refactor: more sane profile structure

profiles/nixos/optional/autologin.nix

@@ -0,0 +1,7 @@
+_:
+{
+  services = {
+    getty.autologinUser = "swarsel";
+    greetd.settings.initial_session.user = "swarsel";
+  };
+}

profiles/nixos/optional/gaming.nix

@@ -0,0 +1,36 @@
+{ pkgs, ... }:
+{
+  specialisation = {
+    gaming.configuration = {
+      networking = {
+        firewall = {
+          allowedUDPPorts = [ 4380 27036 14242 34197 ]; # 34197: factorio; 4380 27036 14242: barotrauma;
+          allowedTCPPorts = [ ]; # 34197: factorio; 4380 27036 14242: barotrauma; 51820: wireguard
+          allowedTCPPortRanges = [
+            { from = 27015; to = 27030; } # barotrauma
+            { from = 27036; to = 27037; } # barotrauma
+          ];
+          allowedUDPPortRanges = [
+            { from = 27000; to = 27031; } # barotrauma
+            { from = 58962; to = 58964; } # barotrauma
+          ];
+        };
+      };
+
+      programs.steam = {
+        enable = true;
+        package = pkgs.stable.steam;
+        extraCompatPackages = [
+          pkgs.proton-ge-bin
+        ];
+      };
+
+      hardware.xone.enable = true;
+
+      environment.systemPackages = [
+        pkgs.linuxKernel.packages.linux_6_12.xone
+      ];
+    };
+  };
+
+}

profiles/nixos/optional/nswitch-rcm.nix

@@ -0,0 +1,10 @@
+{ pkgs, ... }:
+{
+  services.nswitch-rcm = {
+    enable = true;
+    package = pkgs.fetchurl {
+      url = "https://github.com/Atmosphere-NX/Atmosphere/releases/download/1.3.2/fusee.bin";
+      hash = "sha256-5AXzNsny45SPLIrvWJA9/JlOCal5l6Y++Cm+RtlJppI=";
+    };
+  };
+}

profiles/nixos/optional/virtualbox.nix

@@ -0,0 +1,21 @@
+{ lib, pkgs, ... }:
+{
+
+  specialisation = {
+    VBox.configuration = {
+      virtualisation.virtualbox = {
+        host = {
+          enable = true;
+          enableExtensionPack = true;
+        };
+        # leaving this here for future notice. setting guest.enable = true will make 'restarting sysinit-reactivation.target' take till timeout on nixos-rebuild switch
+        guest = {
+          enable = false;
+        };
+      };
+      # run an older kernel to provide compatibility with windows vm
+      boot.kernelPackages = lib.mkForce pkgs.linuxPackages;
+    };
+  };
+
+}

profiles/nixos/optional/vmware.nix

@@ -0,0 +1,6 @@
+_:
+{
+
+  virtualisation.vmware.host.enable = true;
+  virtualisation.vmware.guest.enable = true;
+}

profiles/nixos/optional/work.nix

@@ -0,0 +1,129 @@
+{ self, pkgs, config, ... }:
+let
+  owner = "swarsel";
+  sopsFile = self + /secrets/work/secrets.yaml;
+in
+{
+  sops = {
+    secrets = {
+      clad = {
+        inherit owner sopsFile;
+      };
+      dcad = {
+        inherit owner sopsFile;
+      };
+      wsad = {
+        inherit owner sopsFile;
+      };
+      imbad = {
+        inherit owner sopsFile;
+      };
+    };
+  };
+
+  # boot.initrd.luks.yubikeySupport = true;
+  programs = {
+    zsh.shellInit = ''
+      export CLAD="$(cat ${config.sops.secrets.clad.path})"
+      export DCAD="$(cat ${config.sops.secrets.dcad.path})"
+      export GOVC_PASSWORD="$(cat ${config.sops.secrets.dcad.path})"
+      export WSAD="$(cat ${config.sops.secrets.wsad.path})"
+      export IMBAD="$(cat ${config.sops.secrets.imbad.path})"
+      export DCUSER="dc_adm_schwarzaeugl@IMP.UNIVIE.AC.AT"
+      export GOVC_USERNAME="dc_adm_schwarzaeugl@IMP.UNIVIE.AC.AT"
+      export PACKER_SSH_EXTRA_ARGS='"--scp-extra-args","'-O'"'
+    '';
+
+    browserpass.enable = true;
+    _1password.enable = true;
+    _1password-gui = {
+      enable = true;
+      polkitPolicyOwners = [ "swarsel" ];
+    };
+  };
+
+  networking.firewall.trustedInterfaces = [ "virbr0" ];
+
+  virtualisation = {
+    docker.enable = true;
+    spiceUSBRedirection.enable = true;
+    libvirtd = {
+      enable = true;
+      qemu = {
+        package = pkgs.qemu_kvm;
+        runAsRoot = true;
+        swtpm.enable = true;
+        vhostUserPackages = with pkgs; [ virtiofsd ];
+        ovmf = {
+          enable = true;
+          packages = [
+            (pkgs.OVMFFull.override {
+              secureBoot = true;
+              tpmSupport = true;
+            }).fd
+          ];
+        };
+      };
+    };
+  };
+
+  environment.systemPackages = with pkgs; [
+    # (python39.withPackages (ps: with ps; [
+    # cryptography
+    # ]))
+    #   docker
+    python39
+    qemu
+    packer
+    gnumake
+    libisoburn
+    govc
+    terraform
+
+    # vm
+    virt-manager
+    virt-viewer
+    virtiofsd
+    spice
+    spice-gtk
+    spice-protocol
+    win-virtio
+    win-spice
+  ];
+
+
+  services = {
+    spice-vdagentd.enable = true;
+    openssh = {
+      enable = true;
+      extraConfig = ''
+          '';
+    };
+
+    syncthing = {
+      settings = {
+        "winters" = {
+          id = "O7RWDMD-AEAHPP7-7TAVLKZ-BSWNBTU-2VA44MS-EYGUNBB-SLHKB3C-ZSLMOAA";
+        };
+        folders = {
+          "Documents" = {
+            path = "/home/swarsel/Documents";
+            devices = [ "magicant" "winters" ];
+            id = "hgr3d-pfu3w";
+          };
+        };
+      };
+    };
+  };
+
+  # cgroups v1 is required for centos7 dockers
+  specialisation = {
+    cgroup_v1.configuration = {
+      boot.kernelParams = [
+        "SYSTEMD_CGROUP_ENABLE_LEGACY_FORCE=1"
+        "systemd.unified_cgroup_hierarchy=0"
+      ];
+    };
+  };
+
+}