Add current configuration files

1 files changed, 564 insertions, 0 deletions

diff --git a/configuration.nix b/configuration.nix
new file mode 100644
index 0000000..5623c2a
--- /dev/null
+++ b/configuration.nix
@@ -0,0 +1,564 @@
+# Edit this configuration file to define what should be installed on
+# your system.  Help is available in the configuration.nix(5) man page
+# and in the NixOS manual (accessible by running ‘nixos-help’).
+
+{ config, pkgs, ... }:
+
+{
+  imports = [
+    # Include the results of the hardware scan.
+    ./hardware-configuration.nix
+  ];
+
+  # Bootloader.
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+  boot.supportedFilesystems = [ "nfs" ];
+
+  # for disc drive
+  boot.kernelModules = [ "sg" ];
+
+  networking.hostName = "kusanagi"; # Define your hostname.
+  # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
+
+  # Enable networking
+  networking.networkmanager.enable = true;
+
+  # for tailscale
+  networking.firewall.trustedInterfaces = [ "tailscale0" ];
+  networking.firewall.allowedUDPPorts = [ 41641 ];
+
+  # Set your time zone.
+  time.timeZone = "America/Chicago";
+
+  # Select internationalisation properties.
+  i18n.defaultLocale = "en_US.UTF-8";
+
+  i18n.extraLocaleSettings = {
+    LC_ADDRESS = "en_US.UTF-8";
+    LC_IDENTIFICATION = "en_US.UTF-8";
+    LC_MEASUREMENT = "en_US.UTF-8";
+    LC_MONETARY = "en_US.UTF-8";
+    LC_NAME = "en_US.UTF-8";
+    LC_NUMERIC = "en_US.UTF-8";
+    LC_PAPER = "en_US.UTF-8";
+    LC_TELEPHONE = "en_US.UTF-8";
+    LC_TIME = "en_US.UTF-8";
+  };
+
+  # TODO tmp cgit
+  services.cgit."git.localhost" = {
+    enable = true;
+    scanPath = "/srv/git";
+    nginx.virtualHost = "localhost";
+    extraConfig = ''
+      root-title=cgit experiment
+    '';
+    gitHttpBackend.checkExportOkFiles = false;
+  };
+
+  nix.settings.trusted-users = [
+    "root"
+    "henz"
+  ];
+
+  # Enable the X11 windowing system.
+  services.xserver.enable = true;
+
+  # Enable the GNOME Desktop Environment.
+  services.displayManager.gdm.enable = false;
+  services.desktopManager.gnome.enable = true;
+
+  services.tailscale.enable = true;
+  services.immich.enable = true;
+  services.mpd.enable = false;
+
+  services.kavita = {
+    enable = true;
+    tokenKeyFile = "/var/lib/kavita/token-key";
+    settings.Port = 5000;
+  };
+
+  systemd.tmpfiles.rules = [
+    "d /srv/library 2750 henz kavita - -"
+  ];
+
+  # For disc drives
+  services.udev.extraRules = ''
+    KERNEL=="sr[0-9]*", GROUP="cdrom", MODE="0660"
+    KERNEL=="sg[0-9]*", GROUP="sg", MODE="0660"
+  '';
+
+  # prevent auto-mounting optical disks
+  services.udisks2.enable = true;
+
+  programs.dconf.enable = true;
+  programs.niri.enable = true;
+
+  # login screen
+  services.greetd = {
+    enable = true;
+    settings = {
+      default_session = {
+        command = "${pkgs.tuigreet}/bin/tuigreet --time --remember --cmd niri-session";
+        user = "greeter";
+      };
+    };
+  };
+
+  # This is required to let tuigreet write to its cache (for --remember)
+  systemd.services.greetd.serviceConfig = {
+    Type = "idle";
+    StandardInput = "tty";
+    StandardOutput = "tty";
+    StandardError = "journal"; # Better for debugging
+    TTYReset = true;
+    TTYVHangup = true;
+    TTYVTDisallocate = true;
+  };
+
+  systemd.user.services.mpd = {
+    description = "Music Player Daemon";
+    after = [
+      "network.target"
+      "sound.target"
+    ];
+    wantedBy = [ "default.target" ];
+    serviceConfig = {
+      ExecStart = "${pkgs.mpd}/bin/mpd --no-daemon";
+      Type = "notify";
+      LimitRTPRIO = 50;
+      LimitRTTIME = "infinity";
+    };
+  };
+
+  # Configure keymap in X11
+  services.xserver.xkb = {
+    layout = "us";
+    variant = "";
+  };
+
+  # Enable CUPS to print documents.
+  services.printing = {
+    enable = true;
+    drivers = with pkgs; [
+      gutenprint
+    ];
+  };
+
+  services.avahi = {
+    enable = true;
+    nssmdns4 = true;
+    openFirewall = true;
+  };
+
+  services.pulseaudio.enable = false;
+  security.rtkit.enable = true;
+  services.pipewire = {
+    enable = true;
+    alsa.enable = true;
+    alsa.support32Bit = true;
+    pulse.enable = true;
+    jack.enable = true;
+    wireplumber.enable = true;
+  };
+  # Add this for better pro audio support
+  services.pipewire.extraConfig.pipewire."10-low-latency" = {
+    "context.properties" = {
+      "default.clock.rate" = 48000;
+      "default.clock.quantum" = 256;
+      "default.clock.min-quantum" = 256;
+      "default.clock.max-quantum" = 2048;
+    };
+  };
+
+  # Pin the Scarlett 18i20 to the raw "Pro Audio" profile.
+  # The 26.05 pipewire/wireplumber update began preferring the UCM "HiFi"
+  # profile, which splits the interface into Direct1/Line5/SPDIF1/... sinks and
+  # broke monitoring. This priority rule forces the multichannel Pro Audio
+  # profile statelessly on every boot (and survives future UCM renames).
+  services.pipewire.wireplumber.extraConfig."51-scarlett-pro-audio" = {
+    "device.profile.priority.rules" = [
+      {
+        matches = [
+          {
+            "device.name" =
+              "alsa_card.usb-Focusrite_Scarlett_18i20_USB_P9DCR6Y378D1E6-00";
+          }
+        ];
+        actions = {
+          update-props = {
+            priorities = [ "pro-audio" ];
+          };
+        };
+      }
+    ];
+  };
+
+  # Real-time audio optimizations
+  security.pam.loginLimits = [
+    {
+      domain = "@audio";
+      item = "memlock";
+      type = "-";
+      value = "unlimited";
+    }
+    {
+      domain = "@audio";
+      item = "rtprio";
+      type = "-";
+      value = "99";
+    }
+    {
+      domain = "@audio";
+      item = "nofile";
+      type = "soft";
+      value = "99999";
+    }
+    {
+      domain = "@audio";
+      item = "nofile";
+      type = "hard";
+      value = "99999";
+    }
+  ];
+
+  services.nfs.server.enable = false;
+  services.rpcbind.enable = true;
+
+  services.nfs.idmapd.settings = {
+    General = {
+      Domain = "kusanagi"; # or your actual domain name
+    };
+  };
+
+  # NAS shares. Use the mDNS-resolvable name (bare "milgrim" doesn't resolve)
+  # and automount on first access so a boot-time DNS/network race can't leave
+  # them unmounted (which silently breaks MPD, whose DB points at these paths).
+  fileSystems."/mnt/milgrim-share" = {
+    device = "milgrim.local:/volume1/share";
+    fsType = "nfs";
+    options = [
+      "nfsvers=4"
+      "rsize=8192"
+      "wsize=8192"
+      "_netdev"
+      "noauto"
+      "x-systemd.automount"
+      "x-systemd.idle-timeout=600"
+      "x-systemd.mount-timeout=10s"
+    ];
+  };
+
+  fileSystems."/mnt/milgrim-public" = {
+    device = "milgrim.local:/volume1/public";
+    fsType = "nfs";
+    options = [
+      "nfsvers=4"
+      "rsize=8192"
+      "wsize=8192"
+      "_netdev"
+      "noauto"
+      "x-systemd.automount"
+      "x-systemd.idle-timeout=600"
+      "x-systemd.mount-timeout=10s"
+    ];
+  };
+
+  # Kernel optimizations for audio
+  boot.kernelParams = [
+    "threadirqs"
+    "preempt=full" # if using a PREEMPT kernel
+    # Add USB audio optimizations
+    "usbcore.usbfs_memory_mb=1024"
+  ];
+
+  fonts = {
+    enableDefaultPackages = true;
+
+    packages = with pkgs; [
+      noto-fonts-cjk-sans
+      noto-fonts-cjk-serif
+      inter
+      nerd-fonts.symbols-only
+      noto-fonts
+      ibm-plex
+      public-sans
+      adwaita-fonts
+    ];
+
+    fontconfig = {
+      enable = true;
+
+      defaultFonts = {
+        monospace = [
+          "Berkeley Mono"
+          "Liberation Mono"
+          "Symbols Nerd Font"
+        ];
+        sansSerif = [
+          "Liberation Sans"
+          "Noto Sans"
+        ];
+        serif = [ "Liberation Serif" ];
+        emoji = [ "Nerd Font Symbols Only" ];
+      };
+
+      # Force ui-sans-serif and system-ui to resolve correctly
+      localConf = ''
+        <?xml version="1.0"?>
+        <!DOCTYPE fontconfig SYSTEM "urn:fontconfig:fonts.dtd">
+        <fontconfig>
+          <alias>
+            <family>system-ui</family>
+            <prefer>
+              <family>Liberation Sans</family>
+            </prefer>
+          </alias>
+          <alias>
+            <family>ui-sans-serif</family>
+            <prefer>
+              <family>Liberation Sans</family>
+            </prefer>
+          </alias>
+        </fontconfig>
+      '';
+    };
+
+    fontDir.enable = true;
+  };
+
+  # Define a user account. Don't forget to set a password with ‘passwd’.
+  users.users.henz = {
+    isNormalUser = true;
+    description = "Henry Webster";
+    extraGroups = [
+      "networkmanager"
+      "wheel"
+      "audio"
+      "cdrom"
+      "optical"
+      "sg"
+      "scanner"
+      "lp"
+      "input"
+    ];
+    packages = with pkgs; [
+      google-chrome
+      steam
+      blender
+      rocmPackages.rpp
+      rocmPackages.hipcc
+      ardour
+      gnupg
+      pinentry-gnome3
+      git
+      tmux
+      protonmail-desktop
+      ghostty
+      obsidian
+      inkscape
+      protonvpn-gui
+      darktable
+      nfs-utils
+      imagemagick
+      davinci-resolve-studio
+      alsa-utils
+      alsa-tools
+      usbutils
+      pipewire.jack
+      itch
+      rocmPackages.rocminfo
+      discord
+      vlc
+      neovim
+      tmux
+      unzip
+      calf
+      gimp
+      xclip
+      gcc
+      pkg-config
+      direnv
+      cargo
+      ripgrep
+      abcde
+      guile
+      haunt
+      autoconf
+      automake
+      libtool
+      gnumake
+      gcc
+      pkg-config
+
+      mpd
+      mpc
+      ncmpcpp
+      ffmpeg
+      flatpak
+      nushell
+
+      # for archiving
+      #makemkv
+      libaacs
+      libbdplus
+      libdvdcss
+      psmisc
+      mkvtoolnix
+      dvdbackup
+      chromaprint
+      picard
+      flac
+
+      bc
+      btop
+      newsboat
+      castero
+
+      opencode
+      claude-code
+
+      # hyprland
+      waybar
+      networkmanagerapplet
+
+      # niri
+      xwayland-satellite
+      fuzzel
+      swaybg
+
+      mako
+
+      stow
+
+      lua-language-server
+      nil
+      clang-tools
+      marksman
+      gopls
+      ruff
+      basedpyright
+      zls
+      gdb
+      nixfmt
+
+      gcc
+      nodejs
+      gnumake
+
+
+      # scanners
+      simple-scan
+
+      (pkgs.makeDesktopItem {
+        name = "PICO-8";
+        desktopName = "PICO-8";
+        exec = "pico8";
+        icon = "pico8";
+        comment = "Fantasy console for making, sharing and playing tiny games";
+        categories = [ "Game" ];
+      })
+    ];
+  };
+
+
+  nixpkgs.overlays = [
+    (self: super: {
+      abcde = super.abcde.overrideAttrs (oldAttrs: {
+        # We use postInstall to modify the script after it has been copied to the output directory
+        postInstall = (oldAttrs.postInstall or "") + ''
+          # Patch 1: Allow GetOptions to accept 4 arguments (instead of requiring 5+)
+          sed -i 's/discinfo=i{5,}/discinfo=i{4,}/g' $out/bin/abcde-musicbrainz-tool
+
+          # Patch 2: Lower the logic check from 5 to 4
+          sed -i 's/$#discinfo < 5/$#discinfo < 4/g' $out/bin/abcde-musicbrainz-tool
+        '';
+      });
+    })
+  ];
+
+  programs.steam.enable = true;
+
+  # GnuPG
+  programs.gnupg.agent = {
+    enable = true;
+    enableSSHSupport = true;
+  };
+  services.pcscd.enable = true;
+
+  services.ollama = {
+    enable = true;
+    package = pkgs.ollama-rocm;
+    environmentVariables = {
+      HIP_VISIBLE_DEVICES = "0";
+      OLLAMA_CONTEXT_LENGTH = "32768";
+      OLLAMA_KV_CACHE_TYPE = "q8_0";
+    };
+  };
+
+  # Install firefox.
+  programs.firefox.enable = true;
+
+  programs.neovim = {
+    enable = true;
+    defaultEditor = true;
+  };
+
+  # Allow unfree packages
+  nixpkgs.config.allowUnfree = true;
+
+  nixpkgs.config.rocmSupport = true;
+
+  # List packages installed in system profile. To search, run:
+  # $ nix search wget
+  environment.systemPackages = with pkgs; [
+    #  vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
+    #  wget
+    neovim
+      (pkgs.emacs.pkgs.withPackages (epkgs: [
+    (epkgs.treesit-grammars.with-grammars (g: [ g.tree-sitter-nix ]))
+  ]))
+
+  ];
+
+  environment.sessionVariables = {
+    GSK_RENDERER = "gl";
+    XCURSOR_THEME = "Bibata-Modern-Classic";
+    XCURSOR_SIZE = "24";
+    HYPRCURSOR_THEME = "Bibata-Modern-Classic";
+    HYPRCURSOR_SIZE = "24";
+  };
+
+  environment.localBinInPath = true;
+
+  # Graphics setup
+  hardware.graphics = {
+    enable = true;
+    enable32Bit = true;
+  };
+  hardware.graphics.extraPackages = with pkgs; [
+    rocmPackages.clr.icd
+  ];
+
+  # scanner
+  hardware.sane.enable = true;
+
+  # This value determines the NixOS release from which the default
+  # settings for stateful data, like file locations and database versions
+  # on your system were taken. It‘s perfectly fine and recommended to leave
+  # this value at the release version of the first install of this system.
+  # Before changing this value read the documentation for this option
+  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
+  system.stateVersion = "24.11"; # Did you read the comment?
+
+  powerManagement.cpuFreqGovernor = "performance";
+
+  nix.settings.experimental-features = [
+    "nix-command"
+    "flakes"
+  ];
+
+  boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
+
+}