# nix-config

NixOS configs for my machines


## Purpose based configurations

### Global

Base Config:

    - LUKS encrypted disk
    - btrfs filesystem (planned migration)
    - NVMe optimizations
        - fstrim (periodic trim)
    - systemd-boot bootloader
    - Latest kernel (linuxPackages_latest)

System Software:

    - KDE Plasma
    - sddm
    - wayland compositor
    - zsh
    - ranger
    - neovim
        - nix plugin
        - yaml plugin
        - python plugin
        - autocomplete
    - nmap
    - dnsutils
    - sshd (enabled)
        - No root login
        - Password authentication disabled
        - port 22
    - ansible
        - galaxy enabled
        - ansible-playbook
    - noisetorch
    - zram
        - Configured with zstd compression
        - Allocated 50% of system memory to ram swap
    - avahi mdns
    - tmux
        - vim pane navigation
        - otherwise default keybinds
    - borgbackup
    - home-manager
    - fwupd (firmware updates)
    - CUPS printing
    - PipeWire audio
        - ALSA support (32-bit)
        - PulseAudio compatibility
        - pulseaudio disabled
    - Firefox
    - Nix garbage collection
        - auto-optimise-store
        - weekly GC, 30-day retention
    - pciutils
    - nodejs (nodejs_24)

Userspace Software (home-manager):

admin:

    - librewolf
        - bitwarden plugin
        - privacybadger plugin
    - discord
    - alacritty
    - supersonic
    - fzf
    - uv (python package manager)
    - claude-code
    - ohmyzsh
        - fox theme
        - plugins: git, python, man, catimg, copypath, cp, fzf, gpg-agent,
          gitignore, uv, colorize, copyfile, dotenv, fastfile, jsontools,
          nmap, perl, rsync, safe-paste, screen, ssh, sudo
    - gnupg
        - yubikey smart card support
        - pcscd smart card daemon
        - keys.openpgp.org keyserver
        - ssh-agent replacement
        - gpg-agent
            - enabled
            - autostart
    - ssh-agent
        - disabled (gpg-agent replacement)
    - git
        - configured to sign all commits
    - python
        - latest stable

root:
    
    - locked password


### User configurations

#### sonja

Username: sonja
Additional Groups: wheel
Configs: admin

### Gaming
'
Software (System level):

    - steam-unwrapped
    - steam-tui
    - steam-cmd
    - steam-run
    - mesa-demos
    - gamescopeSession
    - Remote play firewall rules
    - Dedicated server firewall rules
    - LAN transfer firewall rules

## Hardware configurations

### coven - Framework 12 

Hostname: coven

NixOS Branch: unstable

Hardware:

    CPU:
        - Intel® Core™ - i5-1334U 
            - 2x performance cores
            - 8x efficency cores
    Memory:
        - 16GB DDR5 5600 SODIMM
    Storage:
        - 512GB NVMe
    Graphics:
        - Intel UHD Graphics
            - Up to 1.25Ghz
            - 64x Execution Units
            - Shared memory
    Network:
        - Intel AX211 Wi-Fi 6E
    Framework Modules:
        - USB-C
        - USB-A
        - MicroSD
        - Ethernet 1Gbps
        - DisplayPort
    - Display:
        - Built in display
        - Touchscreen
        - Stylus support
            - Framework stylus (2 button)

Unique Configs:

    - CPU power management
    - Screen Switch Configurations
        - No AC Power screen close - shutdown
        - AC Power screen close - lock
        - Docked - no action
    - Shell alias: update
        - Runs: sudo nixos-rebuild switch --flake ~/Documents/git/nix-config#coven
        - Note: hostname in flake target (#coven) changes per machine

Purpose:

    Software Development
    Gaming
    Web Browsing
    Drawing

### circle - Custom Desktop

TODO:
    [ ] Add hardware configuration

## TODO:

[ ] Add purpose configurations
    [ ] Drawing
    [ ] Web Browsing
    [ ] Software Development
    [ ] Server
        [ ] Web
        [ ] Container Host
        [ ] Hypervisor
    [ ] NAS