Add himalia

Signed-off-by: Nikolaos Karaolidis <nick@karaolidis.com>

hosts/himalia/README.md

@@ -0,0 +1 @@
+# himalia

hosts/himalia/default.nix

@@ -0,0 +1,51 @@
+{ inputs, ... }:
+{
+  imports = [
+    inputs.disko.nixosModules.disko
+    ./format.nix
+
+    ./hardware
+
+    ../common/configs/system/backup
+    ../common/configs/system/bluetooth
+    ../common/configs/system/boot
+    ../common/configs/system/brightnessctl
+    ../common/configs/system/btrfs
+    ../common/configs/system/cpu
+    ../common/configs/system/documentation
+    ../common/configs/system/getty
+    ../common/configs/system/git
+    ../common/configs/system/gpg-agent
+    ../common/configs/system/impermanence
+    ../common/configs/system/libvirt
+    ../common/configs/system/neovim
+    ../common/configs/system/networkmanager
+    ../common/configs/system/nix
+    ../common/configs/system/nix-cleanup
+    ../common/configs/system/nix-install
+    ../common/configs/system/nix-ld
+    ../common/configs/system/nix-update
+    ../common/configs/system/nixpkgs
+    ../common/configs/system/ntp
+    ../common/configs/system/pipewire
+    ../common/configs/system/podman
+    ../common/configs/system/powertop
+    ../common/configs/system/printing
+    ../common/configs/system/smartmontools
+    ../common/configs/system/sops
+    ../common/configs/system/ssh
+    ../common/configs/system/ssh-agent
+    ../common/configs/system/sudo
+    ../common/configs/system/system
+    ../common/configs/system/timezone
+    ../common/configs/system/tlp
+    ../common/configs/system/tmux
+    ../common/configs/system/tree
+    ../common/configs/system/users
+    ../common/configs/system/zsh
+
+    ./users/nick
+  ];
+
+  networking.hostName = "himalia";
+}

hosts/himalia/format.nix

@@ -0,0 +1,79 @@
+{
+  disko.devices = {
+    disk.main = {
+      device = "/dev/disk/by-id/nvme-MTFDKBA2T0QGN-1BN1AABGA_25094E64841E";
+      type = "disk";
+      content = {
+        type = "gpt";
+        partitions = {
+          boot = {
+            name = "boot";
+            size = "1M";
+            type = "EF02";
+          };
+          esp = {
+            name = "esp";
+            size = "512M";
+            type = "EF00";
+            content = {
+              type = "filesystem";
+              format = "vfat";
+              mountpoint = "/boot";
+              mountOptions = [ "umask=0077" ];
+            };
+          };
+          swap = {
+            name = "swap";
+            size = "32G";
+            content = {
+              type = "swap";
+              resumeDevice = true;
+            };
+          };
+          root = {
+            name = "root";
+            size = "100%";
+            content = {
+              name = "main";
+              type = "luks";
+              passwordFile = "/tmp/keyfile";
+              settings = {
+                allowDiscards = true;
+              };
+              content = {
+                type = "btrfs";
+                extraArgs = [ "-f" ];
+                subvolumes = {
+                  "@" = {
+                    mountpoint = "/";
+                  };
+                  "@persist" = {
+                    mountpoint = "/persist";
+                    mountOptions = [
+                      "compress=zstd"
+                      "noatime"
+                    ];
+                  };
+                  "@nix" = {
+                    mountpoint = "/nix";
+                    mountOptions = [
+                      "compress=zstd"
+                      "noatime"
+                    ];
+                  };
+                  "@cache" = {
+                    mountpoint = "/cache";
+                    mountOptions = [
+                      "compress=zstd"
+                      "noatime"
+                    ];
+                  };
+                };
+              };
+            };
+          };
+        };
+      };
+    };
+  };
+}

hosts/himalia/hardware/default.nix

@@ -0,0 +1,86 @@
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
+{
+  imports = [ ./display.nix ];
+
+  hardware = {
+    enableAllFirmware = true;
+
+    cpu = {
+      cores = 16;
+      threads = 16;
+      intel.updateMicrocode = true;
+    };
+
+    nvidia = {
+      open = true;
+      powerManagement.enable = true;
+      # TODO
+      # dynamicBoost.enable = true;
+
+      prime = {
+        offload = {
+          enable = true;
+          enableOffloadCmd = true;
+        };
+        intelBusId = "PCI:0:2:0";
+        nvidiaBusId = "PCI:1:0:0";
+      };
+    };
+
+    graphics = {
+      enable32Bit = true;
+      extraPackages = with pkgs; [
+        vaapiVdpau
+        intel-vaapi-driver
+        libvdpau-va-gl
+        intel-media-driver
+      ];
+    };
+
+    nvidia-container-toolkit.enable = (
+      config.virtualisation.containerd.enable
+      || config.virtualisation.docker.enable
+      || config.virtualisation.podman.enable
+    );
+  };
+
+  boot = {
+    kernelModules = [ "kvm-intel" ];
+    initrd.kernelModules = [
+      "i915"
+      "xhci_pci"
+      "thunderbolt"
+      "vmd"
+      "nvme"
+      "usbhid"
+      "sd_mod"
+    ];
+  };
+
+  nixpkgs.config.cudaSupport = true;
+
+  powerManagement.enable = true;
+
+  services = {
+    xserver.videoDrivers = [ "nvidia" ];
+    fstrim.enable = true;
+    tlp.settings.DISK_DEVICES = lib.mkDefault "nvme0n1 nvme1n1";
+    logind.lidSwitch = "ignore";
+    asusd = {
+      enable = true;
+      enableUserService = true;
+    };
+    supergfxd.enable = true;
+  };
+
+  programs.gamescope.env = {
+    __NV_PRIME_RENDER_OFFLOAD = "1";
+    __VK_LAYER_NV_optimus = "NVIDIA_only";
+    __GLX_VENDOR_LIBRARY_NAME = "nvidia";
+  };
+}

hosts/himalia/hardware/display.nix

@@ -0,0 +1,53 @@
+{ pkgs, ... }:
+{
+  boot.kernelParams = [ "video=eDP-1:2560x1600@240" ];
+
+  programs.steam.package = pkgs.steam.override { extraEnv.STEAM_FORCE_DESKTOPUI_SCALING = 1.25; };
+
+  home-manager.sharedModules = [
+    {
+      wayland.windowManager.hyprland.settings = {
+        monitor = [
+          "eDP-1, 2560x1600@240, 0x0, 1.25"
+          "HDMI-A-2, 5120x1440@144, -1536x-1440, 1"
+        ];
+
+        general = {
+          layout = "master";
+        };
+
+        master = {
+          slave_count_for_center_master = 0;
+          mfact = 0.5;
+        };
+
+        workspace = [
+          "1, monitor:eDP-1, layoutopt:orientation:left"
+          "2, monitor:eDP-1, layoutopt:orientation:left"
+          "3, monitor:eDP-1, layoutopt:orientation:left"
+          "4, monitor:eDP-1, layoutopt:orientation:left"
+          "5, monitor:eDP-1, layoutopt:orientation:left"
+          "6, monitor:eDP-1, layoutopt:orientation:left"
+          "7, monitor:eDP-1, layoutopt:orientation:left"
+          "8, monitor:eDP-1, layoutopt:orientation:left"
+          "9, monitor:eDP-1, layoutopt:orientation:left"
+          "10, monitor:eDP-1, layoutopt:orientation:left"
+          "11, monitor:HDMI-A-2, layoutopt:orientation:center"
+          "12, monitor:HDMI-A-2, layoutopt:orientation:center"
+          "13, monitor:HDMI-A-2, layoutopt:orientation:center"
+          "14, monitor:HDMI-A-2, layoutopt:orientation:center"
+          "15, monitor:HDMI-A-2, layoutopt:orientation:center"
+          "16, monitor:HDMI-A-2, layoutopt:orientation:center"
+          "17, monitor:HDMI-A-2, layoutopt:orientation:center"
+          "18, monitor:HDMI-A-2, layoutopt:orientation:center"
+          "19, monitor:HDMI-A-2, layoutopt:orientation:center"
+          "20, monitor:HDMI-A-2, layoutopt:orientation:center"
+        ];
+      };
+
+      programs.vscode.profiles.default.userSettings."window.zoomLevel" = (1.25 - 1) / 0.2;
+
+      theme.cursor.size = 24;
+    }
+  ];
+}

hosts/himalia/secrets/ssh_host_ed25519_key.pub

@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEgGmzh23q/ucuZRRkS4LdPfBdTDWJk0UrlUYVnC7j2b root@himalia

hosts/himalia/users/nick/configs/console/git/default.nix

@@ -0,0 +1,48 @@
+{
+  user ? throw "user argument is required",
+  home ? throw "home argument is required",
+}:
+{
+  config,
+  inputs,
+  lib,
+  system,
+  ...
+}:
+let
+  hmConfig = config.home-manager.users.${user};
+  selfPkgs = inputs.self.packages.${system};
+in
+{
+  home-manager.users.${user} = {
+    sops = {
+      secrets = {
+        "git/credentials/git.karaolidis.com/admin/username".sopsFile =
+          ../../../../../../../secrets/personal/secrets.yaml;
+        "git/credentials/git.karaolidis.com/admin/password".sopsFile =
+          ../../../../../../../secrets/personal/secrets.yaml;
+      };
+
+      templates."git/credentials" = {
+        content = ''
+          https://${hmConfig.sops.placeholder."git/credentials/git.karaolidis.com/admin/username"}:${
+            hmConfig.sops.placeholder."git/credentials/git.karaolidis.com/admin/password"
+          }@git.karaolidis.com
+        '';
+        path = "${home}/.config/git/credentials";
+      };
+    };
+
+    programs.ssh = {
+      matchBlocks = {
+        "github.com" = {
+          hostname = "github.com";
+          user = "git";
+          identityFile = "${home}/.ssh/ssh_personal_ed25519_key";
+        };
+      };
+
+      userKnownHostsFiles = with selfPkgs; [ ssh-known-hosts-github ];
+    };
+  };
+}

hosts/himalia/users/nick/configs/console/gpg/default.nix

@@ -0,0 +1,18 @@
+{
+  user ? throw "user argument is required",
+  home ? throw "home argument is required",
+}:
+{ config, ... }:
+let
+  hmConfig = config.home-manager.users.${user};
+in
+{
+  home-manager.users.${user} = {
+    sops.secrets = {
+      "gpg/key".sopsFile = ../../../../../../../secrets/personal/secrets.yaml;
+      "gpg/pass".sopsFile = ../../../../../../../secrets/personal/secrets.yaml;
+    };
+
+    programs.clipbook.bookmarks."GPG Passphrase".source = hmConfig.sops.secrets."gpg/pass".path;
+  };
+}

hosts/himalia/users/nick/configs/console/podman/default.nix

@@ -0,0 +1,32 @@
+{
+  user ? throw "user argument is required",
+  home ? throw "home argument is required",
+}:
+{ config, pkgs, ... }:
+let
+  hmConfig = config.home-manager.users.${user};
+in
+{
+  home-manager.users.${user}.sops = {
+    secrets = {
+      "registry/docker.io".sopsFile = ../../../../../../../secrets/personal/secrets.yaml;
+      "registry/registry.karaolidis.com".sopsFile = ../../../../../../../secrets/personal/secrets.yaml;
+    };
+
+    templates."containers-auth.json" = {
+      content = builtins.readFile (
+        (pkgs.formats.json { }).generate "auth.json" {
+          auths = {
+            "docker.io" = {
+              auth = hmConfig.sops.placeholder."registry/docker.io";
+            };
+            "registry.karaolidis.com" = {
+              auth = hmConfig.sops.placeholder."registry/registry.karaolidis.com";
+            };
+          };
+        }
+      );
+      path = "${home}/.config/containers/auth.json";
+    };
+  };
+}

hosts/himalia/users/nick/configs/console/ssh/default.nix

@@ -0,0 +1,22 @@
+{
+  user ? throw "user argument is required",
+  home ? throw "home argument is required",
+}:
+{ config, ... }:
+let
+  hmConfig = config.home-manager.users.${user};
+in
+{
+  home-manager.users.${user} = {
+    sops.secrets = {
+      "ssh/key" = {
+        sopsFile = ../../../../../../../secrets/personal/secrets.yaml;
+        path = "${home}/.ssh/ssh_personal_ed25519_key";
+      };
+
+      "ssh/pass".sopsFile = ../../../../../../../secrets/personal/secrets.yaml;
+    };
+
+    programs.clipbook.bookmarks."SSH Key Passphrase".source = hmConfig.sops.secrets."ssh/pass".path;
+  };
+}

hosts/himalia/users/nick/configs/console/syncthing/default.nix

@@ -0,0 +1,17 @@
+{
+  user ? throw "user argument is required",
+  home ? throw "home argument is required",
+}:
+{ ... }:
+{
+  home-manager.users.${user}.services.syncthing.settings.folders = {
+    official = {
+      label = "Official";
+      path = "${home}/Documents/Official";
+      devices = [
+        "amalthea"
+        "ganymede"
+      ];
+    };
+  };
+}

hosts/himalia/users/nick/configs/gui/obsidian/default.nix

@@ -0,0 +1,23 @@
+{
+  user ? throw "user argument is required",
+  home ? throw "home argument is required",
+}:
+{ ... }:
+{
+  home-manager.users.${user} = {
+    programs.obsidian.vaults."Documents/Obsidian/master".enable = true;
+
+    services.syncthing.settings.folders.obsidian = {
+      label = "Obsidian";
+      path = "${home}/Documents/Obsidian";
+      devices = [
+        "amalthea"
+        "ganymede"
+      ];
+      maxConflicts = 0;
+    };
+
+    home.file."Documents/Obsidian/.stignore".source =
+      ../../../../../../common/configs/user/gui/obsidian/.stignore;
+  };
+}

hosts/himalia/users/nick/configs/gui/theme/default.nix

@@ -0,0 +1,11 @@
+{
+  user ? throw "user argument is required",
+  home ? throw "home argument is required",
+}:
+{ ... }:
+{
+  home-manager.users.${user}.theme = {
+    padding = 0;
+    radius = 0;
+  };
+}

hosts/himalia/users/nick/configs/gui/vscode/default.nix

@@ -0,0 +1,21 @@
+{
+  user ? throw "user argument is required",
+  home ? throw "home argument is required",
+}:
+{ ... }:
+{
+  home-manager.users.${user}.programs.vscode.languages = {
+    c.enable = true;
+    go.enable = true;
+    java.enable = true;
+    lua.enable = true;
+    markdown.enable = true;
+    nix.enable = true;
+    python.enable = true;
+    rest.enable = true;
+    rust.enable = true;
+    sops.enable = true;
+    typescript.enable = true;
+    yaml.enable = true;
+  };
+}

hosts/himalia/users/nick/default.nix

@@ -0,0 +1,120 @@
+{ config, lib, ... }:
+let
+  # FIXME: https://github.com/NixOS/nixpkgs/issues/24570
+  # FIXME: https://github.com/NixOS/nixpkgs/issues/305643
+  user = "nick";
+  home = "/home/nick";
+in
+{
+  imports = [
+    ../../../common/configs/user/options.nix
+
+    (import ../../../common/configs/user/console/android { inherit user home; })
+    (import ../../../common/configs/user/console/bashmount { inherit user home; })
+    (import ../../../common/configs/user/console/brightnessctl { inherit user home; })
+    (import ../../../common/configs/user/console/btop { inherit user home; })
+    (import ../../../common/configs/user/console/dive { inherit user home; })
+    (import ../../../common/configs/user/console/fastfetch { inherit user home; })
+    (import ../../../common/configs/user/console/ffmpeg { inherit user home; })
+    (import ../../../common/configs/user/console/git { inherit user home; })
+    (import ../../../common/configs/user/console/gpg-agent { inherit user home; })
+    (import ../../../common/configs/user/console/home-manager { inherit user home; })
+    (import ../../../common/configs/user/console/imagemagick { inherit user home; })
+    (import ../../../common/configs/user/console/ip { inherit user home; })
+    (import ../../../common/configs/user/console/jq { inherit user home; })
+    (import ../../../common/configs/user/console/libvirt { inherit user home; })
+    (import ../../../common/configs/user/console/lsof { inherit user home; })
+    (import ../../../common/configs/user/console/ncdu { inherit user home; })
+    (import ../../../common/configs/user/console/neovim { inherit user home; })
+    (import ../../../common/configs/user/console/nix { inherit user home; })
+    (import ../../../common/configs/user/console/nix-cleanup { inherit user home; })
+    (import ../../../common/configs/user/console/nix-develop { inherit user home; })
+    (import ../../../common/configs/user/console/nix-direnv { inherit user home; })
+    (import ../../../common/configs/user/console/pipewire { inherit user home; })
+    (import ../../../common/configs/user/console/podman { inherit user home; })
+    (import ../../../common/configs/user/console/ranger { inherit user home; })
+    (import ../../../common/configs/user/console/sops { inherit user home; })
+    (import ../../../common/configs/user/console/ssh { inherit user home; })
+    (import ../../../common/configs/user/console/ssh-agent { inherit user home; })
+    (import ../../../common/configs/user/console/syncthing { inherit user home; })
+    (import ../../../common/configs/user/console/tmux { inherit user home; })
+    (import ../../../common/configs/user/console/tree { inherit user home; })
+    (import ../../../common/configs/user/console/unzip { inherit user home; })
+    (import ../../../common/configs/user/console/wget { inherit user home; })
+    (import ../../../common/configs/user/console/xdg { inherit user home; })
+    (import ../../../common/configs/user/console/yt-dlp { inherit user home; })
+    (import ../../../common/configs/user/console/zsh { inherit user home; })
+
+    # TODO
+    # (import ../../../common/configs/user/gui/astal { inherit user home; })
+    (import ../../../common/configs/user/gui/bluetooth { inherit user home; })
+    (import ../../../common/configs/user/gui/brightnessctl { inherit user home; })
+    (import ../../../common/configs/user/gui/btop { inherit user home; })
+    (import ../../../common/configs/user/gui/chromium { inherit user home; })
+    (import ../../../common/configs/user/gui/clipbook { inherit user home; })
+    (import ../../../common/configs/user/gui/cliphist { inherit user home; })
+    (import ../../../common/configs/user/gui/darktable { inherit user home; })
+    (import ../../../common/configs/user/gui/discord { inherit user home; })
+    (import ../../../common/configs/user/gui/emoji { inherit user home; })
+    (import ../../../common/configs/user/gui/firefox { inherit user home; })
+    (import ../../../common/configs/user/gui/gtk { inherit user home; })
+    (import ../../../common/configs/user/gui/hyprland { inherit user home; })
+    (import ../../../common/configs/user/gui/hyprshot { inherit user home; })
+    (import ../../../common/configs/user/gui/kitty { inherit user home; })
+    (import ../../../common/configs/user/gui/libreoffice { inherit user home; })
+    (import ../../../common/configs/user/gui/networkmanager { inherit user home; })
+    (import ../../../common/configs/user/gui/obs { inherit user home; })
+    (import ../../../common/configs/user/gui/obsidian { inherit user home; })
+    (import ../../../common/configs/user/gui/pipewire { inherit user home; })
+    (import ../../../common/configs/user/gui/qalculate { inherit user home; })
+    (import ../../../common/configs/user/gui/qt { inherit user home; })
+    (import ../../../common/configs/user/gui/rofi { inherit user home; })
+    (import ../../../common/configs/user/gui/rquickshare { inherit user home; })
+    (import ../../../common/configs/user/gui/spicetify { inherit user home; })
+    (import ../../../common/configs/user/gui/steam { inherit user home; })
+    (import ../../../common/configs/user/gui/swww { inherit user home; })
+    (import ../../../common/configs/user/gui/theme { inherit user home; })
+    (import ../../../common/configs/user/gui/transmission { inherit user home; })
+    (import ../../../common/configs/user/gui/vscode { inherit user home; })
+    (import ../../../common/configs/user/gui/wev { inherit user home; })
+    (import ../../../common/configs/user/gui/wl-clipboard { inherit user home; })
+    (import ../../../common/configs/user/gui/x11 { inherit user home; })
+    (import ../../../common/configs/user/gui/xdg { inherit user home; })
+
+    (import ./configs/console/git { inherit user home; })
+    (import ./configs/console/gpg { inherit user home; })
+    (import ./configs/console/podman { inherit user home; })
+    (import ./configs/console/ssh { inherit user home; })
+    (import ./configs/console/syncthing { inherit user home; })
+
+    (import ./configs/gui/obsidian { inherit user home; })
+    (import ./configs/gui/theme { inherit user home; })
+    (import ./configs/gui/vscode { inherit user home; })
+  ];
+
+  # echo "password" | mkpasswd -s
+  sops.secrets."${user}-password" = {
+    sopsFile = ../../../../secrets/personal/secrets.yaml;
+    key = "password";
+    neededForUsers = true;
+  };
+
+  users.users.${user} = {
+    inherit home;
+    isNormalUser = true;
+    email = "nick@karaolidis.com";
+    fullName = "Nikolaos Karaolidis";
+    description = "Nikolaos Karaolidis";
+    hashedPasswordFile = config.sops.secrets."${user}-password".path;
+    extraGroups = [ "wheel" ];
+    linger = true;
+    uid = lib.strings.toInt (builtins.readFile ./uid);
+  };
+
+  services.getty.autologinUser = user;
+
+  home-manager.users.${user}.home = {
+    username = user;
+    homeDirectory = home;
+  };
+}

hosts/himalia/users/nick/uid

@@ -0,0 +1 @@
+1000