legacy artemis config - needs refactor

hosts/artemis/configuration.nix

@@ -0,0 +1,47 @@
+{
+  pkgs,
+  inputs,
+  ...
+}: let
+  inherit (inputs.self.nixosModules) keys;
+in {
+  services.remote-deploy = {
+    enable = false;
+    keys = keys.c;
+  };
+
+  time.timeZone = "Europe/London";
+  i18n.defaultLocale = "en_GB.UTF-8";
+
+  users.users.c = {
+    isNormalUser = true;
+    extraGroups = ["wheel" "networkmanager" "libvirtd" "dialout"];
+    openssh.authorizedKeys.keys = keys.c;
+    shell = pkgs.fish;
+    packages = with pkgs; [];
+  };
+
+  nix.settings.trusted-users = ["c"];
+
+  environment.systemPackages = with pkgs; [
+    vim
+    wget
+    fzf
+    nil
+    killall
+    gcc
+    pkg-config
+  ];
+
+  environment = {
+    variables = {EDITOR = "nvim";};
+    sessionVariables = {NIXOS_OZONE_WL = "1";};
+
+    shells = with pkgs; [fish];
+
+    etc."greetd/environments".text = ''
+      hyprland
+    '';
+  };
+  fonts.packages = with pkgs; [nerdfonts meslo-lgs-nf];
+}

hosts/artemis/containers.nix

@@ -0,0 +1,10 @@
+{
+  virtualisation = {
+    libvirtd.enable = true;
+    podman = {
+      enable = true;
+      dockerCompat = true;
+      defaultNetwork.settings.dns_enabled = true;
+    };
+  };
+}

hosts/artemis/default.nix

@@ -1,5 +1,14 @@
 {
-  modules = [./hardware-configuration.nix];
+  modules = [
+    ./hardware-configuration.nix
+    ./configuration.nix
+    ./containers.nix
+    ./networking.nix
+    ./ssh.nix
+    ./programs.nix
+    ./home.nix
+    ./styling.nix
+  ];
   extraArgs = {};
   specialArgs = {};
   system = "x86_64-linux";

hosts/artemis/hardware-configuration.nix

@@ -12,9 +12,48 @@
     initrd.kernelModules = [];
     kernelModules = ["kvm-intel"];
     extraModulePackages = [];
+    #kernelPackages = pkgs.linuxPackages_latest;
   };
+  hardware = {
+    bluetooth = {
+      enable = true;
+      powerOnBoot = true;
+      settings = {General = {Enable = "Source,Sink,Media,Socket";};};
+    };
 
-  #boot.kernelPackages = pkgs.linuxPackages_latest;
+    opengl = {
+      # hardware.graphics on unstable
+      enable = true;
+      extraPackages = with pkgs; [
+        intel-media-driver # LIBVA_DRIVER_NAME=iHD
+        intel-vaapi-driver # LIBVA_DRIVER_NAME=i965 (older but works better for Firefox/Chromium)
+        libvdpau-va-gl
+        vaapiVdpau
+        intel-compute-runtime
+        unstable.vpl-gpu-rt
+      ];
+    };
+
+    cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+  };
+  environment.sessionVariables = {LIBVA_DRIVER_NAME = "iHD";}; # Force intel-media-driver
+
+  services = {
+    blueman.enable = true;
+
+    power-profiles-daemon.enable = false;
+    system76-scheduler.settings.cfsProfiles.enable = true;
+    tlp = {
+      enable = true;
+      settings = {
+        CPU_BOOST_ON_AC = 1;
+        CPU_BOOST_ON_BAT = 0;
+        CPU_SCALING_GOVERNOR_ON_AC = "performance";
+        CPU_SCALING_GOVERNOR_ON_BAT = "powersave";
+      };
+    };
+  };
+  powerManagement.powertop.enable = true;
 
   fileSystems."/" = {
     device = "/dev/disk/by-uuid/5488764f-a50a-4ea2-ac8d-bfe565199018";
@@ -24,6 +63,4 @@
   swapDevices = [];
 
   networking.useDHCP = lib.mkDefault true;
-
-  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
 }

hosts/artemis/home.nix

@@ -0,0 +1,13 @@
+{inputs, ...}: {
+  home-manager = {
+    sharedModules = [
+      {
+        stylix.targets = {
+          fish.enable = false;
+        };
+      }
+    ];
+    users.c = import ../../home;
+    extraSpecialArgs = {inherit inputs;};
+  };
+}

hosts/artemis/networking.nix

@@ -0,0 +1,10 @@
+{config, ...}: {
+  networking = {
+    hostName = "artemis";
+    networkmanager.enable = true;
+    firewall.enable = true;
+    firewall.allowPing = true;
+    enableIPv6 = false;
+    nameservers = ["9.9.9.9" "149.112.112.112"];
+  };
+}

hosts/artemis/programs.nix

@@ -0,0 +1,45 @@
+{pkgs, ...}: {
+  programs = {
+    fish.enable = true;
+    seahorse.enable = true;
+    nix-ld.enable = true;
+    virt-manager.enable = true;
+    nm-applet.enable = true;
+    hyprland.enable = true;
+  };
+  services = {
+    mullvad-vpn = {
+      enable = true;
+      package = pkgs.mullvad-vpn;
+    };
+
+    dbus.enable = true;
+    printing.enable = true;
+
+    udisks2.enable = true;
+    pipewire = {
+      enable = true;
+      alsa = {
+        enable = true;
+        support32Bit = true;
+      };
+      pulse.enable = true;
+      wireplumber.enable = true;
+      #jack.enable = true;
+    };
+
+    thermald.enable = true;
+    greetd = {
+      enable = true;
+      settings = {
+        default_session.command = ''
+          ${pkgs.greetd.tuigreet}/bin/tuigreet \
+            --time \
+            --asterisks \
+            --user-menu \
+            --cmd Hyprland
+        '';
+      };
+    };
+  };
+}

hosts/artemis/ssh.nix

@@ -0,0 +1,10 @@
+{
+  services.openssh = {
+    enable = true;
+    settings = {
+      PasswordAuthentication = true;
+      KbdInteractiveAuthentication = true;
+      PermitRootLogin = "no";
+    };
+  };
+}

hosts/artemis/styling.nix

@@ -0,0 +1,57 @@
+{pkgs, ...}: {
+  stylix = {
+    enable = true;
+
+    image = pkgs.fetchurl {
+      url = "https://i.redd.it/jd1nuwsl0d121.jpg";
+      sha256 = "sha256-ff3ajGVsay2dtHiHmO2MYlqCvexUQjGifMs/ofzuyvI=";
+    };
+
+    polarity = "dark";
+
+    base16Scheme = "${pkgs.base16-schemes}/share/themes/onedark.yaml";
+
+    cursor = {
+      # package = pkgs.bibata-cursors;
+      # name = "Bibata-Modern-Ice";
+      package = pkgs.apple-cursor;
+      name = "macOS-Monterey";
+      size = 8;
+    };
+
+    fonts = {
+      monospace = {
+        package = pkgs.nerdfonts.override {fonts = ["JetBrainsMono"];};
+        name = "JetBrainsMono Nerd Font Mono";
+      };
+
+      sansSerif = {
+        package = pkgs.dejavu_fonts;
+        name = "DejaVu Sans";
+      };
+
+      serif = {
+        package = pkgs.dejavu_fonts;
+        name = "DejaVu Serif";
+      };
+
+      sizes = {
+        applications = 12;
+        terminal = 12;
+        desktop = 10;
+        popups = 10;
+      };
+    };
+
+    opacity = {
+      applications = 1.0;
+      terminal = 1.0;
+      desktop = 1.0;
+      popups = 1.0;
+    };
+
+    targets = {
+      fish.enable = false;
+    };
+  };
+}

hosts/default.nix

@@ -1,6 +1,6 @@
 {utils}: let
   hosts = utils.lib.exportModules [
-    #   ./artemis
+    ./artemis
     ./hermes
   ];
 in {inherit hosts;}

hosts/hermes/configuration.nix

@@ -27,6 +27,8 @@ in {
     ];
   };
 
+  nix.settings.trusted-users = ["media"];
+
   environment.systemPackages = with pkgs; [
     wget
     tree

hosts/hermes/networking.nix

@@ -4,8 +4,8 @@
   pkgs,
   ...
 }: {
-  networking.hostName = "hermes";
   networking = {
+    hostName = "hermes";
     enableIPv6 = false;
     firewall.allowedTCPPorts = [80 443 8265];
     firewall.checkReversePath = false;