caleb/Surface-Nixos
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

wrapping up changes in surface

Browse Source
This commit is contained in:
caleb 2024-07-23 11:01:31 -04:00
parent 57e365db33
commit d7706ac3fd
4 changed files with 4 additions and 63 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
application-configuration.nix
View File

@ -7,7 +7,6 @@
firefox
kate
qalculate-qt
keepassxc
libsForQt5.krdc
libreoffice-qt
isoimagewriter
@ -16,23 +15,11 @@
monero-gui
tor-browser-bundle-bin
yubikey-manager-qt
libsForQt5.kdeconnect-kde
docker-compose
];
};
# kde connect
networking.firewall = {
enable = true;
allowedTCPPortRanges = [
{ from = 1714; to = 1764; } # KDE Connect
];
allowedUDPPortRanges = [
{ from = 1714; to = 1764; } # KDE Connect
];
};
# install Steam
programs.steam = {
enable = true;

7
configuration.nix
View File

@ -30,10 +30,9 @@
};
# Enable opengl
hardware.opengl = {
hardware.graphics = {
enable = true;
driSupport = true;
driSupport32Bit = true;
enable32Bit = true;
};
nixpkgs.config.allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) [
@ -60,7 +59,7 @@
# Enable the KDE Plasma Desktop Environment.
services.displayManager.sddm.enable = true;
services.xserver.desktopManager.plasma5.enable = true;
services.desktopManager.plasma6.enable = true;
# fonts
fonts.packages = with pkgs; [

36
networking-configuration.nix
View File

@ -11,46 +11,10 @@
systemd.services.NetworkManager-wait-online.enable = false; #disable wait online since it is broken
hardware.bluetooth.enable = true;
# Enable encrypted DNS
services.dnscrypt-proxy2 = {
enable = true;
settings = {
ipv6_servers = true;
require_dnssec = true;
};
};
systemd.services.dnscrypt-proxy2.serviceConfig = {
StateDirectory = "dnscrypt-proxy";
};
# Enable mullvad vpn
services.mullvad-vpn.package = pkgs.mullvad-vpn;
services.mullvad-vpn.enable = true;
# Enable tailscale
services.tailscale.enable = true;
# exclude tailscale IPs from mullvad routing
/* networking.nftables = {
enable = true;
ruleset = ''
define TAILNET_DNS = {
100.100.100.100,
9.9.9.9
}
define TAILNET_IPV4 = {
100.64.0.0/10
}
define TAILNET_IPV6 = {
fd7a:115c:a1e0::/48
}
table inet excludeTraffic {
chain excludeDns {
type filter hook output priority -10; policy accept;
ip daddr $TAILNET_DNS udp dport 53 ct mark set 0x00000f41 meta mark set 0x6d6f6c65;
ip daddr $TAILNET_DNS tcp dport 53 ct mark set 0x00000f41 meta mark set 0x6d6f6c65;
}
}
'';
}; */
}

11
surfacebook-configuration.nix
View File

@ -8,7 +8,7 @@
##### SB3 Hardware #####
# surface kernel config
users.users.caleb.extraGroups = [ "surface-control" ];
microsoft-surface.surface-control.enable = true;
#microsoft-surface.surface-control.enable = true;
hardware.cpu.intel.updateMicrocode = true;
# Nvidia driver setup
@ -20,7 +20,6 @@
enable = true;
finegrained = true;
};
nvidiaPersistenced = true;
prime = {
offload = {
enable = true;
@ -31,12 +30,4 @@
nvidiaBusId = "PCI:2:0:0";
};
};
# preserve video memory after suspend https://wiki.archlinux.org/title/NVIDIA/Tips_and_tricks#Preserve_video_memory_after_suspend
boot.extraModprobeConfig = ''
options nvidia NVreg_PreserveVideoMemoryAllocations=1 NVreg_TemporaryFilePath=/var/tmp
'';
# change backlight agent
boot.kernelParams = [ "acpi_osi=!" "acpi_osi=\"Windows 2015\""];
}