hosts/krypton,configuration/desktop: setup basic gnome environment

configuration/common/default.nix

@@ -11,12 +11,15 @@
 
   time.timeZone = "Europe/Berlin";
 
-  i18n.defaultLocale = "en_US.UTF-8";
+  i18n.defaultLocale = "de_DE.UTF-8";
+  i18n.extraLocaleSettings = {
+    LC_MESSAGES = "en_US.UTF-8";
+  };
   console = {
     keyMap = "de-latin1";
   };
 
-  security.sudo.wheelNeedsPassword = false;
+  security.sudo.wheelNeedsPassword = lib.mkDefault false;
 
   users.groups.guests = {};
 
@@ -143,6 +146,8 @@
     };
   };
 
+  documentation.doc.enable = false;
+
   nixpkgs.overlays = [
     (import ../../pkgs/overlay.nix)
   ];

configuration/desktop/default.nix

@@ -0,0 +1,9 @@
+{ ... }:
+
+{
+  imports = [
+    ./fonts.nix
+    ./gnome.nix
+    ./xserver.nix
+  ];
+}

configuration/desktop/fonts.nix

@@ -0,0 +1,13 @@
+{ pkgs, ... }:
+
+{
+
+  fonts.enableDefaultFonts = true;
+  fonts.fonts = with pkgs; [
+    roboto
+    roboto-mono
+    noto-fonts
+    noto-fonts-cjk
+    noto-fonts-emoji
+  ];
+}

configuration/desktop/gnome.nix

@@ -0,0 +1,39 @@
+{ pkgs, ... }:
+
+{
+
+  services.xserver.enable = true;
+  services.xserver.displayManager.gdm.enable = true;
+  services.xserver.desktopManager.gnome.enable = true;
+
+  services.gnome = {
+    tracker-miners.enable = false;
+    tracker.enable = false;
+  };
+
+  environment.gnome.excludePackages = with pkgs.gnome; [
+    baobab
+    epiphany
+    gnome-calendar
+    gnome-clocks
+    pkgs.gnome-console
+    gnome-contacts
+    gnome-logs
+    gnome-maps
+    gnome-music
+    pkgs.gnome-tour
+    pkgs.gnome-photos
+    gnome-weather
+    pkgs.gnome-connections
+    simple-scan
+    yelp
+  ];
+
+  environment.systemPackages = with pkgs; [
+    evolution
+    gnome.gnome-terminal
+    gnome.gnome-tweaks
+  ];
+
+  services.gnome.evolution-data-server.enable = true;
+}

configuration/desktop/xserver.nix

@@ -0,0 +1,7 @@
+{ pkgs, ... }:
+
+{
+  services.xserver.excludePackages = with pkgs; [
+    xterm
+  ];
+}

flake.lock

@@ -135,6 +135,22 @@
         "type": "github"
       }
     },
+    "nixpkgs-krypton": {
+      "locked": {
+        "lastModified": 1686960236,
+        "narHash": "sha256-AYCC9rXNLpUWzD9hm+askOfpliLEC9kwAo7ITJc4HIw=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "04af42f3b31dba0ef742d254456dc4c14eedac86",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
     "nixpkgs-schule": {
       "locked": {
         "lastModified": 1679437018,
@@ -158,6 +174,7 @@
         "fernglas": "fernglas",
         "nixos-exporter": "nixos-exporter",
         "nixpkgs": "nixpkgs",
+        "nixpkgs-krypton": "nixpkgs-krypton",
         "nixpkgs-schule": "nixpkgs-schule",
         "solid-xmpp-alarm": "solid-xmpp-alarm"
       }

flake.nix

@@ -1,6 +1,7 @@
 {
   inputs = {
     nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
+    nixpkgs-krypton.url = "github:NixOS/nixpkgs/nixos-unstable";
     nixpkgs-schule.url = "github:NixOS/nixpkgs/nixos-unstable";
     agenix = {
       url = "github:ryantm/agenix";
@@ -50,6 +51,7 @@
       gatekeeper = { name = "gatekeeper"; };
       hydra-1 = { name = "hydra-1"; };
       hydra-2 = { name = "hydra-2"; };
+      krypton = { name = "krypton"; };
       mail-2 = { name = "mail-2"; };
       minecraft-2 = { name = "minecraft-2"; };
       monitoring-3 = { name = "monitoring-3"; };

hosts/krypton/configuration.nix

@@ -0,0 +1,30 @@
+{ config, pkgs, lib, ... }:
+
+{
+  imports =
+    [
+      ./hardware-configuration.nix
+
+      ../../configuration/desktop
+
+      ./programs.nix
+    ];
+
+  # Use the systemd-boot EFI boot loader.
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+
+  boot.initrd.luks = {
+    devices.lvm = {
+      device = "/dev/disk/by-uuid/f7059f75-764d-4cd1-9da7-7c64b05bff38";
+      bypassWorkqueues = true;
+    };
+  };
+
+  networking.hostName = "krypton";
+
+  security.sudo.wheelNeedsPassword = true;
+
+  system.stateVersion = "23.05";
+}
+

hosts/krypton/hardware-configuration.nix

@@ -0,0 +1,47 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports =
+    [ (modulesPath + "/installer/scan/not-detected.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "xhci_pci" "nvme" "usb_storage" "sd_mod" "rtsx_pci_sdmmc" ];
+  boot.initrd.kernelModules = [ "dm-snapshot" ];
+  boot.kernelModules = [ "kvm-intel" ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" =
+    { device = "/dev/disk/by-uuid/1c49e548-d618-4915-a4ee-5039837c6a4a";
+      fsType = "ext4";
+    };
+
+  fileSystems."/home" =
+    { device = "/dev/disk/by-uuid/229d0940-1ce8-4e8c-987b-d7998cf4bc97";
+      fsType = "ext4";
+    };
+
+  fileSystems."/boot" =
+    { device = "/dev/disk/by-uuid/1A46-5CDD";
+      fsType = "vfat";
+    };
+
+  swapDevices =
+    [ { device = "/dev/disk/by-uuid/9b325780-17b2-4c0f-a3df-58f9963e1db0"; }
+    ];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp0s31f6.useDHCP = lib.mkDefault true;
+  # networking.interfaces.wlp3s0.useDHCP = lib.mkDefault true;
+  # networking.interfaces.wwp0s20f0u3.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  powerManagement.cpuFreqGovernor = lib.mkDefault "powersave";
+  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}

hosts/krypton/programs.nix

@@ -0,0 +1,23 @@
+{ pkgs, ... }:
+
+{
+  environment.systemPackages = with pkgs; [
+    firefox-wayland
+  ];
+
+  users.users.clerie.packages = with pkgs; [
+    keepassxc
+    vlc
+    mumble
+    element-desktop
+    signal-desktop
+    dino
+  ];
+
+  services.syncthing = {
+    enable = true;
+    user = "clerie";
+    dataDir = "/home/clerie";
+    configDir = "/home/clerie/.config/syncthing";
+  };
+}