added eva-03

eva-03/configuration.nix

@@ -0,0 +1,302 @@
+# Edit this configuration file to define what should be installed on
+# your system.  Help is available in the configuration.nix(5) man page
+# and in the NixOS manual (accessible by running ‘nixos-help’).
+
+{ config, pkgs, inputs, ... }:
+
+{
+  imports =
+    [ # Include the results of the hardware scan.
+      ./hardware-configuration.nix
+      inputs.home-manager.nixosModules.default
+    ];
+
+  #Kernel
+  boot.kernelPackages = pkgs.linuxKernel.packages.linux_zen;
+
+  # Bootloader.
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+
+  nix.settings.experimental-features = ["nix-command" "flakes"];
+
+  # Nix optimizations
+  nix.optimise.automatic = true;
+  nix.settings.auto-optimise-store = true;
+  nix.gc = {
+    automatic = true;
+    dates = "weekly";
+    persistent = true;
+    options = "--delete-older-than 30d";
+  };
+ 
+  networking.hostName = "EVA-03"; # Define your hostname.
+  # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
+
+  # Configure network proxy if necessary
+  # networking.proxy.default = "http://user:password@proxy:port/";
+  # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
+
+  # Enable networking
+  networking.networkmanager.enable = true;
+
+  virtualisation.docker.enable = true;
+
+  # Enable OpenGL
+  hardware.graphics = {
+    enable = true;
+  };
+
+  # Load nvidia driver for Xorg and Wayland
+  services.xserver.videoDrivers = ["nvidia"];
+
+  hardware.nvidia = {
+
+    # Modesetting is required.
+    modesetting.enable = true;
+
+    # Nvidia power management. Experimental, and can cause sleep/suspend to fail.
+    # Enable this if you have graphical corruption issues or application crashes after waking
+    # up from sleep. This fixes it by saving the entire VRAM memory to /tmp/ instead 
+    # of just the bare essentials.
+    # powerManagement.enable = false;
+
+    # Fine-grained power management. Turns off GPU when not in use.
+    # Experimental and only works on modern Nvidia GPUs (Turing or newer).
+    # powerManagement.finegrained = false;
+
+    # Use the NVidia open source kernel module (not to be confused with the
+    # independent third-party "nouveau" open source driver).
+    # Support is limited to the Turing and later architectures. Full list of 
+    # supported GPUs is at: 
+    # https://github.com/NVIDIA/open-gpu-kernel-modules#compatible-gpus 
+    # Only available from driver 515.43.04+
+    open = false;
+
+    # Enable the Nvidia settings menu,
+    # accessible via `nvidia-settings`.
+    nvidiaSettings = true;
+
+    # Optionally, you may need to select the appropriate driver version for your specific GPU.
+    package = config.boot.kernelPackages.nvidiaPackages.stable;
+  };
+
+
+
+  # Set your time zone.
+  time.timeZone = "America/Los_Angeles";
+
+  # Select internationalisation properties.
+  i18n.defaultLocale = "en_US.UTF-8";
+
+  i18n.extraLocaleSettings = {
+    LC_ADDRESS = "en_US.UTF-8";
+    LC_IDENTIFICATION = "en_US.UTF-8";
+    LC_MEASUREMENT = "en_US.UTF-8";
+    LC_MONETARY = "en_US.UTF-8";
+    LC_NAME = "en_US.UTF-8";
+    LC_NUMERIC = "en_US.UTF-8";
+    LC_PAPER = "en_US.UTF-8";
+    LC_TELEPHONE = "en_US.UTF-8";
+    LC_TIME = "en_US.UTF-8";
+  };
+
+  # Enable the X11 windowing system.
+  # You can disable this if you're only using the Wayland session.
+  services.xserver.enable = false;
+  programs.xwayland.enable = true;
+
+  # Enable the KDE Plasma Desktop Environment.
+  services.displayManager.sddm.enable = true;
+  services.displayManager.sddm.wayland.enable = true;
+  services.desktopManager.plasma6.enable = true;
+  services.displayManager.sddm.theme = "sddm-astronaut-theme";
+
+  # Enable Tailscale
+  services.tailscale.enable = true;
+
+ #Enable Ollama daemon
+  services.ollama.enable = true;
+  
+  services.fprintd.enable = true;
+  services.fprintd.tod.enable = true;
+  services.fprintd.tod.driver = pkgs.libfprint-2-tod1-goodix;
+
+  # Configure keymap in X11
+  services.xserver.xkb = {
+    layout = "us";
+    variant = "";
+  };
+
+  # Enable CUPS to print documents.
+  services.printing.enable = false;
+
+  # Enable sound with pipewire.
+  hardware.pulseaudio.enable = false;
+  #hardware.pulseaudio = {
+  #  enable = true;
+  #  package = pkgs.pulseaudioFull;
+  #};
+  hardware.bluetooth.enable = false;
+  security.rtkit.enable = true;
+  services.pipewire = {
+    enable = true;
+    alsa.enable = true;
+    alsa.support32Bit = true;
+    pulse.enable = true;
+    # If you want to use JACK applications, uncomment this
+    #jack.enable = true;
+
+    # use the example session manager (no others are packaged yet so this is enabled by default,
+    # no need to redefine it in your config for now)
+    #media-session.enable = true;
+  };
+
+  # Enable touchpad support (enabled default in most desktopManager).
+  # services.xserver.libinput.enable = true;
+
+  # Define a user account. Don't forget to set a password with ‘passwd’.
+   programs.zsh.enable = true;   
+   users.users.rogueking = {
+    isNormalUser = true;
+    description = "rogueking";
+    extraGroups = [ "networkmanager" "wheel" "docker" ];
+    shell = pkgs.zsh;
+    #packages = [ inputs.home-manager.packages.${pkgs.system}.default ];
+    packages = with pkgs; [
+      #apps
+      #cli
+    #  thunderbird
+    ];
+  };
+
+  # Install firefox.
+  programs.firefox.enable = true;
+
+  # Enable all firmware
+  hardware.enableAllFirmware = true;
+
+  # Allow unfree packages
+  nixpkgs.config.allowUnfree = true;
+
+  security.polkit.enable = true;
+  programs._1password.enable = true;
+  programs._1password-gui = {
+    enable = true;
+    # Certain features, including CLI integration and system authentication support,
+    # require enabling PolKit integration on some desktop environments (e.g. Plasma).
+    polkitPolicyOwners = [ "rogueking" ];
+  };
+
+  #steam
+  programs.steam.enable = true;
+  
+  # Enable OpenSSH daemon
+  services.openssh = {
+    enable = true;
+    ports = [ 22 ];
+    settings = {
+      PasswordAuthentication = false;
+      AllowUsers = [ "rogueking" ]; 
+      UseDns = true;
+      X11Forwarding = false;
+      PermitRootLogin = "no";
+      MaxAuthTries = "20"; 
+    };
+  };
+
+  users.users."rogueking".openssh.authorizedKeys.keys = [
+	"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINXqriPZVIuduc/J7GS1mD171LL0gIbgEjlImsxedWVX"
+  ];
+
+  # List packages installed in system profile. To search, run:
+  # $ nix search wget
+  environment.systemPackages = with pkgs; [
+    #apps
+    #cider-2
+    amneziawg-go
+    fprintd
+    guacamole-client
+    sddm-astronaut
+    polonium
+
+    #cli tools
+    aircrack-ng
+    android-tools
+    btop
+    curl
+    docker
+    dust
+    file
+    findutils
+    git
+    hcxdumptool
+    hcxtools
+    kopia
+    lazydocker
+    metasploit
+    nettools
+    nix-prefetch-github
+    nmap
+    openssh
+    openssl
+    plocate
+    ptunnel
+    tailscale
+    tlp
+    unzip
+    vim
+    wirelesstools
+    wifite2
+
+  ];
+
+  fonts.packages = with pkgs; [
+    nerdfonts
+  ];
+
+  home-manager = {
+    extraSpecialArgs = { inherit inputs; };
+    users = {
+      "rogueking" = import ./../home-manager/home.nix;
+    };
+    backupFileExtension = "backup";
+  };
+
+  #home-manager = {
+  #  extraSpecialArgs = { inherit inputs; };
+  #  users = {
+  #    "rogueking" = import ../home-manager/home.nix;
+  #  };
+  #  backupFileExtension = "backup";
+  #};
+
+
+  # Some programs need SUID wrappers, can be configured further or are
+  # started in user sessions.
+  # programs.mtr.enable = true;
+  # programs.gnupg.agent = {
+  #   enable = true;
+  #   enableSSHSupport = true;
+  # };
+
+  # List services that you want to enable:
+
+  # Enable the OpenSSH daemon.
+  # services.openssh.enable = true;
+
+  # Open ports in the firewall.
+  # networking.firewall.allowedTCPPorts = [ ... ];
+  # networking.firewall.allowedUDPPorts = [ ... ];
+  # Or disable the firewall altogether.
+  # networking.firewall.enable = false;
+
+  # This value determines the NixOS release from which the default
+  # settings for stateful data, like file locations and database versions
+  # on your system were taken. It‘s perfectly fine and recommended to leave
+  # this value at the release version of the first install of this system.
+  # Before changing this value read the documentation for this option
+  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
+  system.stateVersion = "24.11"; # Did you read the comment?
+
+}

eva-03/hardware-configuration.nix

@@ -0,0 +1,40 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports =
+    [ (modulesPath + "/installer/scan/not-detected.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usbhid" "uas" "sd_mod" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ "kvm-intel" ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" =
+    { device = "/dev/disk/by-uuid/b325c30d-e1e9-4845-898a-f2d85a35e494";
+      fsType = "ext4";
+    };
+
+  fileSystems."/boot" =
+    { device = "/dev/disk/by-uuid/31E1-03D2";
+      fsType = "vfat";
+      options = [ "fmask=0077" "dmask=0077" ];
+    };
+
+  swapDevices =
+    [ { device = "/dev/disk/by-uuid/432a1564-851c-4246-ba69-4f11fd0e1765"; }
+    ];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp0s31f6.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}

flake.nix

@@ -24,7 +24,7 @@
 
   outputs = { self, nixpkgs, home-manager, nixvim, nixos-hardware, ... }@inputs: {
     nixosConfigurations = {
-      default = nixpkgs.lib.nixosSystem {
+      eva-01 = nixpkgs.lib.nixosSystem {
         specialArgs = {inherit inputs;};
         system = "x86_64-linux";
         modules = [
@@ -33,6 +33,15 @@
           nixos-hardware.nixosModules.lenovo-thinkpad-x1-nano-gen1
         ];
       };
+
+      eva-03 = nixpkgs.lib.nixosSystem {
+	specialArgs = {inherit inputs;};
+        system = "x86_64-linux";
+        modules = [
+          ./eva-03/configuration.nix
+          inputs.home-manager.nixosModules.default
+        ];
+      };
     };
   };
 }

home-manager/commands/cli-tools.nix

@@ -67,7 +67,7 @@
         };
       };
      extraConfig = ''
-        IdentityAgent ~/.1password/agent.sock
+	IdentityAgent ~/.1password/agent.sock
      '';
     };
 
@@ -98,7 +98,7 @@
         open = "xdg-open";
         locate = "sudo plocate";
         tulpn = "sudo netstat -tulpn";
-        rebuild = "sudo nixos-rebuild switch --flake /etc/nixos#default";
+        rebuild = "sudo nixos-rebuild switch --flake /etc/nixos#eva-03";
       };
 
       envExtra = ''

home-manager/commands/cli-tools.nix.save

@@ -1,126 +0,0 @@
-{ config, pkgs, lib, ... }:
-
-{ 
-  home.packages = with pkgs; [  
-      bat
-      btop
-      dig
-      ollama
-      openconnect
-      putty
-      thc-hydra
-      tldr
-      traceroute
-      trivy
-      wget
-  ];
-
-  programs = {
-    fastfetch.enable = true;  
-    fzf.enable = true;
-    bat.enable = true;
-    btop.enable = true;
-    kitty.enable = true;
-    yazi.enable = true;
-    starship.enable = true;
-    lazygit.enable = true;
-    thefuck.enable = true;
-    thefuck.enableZshIntegration = true;
-    
-    git = {  
-      enable = true;
-      userName = "rogueking";
-      userEmail = "miguel@muniz.org";
-      lfs.enable = true;
-      signing = {
-        signByDefault = true;
-        gpgPath = "/opt/1Password/op-ssh-sign";
-        key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHI7zcxrwwg4VqpGduhPX31aslzXwkRXiM32+8K+aIMu";
-      };
-      extraConfig = {
-        gpg = {
-          format = "ssh";
-        };
-
-      };
-
-    };
-    
-    eza = {
-      enable = true;
-      icons = "auto";
-      enableZshIntegration = true;
-      extraOptions = [
-        "--group-directories-first"
-      ];
-    };
-
-    ssh = {
-     enable = true;
-     matchBlocks = {
-       global = {
-         host = "*";
-         setEnv = {
-           TERM = "xterm-256color";
-         };
-        };
-      };
-     extraConfig = ''
-        IdentityAgent ~/.1password/agent.sock
-     '';
-    };
-
-    zoxide = {  
-      enable = true;
-      enableZshIntegration = true;
-    };
-    
-    zsh = {        
-      enable = true;
-      enableCompletion = true;
-      autosuggestion.enable = true;
-      syntaxHighlighting.enable = true;
-      historySubstringSearch.enable = true;
-
-      shellAliases = {
-      	cd = "z";
-        cat = "bat";
-        catp = "bat -p";
-        fk = "thefuck";
-        fu = "thefuck";
-        fuck = "thefuck";
-        grep = "grep --color=auto";
-        lg = "lazygit";
-        ll = "eza -la";
-        ls = "eza --color=auto";
-        lt = "eza --tree";
-        open = "xdg-open";
-        locate = "sudo plocate";
-        tulpn = "sudo netstat -tulpn";
-        rebuild = "sudo nixos-rebuild switch --flake /etc/nixos#default";
-      };
-
-      envExtra = ''
-        eval $(thefuck --alias)
-      '';
-      
-      profileExtra = ''
-        export SSH_AUTH_SOCK=~/.1password/agent.sock
-      '';
-
-      initExtra = ''
-        fastfetch
-      '';
-
-      history = {
-        size = 10000;
-        path = "${config.xdg.dataHome}/zsh/history";
-      };
-
-      oh-my-zsh = {
-        enable = true;
-      };
-    };
-
-  };
-}

home-manager/programs/programs.nix

@@ -61,7 +61,7 @@
     # '')
   ];
 
-  environment.sessionVariables.NIXOS_OZONE_WL = "1";
+#  environment.sessionVariables.NIXOS_OZONE_WL = "1";
 
   programs.waybar = { 
     enable = true;