big restruct

sys/opt/boot/boot.nix

@@ -0,0 +1,6 @@
+{
+  boot.loader = {
+    systemd-boot.enable = true;
+    efi.canTouchEfiVariables = true;
+  };
+}

sys/opt/boot/lanzaboote.nix

@@ -0,0 +1,24 @@
+{
+  pkgs,
+  lib,
+  inputs,
+  ...
+}:
+# lanzaboote config
+{
+  imports = [
+    inputs.lanzaboote.nixosModules.lanzaboote
+  ];
+
+  boot = {
+    lanzaboote = {
+      enable = true;
+      pkiBundle = "/etc/secureboot";
+    };
+
+    # we let lanzaboote install systemd-boot
+    loader.systemd-boot.enable = lib.mkForce false;
+  };
+
+  environment.systemPackages = [pkgs.sbctl];
+}

sys/opt/hardware/adampad.nix

@@ -0,0 +1,24 @@
+{
+  pkgs,
+  lib,
+  config,
+  inputs,
+  ...
+}: {
+  zramSwap.enable = true;
+
+  hardware = {
+    bluetooth = {
+      enable = true;
+      powerOnBoot = true;
+    };
+    graphics = {
+      enable = true;
+      extraPackages = with pkgs; [
+        libva
+        vaapiVdpau
+        libvdpau-va-gl
+      ];
+    };
+  };
+}

sys/opt/hardware/cnix.nix

@@ -0,0 +1,37 @@
+{pkgs, ...}: {
+  zramSwap.enable = true;
+
+  hardware = {
+    bluetooth = {
+      enable = true;
+      powerOnBoot = false;
+    };
+    logitech.wireless = {
+      enable = true;
+      enableGraphical = true;
+    };
+    graphics = {
+      enable = true;
+      enable32Bit = true;
+      extraPackages = with pkgs; [
+        libva
+        vaapiVdpau
+        libvdpau-va-gl
+        amdvlk
+
+        # mesa
+        mesa
+
+        # vulkan
+        vulkan-tools
+        vulkan-loader
+        vulkan-validation-layers
+        vulkan-extension-layer
+      ];
+      extraPackages32 = with pkgs.pkgsi686Linux; [
+        vaapiVdpau
+        libvdpau-va-gl
+      ];
+    };
+  };
+}

sys/opt/hardware/toothpc.nix

@@ -0,0 +1,36 @@
+{
+  pkgs,
+  config,
+  ...
+}: {
+  zramSwap.enable = true;
+
+  hardware = {
+    logitech.wireless = {
+      enable = true;
+      enableGraphical = true;
+    };
+    graphics = {
+      enable = true;
+      enable32Bit = true;
+      extraPackages = with pkgs; [
+        libva
+        vaapiVdpau
+        libvdpau-va-gl
+        intel-media-driver
+        nvidia-vaapi-driver
+      ];
+    };
+    nvidia = {
+      package = config.boot.kernelPackages.nvidiaPackages.beta;
+      # package = config.boot.kernelPackages.nvidiaPackages.stable;
+      modesetting.enable = true;
+      powerManagement = {
+        enable = false;
+        finegrained = false;
+      };
+      open = false;
+      nvidiaSettings = true;
+    };
+  };
+}

sys/opt/network/adampad.nix

@@ -0,0 +1,15 @@
+{
+  networking = {
+    networkmanager.enable = true;
+    hostName = "adampad";
+    nftables.enable = true;
+    firewall = {
+      enable = true;
+      interfaces = {
+        "enp7s0" = {
+          allowedTCPPorts = [22 80 443];
+        };
+      };
+    };
+  };
+}

sys/opt/network/cnix.nix

@@ -0,0 +1,15 @@
+{
+  networking = {
+    networkmanager.enable = true;
+    hostName = "cnix";
+    nftables.enable = true;
+    firewall = {
+      enable = true;
+      interfaces = {
+        "enp7s0" = {
+          allowedTCPPorts = [22 80 443];
+        };
+      };
+    };
+  };
+}

sys/opt/network/toothpc.nix

@@ -0,0 +1,15 @@
+{
+  networking = {
+    networkmanager.enable = true;
+    hostName = "toothpc";
+    nftables.enable = true;
+    firewall = {
+      enable = true;
+      interfaces = {
+        "enp4s0" = {
+          allowedTCPPorts = [22 80 443];
+        };
+      };
+    };
+  };
+}

sys/opt/nh/adampad.nix

@@ -0,0 +1,11 @@
+{
+  environment.variables.FLAKE = "/home/adam/.nix-config";
+  programs = {
+    nh = {
+      enable = true;
+      clean.enable = true;
+      clean.extraArgs = "--keep-since 4d --keep 3";
+      flake = "/home/adam/.nix-config";
+    };
+  };
+}

sys/opt/nh/cnix.nix

@@ -0,0 +1,11 @@
+{
+  environment.variables.FLAKE = "/home/cnst/.nix-config";
+  programs = {
+    nh = {
+      enable = true;
+      clean.enable = true;
+      clean.extraArgs = "--keep-since 4d --keep 3";
+      flake = "/home/cnst/.nix-config";
+    };
+  };
+}

sys/opt/nh/toothpc.nix

@@ -0,0 +1,11 @@
+{
+  environment.variables.FLAKE = "/home/toothpick/.nix-config";
+  programs = {
+    nh = {
+      enable = true;
+      clean.enable = true;
+      clean.extraArgs = "--keep-since 4d --keep 3";
+      flake = "/home/toothpick/.nix-config";
+    };
+  };
+}

sys/opt/xserver/adampad.nix

@@ -0,0 +1,17 @@
+{
+  services.xserver = {
+    enable = true;
+    videoDrivers = ["amdgpu"];
+    # xkb = {
+    #   extraLayouts.hhkbse = {
+    #     description = "HHKBse by cnst";
+    #     languages = ["se"];
+    #     symbolsFile = /home/cnst/.nix-config/nixos/hosts/cnix/xkb/symbols/hhkbse;
+    #   };
+    #   layout = "hhkbse";
+    #   # dir = "/home/cnst/.nix-config/nixos/xkb";
+    #   variant = "";
+    #   options = "lv3:rwin_switch";
+    # };
+  };
+}

sys/opt/xserver/cnix.nix

@@ -0,0 +1,17 @@
+{config, ...}: {
+  services.xserver = {
+    enable = true;
+    videoDrivers = ["amdgpu"];
+    xkb = {
+      extraLayouts.hhkbse = {
+        description = "HHKBse by cnst";
+        languages = ["se"];
+        symbolsFile = /home/cnst/.nix-config/nixos/hosts/cnix/xkb/symbols/hhkbse;
+      };
+      layout = "hhkbse";
+      # dir = "/home/cnst/.nix-config/nixos/xkb";
+      variant = "";
+      options = "lv3:rwin_switch";
+    };
+  };
+}

sys/opt/xserver/toothpc.nix

@@ -0,0 +1,7 @@
+{
+  services.xserver = {
+    enable = true;
+    videoDrivers = ["nvidia"];
+    layout = "se";
+  };
+}