-This file has 93279 words spanning 23800 lines and was last revised on 2025-09-26 08:49:32 +0200. +This file has 94167 words spanning 24116 lines and was last revised on 2025-10-07 21:23:03 +0200.
@@ -885,7 +893,7 @@ This section defines my Emacs configuration. For a while, I considered to use ry
-My emacs is built using the emacs-overlay nix flake, which builds a bleeding edge emacs on wayland (pgtk) with utilities like treesitter support. By executing the below source block, the current build setting can be updated at any time, and you can see my most up-to-date build options (last updated: 2025-09-26 08:49:32 +0200) +My emacs is built using the emacs-overlay nix flake, which builds a bleeding edge emacs on wayland (pgtk) with utilities like treesitter support. By executing the below source block, the current build setting can be updated at any time, and you can see my most up-to-date build options (last updated: 2025-10-07 21:23:03 +0200)
---prefix=/nix/store/4gbb3sfa5p6l3lhhnf0khvfj6w7qbqk5-emacs-git-pgtk-20250914.0 --disable-build-details --with-modules --with-pgtk --with-compress-install --with-toolkit-scroll-bars --with-native-compilation --without-imagemagick --with-mailutils --without-small-ja-dic --with-tree-sitter --without-xinput2 --without-xwidgets --with-dbus --with-selinux +--prefix=/nix/store/qrqw5n6fivwcqfpg83x28bj1klpgfzg8-emacs-git-pgtk-20250928.0 --disable-build-details --with-modules --with-pgtk --with-compress-install --with-toolkit-scroll-bars --with-native-compilation --without-imagemagick --with-mailutils --without-small-ja-dic --with-tree-sitter --without-xinput2 --without-xwidgets --with-dbus --with-selinux@@ -1403,6 +1411,10 @@ This provides devshell support for flake-parts url = "github:sodiboo/niri-flake"; inputs.nixpkgs.follows = "nixpkgs"; }; + microvm = { + url = "github:astro/microvm.nix"; + inputs.nixpkgs.follows = "nixpkgs"; + }; }; outputs = @@ -1835,10 +1847,15 @@ The rest of the outputs either define or help define the actual configurations: inputs.nswitch-rcm-nix.nixosModules.nswitch-rcm inputs.swarsel-modules.nixosModules.default inputs.niri-flake.nixosModules.niri + inputs.microvm.nixosModules.host + inputs.microvm.nixosModules.microvm "${self}/hosts/nixos/${configName}" "${self}/profiles/nixos" "${self}/modules/nixos" { + + microvm.guest.enable = lib.mkDefault false; + node = { name = configName; secretsDir = ../hosts/nixos/${configName}/secrets; @@ -3036,7 +3053,8 @@ in # ''; boot = { - kernelPackages = lib.mkDefault pkgs.kernel.linuxPackages; + # kernelPackages = lib.mkDefault pkgs.kernel.linuxPackages; + kernelPackages = lib.mkDefault pkgs.linuxPackages_latest; binfmt.emulatedSystems = [ "aarch64-linux" ]; initrd = { availableKernelModules = [ "nvme" "xhci_pci" "thunderbolt" "usb_storage" "cryptd" "usbhid" "sd_mod" "r8152" ]; @@ -3448,6 +3466,7 @@ This is my main server that I run at home. It handles most tasks that require bi swarselsystems = { info = "ASRock J4105-ITX, 32GB RAM"; + flakePath = "/root/.dotfiles"; isImpermanence = false; isSecureBoot = true; isCrypted = true; @@ -5832,7 +5851,6 @@ Mostly used to install some compilers and lsp's that I want to have available wh nixd zig zls - ansible-language-server elk-to-svg @@ -6080,7 +6098,7 @@ let certsSopsFile = self + /secrets/certs/secrets.yaml; clientSopsFile = self + /secrets/${config.node.name}/secrets.yaml; - inherit (config.repo.secrets.common.network) wlan1 wlan2 mobile1 vpn1-location vpn1-cipher vpn1-address eduroam-anon; + inherit (config.repo.secrets.common.network) wlan1 mobile1 vpn1-location vpn1-cipher vpn1-address eduroam-anon; iwd = config.networking.networkmanager.wifi.backend == "iwd"; in @@ -6126,6 +6144,9 @@ in networking = { inherit (config.swarselsystems) hostName; + hosts = { + "192.168.178.24" = [ "store.swarsel.win" ]; + }; wireless.iwd = { enable = true; settings = { @@ -6177,6 +6198,7 @@ in id = wlan1; # permissions = ""; type = "wifi"; + autoconnect-priority = "999"; }; ipv4 = { # dns-search = ""; @@ -6264,32 +6286,11 @@ in proxy = { }; }; - ${wlan2} = { - connection = { - id = wlan2; - type = "wifi"; - }; - ipv4 = { method = "auto"; }; - ipv6 = { - addr-gen-mode = "stable-privacy"; - method = "auto"; - }; - proxy = { }; - wifi = { - band = "bg"; - mode = "infrastructure"; - ssid = wlan2; - }; - wifi-security = { - key-mgmt = "wpa-psk"; - psk = "$WLAN2_PW"; - }; - }; - ${mobile1} = { connection = { id = mobile1; type = "wifi"; + autoconnect-priority = "500"; }; ipv4 = { method = "auto"; }; ipv6 = { @@ -8024,6 +8025,13 @@ in services.pipewire.systemWide = true; + # https://github.com/Spotifyd/spotifyd/issues/1366 + networking.hosts."0.0.0.0" = [ "apresolve.spotify.com" ]; + + # hacky way to enable multi-session + # when another user connects, the service will crash and the new user will login + systemd.services.spotifyd.serviceConfig.RestartSec = lib.mkForce 1; + services.spotifyd = { enable = true; settings = { @@ -8031,8 +8039,11 @@ in dbus_type = "session"; use_mpris = false; device = "sysdefault:CARD=PCH"; + # device = "default"; device_name = "SwarselSpot"; - mixer = "alsa"; + # backend = "pulseaudio"; + backend = "alsa"; + # mixer = "alsa"; zeroconf_port = servicePort; }; }; @@ -8392,14 +8403,14 @@ in address = "http://localhost:${builtins.toString servicePort}"; domain = serviceDomain; }; + database = { + type = "postgres"; + uri = "postgresql:///mautrix-whatsapp?host=/run/postgresql"; + }; appservice = { address = "http://localhost:${builtins.toString whatsappPort}"; hostname = "0.0.0.0"; port = whatsappPort; - database = { - type = "postgres"; - uri = "postgresql:///mautrix-whatsapp?host=/run/postgresql"; - }; }; bridge = { displayname_template = "{{or .FullName .PushName .JID}} (WA)"; @@ -8439,14 +8450,14 @@ in address = "http://localhost:${builtins.toString servicePort}"; domain = serviceDomain; }; + database = { + type = "postgres"; + uri = "postgresql:///mautrix-signal?host=/run/postgresql"; + }; appservice = { address = "http://localhost:${builtins.toString signalPort}"; hostname = "0.0.0.0"; port = signalPort; - database = { - type = "postgres"; - uri = "postgresql:///mautrix-signal?host=/run/postgresql"; - }; }; bridge = { displayname_template = "{{or .ContactName .ProfileName .PhoneNumber}} (Signal)"; @@ -8570,7 +8581,7 @@ in configureRedis = true; maxUploadSize = "4G"; extraApps = { - inherit (pkgs.nextcloud30Packages.apps) mail calendar contacts cospend phonetrack polls tasks sociallogin; + inherit (pkgs.nextcloud31Packages.apps) mail calendar contacts cospend phonetrack polls tasks sociallogin; }; extraAppsEnable = true; config = { @@ -8597,6 +8608,9 @@ in locations = { "/" = { proxyPass = "http://${serviceName}"; + extraConfig = '' + client_max_body_size 0; + ''; }; }; }; @@ -11624,27 +11638,35 @@ This sets the VirtualBox configuration. Guest should not be enabled if not direl { options.swarselmodules.optional.virtualbox = lib.mkEnableOption "optional VBox settings"; config = lib.mkIf config.swarselmodules.optional.virtualbox { - specialisation = { - VBox.configuration = { - virtualisation.virtualbox = { - host = { - enable = true; - enableExtensionPack = true; - }; - # leaving this here for future notice. setting guest.enable = true will make 'restarting sysinit-reactivation.target' take till timeout on nixos-rebuild switch - guest = { - enable = false; - }; - }; - # run an older kernel to provide compatibility with windows vm - boot = { - kernelPackages = lib.mkForce pkgs.stable24_05.linuxPackages; - # kernelParams = [ - # "amd_iommu=on" - # ]; - }; + # specialisation = { + # VBox.configuration = { + virtualisation.virtualbox = { + host = { + enable = true; + enableKvm = true; + addNetworkInterface = lib.mkIf config.virtualisation.virtualbox.host.enableKvm false; + package = pkgs.stable.virtualbox; + enableExtensionPack = true; + }; + # leaving this here for future notice. setting guest.enable = true will make 'restarting sysinit-reactivation.target' take till timeout on nixos-rebuild switch + guest = { + enable = false; }; }; + # run an older kernel to provide compatibility with windows vm + # boot = { + # kernelPackages = lib.mkForce pkgs.stable24_05.linuxPackages; + # # kernelParams = [ + # # "amd_iommu=on" + # # ]; + # }; + + + # fixes the issue of running together with QEMU + # NOTE: once you start a QEMU VM (use kvm) VirtualBox will fail to start VMs + # boot.kernelParams = [ "kvm.enable_virt_at_load=0" ]; + # }; + # }; }; } @@ -11706,11 +11728,8 @@ This holds configuration that is specific to framework laptops.
{ lib, config, inputs, ... }:
+{ lib, config, ... }:
{
- # imports = [
- # inputs.fw-fanctrl.nixosModules.default
- # ];
options.swarselmodules.optional.framework = lib.mkEnableOption "optional framework machine settings";
config = lib.mkIf config.swarselmodules.optional.framework {
services = {
@@ -11768,10 +11787,11 @@ This holds configuration that is specific to framework laptops.
hardware = {
amdgpu = {
opencl.enable = true;
- amdvlk = {
- enable = true;
- support32Bit.enable = true;
- };
+ initrd.enable = true;
+ # amdvlk = {
+ # enable = true;
+ # support32Bit.enable = true;
+ # };
};
};
};
@@ -11932,6 +11952,8 @@ in
connection = {
id = "VBC";
type = "wifi";
+ autoconnect-priority = "500";
+ secondaries = "48d09de4-0521-47d7-9bd5-43f97e23ff82"; # vpn uuid
};
ipv4 = { method = "auto"; };
ipv6 = {
@@ -12000,7 +12022,8 @@ in
govc
terraform
opentofu
- dev.terragrunt
+ # dev.terragrunt
+ terragrunt
graphviz
azure-cli
@@ -12037,7 +12060,7 @@ in
folders = {
"Documents" = {
path = "${homeDir}/Documents";
- devices = [ "magicant" "winters" "moonside@oracle" ];
+ devices = [ "moonside@oracle" ];
id = "hgr3d-pfu3w";
};
};
@@ -12063,6 +12086,110 @@ in
};
}
+
++Some standard options that should be set for every microvm host. +
+ +{ lib, config, ... }:
+{
+ options.swarselmodules.optional.microvmHost = lib.mkEnableOption "optional microvmHost settings";
+ # imports = [
+ # inputs.microvm.nixosModules.host
+ # ];
+
+ config = lib.mkIf (config.swarselmodules.optional.microvmHost && config.swarselsystems.withMicroVMs) {
+
+ microvm = {
+ hypervisor = lib.mkDefault "qemu";
+ };
+ };
+
+}
+
++Some standard options that should be set vor every microvm guest. We set the default +
+ +{ lib, config, ... }:
+{
+ options.swarselmodules.optional.microvmGuest = lib.mkEnableOption "optional microvmGuest settings";
+ # imports = [
+ # inputs.microvm.nixosModules.microvm
+ # "${self}/profiles/nixos"
+ # "${self}/modules/nixos"
+ # ];
+ config = lib.mkIf config.swarselmodules.optional.microvmGuest
+ {
+ # imports = [
+ # inputs.microvm.nixosModules.microvm
+
+ # "${self}/profiles/nixos"
+ # "${self}/modules/nixos"
+ # ];
+
+ boot.kernelParams = [ "systemd.hostname=${config.networking.hostName}" ];
+
+ node.name = config;
+ documentation.enable = lib.mkForce false;
+
+ microvm = {
+ guest.enable = lib.mkForce true;
+ hypervisor = lib.mkDefault "qemu";
+ mem = lib.mkDefault 1024 * 4;
+ vcpu = lib.mkDefault 4;
+ optimize.enable = false;
+ writableStoreOverlay = "/nix/.rw-store";
+
+ # interfaces = flip lib.mapAttrsToList guestCfg.microvm.interfaces (
+ # _: { mac, hostLink, ...}:
+ # {
+ # type = "macvtap";
+ # id = "vm-${replaceStrings [ ":" ] [ "" ] mac}";
+ # inherit mac;
+ # macvtap = {
+ # link = hostLink;
+ # mode = "bridge";
+ # };
+ # }
+ # );
+ shares =
+ [
+ {
+ source = "/nix/store";
+ mountPoint = "/nix/.ro-store";
+ tag = "ro-store";
+ proto = "virtiofs";
+ }
+ ];
+ };
+ # systemd.network.networks = lib.flip lib.concatMapAttrs guestCfg.microvm.interfaces (
+ # name:
+ # { mac, ... }:
+ # {
+ # "10-${name}".matchConfig = mkForce {
+ # MACAddress = mac;
+ # };
+ # }
+ # );
+
+ };
+}
+
{ lib, config, ... }:
+{
+ options.swarselmodules.blueman-applet = lib.mkEnableOption "enable blueman applet for tray";
+ config = lib.mkIf config.swarselmodules.blueman-applet {
+ services.blueman-applet.enable = true;
+ };
+}
+
+{ lib, config, ... }:
+{
+ options.swarselmodules.nm-applet = lib.mkEnableOption "enable network manager applet for tray";
+ config = lib.mkIf config.swarselmodules.nm-applet {
+ services.network-manager-applet.enable = true;
+ xsession.preferStatusNotifierItems = true; # needed for indicator icon to show
+ };
+}
+
+{ lib, config, pkgs, ... }:
+{
+ options.swarselmodules.obsidian-tray = lib.mkEnableOption "enable obsidian applet for tray";
+ config = lib.mkIf config.swarselmodules.obsidian-tray {
+
+ systemd.user.services.obsidian-applet = {
+ Unit = {
+ Description = "Obsidian applet";
+ Requires = [ "tray.target" ];
+ After = [
+ "graphical-session.target"
+ "tray.target"
+ ];
+ PartOf = [ "graphical-session.target" ];
+ };
+
+ Install = {
+ WantedBy = [ "graphical-session.target" ];
+ };
+
+ Service = {
+ ExecStart = "${pkgs.obsidian}/bin/obsidian";
+ };
+ };
+ };
+
+}
+
+{ lib, config, pkgs, ... }:
+{
+ options.swarselmodules.anki-tray = lib.mkEnableOption "enable anki applet for tray";
+ config = lib.mkIf config.swarselmodules.anki-tray {
+
+ systemd.user.services.anki-applet = {
+ Unit = {
+ Description = "Anki applet";
+ Requires = [ "tray.target" ];
+ After = [
+ "graphical-session.target"
+ "tray.target"
+ ];
+ PartOf = [ "graphical-session.target" ];
+ };
+
+ Install = {
+ WantedBy = [ "graphical-session.target" ];
+ };
+
+ Service = {
+ ExecStart = "${pkgs.anki-bin}/bin/anki-bin";
+ };
+ };
+
+ };
+}
+
+{ lib, config, pkgs, ... }:
+{
+ options.swarselmodules.element-tray = lib.mkEnableOption "enable element applet for tray";
+ config = lib.mkIf config.swarselmodules.element-tray {
+
+ systemd.user.services.element-applet = {
+ Unit = {
+ Description = "Element applet";
+ Requires = [ "tray.target" ];
+ After = [
+ "graphical-session.target"
+ "tray.target"
+ ];
+ PartOf = [ "graphical-session.target" ];
+ };
+
+ Install = {
+ WantedBy = [ "graphical-session.target" ];
+ };
+
+ Service = {
+ ExecStart = "${pkgs.element-desktop}/bin/element-desktop --hidden --enable-features=useozoneplatform --ozone-platform=wayland --disable-gpu-driver-bug-workarounds";
+ };
+ };
+ };
+
+}
+
+{ lib, config, pkgs, ... }:
+{
+ options.swarselmodules.vesktop-tray = lib.mkEnableOption "enable vesktop applet for tray";
+ config = lib.mkIf config.swarselmodules.vesktop-tray {
+
+ systemd.user.services.vesktop-applet = {
+ Unit = {
+ Description = "Vesktop applet";
+ Requires = [ "tray.target" ];
+ After = [
+ "graphical-session.target"
+ "tray.target"
+ ];
+ PartOf = [ "graphical-session.target" ];
+ };
+
+ Install = {
+ WantedBy = [ "graphical-session.target" ];
+ };
+
+ Service = {
+ ExecStart = "${pkgs.vesktop}/bin/vesktop --start-minimized --enable-speech-dispatcher --ozone-platform-hint=auto --enable-features=WaylandWindowDecorations --enable-wayland-ime";
+ };
+ };
+ };
+
+}
+
+Sometimes my DE crashes after putting it to suspend - to be precise, it happens when I put it into suspend when I have multiple screens plugged in. I have never taken the time to debug the issue, but instead just switch to a different TTY and then use this script to kill the hanging session. @@ -18813,8 +19160,8 @@ in
{ lib, config, ... }:
@@ -19083,7 +19430,12 @@ in
gpgagent = lib.mkDefault true;
gammastep = lib.mkDefault true;
spicetify = lib.mkDefault true;
-
+ blueman-applet = lib.mkDefault true;
+ nm-applet = lib.mkDefault true;
+ obsidian-tray = lib.mkDefault true;
+ anki-tray = lib.mkDefault true;
+ element-tray = lib.mkDefault true;
+ vesktop-tray = lib.mkDefault true;
};
};
@@ -25866,7 +26218,7 @@ similarly, there exists an version that starts from the right.