.files/etc/guix-config/xenon.scm

199 lines
7.0 KiB
Scheme
Raw Normal View History

(use-modules
(gnu)
(gnu system nss))
(use-package-modules
certs
linux
wm)
(use-service-modules
desktop
networking
xorg
cups
ssh
dbus
virtualization
authentication)
(operating-system
(kernel linux-libre)
(keyboard-layout (keyboard-layout "us" "altgr-intl"))
(bootloader
(bootloader-configuration
(bootloader (bootloader
(inherit grub-bootloader)
(installer #~(const #t))))
(keyboard-layout keyboard-layout)))
(host-name "Xenon")
(mapped-devices (list
(mapped-device
(source (uuid "e836ef6e-97a8-442b-a025-e81ab58bbc04"))
(target "fde")
(type luks-device-mapping))
(mapped-device
(source "matrix")
(targets (list "matrix-rootvol"))
(type lvm-device-mapping))))
(file-systems (append (list
(file-system
(type "btrfs")
(mount-point "/")
(device (file-system-label "root"))
(flags '(no-atime))
(options "space_cache=v2")
(needed-for-boot? #t)
(dependencies mapped-devices)))
%base-file-systems))
(users (append (list
(user-account
(name "cobra")
(comment "Skylar \"The Cobra\" Widulski")
(group "users")
(supplementary-groups '("audio" "cdrom" "kvm" "lp" "netdev" "tape" "video" "wheel" "input"))))
%base-user-accounts))
(packages (append
(map specification->package
(list "nss-certs"
"tor"
"vim"
"screen"
"lynx"
"curl"
"wget"
"net-tools"
"sway"
"waybar"
"swaylock"
"openssh"
"i2pd"
"dbus"
"cryptsetup"
"libdvdcss"
"libdvdread"
"gcc-toolchain"
"gcc"
"librsvg"
"json-c"
"libnotify"
"kicad"
"kicad-templates"
"kicad-symbols"
"kicad-packages3d"
"kicad-footprints"
"kicad-doc"
"freecad"
"mako"
"mesa"
"intel-vaapi-driver"
"qemu"
"fprintd"
"lvm2"
"git"
"libqalculate"
"bc"
"icecat"
"cryptsetup"
"gnupg"
"profanity"
"go"
"adanaxisgpl"
"supertuxkart"
"minetest"
"xonotic"
"mpv"
"imagemagick"
"rsync"
"neofetch"
"gnunet"
"lm-sensors"
"acpi"
"gnupg"
"password-store"
"xclip"
"font-fira-mono"
"font-fira-code"
"newsboat"
"kodi"
"yt-dlp"
"icedove"
"irssi"
"monero-gui"
"pamixer"
"slurp"
"grim"
"foot"
"wofi"
"swayidle"
"swayhide"
"wl-clipboard"
"xorg-server-xwayland"
"wob"
"light"
"htop"
"pinentry"
"ungoogled-chromium-wayland"
"make"
"gimp"
"cmus"
"python"
"openssl"
"font-google-noto"
"font-google-noto-serif-cjk"
"font-google-noto-sans-cjk"
"font-awesome"
"socat"
"emacs"
"mpv-mpris"
"playerctl"
"reptyr"
"unzip"
"ffmpeg"
"handbrake"
"ripit"
"perl"
"bind"
"netcat"
"tmate"
"torsocks"
"alsa-utils"
"proxychains-ng"
"whois"))
(cons*
%base-packages)))
(timezone "America/New_York")
(locale "en_US.utf8")
(name-service-switch %mdns-host-lookup-nss)
(services
(cons*
(service openssh-service-type
(openssh-configuration
(permit-root-login 'prohibit-password)
(password-authentication? #f)))
(service network-manager-service-type)
(service wpa-supplicant-service-type)
(service gpm-service-type)
(service ntp-service-type)
(service cups-service-type)
(service elogind-service-type)
(service dbus-root-service-type)
(service fprintd-service-type)
(screen-locker-service swaylock)
(service tor-service-type
(tor-configuration
(config-file (plain-file "tor-config"
"HTTPTunnelPort 127.0.0.1:9250"))))
; %base-services))
(modify-services %base-services
(guix-service-type
config => (guix-configuration
(inherit config)
;; ci.guix.gnu.org's Onion service
; (substitute-urls
; "https://4zwzi66wwdaalbhgnix55ea3ab4pvvw66ll2ow53kjub6se4q2bclcyd.onion")
(http-proxy "http://localhost:9250"))))))
(sudoers-file (plain-file "sudoers" "\
root ALL=(ALL) ALL
%wheel ALL=(ALL) ALL
Cmnd_Alias WITHOUTPW = /home/cobra/.local/bin/__suspend, /home/cobra/.local/bin/beep, /run/current-system/profile/sbin/halt, /run/current-system/profile/sbin/reboot
Defaults!WITHOUTPW !authenticate
")))