||||
(global-set-key (kbd "\C-c r") 'org-capture)
|
||||
(setq org-capture-templates
|
||||
`(("t" "Todo" entry (file+headline "~/org/gtd.org" "Tasks")
|
||||
"* TODO %?\n %U\n %a")
|
||||
("i" "Inbox" entry (file+headline "~/org/gtd.org" "Tasks")
|
||||
"* INBOX %?\n %U")
|
||||
("f" "Follow-up" entry (file+headline "~/org/gtd.org" "Tasks")
|
||||
,(concat "* TODO %? :EMAIL:\n"
|
||||
" %U\n"
|
||||
" %a"))
|
||||
("c" "Contacts" entry (file "~/org/contacts.org")
|
||||
(concat "* %(org-contacts-template-name)\n"
|
||||
":PROPERTIES:\n"
|
||||
":EMAIL: %(org-contacts-template-email)\n"
|
||||
":END:"))
|
||||
|
||||
("q"
|
||||
"Org capture template"
|
||||
entry
|
||||
(file+headline "~/org/capture.org" "Notes")
|
||||
"* %:description\n\n Source: %u, %:link\n\n %i"
|
||||
:empty-lines 1)
|
||||
)
|
||||
)
|
||||
;; org-protocol allows you to capture stuff into your system from web
|
||||
;; browsers
|
||||
(require 'org-protocol)
|
||||
|
||||
;; Refiling allows you to quickly move an element with its children to
|
||||
;; another location.
|
||||
|
||||
;; By default, refile works up to 2-level sections, which is not very
|
||||
;; convenient if you have project-based organization
|
||||
;; (/Projects/ProjectName).
|
||||
(setq org-refile-targets '((org-agenda-files :maxlevel . 3)))
|
||||
|
||||
;; Then, it's nice to have a full path to the target element appear in
|
||||
;; completion
|
||||
(setq org-refile-use-outline-path 'file)
|
||||
|
||||
;; But, when using helm, we also need to tell org mode to present the
|
||||
;; whole list of possible completions right away, and not use
|
||||
;; incremental search:
|
||||
(setq org-outline-path-complete-in-steps nil)
|
||||
|
||||
;; It may also be useful to be able to create elements, if the refile
|
||||
;; target doesn't already exist.
|
||||
(setq org-refile-allow-creating-parent-nodes 'confirm)
|
||||
|
||||
;; Agenda
|
||||
(global-set-key "\C-ca" 'org-agenda)
|
||||
(setq org-agenda-files '("~/org/gtd.org"
|
||||
"~/org/weeklyreview.org"
|
||||
))
|
||||
|
||||
(setq org-agenda-custom-commands nil)
|
||||
(add-to-list 'org-agenda-custom-commands
|
||||
'("h" "Work todos" tags-todo
|
||||
"-personal-doat={.+}-dowith={.+}/!-ERRAND"
|
||||
((org-agenda-todo-ignore-scheduled t))))
|
||||
(add-to-list 'org-agenda-custom-commands
|
||||
'("H" "All work todos" tags-todo "-personal/!-ERRAND-MAYBE"
|
||||
((org-agenda-todo-ignore-scheduled nil))))
|
||||
(add-to-list 'org-agenda-custom-commands
|
||||
'("A" "Work todos with doat or dowith" tags-todo
|
||||
"-personal+doat={.+}|dowith={.+}/!-ERRAND"
|
||||
((org-agenda-todo-ignore-scheduled nil))))
|
||||
(add-to-list 'org-agenda-custom-commands
|
||||
'("P" "Projects"
|
||||
tags "+PROJECT-TODO=\"SOMEDAY\""))
|
||||
|
||||
(add-to-list 'org-agenda-custom-commands
|
||||
'("i" "Inbox"
|
||||
todo "INBOX"))
|
||||
|
||||
(add-to-list 'org-agenda-custom-commands
|
||||
'("o" "Someday"
|
||||
todo "SOMEDAY"))
|
||||
|
||||
(add-to-list 'org-agenda-custom-commands
|
||||
'("c" "Simple agenda view"
|
||||
(
|
||||
(agenda ""
|
||||
)
|
||||
(todo ""
|
||||
(
|
||||
(org-agenda-overriding-header "\nUnscheduled TODO")
|
||||
(org-agenda-skip-function '(org-agenda-skip-entry-if
|
||||
'timestamp 'todo '("SOMEDAY" "ERRAND")))
|
||||
(org-agenda-sorting-strategy
|
||||
(quote ((agenda time-up priority-down tag-up))))
|
||||
))
|
||||
)
|
||||
((org-agenda-overriding-columns-format
|
||||
"%38ITEM(Details) %TAGS(Context) %7TODO(To Do) %5Effort(Time){:} %6CLOCKSUM_T(Total){:}")
|
||||
(org-agenda-view-columns-initially t))
|
||||
)
|
||||
)
|
||||
|
||||
(setq org-todo-keyword-faces
|
||||
'(("ERRAND" . (:foreground "light sea green" :weight bold))
|
||||
("INBOX" . (:foreground "DarkGoldenrod" :weight bold))))
|
||||
|
||||
;;(set-face-foreground 'org-scheduled-previously "DarkGoldenrod")
|
||||
|
||||
(setq org-tags-exclude-from-inheritance '("PROJECT")
|
||||
org-stuck-projects '("+PROJECT/-MAYBE-DONE-SOMEDAY"
|
||||
("TODO" "ERRAND" "WAITING") () ()))
|
||||
|
||||
;; -------- Email --------
|
||||
|
||||
;;(use-package mu4e)
|
||||
|
||||
;;(add-to-list 'load-path "/usr/share/emacs/site-lisp/mu4e")
|
||||
|
||||
(setq sendmail-program (executable-find "msmtp"))
|
||||
|
||||
(autoload 'mu4e "mu4e" "\
|
||||
If mu4e is not running yet, start it. Then, show the main
|
||||
window, unless BACKGROUND (prefix-argument) is non-nil.
|
||||
" t nil)
|
||||
|
||||
(setq mu4e-update-interval 600) ;; refresh every X seconds
|
||||
|
||||
(setq message-citation-line-format "On %d %b %Y at %R, %f wrote:\n")
|
||||
(setq message-citation-line-function 'message-insert-formatted-citation-line)
|
||||
|
||||
(setq mu4e-attachment-dir "~/Downloads")
|
||||
|
||||
(setq mu4e-html2text-command 'mu4e-shr2text)
|
||||
|
||||
(setq mu4e-user-mail-address-list '("mail@knazarov.com" "k.nazarov@corp.mail.ru"))
|
||||
|
||||
;; exlude myself from the email replies
|
||||
(setq mu4e-compose-dont-reply-to-self t)
|
||||
|
||||
;; set mu4e as a default mail agent
|
||||
(setq mail-user-agent 'mu4e-user-agent)
|
||||
|
||||
(setq mu4e-maildir "/home/knazarov/Maildir")
|
||||
|
||||
(setq
|
||||
mu4e-view-show-images t
|
||||
mu4e-image-max-width 800
|
||||
mu4e-view-prefer-html t
|
||||
mu4e-change-filenames-when-moving t ;; prevent duplicate UIDs
|
||||
mu4e-get-mail-command "mbsync -a -q"
|
||||
mu4e-headers-include-related nil)
|
||||
|
||||
(setq mu4e-sent-folder "/personal/Sent"
|
||||
mu4e-drafts-folder "/personal/Drafts"
|
||||
mu4e-trash-folder "/personal/Trash"
|
||||
mu4e-refile-folder "/personal/Archive"
|
||||
user-full-name "Konstantin Nazarov"
|
||||
user-mail-address "mail@knazarov.com"
|
||||
smtpmail-default-smtp-server "smtp.fastmail.com"
|
||||
smtpmail-local-domain "knazarov.com"
|
||||
smtpmail-smtp-server "smtp.fastmail.com"
|
||||
smtpmail-stream-type 'starttls
|
||||
smtpmail-smtp-service 587
|
||||
message-send-mail-function 'message-send-mail-with-sendmail
|
||||
;;message-sendmail-extra-arguments '("--read-envelope-from")
|
||||
)
|
||||
|
||||
(setq mu4e-compose-signature
|
||||
"<#part type=text/html><html><body><p>Hello ! I am the html signature which can contains anything in html !</p></body></html><#/part>" )
|
||||
|
||||
(defvar my-mu4e-account-alist
|
||||
`(("personal"
|
||||
(mu4e-sent-folder "/personal/Sent")
|
||||
(mu4e-drafts-folder "/personal/Drafts")
|
||||
(mu4e-trash-folder "/personal/Trash")
|
||||
(mu4e-refile-folder "/personal/Archive")
|
||||
(user-mail-address "mail@knazarov.com")
|
||||
(message-sendmail-envelope-from "mail@knazarov.com")
|
||||
;;(mu4e-compose-signature-auto-include nil)
|
||||
(mu4e-compose-signature ,(if (file-exists-p "~/.mail-sig.txt")
|
||||
(with-temp-buffer
|
||||
(insert-file-contents "~/.mail-sig.txt")
|
||||
(buffer-string))
|
||||
""))
|
||||
(message-signature-file "~/.mail-sig.txt")
|
||||
(message-cite-reply-position above)
|
||||
(message-cite-style message-cite-style-outlook))
|
||||
("work"
|
||||
(mu4e-sent-folder "/work/Sent")
|
||||
(mu4e-drafts-folder "/work/Drafts")
|
||||
(mu4e-trash-folder "/work/Trash")
|
||||
(mu4e-refile-folder "/work/Archive")
|
||||
(user-mail-address "k.nazarov@corp.mail.ru")
|
||||
(message-sendmail-envelope-from "k.nazarov@corp.mail.ru")
|
||||
(mu4e-compose-signature-auto-include nil)
|
||||
(message-signature-file "~/.mail-sig.txt")
|
||||
(mu4e-compose-signature ,(if (file-exists-p "~/.mail-sig.txt")
|
||||
(with-temp-buffer
|
||||
(insert-file-contents "~/.mail-sig.txt")
|
||||
(buffer-string))
|
||||
""))
|
||||
(message-cite-reply-position above)
|
||||
(message-cite-style message-cite-style-outlook))
|
||||
))
|
||||
|
||||
(defun my-mu4e-set-account ()
|
||||
"Set the account for composing a message."
|
||||
(let* ((account
|
||||
(if mu4e-compose-parent-message
|
||||
(let ((maildir (mu4e-message-field mu4e-compose-parent-message :maildir)))
|
||||
(string-match "/\\(.*?\\)/" maildir)
|
||||
(match-string 1 maildir))
|
||||
(completing-read (format "Compose with account: (%s) "
|
||||
(mapconcat #'(lambda (var) (car var))
|
||||
my-mu4e-account-alist "/"))
|
||||
(mapcar #'(lambda (var) (car var)) my-mu4e-account-alist)
|
||||
nil t nil nil (caar my-mu4e-account-alist))))
|
||||
(account-vars (cdr (assoc account my-mu4e-account-alist))))
|
||||
(if account-vars
|
||||
(mapc #'(lambda (var)
|
||||
(set (car var) (cadr var)))
|
||||
account-vars)
|
||||
(error "No email account found"))))
|
||||
|
||||
(defun my-mu4e-refile-folder-function (msg)
|
||||
(let ((mu4e-accounts my-mu4e-account-alist)
|
||||
(current-message msg)
|
||||
(account))
|
||||
(setq account (catch 'found
|
||||
(dolist (candidate mu4e-accounts)
|
||||
(if (string-match (car candidate)
|
||||
(mu4e-message-field current-message :maildir))
|
||||
(throw 'found candidate)
|
||||
))))
|
||||
(if account
|
||||
(cadr (assoc 'mu4e-refile-folder account))
|
||||
(throw 'account_not_found (mu4e-message-field current-message :maildir))
|
||||
)
|
||||
)
|
||||
)
|
||||
|
||||
(setq mu4e-refile-folder 'my-mu4e-refile-folder-function)
|
||||
|
||||
(add-hook 'mu4e-compose-pre-hook 'my-mu4e-set-account)
|
||||
|
||||
;; Be smart about inserting signature for either cite-reply-position used
|
||||
(defun insert-signature ()
|
||||
"Insert signature where you are replying"
|
||||
;; Do not insert if already done - needed when switching modes back/forth
|
||||
(unless (save-excursion (message-goto-signature))
|
||||
(save-excursion
|
||||
(if (eq message-cite-reply-position 'below)
|
||||
(goto-char (point-max))
|
||||
(message-goto-body))
|
||||
(insert-file-contents message-signature-file)
|
||||
(save-excursion (insert "\n-- \n")))))
|
||||
(add-hook 'mu4e-compose-mode-hook 'insert-signature)
|
||||
|
||||
;;(add-to-list 'mu4e-bookmarks
|
||||
;; '("maildir:/work/INBOX" "work inbox" ?w))
|
||||
|
||||
;;(add-to-list 'mu4e-bookmarks
|
||||
;; '("maildir:/knazarov/INBOX" "personal inbox" ?p))
|
||||
|
||||
(setq mu4e-bookmarks
|
||||
'(("maildir:/personal/INBOX OR maildir:/work/INBOX" "inbox" ?i)))
|
||||
|
||||
;; -------- Programming --------
|
||||
|
||||
;; Enable direnv-mode to automatically load Nix flake dependencies for projects
|
||||
(use-package direnv
|
||||
:config
|
||||
(direnv-mode))
|
||||
|
||||
;; Rainbow delimeters highlight matching pairs of braces in different colors
|
||||
|
||||
(use-package rainbow-delimiters)
|
||||
(add-hook 'prog-mode-hook #'rainbow-delimiters-mode)
|
||||
|
||||
;; Flycheck is an on-the-fly syntax checker for emacs with pluggable backengs.
|
||||
|
||||
(use-package flycheck)
|
||||
;; Not usable for every single mode, so need to be selective
|
||||
;;(add-hook 'prog-mode-hook #'flycheck-mode)
|
||||
|
||||
;; Scroll compilation buffer with the output
|
||||
|
||||
(setq compilation-scroll-output t)
|
||||
|
||||
;; Projectile auto-detects projects and allows to run project-wide commands
|
||||
|
||||
(use-package projectile)
|
||||
(setq projectile-cache-file "~/.emacs.d/projectile.cache")
|
||||
(projectile-mode +1)
|
||||
(define-key projectile-mode-map (kbd "C-c p") 'projectile-command-map)
|
||||
|
||||
;; Corfu mode is a simple auto completion framework with
|
||||
;; pluggable backends
|
||||
|
||||
;;(setq company-backends '(company-capf (company-dabbrev-code) company-dabbrev))
|
||||
;;(add-hook 'prog-mode-hook #'company-mode)
|
||||
;;(add-hook 'mu4e-compose-mode-hook #'company-mode)
|
||||
(use-package corfu)
|
||||
(add-hook 'after-init-hook 'global-corfu-mode)
|
||||
(add-hook 'after-init-hook 'corfu-popupinfo-mode)
|
||||
(setq corfu-auto t)
|
||||
(setq tab-always-indent 'complete)
|
||||
(setq corfu-quit-no-match 'separator)
|
||||
|
||||
(use-package cape)
|
||||
(add-to-list 'completion-at-point-functions #'cape-dabbrev)
|
||||
(add-to-list 'completion-at-point-functions #'cape-file)
|
||||
|
||||
;; Can't live without magit. It makes working with git sooo much easie
|
||||
|
||||
(use-package magit)
|
||||
(global-set-key (kbd "C-x g") 'magit-status)
|
||||
|
||||
;;(setq magit-completing-read-function 'magit-ido-completing-read)
|
||||
|
||||
|
||||
;; LSP
|
||||
|
||||
;; Maybe switch to EGLOT, which is shipped in Emacs 29
|
||||
(add-hook 'lua-mode-hook #'lsp)
|
||||
|
||||
;; Tree-sitter
|
||||
|
||||
(setq major-mode-remap-alist
|
||||
'((yaml-mode . yaml-ts-mode)
|
||||
(bash-mode . bash-ts-mode)
|
||||
(js2-mode . js-ts-mode)
|
||||
(typescript-mode . typescript-ts-mode)
|
||||
(json-mode . json-ts-mode)
|
||||
(css-mode . css-ts-mode)
|
||||
(python-mode . python-ts-mode)
|
||||
(cpp-mode . cpp-ts-mode)
|
||||
(c-mode . c-ts-mode)
|
||||
))
|
||||
|
||||
(setq treesit-font-lock-level 4)
|
||||
|
||||
;; vterm
|
||||
|
||||
;; Vterm is a fully featured terminal emulator, that works inside
|
||||
;; emacs buffers. It is miles ahead of "term" and "eshell" both in
|
||||
;; speed and features.
|
||||
|
||||
(setq vterm-always-compile-module t)
|
||||
(use-package vterm)
|
||||
|
||||
;;(add-to-list 'load-path (expand-file-name "~/dev/emacs-libvterm/"))
|
||||
|
||||
(defun vterm-less (content)
|
||||
(let ((less-buffer (get-buffer-create (make-temp-name "vterm-less-"))))
|
||||
(with-current-buffer less-buffer
|
||||
(switch-to-buffer less-buffer)
|
||||
(special-mode)
|
||||
(insert (base64-decode-string content)))
|
||||
)
|
||||
)
|
||||
|
||||
|
||||
(use-package with-editor)
|
||||
(defun my-vterm-mode-hook ()
|
||||
(add-to-list 'vterm-eval-cmds (list "less" #'vterm-less))
|
||||
(with-editor-export-editor)
|
||||
)
|
||||
|
||||
(add-hook 'vterm-mode-hook #'my-vterm-mode-hook)
|
||||
|
||||
(put 'upcase-region 'disabled nil)
|
||||
|
||||
(autoload 'vterm "vterm" "\
|
||||
If vterm is not running yet, start it. Then, show the main
|
||||
window, unless BACKGROUND (prefix-argument) is non-nil.
|
||||
" t nil)
|
||||
|
||||
|
||||
;; lua
|
||||
|
||||
(use-package lua-mode)
|
||||
(setq lua-indent-level 4)
|
||||
|
||||
;; common lisp
|
||||
|
||||
(use-package sly)
|
||||
(use-package sly-asdf)
|
||||
(use-package aggressive-indent)
|
||||
|
||||
(add-to-list 'sly-contribs 'sly-asdf 'append)
|
||||
(autoload 'sly "sly"
|
||||
"Start an inferior^_superior Lisp and connect to its Swank server."
|
||||
t nil)
|
||||
|
||||
(define-key lisp-mode-map (kbd "C-c v")
|
||||
'sly-asdf-test-system)
|
||||
|
||||
;autoload 'sly-lisp-mode-hook "sly"
|
||||
; "Set up sly for a lisp buffer."
|
||||
; t nil)
|
||||
|
||||
(add-hook 'lisp-mode-hook #'aggressive-indent-mode)
|
||||
;(add-hook 'lisp-mode-hook 'sly-lisp-mode-hook)
|
||||
;(setq slime-contribs '(slime-fancy slime-company))
|
||||
(setq inferior-lisp-program "sbcl")
|
||||
|
||||
|
||||
;; Markdown
|
||||
|
||||
(use-package markdown-mode)
|
||||
|
||||
;; Dockerfiles
|
||||
|
||||
(use-package dockerfile-mode)
|
||||
|
||||
;; Yaml
|
||||
|
||||
(use-package yaml-mode)
|
||||
|
||||
;; CMake
|
||||
|
||||
(use-package cmake-mode)
|
||||
|
||||
;; C++
|
||||
|
||||
(with-eval-after-load 'eglot
|
||||
(add-to-list 'eglot-server-programs
|
||||
`(c++-mode . ("clangd"))))
|
||||
|
||||
(add-hook 'c++-mode-hook 'eglot-ensure)
|
||||
|
||||
(use-package clang-format)
|
||||
(use-package clang-format+)
|
||||
(add-hook 'c-mode-hook 'clang-format+-mode)
|
||||
(add-hook 'c++-mode-hook 'clang-format+-mode)
|
||||
|
||||
;; Zig
|
||||
|
||||
(use-package zig-mode)
|
||||
|
||||
;; Terraform
|
||||
|
||||
(use-package terraform-mode)
|
||||
|
||||
|
||||
;; Nix
|
||||
|
||||
(use-package nix-mode)
|
||||
|
||||
(use-package sudo-edit)
|
||||
(global-set-key (kbd "C-c C-r") 'sudo-edit)
|
||||
|
||||
(provide 'init)
|
||||
;;; init.el ends here
|
||||
220
flake.lock
Executable file
220
flake.lock
Executable file
|
|
@ -0,0 +1,220 @@
|
|||
{
|
||||
"nodes": {
|
||||
"emacs-overlay": {
|
||||
"inputs": {
|
||||
"flake-utils": "flake-utils",
|
||||
"nixpkgs": [
|
||||
"nixpkgs"
|
||||
],
|
||||
"nixpkgs-stable": "nixpkgs-stable"
|
||||
},
|
||||
"locked": {
|
||||
"lastModified": 1690655028,
|
||||
"narHash": "sha256-6ApYk2XOiyDFKDus5Ysmiw591AgxJpxK4/5rWtRWYfU=",
|
||||
"owner": "nix-community",
|
||||
"repo": "emacs-overlay",
|
||||
"rev": "2a52d78c85ee0608938670c7db79ffaba6f7b31d",
|
||||
"type": "github"
|
||||
},
|
||||
"original": {
|
||||
"owner": "nix-community",
|
||||
"repo": "emacs-overlay",
|
||||
"type": "github"
|
||||
}
|
||||
},
|
||||
"flake-utils": {
|
||||
"inputs": {
|
||||
"systems": "systems"
|
||||
},
|
||||
"locked": {
|
||||
"lastModified": 1689068808,
|
||||
"narHash": "sha256-6ixXo3wt24N/melDWjq70UuHQLxGV8jZvooRanIHXw0=",
|
||||
"owner": "numtide",
|
||||
"repo": "flake-utils",
|
||||
"rev": "919d646de7be200f3bf08cb76ae1f09402b6f9b4",
|
||||
"type": "github"
|
||||
},
|
||||
"original": {
|
||||
"owner": "numtide",
|
||||
"repo": "flake-utils",
|
||||
"type": "github"
|
||||
}
|
||||
},
|
||||
"home-manager": {
|
||||
"inputs": {
|
||||
"nixpkgs": [
|
||||
"nixpkgs"
|
||||
]
|
||||
},
|
||||
"locked": {
|
||||
"lastModified": 1690652600,
|
||||
"narHash": "sha256-Dy09g7mezToVwtFPyY25fAx1hzqNXv73/QmY5/qyR44=",
|
||||
"owner": "nix-community",
|
||||
"repo": "home-manager",
|
||||
"rev": "f58889c07efa8e1328fdf93dc1796ec2a5c47f38",
|
||||
"type": "github"
|
||||
},
|
||||
"original": {
|
||||
"owner": "nix-community",
|
||||
"repo": "home-manager",
|
||||
"type": "github"
|
||||
}
|
||||
},
|
||||
"knazarovcom": {
|
||||
"inputs": {
|
||||
"nixpkgs": [
|
||||
"nixpkgs"
|
||||
]
|
||||
},
|
||||
"locked": {
|
||||
"lastModified": 1690578969,
|
||||
"narHash": "sha256-aouJyTWiVstw8xRKxasvFdaO4r8H/ZBoMDpeF6Sz86I=",
|
||||
"owner": "~knazarov",
|
||||
"repo": "knazarov.com",
|
||||
"rev": "01ca3704520430ca3b8a36f4ce9dd8581bbd77f6",
|
||||
"type": "sourcehut"
|
||||
},
|
||||
"original": {
|
||||
"owner": "~knazarov",
|
||||
"repo": "knazarov.com",
|
||||
"type": "sourcehut"
|
||||
}
|
||||
},
|
||||
"nixpkgs": {
|
||||
"locked": {
|
||||
"lastModified": 1690659494,
|
||||
"narHash": "sha256-aW5Iupj/GQ3ghbZJHxdLhwOrmMRkaVcpwBR/Qf7/Uwg=",
|
||||
"owner": "NixOS",
|
||||
"repo": "nixpkgs",
|
||||
"rev": "d63df5a32b6292679c95af0e41272ae0dcbb0186",
|
||||
"type": "github"
|
||||
},
|
||||
"original": {
|
||||
"owner": "NixOS",
|
||||
"repo": "nixpkgs",
|
||||
"type": "github"
|
||||
}
|
||||
},
|
||||
"nixpkgs-stable": {
|
||||
"locked": {
|
||||
"lastModified": 1690558459,
|
||||
"narHash": "sha256-5W7y1l2cLYPkpJGNlAja7XW2X2o9rjf0O1mo9nxS9jQ=",
|
||||
"owner": "NixOS",
|
||||
"repo": "nixpkgs",
|
||||
"rev": "48e82fe1b1c863ee26a33ce9bd39621d2ada0a33",
|
||||
"type": "github"
|
||||
},
|
||||
"original": {
|
||||
"owner": "NixOS",
|
||||
"ref": "nixos-23.05",
|
||||
"repo": "nixpkgs",
|
||||
"type": "github"
|
||||
}
|
||||
},
|
||||
"nixpkgs-stable_2": {
|
||||
"locked": {
|
||||
"lastModified": 1690066826,
|
||||
"narHash": "sha256-6L2qb+Zc0BFkh72OS9uuX637gniOjzU6qCDBpjB2LGY=",
|
||||
"owner": "NixOS",
|
||||
"repo": "nixpkgs",
|
||||
"rev": "ce45b591975d070044ca24e3003c830d26fea1c8",
|
||||
"type": "github"
|
||||
},
|
||||
"original": {
|
||||
"owner": "NixOS",
|
||||
"ref": "release-23.05",
|
||||
"repo": "nixpkgs",
|
||||
"type": "github"
|
||||
}
|
||||
},
|
||||
"q-sh": {
|
||||
"inputs": {
|
||||
"nixpkgs": [
|
||||
"nixpkgs"
|
||||
]
|
||||
},
|
||||
"locked": {
|
||||
"lastModified": 1684711176,
|
||||
"narHash": "sha256-PbMTPJNQMivX2uHthyDy4C1UUKD8moQVWlHPWiP9xI0=",
|
||||
"owner": "~knazarov",
|
||||
"repo": "q.sh",
|
||||
"rev": "ee95b2afb54074fd004652816ffc9ad52fea9fc4",
|
||||
"type": "sourcehut"
|
||||
},
|
||||
"original": {
|
||||
"owner": "~knazarov",
|
||||
"repo": "q.sh",
|
||||
"type": "sourcehut"
|
||||
}
|
||||
},
|
||||
"root": {
|
||||
"inputs": {
|
||||
"emacs-overlay": "emacs-overlay",
|
||||
"home-manager": "home-manager",
|
||||
"knazarovcom": "knazarovcom",
|
||||
"nixpkgs": "nixpkgs",
|
||||
"q-sh": "q-sh",
|
||||
"sops-nix": "sops-nix",
|
||||
"vmatveevacom": "vmatveevacom"
|
||||
}
|
||||
},
|
||||
"sops-nix": {
|
||||
"inputs": {
|
||||
"nixpkgs": [
|
||||
"nixpkgs"
|
||||
],
|
||||
"nixpkgs-stable": "nixpkgs-stable_2"
|
||||
},
|
||||
"locked": {
|
||||
"lastModified": 1690199016,
|
||||
"narHash": "sha256-yTLL72q6aqGmzHq+C3rDp3rIjno7EJZkFLof6Ika7cE=",
|
||||
"owner": "Mic92",
|
||||
"repo": "sops-nix",
|
||||
"rev": "c36df4fe4bf4bb87759b1891cab21e7a05219500",
|
||||
"type": "github"
|
||||
},
|
||||
"original": {
|
||||
"owner": "Mic92",
|
||||
"repo": "sops-nix",
|
||||
"type": "github"
|
||||
}
|
||||
},
|
||||
"systems": {
|
||||
"locked": {
|
||||
"lastModified": 1681028828,
|
||||
"narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
|
||||
"owner": "nix-systems",
|
||||
"repo": "default",
|
||||
"rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
|
||||
"type": "github"
|
||||
},
|
||||
"original": {
|
||||
"owner": "nix-systems",
|
||||
"repo": "default",
|
||||
"type": "github"
|
||||
}
|
||||
},
|
||||
"vmatveevacom": {
|
||||
"inputs": {
|
||||
"nixpkgs": [
|
||||
"nixpkgs"
|
||||
]
|
||||
},
|
||||
"locked": {
|
||||
"lastModified": 1686509156,
|
||||
"narHash": "sha256-zV1DbAvNlfGznLdpCoqSNNXtAHFjzYaO9vY76BV+CnQ=",
|
||||
"owner": "valeriya-matveeva",
|
||||
"repo": "vmatveeva.com",
|
||||
"rev": "4a5799dfa115f05bd09ced89bd962a35a9018978",
|
||||
"type": "github"
|
||||
},
|
||||
"original": {
|
||||
"owner": "valeriya-matveeva",
|
||||
"repo": "vmatveeva.com",
|
||||
"type": "github"
|
||||
}
|
||||
}
|
||||
},
|
||||
"root": "root",
|
||||
"version": 7
|
||||
}
|
||||
67
flake.nix
Executable file
67
flake.nix
Executable file
|
|
@ -0,0 +1,67 @@
|
|||
# reference: https://github.com/kenranunderscore/dotfiles/blob/main/flake.nix
|
||||
# also good: https://github.com/cab404/home
|
||||
|
||||
{
|
||||
inputs = {
|
||||
nixpkgs.url = github:NixOS/nixpkgs;
|
||||
home-manager.url = github:nix-community/home-manager;
|
||||
home-manager.inputs.nixpkgs.follows = "nixpkgs";
|
||||
emacs-overlay.url = github:nix-community/emacs-overlay;
|
||||
emacs-overlay.inputs.nixpkgs.follows = "nixpkgs";
|
||||
sops-nix.url = github:Mic92/sops-nix;
|
||||
sops-nix.inputs.nixpkgs.follows = "nixpkgs";
|
||||
q-sh.url = sourcehut:~knazarov/q.sh;
|
||||
q-sh.inputs.nixpkgs.follows = "nixpkgs";
|
||||
knazarovcom.url = sourcehut:~knazarov/knazarov.com;
|
||||
knazarovcom.inputs.nixpkgs.follows = "nixpkgs";
|
||||
vmatveevacom.url = github:valeriya-matveeva/vmatveeva.com;
|
||||
vmatveevacom.inputs.nixpkgs.follows = "nixpkgs";
|
||||
};
|
||||
|
||||
outputs = { self, nixpkgs, home-manager, emacs-overlay, sops-nix, q-sh, knazarovcom, vmatveevacom, ... }@attrs:
|
||||
let
|
||||
system = "x86_64-linux";
|
||||
|
||||
specialArgs = {
|
||||
inherit attrs;
|
||||
};
|
||||
buildConfig = modules: system: { inherit modules system specialArgs; };
|
||||
buildSystem = modules: system: nixpkgs.lib.nixosSystem (buildConfig modules system);
|
||||
hostAttrs = dir: {
|
||||
settings = import "${dir}/host-metadata.nix";
|
||||
config = import "${dir}/configuration.nix";
|
||||
hw-config = import "${dir}/hardware-configuration.nix";
|
||||
};
|
||||
|
||||
node = dir: with hostAttrs dir; buildSystem [
|
||||
({ config, pkgs, ... }: { nixpkgs.overlays = [ emacs-overlay.overlay q-sh.overlays.default]; })
|
||||
sops-nix.nixosModules.sops
|
||||
home-manager.nixosModule
|
||||
config
|
||||
hw-config
|
||||
./configuration.nix
|
||||
]
|
||||
settings.system;
|
||||
|
||||
server = dir: with hostAttrs dir; buildSystem [
|
||||
({ config, pkgs, ... }: { nixpkgs.overlays = [
|
||||
emacs-overlay.overlay
|
||||
q-sh.overlays.default
|
||||
knazarovcom.overlays.default
|
||||
vmatveevacom.overlays.default]; })
|
||||
sops-nix.nixosModules.sops
|
||||
home-manager.nixosModule
|
||||
config
|
||||
hw-config
|
||||
#(dir + "/configuration.nix")
|
||||
]
|
||||
settings.system;
|
||||
in
|
||||
{
|
||||
nixosConfigurations = {
|
||||
mira = node ./nodes/mira;
|
||||
framework = node ./nodes/framework;
|
||||
knazarovcom = server ./nodes/knazarovcom;
|
||||
};
|
||||
};
|
||||
}
|
||||
109
gpg_public_key.asc
Normal file
109
gpg_public_key.asc
Normal file
|
|
@ -0,0 +1,109 @@
|
|||
-----BEGIN PGP PUBLIC KEY BLOCK-----
|
||||
|
||||
mQINBGRqBOQBEADRhedy8VjKTZuSumg3LcidyZ5tUWAoYwJsCW8Xm80BflsRAjbi
|
||||
Bxl/hcDjJcVzptX8WYp8+LC3TGR3COhw8DQbbZaQBNg9XziRYzzx973b+p/C35St
|
||||
nB2xoaEbv6ofUZaprU51W1JWX0/ulpb4uJqQ5hzyewidcJ5Q9Jg5OmoMfSBv50b7
|
||||
sZxtVA9Fy8z1GL76h+rjACxEaV6lMZZmf5X6eg2pLkUUPkltxDczgsVKBy1ETbnb
|
||||
LFHi7FUKuPDwnMwxa2b7y7XXjmg27P6LXb5whlBv4XV8HP9ngZpKJPMhI96Nsa7W
|
||||
up5k+UoenPwphplTJzdbJH+m1cUH4MFL69UCWnwz58/CTnyOXE0OnEVd3eLPcm81
|
||||
IZ6xedLu/wTM20BxWi4uDgg433M1p4wPC4f8pIf64hVs0DN1YTBDYvpS1PR0X9gW
|
||||
2gaCovi3v/oPTo3WViUAR6kGx/UL38mxW3Qnm5j8E5nIuWdTY2NvMVdEA852XzCb
|
||||
XTNJ9aix8i3y6VMcDLptYNBcqBiabhlxRr76f0ZfUsu3KjFkxPOx3Jo6ne1BYnVX
|
||||
LA2icRlo1cxXrc/9mP6YobNnWozIJ/YE6ZckYUi+y6zjCnH59QUz/P1XKZxormdt
|
||||
puKaBQl8ns/iuO+NtdXDYmfU6WX3DwNd6vC8XMe+qJkX2npfDXfsmw9c+QARAQAB
|
||||
tCZLb25zdGFudGluIE5hemFyb3YgPG1haWxAa25hemFyb3YuY29tPokCTAQTAQoA
|
||||
NhYhBN20QjmZUFI2z1hfmwVgAgycV3wbBQJkagTkAhsBBAsJCAcEFQoJCAUWAgMB
|
||||
AAIeBQIXgAAKCRAFYAIMnFd8G3VjEAC42yOkEG0RSpGX299aQk5kI50zv6HtRv0f
|
||||
byPtqYskNIpPqW2C+ktccRu0auVf5PiAWHWiTiCl0tTk5MT+YuYwBHtfm/8S1pTT
|
||||
ZZLNUHwI/gUYrQ+szwiSC+rYQEZ75WNrSjH9gtjthO9XldMAqMkvZlnfeaLu1ejI
|
||||
PovPvJhijbWGkJqHgIALTxkYmu/AXcAqEfTb1cTjERqf4mxgYmufdofCwzlTlquV
|
||||
rax74nhSNS0alfyrXY1EHe/ESg0/vdC79XJ+rMrZT9/8hOOl6HOWzIgRMCLEC7v/
|
||||
vKpBDzXXEpoLF1c5fakHbcnHO5Mar+y9lh+x9xyEQzxUUqZcI+5cvJIOGbH7x+dt
|
||||
JPGVhDjulmqa+cy3kWPRpWNIjEcdmC1oTGWYO1/odsdVD+Pao29VbN0YQ/p+i0zc
|
||||
UzErJzIQ6X796rqmIF4hRSPc0wykSLFm2zc6HxNBfULXZypqzqn/dcz/851bvFmz
|
||||
UYt9PDAgeeloA5iR/9LRkl8K5CX50OWDkktZ7rW7m1LtqaioyTdUVzP90my7+3r5
|
||||
HMMHUj3mAuZBVBTzIAgG85qYforTZ2f4cD2caTES2HBRQSrGR5B+Hm1KURUPc5Gm
|
||||
gasHzKSRegb/rPWXzSSmT1X4yZUAWTyoYy7uxAW0zcMlqxMgLXjEqNjY08tKOT0/
|
||||
wq+vOmLNI7kCDQRkagV0ARAA5kC8AZl4mdmmYWo59WyONZEN1LtCL1GksFCWUx1R
|
||||
qgNl4RR9hHv/A3DnJlnfGLmEH3Og7dfDB8uVDmf2kungtN5ACGAOPNeACAFY49qd
|
||||
gl94eNGWsh3lIjuhwtsqhTsr7dUD1KoVWAQqT+kiEKewZCB8HrgEC0xjAtwMnGdQ
|
||||
ZqlVKv+vFPvNKM9d9XBJblP4pjuJ/2e1Qee0IC+sp4ffuuCHv5SRZ87FBUb3jkDh
|
||||
ndOktu8pls+I8rOpj5nTQ2fMjj6e5tLXnK3+fOxD96fmNMqa5chj/YOjT9oSGgop
|
||||
TMOqpYckKPWQ9AY4sUEG7maUnMvNxYj4rnRtJDtnhg58wKJIxD9UZxb1jLIN4i//
|
||||
ZCQymOp/gKB0PkhMyy5WkV2ebZGKp+0kjsnQKDV4a/dufel82OQlJaHbfKwebPuN
|
||||
4Ety/fBHUDUI+YCoEJQ8WVvAT+Tt8laMv+7OQEwJnNZLgMOTQ3tpnABGO9yGmuEe
|
||||
SSq51GWdQIjCiuwtLOYPJVf3mRJs45XwbJt98zVrAB3L3xyTwju7AYVuhcDiuQzE
|
||||
46yGhb6imVJ5zf/p65I39n1CQUyC88NDAayF0waU0CIiFmaSqZrpTm51xedL96AX
|
||||
BZgM2HECJvHkirjQI+ew/dj7jzzThvO+4NGRoEoWIquT2KK/pPFVl99gJoIMktj5
|
||||
eFUAEQEAAYkEcgQYAQoAJhYhBN20QjmZUFI2z1hfmwVgAgycV3wbBQJkagV0AhsC
|
||||
BQkB4TOAAkAJEAVgAgycV3wbwXQgBBkBCgAdFiEEuhvGDxMMfoZhHfe7TP4KQvpA
|
||||
nCIFAmRqBXQACgkQTP4KQvpAnCKokQ//ewf8KUDrTKHMYR2lQxTlKH+Cywe7nX1P
|
||||
UqBMKgRZK0AbHJCy+US+lgGFbjt3foPpwFWGp4HZcAbsfoiTKbCbcytD+CxBLIPy
|
||||
8WmCGZljWiuD49LQ4EezMdpx8VbfDWbwFt0qVmwv78Dd7zPZ6UBC4fg1QpfQfNwf
|
||||
Zx1ECIFGhHrPUYzVWMm/20FeVvIgWlAVZGf3k+ydC4n8pLoG5YMTNSIQ34oeAP+J
|
||||
Jz7J1+Tt1Stb6mxWf/uLr/CKZD/V6aOXb+cKId/lhiNemLfTrU40kxeQj0sPPimc
|
||||
9VhShwx+AtxSd1FSLLE0Z6XHr98DPzkrDb0ltGfq61VvdBR1yOK92AHtvkupcHtz
|
||||
cB412lwrTeR6RkKDRj4hKmgcVKTHAQDF3VbGNwbPDamRpAKXvJGYculSg3S5wgCD
|
||||
LcLmnFHWvwfIWPWGfk3FNNZEh/AaoGMQnYht//dhYgpUCVuIn2XJJwgjPIIIvprj
|
||||
o/24pARyYGp2jj9CTKstW+ZDbbNm1J1kYCdyTEug5SucYVDxZi3QRTmbu2d4TAGb
|
||||
nCiXGZoNDd1BfMB0+uvX16Yo80k+8itRWlc7szuIQfGvyM1A2RR3vJtIwH18Lf4i
|
||||
s5GweHfswSWlTJotHhGnmkzhdZ6csVwUz6ECE7VP8uw2HAEEO0WJmwTOstFEuGzq
|
||||
zu2t9KFPzmt6CxAAjttEr66/1NIYZQMJZmEyRMMc5gfSxHBH/h4+CblL2izR9AvI
|
||||
RMDmklkLRS0ydifOWjGaphf5aAEEApVN9Rf9s6hi06F48g9HVkLQgUz1BcixUtbd
|
||||
Ba3RK66I9k8gyYuCxQy8Eo6gLH/YFW8zeWil2W9czLNi5M85JZS2qK2PDrFq/jfy
|
||||
visFU8IAlMJwarQdjqiyk/z+acSc3rCvlY4mm34kDl4Dey9Eug4TXJ94AXb68SOw
|
||||
DCtRw7OIH62eYuMfYWB7atYGiRnm6O6a/BwYm0t3ejah7kWcJNcVz9qFiGWmAeBa
|
||||
M8EF6rg+l6UuynPjLaoHBZROuRZ9JSmO7CJiZg6S2nGCncGpLI/AE74vKktoTrB5
|
||||
Ogyis4r7jhi/tFOANMXGsXHwFukI3aFYwF9vhzyT/nuZ99+BvvEHxCLLvD/lIQs2
|
||||
FBwMxW7rCFY/qxYwn0bJjlTNqmv7MlOsG1qHED6D6bc7qELBLNmlYSSMT5c4wa9m
|
||||
xCPru1tpwSjoTd2YLR2cAgio1vxuFB9SpwmldYLtlzfWnbvTf2Ow1OIbM8+Ov2f3
|
||||
XMPAkz6rgwYUK+mdskaY/RQd7XjvvlAqTf6ewYzgpmZozNt5aLbm5R8MF5dBwLr9
|
||||
28qYQ/xiEDRkuFdY6+3W8iH6LP9jIC+3XU4cfomszyaEesVskv1Pj0bZg/C5Ag0E
|
||||
ZGoF9AEQAL7TYMmTZSLcyoS5bJ5W8PN9gtq2LTEOaKuALoQMC7lWhL1cRfY3Fo1O
|
||||
rD6MaUUkrqIb6Vne2cAfwp/YK5MzbPaGuFvtbm6UxhC1BSr+qLbzocpN0PuPQTd/
|
||||
0N2KIWGkZt4v6I3hEvM3WH+prjlDDyJIdN9U15MesTEq7/t3C1bK+kjPfoDW+EkL
|
||||
eU5FpfFgZ3GA5CpmATb5gP6IWBgSj1sptyU/4l7/ZltII8i9ZVOUfqWnu3YQomTj
|
||||
jLR4RYJLlraUk2i2LVvOjjDoSjMjY6f6aRVXmMmBiyiWcsTF9nlfELIZg2SgGOUr
|
||||
fGXMSXP8s0lDjqeeZLFqFTHqT6M1GuksY/svT7pB+ccj2e6WLiyyT+cUaYU6Wigt
|
||||
cvuXYSLMvBJ3gBtA782m44zQF6Cyc0M5WPnxSD5hiSngHd9eooecuwf9Gs4ojyh3
|
||||
NNx3+MYvLiFiE4nnswcwkE7jwU7uX8dPs+VQDfT7s/DARJyefRB6QIrxLJHWjnsy
|
||||
4hq6M2tu8hS5MtcVUBG/mNNzTkyYr7JY3IYw3y6CEgvQmM+eroG2CnuUCIJj9gSu
|
||||
7ei9ZGDXrgWfDRqaXPDkj9fo1RgsPPsV67UNNC0OF+kuDsd0OUdvv/QsE1qakILJ
|
||||
nipnIOdALI2wlPfzvY/+M/gc+oszimoOqCdtTslwgBFPk+KCzu4LABEBAAGJAjwE
|
||||
GAEKACYWIQTdtEI5mVBSNs9YX5sFYAIMnFd8GwUCZGoF9AIbDAUJAeEzgAAKCRAF
|
||||
YAIMnFd8G9tUD/wN0gXEf2NB3m5OVcxw6NAc420r+Q3n/Em+VbULhiMFPSFybzL9
|
||||
sq52QWJ8t44J/B3dVT0HjV5ClF+2j2h5KqigYJW2qhnMtVphr3UocfUyZTmtQSa4
|
||||
hJ95aWTVe6Nq0X0PEnorC1fNVrTv+QN11OplG6Bqh/9og3JYBdAWe78TPVJHwPta
|
||||
5fvl4yRq/iJAP8NwigDTySn7nEyoCHj/xaru9EyDvQVLJZF3PzvwhgNbu0ElRduZ
|
||||
SqpAhEFo7B+UlOM/jrbz3cYWYVqo3leDh4XdRIX6J3zqfJkby7AfRnZcIk5+LIjM
|
||||
nbvcoKdDaELX6gGMiblDRJnDcgw7Bt+Mkex3XaIiYoD1Y36TyV+EOTrpOHz9+jij
|
||||
Oo7gtm9Zm5v6QakB+PVFT1dSMc1DJAOlSrqui60tLEv99/xcZ4KZu3cW/wzCGBf0
|
||||
bh8GWfLmkHPZNtE30E6TmUfrAus9OSst7kQr2HCPWhiuOgteh33w2UGHPmLYUx1x
|
||||
9C8KsfR13fwFL7qrqA2EaKMj5DN6+18EM0oFb39KSD3frvO1DZSc6hIt2VVCG14j
|
||||
V724J88cjJJ8N+7EWz6zujntmY0ybxabzl28KC53ga3A+e1/+HcNxv4u5DQRCHkV
|
||||
iRw+Ye6ol35ju8iKHqA8BPRa4HT/qNGf4fXEsXeqfjWLJwQcmFFuyUdf3rkCDQRk
|
||||
agZZARAAr7G+8P0WRvZh74noIEoDP3dGg0B7LuwKE2VQfItIzePMLJv2mihl8QaJ
|
||||
KPDjBLsLxvtuzv1tY1mcLzdXtxEn+ZkY4nU3s39fLI5ir9zbqdeyCiUdHq9dzGjz
|
||||
I3lSitHfuh+5x1oL/Ro06eDx3weDBC0AJ5sbsE12zTBpF3IS26Ok2UIOSfSdhvGI
|
||||
oZsRKrdxIyQAgrQJHgNgq3m65fwLOv0n8TZNjrDe6dEUYW2RwecKLhADHwUvZWTn
|
||||
55zPfyUMTFWVp2dnoasc+RFSF+xH7/rnkKlfNW8sRYbkU91dxM1h7uONxZI6l3rf
|
||||
8gmlF8bL2iYDxTK6wsxoxgxTKHFsp9UE6HF9yZFYzrdxu+5wV4nasBP/bSNo3QPo
|
||||
R338XqbhnYC/xo7+phTEy4ImZLsLh3IkkvCF46Fg0pF9vQVMyZOOJ2ml4GBTl0rT
|
||||
OwlGKyqgs/Ket5hBy2ZKCxRPDlKbFk4wsQaoGRk3HDH5M3l2ESDiezadujllmXwO
|
||||
b88cWtij9rK91BKHtnST0svqVPLsNCAVQOSN0v+AV6rr2LXLxkMoKNywMhU2hCTZ
|
||||
Mkn/Ext6HTtXz5e0UcpUzLCbd4QV/S1sRgRvvGyF01mvmV4397SeqExN/fQSHTgk
|
||||
VcjknxNwhsog4fBFDJCMGeOL+w/+phLZVgbq9LIxCDMQas34SQEAEQEAAYkCPAQY
|
||||
AQoAJhYhBN20QjmZUFI2z1hfmwVgAgycV3wbBQJkagZZAhsgBQkB4TOAAAoJEAVg
|
||||
AgycV3wbJdAQAIZgZH7Zuhs1Icv8J/Oufs6Gv9yvGA39eNW+CMA8lejV9l0sSryI
|
||||
X+jqa3KCtyaCvIppJq6SyfDQjM6CsVxMsXPdCosIY11xDbacSLoZJZJlXjTCxPKd
|
||||
KQdMgu6gp8D1p3/J0cOE0P2L4khUq5y5/W2h6R8D13qPsjgeHixMwof4UNAqzcWA
|
||||
gOIkUR9nguvpXsLbGD2EiZ/zDnv9LhTYWt171/w4AiithZk7FyO1fBcd+1RaVmZx
|
||||
odFZi/0U2rm8aKcBLzL7PD0bPAaPxgVxaaOCtBisZ+l9Q5etDGTz1dLslF8P/ISD
|
||||
vMRgMmg2pNewR3DSNUa3GGUWgxZYd4ndarwZGEec+/zSMLqNh2wd3fw5Hi0SRR4/
|
||||
zUbeXPW1DPvMDZHxfVoS5hlwmo+BdZ1M5u5thgMsXI9nyuF7jIGrl4a+aDECNa9f
|
||||
Vzutbm9DGPZ+9j21nbljGPOV7q+hDmYGD+KC1+nOzXiB9SYad+gF2yPo8xZNyRWL
|
||||
CM9zT0dxamzgW8W0I3AxXKoTP1p6UstmuAdIczu9kd4N7T/dgA6oMDchNqEBLZ+G
|
||||
2XvMe6dH8kYKZBLYi59hXUb5vX1YWPJRlNjHASsBSWl8yVRwILPawNnoOUS5ehxA
|
||||
YXNBqvlCHex34MNWDC9nXPHYwhJ/7RT4/oSkDdITh22uBfw7W2ntZkaF
|
||||
=Wr86
|
||||
-----END PGP PUBLIC KEY BLOCK-----
|
||||
22
nodes/framework/configuration.nix
Normal file
22
nodes/framework/configuration.nix
Normal file
|
|
@ -0,0 +1,22 @@
|
|||
{ self, config, lib, nixpkgs, pkgs, ... }:
|
||||
|
||||
let
|
||||
|
||||
in
|
||||
{
|
||||
# Bootloader.
|
||||
boot.loader.systemd-boot.enable = true;
|
||||
boot.loader.efi.canTouchEfiVariables = true;
|
||||
boot.loader.efi.efiSysMountPoint = "/boot/efi";
|
||||
|
||||
# Setup keyfile
|
||||
boot.initrd.secrets = {
|
||||
"/crypto_keyfile.bin" = null;
|
||||
};
|
||||
|
||||
networking.hostName = "framework";
|
||||
# Enable swap on luks
|
||||
boot.initrd.luks.devices."luks-20e33e39-6349-4763-ab23-c14cde35055f".device = "/dev/disk/by-uuid/20e33e39-6349-4763-ab23-c14cde35055f";
|
||||
boot.initrd.luks.devices."luks-20e33e39-6349-4763-ab23-c14cde35055f".keyFile = "/crypto_keyfile.bin";
|
||||
|
||||
}
|
||||
44
nodes/framework/hardware-configuration.nix
Executable file
44
nodes/framework/hardware-configuration.nix
Executable file
|
|
@ -0,0 +1,44 @@
|
|||
# Do not modify this file! It was generated by ‘nixos-generate-config’
|
||||
# and may be overwritten by future invocations. Please make changes
|
||||
# to /etc/nixos/configuration.nix instead.
|
||||
{ config, lib, pkgs, modulesPath, ... }:
|
||||
|
||||
{
|
||||
imports =
|
||||
[ (modulesPath + "/installer/scan/not-detected.nix")
|
||||
];
|
||||
|
||||
boot.initrd.availableKernelModules = [ "xhci_pci" "thunderbolt" "nvme" "usb_storage" "sd_mod" ];
|
||||
boot.initrd.kernelModules = [ ];
|
||||
boot.kernelModules = [ "kvm-intel" ];
|
||||
boot.extraModulePackages = [ ];
|
||||
|
||||
fileSystems."/" =
|
||||
{ device = "/dev/disk/by-uuid/ba814b49-32a4-469a-867d-e00c697c25dd";
|
||||
fsType = "ext4";
|
||||
};
|
||||
|
||||
boot.initrd.luks.devices."luks-8a5e5d06-1728-4275-9ca6-0a9c8e959796".device = "/dev/disk/by-uuid/8a5e5d06-1728-4275-9ca6-0a9c8e959796";
|
||||
|
||||
fileSystems."/boot/efi" =
|
||||
{ device = "/dev/disk/by-uuid/9818-F10B";
|
||||
fsType = "vfat";
|
||||
};
|
||||
|
||||
swapDevices =
|
||||
[ { device = "/dev/disk/by-uuid/eb01f39e-e4c2-4bff-8994-b859e338343c"; }
|
||||
];
|
||||
|
||||
# Enables DHCP on each ethernet and wireless interface. In case of scripted networking
|
||||
# (the default) this is the recommended approach. When using systemd-networkd it's
|
||||
# still possible to use this option, but it's recommended to use it in conjunction
|
||||
# with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
|
||||
networking.useDHCP = lib.mkDefault true;
|
||||
# networking.interfaces.wlp170s0.useDHCP = lib.mkDefault true;
|
||||
|
||||
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
|
||||
powerManagement.cpuFreqGovernor = lib.mkDefault "powersave";
|
||||
hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
|
||||
# high-resolution display
|
||||
# hardware.video.hidpi.enable = lib.mkDefault true;
|
||||
}
|
||||
4
nodes/framework/host-metadata.nix
Normal file
4
nodes/framework/host-metadata.nix
Normal file
|
|
@ -0,0 +1,4 @@
|
|||
{
|
||||
system = "x86_64-linux";
|
||||
host = "framework";
|
||||
}
|
||||
117
nodes/knazarovcom/configuration.nix
Normal file
117
nodes/knazarovcom/configuration.nix
Normal file
|
|
@ -0,0 +1,117 @@
|
|||
{ config, pkgs, ... }:
|
||||
|
||||
{
|
||||
imports =
|
||||
[
|
||||
./hardware-configuration.nix
|
||||
];
|
||||
|
||||
boot.loader.grub.enable = true;
|
||||
networking.hostName = "knazarovcom";
|
||||
boot.loader.grub.device = "/dev/vda";
|
||||
|
||||
|
||||
users.users.knazarov = {
|
||||
isNormalUser = true;
|
||||
extraGroups = [ "wheel" ];
|
||||
openssh.authorizedKeys.keys = [
|
||||
"sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIJkgpPDojl4RtsuFLIsHkH/19s3trYljdn/Jmbb3FCHNAAAABHNzaDo= knazarov@framework"
|
||||
"sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIO7W7yDKxAj9u1hu3zsZMJW+0HUnA/C/rkbuzkQantkaAAAABHNzaDo= knazarov@mira"];
|
||||
};
|
||||
|
||||
environment.systemPackages = with pkgs; [
|
||||
vim
|
||||
sops
|
||||
goaccess
|
||||
];
|
||||
|
||||
services.openssh.enable = true;
|
||||
services.openssh.settings = {
|
||||
PermitRootLogin = "no";
|
||||
PasswordAuthentication = false;
|
||||
};
|
||||
|
||||
security.pam.enableSSHAgentAuth = true;
|
||||
security.sudo.wheelNeedsPassword = false;
|
||||
nix.settings.trusted-users = [ "@wheel" ];
|
||||
|
||||
services.nginx = {
|
||||
enable = true;
|
||||
virtualHosts = {
|
||||
"knazarov.com" = {
|
||||
enableACME = true;
|
||||
forceSSL = true;
|
||||
root = "${pkgs.knazarovcom}/srv/knazarov.com";
|
||||
|
||||
locations."/.well-known/matrix/server" = {
|
||||
extraConfig = ''
|
||||
default_type application/json;
|
||||
return 200 '{ "m.server": "matrix.knazarov.com:443" }';
|
||||
'';
|
||||
};
|
||||
locations."/.well-known/matrix/client" = {
|
||||
extraConfig = ''
|
||||
default_type application/json;
|
||||
return 200 '{ "m.homeserver": { "base_url": "https://matrix.knazarov.com" } }';
|
||||
add_header "Access-Control-Allow-Origin" *;
|
||||
'';
|
||||
};
|
||||
};
|
||||
"vmatveeva.com" = {
|
||||
enableACME = true;
|
||||
forceSSL = true;
|
||||
root = "${pkgs.vmatveevacom}/srv/vmatveeva.com";
|
||||
};
|
||||
"matrix.knazarov.com" = {
|
||||
enableACME = true;
|
||||
forceSSL = true;
|
||||
locations."/_matrix" = {
|
||||
proxyPass = "http://127.0.0.1:8008";
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
security.acme.acceptTerms = true;
|
||||
security.acme.certs = {
|
||||
"knazarov.com".email = "mail@knazarov.com";
|
||||
"vmatveeva.com".email = "mail@knazarov.com";
|
||||
"matrix.knazarov.com".email = "mail@knazarov.com";
|
||||
};
|
||||
|
||||
services.dendrite = {
|
||||
enable = true;
|
||||
environmentFile = config.sops.secrets.matrix_registration_secret.path;
|
||||
settings = {
|
||||
global = {
|
||||
server_name = "knazarov.com";
|
||||
private_key = config.sops.secrets.matrix_key.path;
|
||||
jetstream = {
|
||||
storage_path = "/var/lib/dendrite/nats";
|
||||
};
|
||||
};
|
||||
client_api.registration_shared_secret = "$REGISTRATION_SHARED_SECRET";
|
||||
};
|
||||
};
|
||||
|
||||
systemd.services.dendrite = {
|
||||
serviceConfig.SupplementaryGroups = [ config.users.groups.keys.name ];
|
||||
};
|
||||
|
||||
sops.defaultSopsFile = ./secrets.yaml;
|
||||
sops.secrets = {
|
||||
example_key = {};
|
||||
matrix_key = {
|
||||
mode = "0440";
|
||||
group = config.users.groups.keys.name;
|
||||
};
|
||||
matrix_registration_secret = {
|
||||
mode = "0440";
|
||||
group = config.users.groups.keys.name;
|
||||
};
|
||||
};
|
||||
|
||||
networking.firewall.allowedTCPPorts = [ 80 443 ];
|
||||
# networking.firewall.allowedUDPPorts = [ ... ];
|
||||
|
||||
system.stateVersion = "23.05";
|
||||
}
|
||||
32
nodes/knazarovcom/hardware-configuration.nix
Normal file
32
nodes/knazarovcom/hardware-configuration.nix
Normal file
|
|
@ -0,0 +1,32 @@
|
|||
# Do not modify this file! It was generated by ‘nixos-generate-config’
|
||||
# and may be overwritten by future invocations. Please make changes
|
||||
# to /etc/nixos/configuration.nix instead.
|
||||
{ config, lib, pkgs, modulesPath, ... }:
|
||||
|
||||
{
|
||||
imports = [ ];
|
||||
|
||||
boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "virtio_pci" "sr_mod" "virtio_blk" ];
|
||||
boot.initrd.kernelModules = [ ];
|
||||
boot.kernelModules = [ ];
|
||||
boot.extraModulePackages = [ ];
|
||||
|
||||
fileSystems."/" =
|
||||
{ device = "/dev/disk/by-uuid/3c286fff-9eaf-4839-9b29-5c686d33cf49";
|
||||
fsType = "btrfs";
|
||||
};
|
||||
|
||||
swapDevices =
|
||||
[ { device = "/dev/disk/by-uuid/976561a7-9e30-42cf-8598-97f1d93cafed"; }
|
||||
];
|
||||
|
||||
# Enables DHCP on each ethernet and wireless interface. In case of scripted networking
|
||||
# (the default) this is the recommended approach. When using systemd-networkd it's
|
||||
# still possible to use this option, but it's recommended to use it in conjunction
|
||||
# with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
|
||||
networking.useDHCP = lib.mkDefault true;
|
||||
# networking.interfaces.ens3.useDHCP = lib.mkDefault true;
|
||||
|
||||
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
|
||||
virtualisation.hypervGuest.enable = true;
|
||||
}
|
||||
4
nodes/knazarovcom/host-metadata.nix
Normal file
4
nodes/knazarovcom/host-metadata.nix
Normal file
|
|
@ -0,0 +1,4 @@
|
|||
{
|
||||
system = "x86_64-linux";
|
||||
host = "knazarovcom";
|
||||
}
|
||||
44
nodes/knazarovcom/secrets.yaml
Normal file
44
nodes/knazarovcom/secrets.yaml
Normal file
|
|
@ -0,0 +1,44 @@
|
|||
hello: ENC[AES256_GCM,data:Bv1MBhqWVzeDc0Qx0n3QagUbEUDUjCARZNiQ4qYnX9PsiQvHN21vsBiu9blBaA==,iv:rhxag0W9EER7lNRY9WsrvOyxxvqC7DSjgI9KR71hjm4=,tag:qJoMp8G0jQGBeoakBR+Zlw==,type:str]
|
||||
example_key: ENC[AES256_GCM,data:J09ZRQJg34iARNVGlQ==,iv:tFtCB+FfSLJad4oQNJsyOE9lz6y3Pj8nNq4x5WswNNs=,tag:8+OWJHmXzUrDl6qrSvWlYA==,type:str]
|
||||
matrix_registration_secret: ENC[AES256_GCM,data:YbEp3LRrMs3gGG9tE1CCXXWoFdV9hXaTx4/VOHwSqyxAlQWnBXGUHwI6R1fE0e6ZzLT2+9g=,iv:YXLG/GsfRxSMwLd0Trl7xjuVPdAe7krEbh5YxAYzOb8=,tag:DYoEoMGH76pkVr6DAzjj+g==,type:str]
|
||||
matrix_key: ENC[AES256_GCM,data:+7Ru9Q57kECDCPp/SjvdIDFGveFJ8XI8/Dv+tTwpUdRt6yNeXOT1his8kP/F9Bod5LZLKD+3mZBJV39GCfl7Mha1pQowWj3UGLwUu1o/wJ2G83YSoa9leJc9Ug9vBSixAsP34g9lUTD/zrlvQtCNjZbtqx3D4B4DTUWUmN8jiE1ah+zXoO4U5YY=,iv:gUdM5cEh+LMP++1I7F/+148u7HBY3SKQvGVcVX6bL/U=,tag:evbi9tmmlbklrpaB1tvezA==,type:str]
|
||||
sops:
|
||||
kms: []
|
||||
gcp_kms: []
|
||||
azure_kv: []
|
||||
hc_vault: []
|
||||
age:
|
||||
- recipient: age1esdg28lplhhvrj6vmqu9x0adyxj5trp2dp7my3k57kjhkstkk9cqkg5qkj
|
||||
enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5ODlUK3d2RkoyQU11MFlT
|
||||
SW1UeWhzYmxDQW40UkMyUmpGNGpJZjh3SldZCjNTR2NiajUrT1VybWRYbTNrZUs5
|
||||
UE9kQ0pOb2FrSzk0d2tiNGtMQW83K1UKLS0tIDdKUE9CRlZwN0hMcXdhdWRvNXFh
|
||||
anBCR0NXVlhLSXVCc2swTzNqOUFOSkUKyIRL9aCv3m6Qz7OaE7dSYzFYNeeFEprW
|
||||
/9XLB4FzTCK3xoBeeFGevm8Z6z9k+2eku5dQUjAZ5FrVZLPM+fUgRw==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
lastmodified: "2023-06-11T20:37:31Z"
|
||||
mac: ENC[AES256_GCM,data:7ke0oXjI31ocCqOxDriTOIVTm4Y/vsNKrsS1GioenIzzUBmkc+cFABuczAbkLMr7C0AEgMdHEA57e56xArQWJTNb0juBsA4oBWzIYxm/sYhZRdh29Mbp3zoJsNkLeiSi9JjF5Rptr5k8x01CV5swthStGUMQQ0TfbAQmqG7blBg=,iv:DSMu0htVdJ02yIqm6OTFsIejV901PryF9D6U/K5XqPk=,tag:yo1h+zrv5RFL/NniiZ70Bg==,type:str]
|
||||
pgp:
|
||||
- created_at: "2023-06-11T20:10:06Z"
|
||||
enc: |-
|
||||
-----BEGIN PGP MESSAGE-----
|
||||
|
||||
wcFMAz3KbDTqPV7IAQ/6A4DxTlvQhUDgjBwnYmXSKIjcSo8baOoPNrkYDpAOdMFd
|
||||
IzQ6gVHwQWKTifuvv6rWArwDW1vD6pC8urmvCB0kzoGPr/4oX/K+881aTREJKmIe
|
||||
DMZd1kz9N+hw92fJ1SCwYPgTwdjm2+e1yaHl1SzM/N1TgO1Li0LA9ZH+zxwheLBw
|
||||
zJtdX6ND894MiptITBfNhkXKxj1YpyZvZeoFbR6Tj2fnyTPxgNluHKDXVpuY8m7f
|
||||
Ma/rdd2eXcOJBpI2iVnkgVqnwjP+lSpYAYvjYeAoe6z+0Cmh8/qpqS1UrdhqUUgI
|
||||
An75cYeUV9XjuozuvyUcTvHaOFygDK++W8Q/50s9aniz9kyy88fV0PZH1TsByu9N
|
||||
wi3PTYc3VpkeIyDz+T4Xk++8jCWyUXBS6LB+9AxTFGRmnjv5u93JQ7m+82lkhpR/
|
||||
DVgdGZKpD2wUvfF1pCGq3qXL/Cy1EOs5PDkbirmqvMLgkcRNn4+cuJqbLsHR+T5F
|
||||
hngtOKFhcgaFtrNLN8p59PTvW4xI+CkAkhKFQs7MCS3SjtojGqVxeKJQlTws3P6P
|
||||
QRxbNlMh2YagSAhVHl2uJGOYey0ylvU0ROZFL4F4FQWEcGv7zHBxGr9d6yv9ygrF
|
||||
6KO25T1y8w6jnptZfnGTaMW83stOLGUyRRp7x3OxfOZbDabvnLwzqKyfPgNXv03S
|
||||
UQENFxwrbTf+YiKpzF9Z99CmMEqVEJBZz9cO5jnBffN2/bRb8KNaImiDge759QSn
|
||||
cpfJadxIM1KFbj54Y0CS8GuRN2ycl8myhqGsC0D1W0kFXA==
|
||||
=rJP2
|
||||
-----END PGP MESSAGE-----
|
||||
fp: DDB4423999505236CF585F9B0560020C9C577C1B
|
||||
unencrypted_suffix: _unencrypted
|
||||
version: 3.7.3
|
||||
22
nodes/mira/configuration.nix
Normal file
22
nodes/mira/configuration.nix
Normal file
|
|
@ -0,0 +1,22 @@
|
|||
{ self, config, lib, nixpkgs, pkgs, ... }:
|
||||
|
||||
let
|
||||
|
||||
in
|
||||
{
|
||||
# Bootloader.
|
||||
boot.loader.systemd-boot.enable = true;
|
||||
boot.loader.efi.canTouchEfiVariables = true;
|
||||
boot.loader.efi.efiSysMountPoint = "/boot/efi";
|
||||
|
||||
# Setup keyfile
|
||||
boot.initrd.secrets = {
|
||||
"/crypto_keyfile.bin" = null;
|
||||
};
|
||||
|
||||
networking.hostName = "mira";
|
||||
# Enable swap on luks
|
||||
boot.initrd.luks.devices."luks-8aa0584a-df60-42c3-adc2-d88b85544c85".device = "/dev/disk/by-uuid/8aa0584a-df60-42c3-adc2-d88b85544c85";
|
||||
boot.initrd.luks.devices."luks-8aa0584a-df60-42c3-adc2-d88b85544c85".keyFile = "/crypto_keyfile.bin";
|
||||
|
||||
}
|
||||
50
nodes/mira/hardware-configuration.nix
Normal file
50
nodes/mira/hardware-configuration.nix
Normal file
|
|
@ -0,0 +1,50 @@
|
|||
# Do not modify this file! It was generated by ‘nixos-generate-config’
|
||||
# and may be overwritten by future invocations. Please make changes
|
||||
# to /etc/nixos/configuration.nix instead.
|
||||
{ config, lib, pkgs, system76, modulesPath, ... }:
|
||||
|
||||
let
|
||||
|
||||
in
|
||||
{
|
||||
imports =
|
||||
[ (modulesPath + "/installer/scan/not-detected.nix")
|
||||
];
|
||||
|
||||
boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "ahci" "usb_storage" "usbhid" "sd_mod" ];
|
||||
boot.initrd.kernelModules = [ ];
|
||||
|
||||
boot.kernelModules = [ "kvm-amd"];
|
||||
|
||||
boot.kernelParams = [ "mem_sleep_default=deep" ];
|
||||
|
||||
fileSystems."/" =
|
||||
{ device = "/dev/disk/by-uuid/1a71ab59-b65c-4866-a76c-a1372cc30cb8";
|
||||
fsType = "ext4";
|
||||
};
|
||||
|
||||
boot.initrd.luks.devices."luks-ad5fe721-9e57-45ae-bc7a-9724590d97e8".device = "/dev/disk/by-uuid/ad5fe721-9e57-45ae-bc7a-9724590d97e8";
|
||||
|
||||
fileSystems."/boot/efi" =
|
||||
{ device = "/dev/disk/by-uuid/36AD-6828";
|
||||
fsType = "vfat";
|
||||
};
|
||||
|
||||
swapDevices =
|
||||
[ { device = "/dev/disk/by-uuid/9ea6aaab-0e78-411f-90fa-5161d897419b"; }
|
||||
];
|
||||
|
||||
# Enables DHCP on each ethernet and wireless interface. In case of scripted networking
|
||||
# (the default) this is the recommended approach. When using systemd-networkd it's
|
||||
# still possible to use this option, but it's recommended to use it in conjunction
|
||||
# with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
|
||||
networking.useDHCP = lib.mkDefault true;
|
||||
# networking.interfaces.enp16s0.useDHCP = lib.mkDefault true;
|
||||
# networking.interfaces.enp21s0u4.useDHCP = lib.mkDefault true;
|
||||
|
||||
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
|
||||
hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
|
||||
|
||||
# for mira
|
||||
hardware.system76.enableAll = true;
|
||||
}
|
||||
4
nodes/mira/host-metadata.nix
Normal file
4
nodes/mira/host-metadata.nix
Normal file
|
|
@ -0,0 +1,4 @@
|
|||
{
|
||||
system = "x86_64-linux";
|
||||
host = "mira";
|
||||
}
|
||||
53
secrets.yaml
Normal file
53
secrets.yaml
Normal file
|
|
@ -0,0 +1,53 @@
|
|||
hello: ENC[AES256_GCM,data:+LPt8J+Ks1m10+zZ2Q96r3K2W6Yeng7M7+c2TYDQ+/4AJl6Xc6hVnU8PKk28RA==,iv:v3B/CcFFA7kuuPcYDa5qha0ZrtskW5p443Zm8kM7xqA=,tag:r8Y9uf1dmp+VfJOHFG75PQ==,type:str]
|
||||
fastmail_password: ENC[AES256_GCM,data:tHr8PqIg9DigRBu2bgjUeg==,iv:NI9bENFPuKcOt1cd2kg2DKU22J1dJ+3mK7UoceZagR4=,tag:oEgeQb1iLKisOqHi9Ds7xg==,type:str]
|
||||
github_token: ENC[AES256_GCM,data:E1+wrI5VUlnsqfKNH6fY7IXqHIiagAByLYCfIfdd2+HcvniAvZzaIyKB3nma5eks3csN5A9XgYXRb09lELroW00obmIWbWZPdFhDccHRtVOqFq/r+x27O/3MAkDqID5mc8xD8SqWUibr9UZfXjFcXC4bx7+a4pyy45akz9RLIJRVKDzxMBGmZ/wQcuFS9uy2Pv2yWRL7q4olzvc/kzNFRWCLU7ThIAJSIx//NluOE8xjsA==,iv:Cdc2wwGdXprch1hHd0CwJM6vUAYmfhI4FpcKjcoIZYY=,tag:so8BJtjHGcGzayPqMwy43A==,type:str]
|
||||
mullvad_account: ENC[AES256_GCM,data:CO4wl2vNAMEC9oy37nIrpw==,iv:a3w64u8XQ/tihIDxIPPtdZ6F7dldLPvRzGUs1MpVe4M=,tag:HQxJVuGEvI0fVj8yGptbdA==,type:str]
|
||||
sops:
|
||||
kms: []
|
||||
gcp_kms: []
|
||||
azure_kv: []
|
||||
hc_vault: []
|
||||
age:
|
||||
- recipient: age1le98v5v0xnlnc4y0ydgj9kwfftt8g5wduws8zsadgc97pj0fzecs55tjvz
|
||||
enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXR0U3YzJ0cmlJT3kyM1RX
|
||||
TFVqYXd2ZExQbjlYV25zOTRRdURZMFB6aFhvCldENzRReWFUVC9Eb3Y5YjZ1dTN3
|
||||
SFBMb2hHUU1hbHUxaTlmQ1g0MldvS1EKLS0tIGlIVi9VTFpWa2tUL0dNTkdxcUh6
|
||||
Wkw4bzhQQkZTL2NWWkdZZG56SXIzUjAK1BAmCn/xthTFMuGi+wfxtmGbl8OGDWVd
|
||||
eK292+qPudunqhhkuCvRCSO4A/MOIYcuiGN4IgIpw3rt8IdcypjOzQ==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
- recipient: age1rkmhgep2jhdnma24x7ufzr686cwq6p3nk7mmedykan0d7c36xaus2y58sw
|
||||
enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOWnR2b3F5SWp3VlJHQXB1
|
||||
WlJhWFJ4ZWZsd3FvaVBYMzlSNnE1R3JQWEdZCnh4bjNOVytBWE1DT1JZN1ZCYnN5
|
||||
TXB2NDFnSldQRlJBOWtjTStBT0cyS3cKLS0tIGdBY2YyWm83dVN0bk4vOVhQRS9x
|
||||
U3loV2xDMkM5SWNXRDJobDloL0FVUUkK3OP7KvcKkE8mJ880dm6LMFZUxELjl8/P
|
||||
6+q8qAYiAvl0Cbd4GzkNpUuBbLlFFWfFmC0vbgg8gyZ6xI5AFhHAPw==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
lastmodified: "2023-07-09T20:32:29Z"
|
||||
mac: ENC[AES256_GCM,data:c9+qPvLsiCgZPZ2vguQGCb+5LEr8cg32VGCyUvqiqICq5xtMZeDK7Uj8n0yLj0USaZ7bttUiI2CBpEl6anRSrXUGoJwmvJboXVi9/Xex5tv45hvdGA4Hd3P88K8kVRankOVhpogBRzcOpp4JsrtgxDTKabekpnaEr2l7H+5sXDU=,iv:no7t2FUwUaQWiuDDHe3Z5C5zoG5rnMeD9ar8PhtxyE4=,tag:AJYWdPdRGhG5epTsiD+cTw==,type:str]
|
||||
pgp:
|
||||
- created_at: "2023-06-10T01:03:11Z"
|
||||
enc: |-
|
||||
-----BEGIN PGP MESSAGE-----
|
||||
|
||||
wcFMAz3KbDTqPV7IAQ/9ExkcLHiNnRPI9tls9yD6/FhLDoNnQDeDlezcHarqGXF8
|
||||
971t2odI+vHFMNfq3xNqCbIBsycwP9FTey3P1bMnUuZ7Pp1kFc4Z3DFjm3nsnoky
|
||||
PnoRfPJzETOmwb4TExv6XxlUAnjzPWkRrhWL4sacg9ia+LIa1mBzHkc2h0ldNcDF
|
||||
TkG/tbPR6raJcd4LgVvPJLpBe7FUQAQDsQ3mozt364KnZ+poltR5sf4kttAhfgVt
|
||||
lbkbFleOsIc1mhmQSMbi4ta6ofc96XPyHN7rwAGWIrhxUl9oGpnLrlxNXxytNYLG
|
||||
hokRnFgi5DQMIhzO2DJb3Z88+92+xpub5IOhUhn5vJJcT74NNXcGd9/1b4srLdDt
|
||||
NoFtKEZQWBys0u3wrJUW3Lm/ouEmDPuQbSZlV3/dddMF6Vx4KixU/03yg3fBuHUF
|
||||
f7zhw1l1fGuKv4FFLGgAShMsqPOK+KZswHQr2JSE1tv69VbD2C11wmf2lr5tmJBM
|
||||
Dy3HNPsIFsmzkAVt5be0ehZbyF91Gwjg89TO4gV8PN2gSVWxBwk5n7jKpoKOta3e
|
||||
PYyC/z/OVp0HayxZOIShhdY1N9lxAYXO1kS8AhpGttAj5Xd4jm3gr6O8+6sM8yqL
|
||||
BYKR2g/dnPm1QcChPTNxSgzmYxhK0Rud4mNXw/RB9DPTHlBbjkt4pDvrm/UvJZXS
|
||||
UQHNnqrqjq3U8cLpP6x1wGexp+VilezFpzzrR9B9nLWVvskbfeUy3CoIq4Kedzoh
|
||||
9l1/byLB8CIcnDz7ewA3wZsCYCuP+np8uvbMx9srJVia8Q==
|
||||
=3Z1t
|
||||
-----END PGP MESSAGE-----
|
||||
fp: DDB4423999505236CF585F9B0560020C9C577C1B
|
||||
unencrypted_suffix: _unencrypted
|
||||
version: 3.7.3
|
||||
9
switch.sh
Executable file
9
switch.sh
Executable file
|
|
@ -0,0 +1,9 @@
|
|||
#!/usr/bin/env bash
|
||||
|
||||
if [ "$1" = "mira" ]; then
|
||||
nixos-rebuild switch --use-remote-sudo --flake `pwd`#mira
|
||||
elif [ "$1" = "framework" ]; then
|
||||
NIX_SSHOPTS="-t" nixos-rebuild switch --target-host framework --use-remote-sudo --flake `pwd`#framework
|
||||
elif [ "$1" = "knazarovcom" ]; then
|
||||
nixos-rebuild switch --target-host knazarov.com --use-remote-sudo --flake `pwd`#knazarovcom
|
||||
fi
|
||||
BIN
wallpaper.jpg
Executable file
BIN
wallpaper.jpg
Executable file
Binary file not shown.
|
After Width: | Height: | Size: 122 KiB |
Loading…
Reference in a new issue