ctucx.git: nixfiles

ctucx' nixfiles

1 
2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 
26 
27 
28 
29 
30 
31 
32 
33 
34 
35 
36 
37 
38 
{ config, lib, pkgs, ... }:

{

  imports = [
    ./hardware-configuration.nix
    ../../configurations/linux/gnome.nix
    ./keyboard.nix
  ];

  deployment.allowLocalDeployment = true;

  ctucxConfig.monitoring.exporters.enable = true;

  boot = {
    loader.systemd-boot.enable = lib.mkForce false;
    loader.efi.canTouchEfiVariables = true;

    lanzaboote = {
      enable = true;
      pkiBundle = "/etc/secureboot";
    };

    kernelPackages = pkgs.linuxPackages_latest;
  };

  nix.gc.automatic = lib.mkForce false;

  services = {
    openssh.enable = true;
    fprintd.enable = true;
    fwupd.enable   = true;
  };

  system.stateVersion = "24.11";
  home-manager.users.katja.home.stateVersion = "24.11";
}