s0me1newithhand7s/reNixos
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

init

Browse source
This commit is contained in:
hand7s 2025-04-21 18:32:39 +03:00
commit b6cdc78668
210 changed files with 9929 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

43
s0mePC-nix/boot/initrd.nix Normal file
View file

@ -0,0 +1,43 @@
{
lib,
...
}: {
boot = {
initrd = {
availableKernelModules = [
"nvme"
"xhci_pci"
"ahci"
"usbhid"
"usb_storage"
"sd_mod"
"btrfs"
"cryptd"
];
supportedFilesystems = {
vfat = true;
btrfs = true;
zfs = lib.mkForce true;
};
kernelModules = [
"amdgpu"
];
luks = {
devices = {
cryptroot = {
device = "nvme-KINGSTON_SKC3000S_1024G_AA000000000000000013-part2";
};
};
};
systemd = {
enable = true;
};
verbose = false;
};
};
}

86
s0mePC-nix/boot/kernel.nix Normal file
View file

@ -0,0 +1,86 @@
{
config,
pkgs,
lib,
...
}: {
boot = {
kernel = {
sysctl = {
"vm.swappiness" = 100;
"vm.dirty_background_bytes" = 67108864;
"vm.dirty_bytes" = 268435456;
"vm.dirty_expire_centisecs" = 1500;
"vm.dirty_writeback_centisecs" = 100;
"vm.vfs_cache_pressure" = 50;
"vm.max_map_count" = 1048576;
};
};
kernelPackages = pkgs.linuxPackages_cachyos;
extraModulePackages = [
config.boot.kernelPackages.zenpower
];
kernelModules = [
"amdgpu"
"zenpower"
];
kernelParams = [
"amd_pstate=guided"
"udev.log_priority=3"
"quiet"
"splash"
"boot.shell_on_fail"
"loglevel=3"
"rd.systemd.show_status=false"
"rd.udev.log_level=3"
"page_alloc.shuffle=1"
"page_poison=1"
"slab_nomerge"
"kernel.watchdog=0"
"oops=panic"
];
blacklistedKernelModules = [
"k10temp"
"ax25"
"netrom"
"rose"
"adfs"
"affs"
"bfs"
"befs"
"cramfs"
"efs"
"erofs"
"exofs"
"freevxfs"
"f2fs"
"hfs"
"hpfs"
"jfs"
"minix"
"nilfs2"
"ntfs"
"omfs"
"qnx4"
"qnx6"
"sysv"
"ufs"
"sp5100-tco"
"iTCO_wdt"
];
supportedFilesystems = {
vfat = true;
btrfs = true;
zfs = lib.mkForce true;
};
consoleLogLevel = 0;
};
}

15
s0mePC-nix/boot/lanzaboote.nix Normal file
View file

@ -0,0 +1,15 @@
{
...
}: {
boot = {
lanzaboote = {
enable = true;
configurationLimit = 7;
pkiBundle = "/var/lib/sbctl";
settings = {
timeout = 2;
sortKey = "lanza";
};
};
};
}

22
s0mePC-nix/boot/loader/systemd-boot.nix Normal file
View file

@ -0,0 +1,22 @@
{
lib,
...
}: {
boot = {
loader = {
systemd-boot = {
enable = lib.mkDefault false;
sortKey = "nixos";
memtest86 = {
enable = true;
sortKey = "o_memtest86";
};
netbootxyz = {
enable = false;
sortKey = "o_netbootxyz";
};
};
};
};
}

13
s0mePC-nix/boot/plymouth.nix Normal file
View file

@ -0,0 +1,13 @@
{
pkgs,
...
}: {
boot = {
plymouth = {
enable = true;
themePackages = with pkgs; [
nixos-bgrt-plymouth
];
};
};
}

10
s0mePC-nix/boot/tmp.nix Normal file
View file

@ -0,0 +1,10 @@
{
...
}: {
boot = {
tmp = {
useTmpfs = true;
cleanOnBoot = true;
};
};
}

12
s0mePC-nix/boot/zfs.nix Normal file
View file

@ -0,0 +1,12 @@
{
pkgs,
...
}: {
boot = {
zfs = {
package = pkgs.zfs_cachyos;
allowHibernation = false;
removeLinuxDRM = false;
};
};
}

7
s0mePC-nix/console/console.nix Normal file
View file

@ -0,0 +1,7 @@
{
...
}: {
console = {
useXkbConfig = true;
};
}

96
s0mePC-nix/default.nix Normal file
View file

@ -0,0 +1,96 @@
{
imports = [
./boot/initrd.nix
./boot/kernel.nix
./boot/lanzaboote.nix
./boot/plymouth.nix
./boot/tmp.nix
./boot/loader/systemd-boot.nix
./boot/zfs.nix
./console/console.nix
./environment/systemPackages.nix
./environment/variables.nix
./hardware/amdgpu.nix
./hardware/cpu.nix
./hardware/graphics.nix
./hardware/openrazer.nix
./hardware/qmk.nix
./hardware/zram.nix
./home-manager/users.nix
./i18n/locales.nix
./networking/dhcp.nix
./networking/firewall.nix
./networking/hostname.nix
./networking/networkmanager.nix
./networking/wireguard.nix
./networking/nameservers.nix
./networking/hosts.nix
./networking/hostId.nix
./nix/package.nix
./nix/settings/allowed-users.nix
./nix/settings/experimental-features.nix
./nix/settings/substituters.nix
./nix/settings/trusted-public-keys.nix
./nix/settings/trusted-users.nix
./nix/settings/auto-optimise-store.nix
./nixpkgs/config.nix
./nixpkgs/system.nix
./programs/gamescope.nix
./programs/gamemode.nix
./programs/nh.nix
./programs/steam.nix
./security/polkit.nix
./security/rtkit.nix
./security/sudo.nix
./security/sudo-rs.nix
./services/greetd.nix
./services/libinput.nix
./services/openssh.nix
./services/pipewire.nix
./services/netbird.nix
./services/qmk.nix
./services/scx.nix
./services/xserver.nix
./services/zapret.nix
./services/zerotier.nix
./services/yggdrasil.nix
./services/sunshine.nix
./services/usbmuxd.nix
./services/irqbalance.nix
./sops/defaults.nix
./sops/secrets.nix
./stylix/base16Scheme.nix
./stylix/cursor.nix
./stylix/defaults.nix
./stylix/fonts.nix
./stylix/image.nix
./system/name.nix
./system/stateVersion.nix
./time/timeZone.nix
./users/users/hand7s.nix
./users/users/root.nix
./users/mutableUsers.nix
./virtualisation/docker.nix
./xdg/icons.nix
./xdg/mime.nix
./xdg/portal.nix
];
}

92
s0mePC-nix/disko.nix Normal file
View file

@ -0,0 +1,92 @@
{
disko = {
devices = {
disk = {
main = {
device = "/dev/disk/by-id/nvme-KINGSTON_SKC3000S_1024G_AA000000000000000013";
type = "disk";
content = {
type = "gpt";
partitions = {
ESP = {
type = "EF00";
size = "1024M";
name = "boot";
content = {
type = "filesystem";
format = "vfat";
mountpoint = "/boot";
mountOptions = [
"fmask=0022"
"dmask=0022"
];
};
};
luks = {
size = "100%";
content = {
type = "luks";
name = "lvm-crypted";
settings = {
allowDiscards = true;
};
content = {
type = "lvm_pv";
vg = "pool";
};
};
};
};
};
};
};
lvm_vg = {
pool = {
type = "lvm_vg";
lvs = {
root = {
size = "100%";
content = {
type = "btrfs";
extraArgs = [
"-f"
];
subvolumes = {
"/root" = {
mountpoint = "/";
mountOptions = [
"compress=zstd"
"noatime"
"discard=async"
];
};
"/home" = {
mountpoint = "/home";
mountOptions = [
"compress=zstd"
"noatime"
"discard=async"
];
};
"/nix" = {
mountpoint = "/nix";
mountOptions = [
"compress=zstd"
"noatime"
"discard=async"
];
};
};
};
};
};
};
};
};
};
}

15
s0mePC-nix/environment/systemPackages.nix Normal file
View file

@ -0,0 +1,15 @@
{
pkgs,
...
}: {
environment = {
systemPackages = with pkgs; [
home-manager
xdg-desktop-portal-gtk
xdg-desktop-portal-hyprland
nixos-anywhere
sbctl
sops
];
};
}

23
s0mePC-nix/environment/variables.nix Normal file
View file

@ -0,0 +1,23 @@
{
config,
...
}: {
environment = {
variables = {
AMD_VULKAN_ICD = "RADV";
HOSTNAME = config.networking.hostName;
QT_QPA_PLATFORM = "wayland";
SDL_VIDEODRIVER = "wayland";
CLUTTER_BACKEND = "wayland";
GDK_BACKEND = "wayland";
XDG_SESSION_TYPE = "wayland";
XDG_CURRENT_DESKTOP = "wayland";
XDG_SESSION_DESKTOP = "wayland";
NIXPKGS_ALLOW_UNFREE = "1";
NIXPKGS_ALLOW_INSECURE = "1";
NIXOS_OZONE_WL = "1";
GRIMBLAST_HIDE_CURSOR = "0";
TERM = "xterm-256color";
};
};
}

11
s0mePC-nix/hardware/amdgpu.nix Normal file
View file

@ -0,0 +1,11 @@
{
...
}: {
hardware = {
amdgpu = {
initrd = {
enable = true;
};
};
};
}

12
s0mePC-nix/hardware/cpu.nix Normal file
View file

@ -0,0 +1,12 @@
{
...
}: {
hardware = {
enableRedistributableFirmware = true;
cpu = {
amd = {
updateMicrocode = true;
};
};
};
}

10
s0mePC-nix/hardware/graphics.nix Normal file
View file

@ -0,0 +1,10 @@
{
...
}: {
hardware = {
graphics = {
enable = true;
enable32Bit = true;
};
};
}

17
s0mePC-nix/hardware/openrazer.nix Normal file
View file

@ -0,0 +1,17 @@
{
...
}: {
hardware = {
openrazer = {
enable = true;
users = [
"hand7s"
];
batteryNotifier = {
enable = true;
percentage = 15;
};
};
};
}

11
s0mePC-nix/hardware/qmk.nix Normal file
View file

@ -0,0 +1,11 @@
{
...
}: {
hardware = {
keyboard = {
qmk = {
enable = true;
};
};
};
}

10
s0mePC-nix/hardware/zram.nix Normal file
View file

@ -0,0 +1,10 @@
{
...
}: {
zramSwap = {
enable = true;
algorithm = "zstd";
priority = 100;
memoryPercent = 100;
};
}

23
s0mePC-nix/home-manager/users.nix Normal file
View file

@ -0,0 +1,23 @@
{
inputs,
...
}: {
home-manager = {
users = {
hand7s = {
imports = [
../../hand7s/default.nix
inputs.hyprpanel.homeManagerModules.hyprpanel
inputs.spicetify-nix.homeManagerModules.default
inputs.hyprland.homeManagerModules.default
];
};
};
backupFileExtension = "backup";
extraSpecialArgs = {
inherit inputs;
};
};
}

11
s0mePC-nix/i18n/locales.nix Normal file
View file

@ -0,0 +1,11 @@
{
...
}: {
i18n = {
defaultLocale = "en_US.UTF-8";
supportedLocales = [
"en_US.UTF-8/UTF-8"
"ru_RU.UTF-8/UTF-8"
];
};
}

13
s0mePC-nix/networking/dhcp.nix Normal file
View file

@ -0,0 +1,13 @@
{
lib,
...
}: {
networking = {
useDHCP = lib.mkDefault true;
dhcpcd = {
enable = true;
persistent = false;
wait = "any";
};
};
}

20
s0mePC-nix/networking/firewall.nix Normal file
View file

@ -0,0 +1,20 @@
{
...
}: {
networking = {
firewall = {
allowPing = true;
enable = true;
checkReversePath = false;
allowedUDPPorts = [
9993
2080
];
allowedTCPPorts = [
9993
2080
];
};
};
}

7
s0mePC-nix/networking/hostId.nix Normal file
View file

@ -0,0 +1,7 @@
{
...
}: {
networking = {
hostId = "5c79d468";
};
}

7
s0mePC-nix/networking/hostname.nix Normal file
View file

@ -0,0 +1,7 @@
{
...
}: {
networking = {
hostName = "s0mePC-nix";
};
}

9
s0mePC-nix/networking/hosts.nix Normal file
View file

@ -0,0 +1,9 @@
{
...
}: {
networking ={
hosts = {
# Nope
};
};
}

18
s0mePC-nix/networking/nameservers.nix Normal file
View file

@ -0,0 +1,18 @@
{
...
}: {
networking = {
nameservers = [
"1.1.1.1"
"1.0.0.1"
"8.8.8.8"
"8.8.4.4"
"2606:4700:4700::1111"
"2606:4700:4700::1001"
"2001:4860:4860::8888"
"2001:4860:4860::8844"
"2620:119:35::35"
"2620:119:53::53"
];
};
}

11
s0mePC-nix/networking/networkmanager.nix Normal file
View file

@ -0,0 +1,11 @@
{
...
}: {
networking ={
networkmanager = {
enable = true;
dns = "default";
dhcp = "internal";
};
};
}

12
s0mePC-nix/networking/timeServers.nix Normal file
View file

@ -0,0 +1,12 @@
{
...
}: {
networking = {
timeServers = [
"0.nixos.pool.ntp.org"
"1.nixos.pool.ntp.org"
"2.nixos.pool.ntp.org"
"3.nixos.pool.ntp.org"
];
};
}

9
s0mePC-nix/networking/wireguard.nix Normal file
View file

@ -0,0 +1,9 @@
{
...
}: {
networking = {
wireguard = {
enable = true;
};
};
}

8
s0mePC-nix/nix/package.nix Normal file
View file

@ -0,0 +1,8 @@
{
pkgs,
...
}: {
nix = {
package = pkgs.nixVersions.latest;
};
}

12
s0mePC-nix/nix/settings/allowed-users.nix Normal file
View file

@ -0,0 +1,12 @@
{
...
}: {
nix = {
settings = {
sandbox = true;
allowed-users = [
"@wheel"
];
};
};
}

9
s0mePC-nix/nix/settings/auto-optimise-store.nix Normal file
View file

@ -0,0 +1,9 @@
{
...
}: {
nix = {
settings = {
auto-optimise-store = true;
};
};
}

12
s0mePC-nix/nix/settings/experimental-features.nix Normal file
View file

@ -0,0 +1,12 @@
{
...
}: {
nix = {
settings = {
experimental-features = [
"nix-command"
"flakes"
];
};
};
}

21
s0mePC-nix/nix/settings/substituters.nix Normal file
View file

@ -0,0 +1,21 @@
{
...
}: {
nix = {
settings = {
substituters = [
# cache.nixos.org
"https://nixos-cache-proxy.cofob.dev"
"https://cache.nixos.org"
# cache.garnix.org
"https://cache.garnix.io"
# cachix
"https://nix-community.cachix.org/"
"https://chaotic-nyx.cachix.org/"
"https://ags.cachix.org"
"https://hyprland.cachix.org"
"https://chaotic-nyx.cachix.org/"
];
};
};
}

20
s0mePC-nix/nix/settings/trusted-public-keys.nix Normal file
View file

@ -0,0 +1,20 @@
{
...
}: {
nix = {
settings = {
trusted-public-keys = [
# cache.nixos.org
"cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY="
# cache.garnix.io
"cache.garnix.io:CTFPyKSLcx5RMJKfLo5EEPUObbA78b0YQ2DTCJXqr9g="
# cachix.org
"nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
"chaotic-nyx.cachix.org-1:HfnXSw4pj95iI/n17rIDy40agHj12WfF+Gqk6SonIT8="
"ags.cachix.org-1:naAvMrz0CuYqeyGNyLgE010iUiuf/qx6kYrUv3NwAJ8="
"hyprland.cachix.org-1:a7pgxzMz7+chwVL3/pzj6jIBMioiJM7ypFP8PwtkuGc="
"chaotic-nyx.cachix.org-1:HfnXSw4pj95iI/n17rIDy40agHj12WfF+Gqk6SonIT8="
];
};
};
}

11
s0mePC-nix/nix/settings/trusted-users.nix Normal file
View file

@ -0,0 +1,11 @@
{
...
}: {
nix = {
settings = {
trusted-users = [
"@wheel"
];
};
};
}

10
s0mePC-nix/nixpkgs/config.nix Normal file
View file

@ -0,0 +1,10 @@
{
...
}: {
nixpkgs = {
config = {
allowUnfree = true;
allowBroken = true;
};
};
}

10
s0mePC-nix/nixpkgs/overlays.nix Normal file
View file

@ -0,0 +1,10 @@
{
inputs,
...
}: {
nixpkgs = {
overlays = [
inputs.hyprpanel.overlay
];
};
}

8
s0mePC-nix/nixpkgs/system.nix Normal file
View file

@ -0,0 +1,8 @@
{
...
}: {
nixpkgs = {
system = "x86_64-linux";
hostPlatform = "x86_64-linux";
};
}

9
s0mePC-nix/programs/gamemode.nix Normal file
View file

@ -0,0 +1,9 @@
{
...
}: {
programs = {
gamemode = {
enable = true;
};
};
}

14
s0mePC-nix/programs/gamescope.nix Normal file
View file

@ -0,0 +1,14 @@
{
pkgs,
...
}: {
programs = {
gamescope = {
enable = true;
package = pkgs.gamescope_git;
args = [
"-e"
];
};
};
}

14
s0mePC-nix/programs/nh.nix Normal file
View file

@ -0,0 +1,14 @@
{
...
}: {
programs = {
nh = {
enable = true;
clean = {
enable = true;
dates = "weekly";
extraArgs = "--keep 2 --keep-since 2d";
};
};
};
}

26
s0mePC-nix/programs/steam.nix Normal file
View file

@ -0,0 +1,26 @@
{
pkgs,
...
}: {
programs = {
steam = {
enable = true;
extraCompatPackages = [
pkgs.proton-ge-bin
];
remotePlay = {
openFirewall = true;
};
localNetworkGameTransfers = {
openFirewall = true;
};
protontricks = {
enable = true;
};
};
};
}

12
s0mePC-nix/security/polkit.nix Normal file
View file

@ -0,0 +1,12 @@
{
...
}: {
security = {
polkit = {
enable = true;
adminIdentities = [
"unix-group:wheel"
];
};
};
}

9
s0mePC-nix/security/rtkit.nix Normal file
View file

@ -0,0 +1,9 @@
{
...
}: {
security = {
rtkit = {
enable = true;
};
};
}

12
s0mePC-nix/security/sudo-rs.nix Normal file
View file

@ -0,0 +1,12 @@
{
...
}: {
security = {
sudo-rs = {
enable = true;
wheelNeedsPassword = true;
execWheelOnly = true;
};
};
}

10
s0mePC-nix/security/sudo.nix Normal file
View file

@ -0,0 +1,10 @@
{
lib,
...
}: {
security = {
sudo = {
enable = lib.mkDefault false;
};
};
}

18
s0mePC-nix/services/greetd.nix Normal file
View file

@ -0,0 +1,18 @@
{
pkgs,
...
}:{
services = {
greetd = {
enable = true;
vt = 7;
restart = false;
settings = {
default_session = {
command = "${pkgs.greetd.tuigreet}/bin/tuigreet -r -t -c Hyprland --greet-align center";
user = "greeter";
};
};
};
};
}

9
s0mePC-nix/services/irqbalance.nix Normal file
View file

@ -0,0 +1,9 @@
{
...
}: {
services = {
irqbalance = {
enable = true;
};
};
}

17
s0mePC-nix/services/libinput.nix Normal file
View file

@ -0,0 +1,17 @@
{
...
}: {
services = {
libinput = {
enable = true;
mouse = {
accelProfile = "flat";
accelSpeed = "-1.0";
buttonMapping = "1 3 2 4 5 6 7 8 9";
horizontalScrolling = true;
leftHanded = false;
naturalScrolling = true;
};
};
};
}

9
s0mePC-nix/services/netbird.nix Normal file
View file

@ -0,0 +1,9 @@
{
...
}: {
services = {
netbird = {
enable = true;
};
};
}

25
s0mePC-nix/services/openssh.nix Normal file
View file

@ -0,0 +1,25 @@
{
config,
...
}: {
services = {
openssh = {
enable = true;
allowSFTP = true;
openFirewall = true;
ports = [
49560
];
settings = {
PrintMotd = false;
PermitRootLogin = "no";
PasswordAuthentication = false;
};
authorizedKeysFiles = [
config.sops.secrets.sshKey.path
];
};
};
}

67
s0mePC-nix/services/pipewire.nix Normal file
View file

@ -0,0 +1,67 @@
{
...
}: {
services = {
pipewire = {
enable = true;
alsa = {
enable = true;
support32Bit = true;
};
audio = {
enable = true;
};
pulse = {
enable = true;
};
jack = {
enable = true;
};
wireplumber = {
enable = true;
};
extraConfig = {
pipewire = {
"92-low-latency" = {
"context.properties" = {
"default.clock.rate" = 48000;
"default.clock.allowed-rates" = [
44100
48000
88200
96000
];
"default.clock.min-quantum" = 512;
"default.clock.quantum" = 4096;
"default.clock.max-quantum" = 8192;
};
};
"93-no-resampling" = {
"context.properties" = {
"default.clock.rate" = 48000;
"default.clock.allowed-rates" = [
44100
48000
96000
192000
];
};
};
"94-no-upmixing" = {
"stream.properties" = {
"channelmix.upmix" = false;
};
};
};
};
};
};
}

12
s0mePC-nix/services/qmk.nix Normal file
View file

@ -0,0 +1,12 @@
{
pkgs,
...
}: {
services = {
udev = {
packages = with pkgs; [
qmk-udev-rules
];
};
};
}

12
s0mePC-nix/services/scx.nix Normal file
View file

@ -0,0 +1,12 @@
{
pkgs,
...
}: {
services = {
scx = {
enable = true;
package = pkgs.scx_git.full;
scheduler = "scx_lavd";
};
};
}

12
s0mePC-nix/services/sunshine.nix Normal file
View file

@ -0,0 +1,12 @@
{
...
}: {
services = {
sunshine = {
enable = true;
capSysAdmin = true;
openFirewall = true;
autoStart = false;
};
};
}

11
s0mePC-nix/services/usbmuxd.nix Normal file
View file

@ -0,0 +1,11 @@
{
pkgs,
...
}: {
services = {
usbmuxd = {
enable = true;
package = pkgs.usbmuxd2;
};
};
}

29
s0mePC-nix/services/xserver.nix Normal file
View file

@ -0,0 +1,29 @@
{
lib,
pkgs,
...
}: {
services = {
xserver = {
display = lib.mkForce 0;
enable = true;
tty = 7;
excludePackages = with pkgs; [
xterm
];
videoDrivers = [
"amdgpu"
];
xkb = {
layout = "us, ru";
variant = "qwerty";
options = "grp:caps_toggle";
};
};
};
}

68
s0mePC-nix/services/yggdrasil.nix Normal file
View file

@ -0,0 +1,68 @@
{
...
}: {
services = {
yggdrasil = {
enable = true;
persistentKeys = false;
settings = {
PrivateKey = config.sops.secrets.yggKeyPc.path;
Peers = [
# Germany :Erm:
"tcp://s-fra-0.sergeysedoy97.ru:65533"
"tls://s-fra-0.sergeysedoy97.ru:65534"
"tcp://x-fra-0.sergeysedoy97.ru:65533"
"tls://x-fra-0.sergeysedoy97.ru:65534"
"quic://x-fra-0.sergeysedoy97.ru:65535"
"tls://helium.avevad.com:13378"
"tcp://bode.theender.net:42069"
"tls://bode.theender.net:42169?key=f91b909f43829f8b20732b3bcf80cbc4bb078dd47b41638379a078e35984c9a4"
# Russia
"tcp://s-mow-0.sergeysedoy97.ru:65533"
"tls://s-mow-0.sergeysedoy97.ru:65534"
"tcp://x-mow-0.sergeysedoy97.ru:65533"
"tls://x-mow-0.sergeysedoy97.ru:65534"
"quic://x-mow-0.sergeysedoy97.ru:65535"
"tcp://s-mow-1.sergeysedoy97.ru:65533"
"tls://s-mow-1.sergeysedoy97.ru:65534"
"tcp://x-mow-1.sergeysedoy97.ru:65533"
"tls://x-mow-1.sergeysedoy97.ru:65534"
"quic://x-mow-1.sergeysedoy97.ru:65535"
"quic://kursk.cleverfox.org:15015"
"tls://kursk.cleverfox.org:15015"
"ws://kursk.cleverfox.org:15016"
"tcp://kzn1.neonxp.ru:7991"
"tls://kzn1.neonxp.ru:7992"
"ws://kzn1.neonxp.ru:7993"
"quic://kzn1.neonxp.ru:7994"
];
Listen = [
#
];
MulticastInterfaces = [
{
Regex = ".*";
Beacon = true;
Listen = false;
Password = "";
}
];
AllowedPublicKeys = [
#
];
IfName = "auto";
IfMTU = 65535;
NodeInfoPrivacy = false;
};
};
};
}

147
s0mePC-nix/services/zapret.nix Normal file
View file

@ -0,0 +1,147 @@
{
...
}: {
services = {
zapret = {
enable = true;
configureFirewall = true;
qnum = 350;
params = [
"--wssize 1:6"
"--filter-tcp=80"
"--dpi-desync=multisplit"
"--dpi-desync-split-pos=10"
"--dpi-desync-repeats=6"
"--new"
"--filter-tcp=443"
"--dpi-desync=multidisorder"
"--dpi-desync-split-pos=1,midsld"
"--new"
"--filter-tcp=443"
"--dpi-desync=syndata"
"--dpi-desync-fake-syndata=0x00000000"
"--dpi-desync-ttl=10"
"--new"
"--filter-udp=443"
"--dpi-desync=fake"
"--dpi-desync-repeats=6"
"--dpi-desync-fake-quic=0x00000000"
"--new"
"--filter-udp=443"
"--dpi-desync=fake,udplen"
"--dpi-desync-udplen-increment=5"
"--dpi-desync-fake-tls=0x00000000"
"--dpi-desync-cutoff=n3"
"--dpi-desync-repeats=2"
"--new"
"--filter-tcp=443"
"--dpi-desync=split"
"--dpi-desync-fooling=md5sig,badseq"
"--dpi-desync-fake-tls=0x00000000"
"--dpi-desync-split-pos=1"
"--dpi-desync-repeats=10"
"--new"
"--filter-tcp=443"
"--dpi-desync=fake,split2"
"--dpi-desync-fooling=md5sig"
"--dpi-desync-fake-tls=0x00000000"
"--dpi-desync-split-seqovl=2"
"--dpi-desync-split-pos=2"
"--dpi-desync-autottl"
"--new"
"--filter-tcp=443"
"--dpi-desync=fake,split2"
"--dpi-desync-fooling=md5sig"
"--dpi-desync-fake-tls=0x00000000"
"--dpi-desync-split-seqovl=2"
"--dpi-desync-split-pos=2"
"--dpi-desync-autottl"
"--new"
"--filter-tcp=80"
"--dpi-desync=fake,split2"
"--dpi-desync-fooling=md5sig"
"--dpi-desync-fake-tls=0x00000000"
"--dpi-desync-autottl"
"--new"
"--filter-tcp=80"
"--dpi-desync-ttl=1"
"--dpi-desync-autottl=2"
"--dpi-desync-fake-tls=0x00000000"
"--dpi-desync-split-pos=1"
"--dpi-desync=fake,split2"
"--dpi-desync-repeats=6"
"--dpi-desync-fooling=md5sig"
"--new"
];
whitelist = [
"googlevideo.com"
"youtu.be"
"youtube.com"
"youtubei.googleapis.com"
"googlevideo.com"
"youtu.be"
"youtube.com"
"youtubei.googleapis.com"
"youtubeembeddedplayer.googleapis.com"
"ytimg.l.google.com"
"ytimg.com"
"jnn-pa.googleapis.com"
"youtube-nocookie.com"
"youtube-ui.l.google.com"
"yt-video-upload.l.google.com"
"wide-youtube.l.google.com"
"youtubekids.com"
"ggpht.com"
"music.youtube.com"
"test.googlevideo.com"
"discord.com"
"gateway.discord.gg"
"cdn.discordapp.com"
"discordapp.net"
"discordapp.com"
"discord.gg"
"media.discordapp.net"
"images-ext-1.discordapp.net"
"discord.app"
"discord.media"
"discordcdn.com"
"discord.dev"
"discord.new"
"discord.gift"
"discordstatus.com"
"dis.gd"
"discord.co"
"discord-attachments-uploads-prd.storage.googleapis.com"
"7tv.app"
"7tv.io"
"10tv.app"
"x.com"
"t.co"
"ads-twitter.com"
"twimg.com"
"twitter.com"
"pscp.tv"
"twtrdns.net"
"twttr.com"
"periscope.tv"
"tweetdeck.com"
"twitpic.com"
"twitter.co"
"twitterinc.com"
"twitteroauth.com"
"twitterstat.us"
];
};
};
}

12
s0mePC-nix/services/zerotier.nix Normal file
View file

@ -0,0 +1,12 @@
{
...
}: {
services = {
zerotierone = {
enable = true;
joinNetworks = [
config.sops.secrets.ztNetwork.path
];
};
};
}

34
s0mePC-nix/stylix/base16Scheme.nix Normal file
View file

@ -0,0 +1,34 @@
{
...
}: {
stylix = {
base16Scheme = {
base00 = "2a1617";
base01 = "5d3f3f";
base02 = "7a5bab";
base03 = "bb9499";
base04 = "eea1cf";
base05 = "f5dddd";
base06 = "ffebff";
base07 = "ffede9";
base08 = "e36b70";
base09 = "ac878e";
base0A = "db7356";
base0B = "a78897";
base0C = "ca7a79";
base0D = "b28776";
base0E = "d8708b";
base0F = "ec6653";
base10 = "2a1617";
base11 = "2a1617";
base12 = "e36b70";
base13 = "ac878e";
base14 = "a78897";
base15 = "ca7a79";
base16 = "b28776";
base17 = "d8708b";
scheme = "hand7s";
name = "red_ish";
};
};
}

12
s0mePC-nix/stylix/cursor.nix Normal file
View file

@ -0,0 +1,12 @@
{
pkgs,
...
}: {
stylix = {
cursor = {
size = 18;
name = "Whitesur-cursors";
package = pkgs.whitesur-cursors;
};
};
}

9
s0mePC-nix/stylix/defaults.nix Normal file
View file

@ -0,0 +1,9 @@
{
...
}: {
stylix = {
enable = true;
autoEnable = true;
polarity = "dark";
};
}

35
s0mePC-nix/stylix/fonts.nix Normal file
View file

@ -0,0 +1,35 @@
{
pkgs,
...
}: {
stylix = {
fonts = {
sizes = {
applications = 10;
desktop = 8;
popups = 10;
terminal = 8;
};
monospace = {
package = pkgs.nerd-fonts.roboto-mono;
name = "Roboto-Mono Nerd Font";
};
emoji = {
package = pkgs.nerd-fonts.symbols-only;
name = "Symbols Only Nerd Font";
};
sansSerif = {
package = pkgs.nerd-fonts.aurulent-sans-mono;
name = "Aurulent Sans Mono Nerd Font";
};
serif = {
package = pkgs.nerd-fonts.hack;
name = "Hack Nerd Font";
};
};
};
}

7
s0mePC-nix/stylix/image.nix Normal file
View file

@ -0,0 +1,7 @@
{
...
}: {
stylix = {
image = ./wallpaper.jpg;
};
}

BIN
s0mePC-nix/stylix/wallpaper.jpg Normal file
View file

Binary file not shown.
Side by side

After

Width:  |  Height:  |  Size: 2.7 MiB

8
s0mePC-nix/system/name.nix Normal file
View file

@ -0,0 +1,8 @@
{
config,
...
}: {
system = {
name = config.networking.hostName;
};
}

8
s0mePC-nix/system/stateVersion.nix Normal file
View file

@ -0,0 +1,8 @@
{
config,
...
}: {
system = {
stateVersion = config.system.nixos.release;
};
}

8
s0mePC-nix/time/timeZone.nix Normal file
View file

@ -0,0 +1,8 @@
{
...
}: {
time = {
timeZone = "Europe/Moscow";
hardwareClockInLocalTime = true;
};
}

7
s0mePC-nix/users/mutableUsers.nix Normal file
View file

@ -0,0 +1,7 @@
{
...
}: {
users = {
mutableUsers = false;
};
}

28
s0mePC-nix/users/users/hand7s.nix Normal file
View file

@ -0,0 +1,28 @@
{
...
}: {
users = {
users = {
hand7s = {
description = "me";
isSystemUser = false;
isNormalUser = true;
initialHashedPassword = "$6$vNggR38kZoLNZglM$QM5Qc8Ck1ko9YgME4RpV7KGLb1.UBynKmmWwABDI1GrMl54my7r7sXHiQ3VgqpMwaUtHeifJh5Zv.QR8lGXd50";
extraGroups = [
"wheel"
"networkmanager"
"docker"
"openrazer"
];
openssh = {
authorizedKeys = {
keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDp2IIdR5jV1HyG4aiRX7SfTNrXDhCx5rTiFU40qkOKq litvinovb0@gmail.com"
];
};
};
};
};
};
}

11
s0mePC-nix/users/users/root.nix Normal file
View file

@ -0,0 +1,11 @@
{
...
}: {
users = {
users = {
root = {
initialHashedPassword = "$6$vNggR38kZoLNZglM$QM5Qc8Ck1ko9YgME4RpV7KGLb1.UBynKmmWwABDI1GrMl54my7r7sXHiQ3VgqpMwaUtHeifJh5Zv.QR8lGXd50";
};
};
};
}

12
s0mePC-nix/virtualisation/docker.nix Normal file
View file

@ -0,0 +1,12 @@
{
...
}: {
virtualisation = {
docker = {
enable = true;
rootless = {
enable = true;
};
};
};
}

9
s0mePC-nix/xdg/icons.nix Normal file
View file

@ -0,0 +1,9 @@
{
...
}: {
xdg = {
icons = {
enable = true;
};
};
}

13
s0mePC-nix/xdg/mime.nix Normal file
View file

@ -0,0 +1,13 @@
{
...
}: {
xdg = {
mime = {
enable = true;
defaultApplications = {
"x-scheme-handler/http" = "google-chrome.desktop";
"x-scheme-handler/https" = "google-chrome.desktop";
};
};
};
}

21
s0mePC-nix/xdg/portal.nix Normal file
View file

@ -0,0 +1,21 @@
{
...
}: {
xdg = {
portal = {
enable = true;
wlr = {
enable = true;
};
config = {
common = {
default = [
"hyprland"
"gtk"
];
};
};
};
};
}