nix_config/flake.nix

{
    description = "System config";

    inputs = {
        nixpkgs.url = "nixpkgs/nixos-unstable";
        nixpkgs_stable.url = "nixpkgs/nixos-22.11";
        vps_nixpkgs.url = "nixpkgs/master";
        home-manager = {
            url = "github:nix-community/home-manager";
            inputs.nixpkgs.follows =  "nixpkgs";
        };

        flake-utils.url = "github:numtide/flake-utils";

        # Required for making sure that Pi-hole continures running if the executing user has no active session
        #linger = {
          #url = "github:mindsbackyard/linger-flake";
          #inputs.flake-utils.follows = "flake-utils";
        #};

        #pihole = {
          #url = "github:mindsbackyard/pihole-flake";
          #inputs.nixpkgs.follows = "nixpkgs";
          #inputs.flake-utils.follows = "flake-utils";
          #inputs.linger.follows = "linger";
        #};
    };

    outputs = { self, nixpkgs, nixpkgs_stable, vps_nixpkgs, home-manager, flake-utils }@attrs:
        let
          system = "x86_64-linux";
          homeManagerSharedModule = {
              home-manager.useGlobalPkgs = true;
              home-manager.users.marcus = { config, pkgs, lib, ... }:{ 
                  # This value determines the Home Manager release that your
                  # configuration is compatible with. This helps avoid breakage
                  # when a new Home Manager release introduces backwards
                  # incompatible changes.
                  #
                  # You can update Home Manager without changing this value. See
                  # the Home Manager release notes for a list of state version
                  # changes in each release.
                  home.stateVersion = "22.11";
                  
                  home.packages = with pkgs; [ ];
                  programs.starship = {
                    enable = true;
                    enableBashIntegration = true;
                    settings = {
                      add_newline = false;
                      format = lib.concatStrings [
                        "$username"
                        "$hostname"
                        "$directory"
                        "$jobs"
                        "$cmd_duration"
                        "$character"
                      ];
                      directory = {
                        truncation_length = 10;
                        truncate_to_repo = false;
                      };
                      scan_timeout = 10;
                      character = {
                        success_symbol = "➜";
                        error_symbol = "➜";
                      };
                    };
                  };
                  programs.git = {
                    enable = true;
                    userName = "Marcus Godwin";
                    userEmail = "godwin3@gatech.edu";
                  };
                  programs.vim = {
                    enable = true;
                    plugins = with pkgs.vimPlugins; [
                      nerdcommenter vim-polyglot #parinfer-rust
                    ];
                    settings = {
                      # Is the need for these obliviated by vim-polyglot using sleuth?
                      #expandtab = false;
                      tabstop = 4;
                      shiftwidth = 4;
                    };
                    extraConfig = ''
                      set number
                      set hlsearch
                      nnoremap <leader>m :bn<CR>
                      nnoremap <leader>t :tabnew<CR>
                      nnoremap <leader>. :tabn<CR>
                      nnoremap <leader>, :tabp<CR>
                      nnoremap <leader>v :vsplit<CR>
                      nnoremap <leader>h :split<CR>
                      nnoremap <leader>q :q<CR>
                      inoremap jk <Esc>
                      inoremap kj <Esc>

                      " Thanks to https://unix.stackexchange.com/questions/140898/vim-hide-status-line-in-the-bottom
                      let s:hidden_all = 0
                      function! ToggleHiddenAll()
                          if s:hidden_all  == 0
                              let s:hidden_all = 1
                              set noshowmode
                              set noruler
                              set laststatus=0
                              set noshowcmd
                          else
                              let s:hidden_all = 0
                              set showmode
                              set ruler
                              set laststatus=2
                              set showcmd
                          endif
                      endfunction

                      nnoremap <S-h> :call ToggleHiddenAll()<CR>
                    '';
                  };
                  programs.tmux = {
                    enable = true;
                    extraConfig = ''
                      #$Id: vim-keys.conf,v 1.2 2010-09-18 09:36:15 nicm Exp $
                      #
                      # vim-keys.conf, v1.2 2010/09/12
                      #
                      # By Daniel Thau.  Public domain.
                      #
                      # This configuration file binds many vi- and vim-like bindings to the
                      # appropriate tmux key bindings.  Note that for many key bindings there is no
                      # tmux analogue.  This is intended for tmux 1.3, which handles pane selection
                      # differently from the previous versions
                  
                      # split windows like vim
                      # vim's definition of a horizontal/vertical split is reversed from tmux's
                      bind s split-window -v
                      bind v split-window -h
                  
                      # move around panes with hjkl, as one would in vim after pressing ctrl-w
                      bind h select-pane -L
                      bind j select-pane -D
                      bind k select-pane -U
                      bind l select-pane -R
                  
                      # resize panes like vim
                      # feel free to change the "1" to however many lines you want to resize by, only
                      # one at a time can be slow
                      bind < resize-pane -L 1
                      bind > resize-pane -R 1
                      bind - resize-pane -D 1
                      bind + resize-pane -U 1
                  
                      # bind : to command-prompt like vim
                      # this is the default in tmux already
                      bind : command-prompt
                  
                      # vi-style controls for copy mode
                      setw -g mode-keys vi
                    '';
                  };
              };
          };
          commonConfigFunc = ({ config, lib, pkgs, modulesPath, ... }: (specificPkgs: {
                  nixpkgs.config.allowUnfree = true;
                  nix.settings.experimental-features = [ "nix-command" "flakes" ];
                  networking.networkmanager.enable = true;  # Easiest to use and most distros use this by default.
                  time.timeZone = "America/New_York";
                  users.extraUsers.marcus = {
                      name = "marcus";
                      isNormalUser = true;
                      group = "users";
                      extraGroups = [ "wheel" "disk" "audio" "video" "networkmanager" "systemd-journal" "sway" "plugdev" "adbusers" "docker" ];
                      createHome = true;
                      home = "/home/marcus";
                      shell = "/run/current-system/sw/bin/bash";
                    };
                  users.extraUsers.nathan = {
                      name = "nathan";
                      isNormalUser = true;
                      group = "users";
                      extraGroups = [ "wheel" "disk" "audio" "video" "networkmanager" "systemd-journal" "sway" "plugdev" "adbusers" "docker" ];
                      createHome = true;
                      home = "/home/nathan";
                      shell = "/run/current-system/sw/bin/bash";
                  };

                  # Pi Hole + docker setup
                  virtualisation.oci-containers.backend = "docker";
                  virtualisation.docker.autoPrune.enable = true;

                  virtualisation.oci-containers.containers.pihole = {
                    #image = "pihole/pihole:2023.02.2";
                    image = "pihole/pihole:latest";
                    ports = [
                      "5353:53/upd"
                      "5353:53/tcp"
                      "9091:80/tcp"
                    ];
                    volumes = [
                      "/var/lib/pihole/:/etc/pihole/"
                      "/var/lib/dnsmasq.d:/etc/dnsmasq.d"
                    ];
                    environment = {
                      TZ = config.time.timeZone;
                      WEB_PORT = "80";
                      WEBPASSWORD = "critical";
                      PIHOLE_DNS_ = "172.17.0.1";
                      REV_SERVER = "true";
                      REV_SERVER_DOMAIN = "pihole.local";
                      REV_SERVER_TARGET = "192.168.1.1";
                      REV_SERVER_CIDR = "192.168.1.0/16";
                      DNSMASQ_LISTENING = "all";
                    };
                    extraOptions = [
                      "--add-host=host.docker.internal:host-gateway"
                    ];
                  };
                  #systemd.services."docker-pihole".postStart = ''
                    #while ! docker ps | grep pihole; do
                      #sleep 10s
                      #echo "Waiting on containers"
                    #done
                    #sleep 30s

                    #docker exec pihole pihole -a adlist add "https://s3.amazonaws.com/lists.disconnect.me/simple_ad.txt"
                    #docker exec pihole pihole -a adlist add "https://v.firebog.net/hosts/AdguardDNS.txt"
                    #docker exec pihole pihole -a adlist add "https://v.firebog.net/hosts/Easylist.txt"
                    #docker exec pihole pihole -a adlist add "https://v.firebog.net/hosts/Easyprivacy.txt"

                    #docker exec pihole pihole -g
                    #'';

                  # Enable flatpak for installing/running steam link software
                  services.flatpak.enable = true;

                  # testing
                  services.jellyfin.enable = true;
                  services.pipewire = {
                    enable = true;
                    alsa.enable = true;
                    pulse.enable = true;
                  };
                  services.dbus.enable = true;
                  xdg.portal = {
                    enable = true;
                    wlr.enable = true;
                    extraPortals = [pkgs.xdg-desktop-portal-gtk ];
                    gtkUsePortal = true;
                  };
                  nixpkgs.overlays = [ (self: super: {
                    glusterfs = (import nixpkgs_stable { inherit system; overlays = []; }).pkgs.glusterfs;
                  }) ];
                  services.glusterfs.enable = true;

                  programs.sway = {
                    enable = true;
                    wrapperFeatures.gtk = true;
                    extraPackages = with pkgs; [
                      swaylock # lockscreen
                      swayidle
                      xwayland # for legacy apps
                      #waybar # status bar
                      mako # notification daemon
                      kanshi # autorandr
                      bemenu # is this right?
                      i3status
                      ffmpeg_5-full
                    ];
                  };

                  environment = {
                    etc = {
                      "sway/config".source = ./sway_config;
                    };
                  };
                  # For steam, and Vulkan in general
                  hardware.opengl.driSupport = true;
                  hardware.opengl.driSupport32Bit = true;
                  
                  nixpkgs.config.packageOverrides = pkgs: {
                      vaapiIntel = pkgs.vaapiIntel.override { enableHybridCodec = true; };
                  };
                  hardware.opengl = {
                    enable = true;
                    extraPackages = with pkgs; [
                          intel-media-driver
                          vaapiIntel
                          vaapiVdpau
                          libvdpau-va-gl
                          intel-compute-runtime # OpenCL filter support (hardware tonemapping and subtitle burn-in)
                    ];
                  };

                  environment.systemPackages = with pkgs; [
                    tmux vim wget curl git w3m iftop iotop killall file unzip zip ripgrep imv killall gomuks htop
                    firefox-wayland chromium gnome.nautilus
                    vlc steam transmission-gtk mupdf
                    foot pavucontrol pywal
                    sway wayland glib dracula-theme gnome.adwaita-icon-theme wl-clipboard
                    (pkgs.writeTextFile {
                      name = "dbus-sway-environment";
                      destination = "/bin/dbus-sway-environment";
                      executable = true;

                      text = ''
                        dbus-update-activation-environment --systemd WAYLAND_DISPLAY XDG_CURRENT_DESKTOP=sway
                        systemctl --user stop pipewire pipewire-media-session xdg-desktop-portal xdg-desktop-portal-wlr
                        systemctl --user start pipewire pipewire-media-session xdg-desktop-portal xdg-desktop-portal-wlr
                      '';
                    })
                    # currently, there is some friction between sway and gtk:
                    # https://github.com/swaywm/sway/wiki/GTK-3-settings-on-Wayland
                    # the suggested way to set gtk settings is with gsettings
                    # for gsettings to work, we need to tell it where the schemas are
                    # using the XDG_DATA_DIR environment variable
                    # run at the end of sway config
                    (pkgs.writeTextFile {
                        name = "configure-gtk";
                        destination = "/bin/configure-gtk";
                        executable = true;
                        text = let
                          schema = pkgs.gsettings-desktop-schemas;
                          datadir = "${schema}/share/gsettings-schemas/${schema.name}";
                        in ''
                          export XDG_DATA_DIRS=${datadir}:$XDG_DATA_DIRS
                          gnome_schema=org.gnome.desktop.interface
                          gsettings set $gnome_schema gtk-theme 'Dracula'
                          '';
                    })
                  ] ++ specificPkgs;
                  programs.waybar.enable = true;

                  # kanshi systemd service
                  systemd.user.services.kanshi = {
                    description = "kanshi daemon";
                    serviceConfig = {
                      Type = "simple";
                      ExecStart = "${pkgs.kanshi}/bin/kanshi -c kanshi_config_file";
                    };
                  };

                  services.openssh.enable = true;
                  services.tailscale.enable = true;
                  networking.firewall.enable = false;

                  #services.pihole = {
                    #enable = true;
                    #hostConfig = {
                      #user = "pihole";
                      #enableLingeringForUser = true;
                      #persistVolumes = true;
                      #dnsPort = 5335;
                      #webPort = 8080;
                    #};
                    #piholeConfig.ftl = {
                      #LOCAL_IPV4 = "192.168.4.200";
                    #};
                    #piholeConfig.web = {
                      #virtualHost = "pi.hole";
                      #password = "password";
                    #};
                  #};

                  #networking.firewall.interfaces.eth0 = {
                    #allowedTCPPorts = [ 5335 8080 ];
                    #allowedUDPPorts = [ 5335 ];
                  #};
          }));
        in {
        nixosConfigurations.panam = nixpkgs.lib.nixosSystem {
            inherit system;
            specialArgs = attrs;
            modules = [
                # make the module declared by linger flake available to our config
                #linger.nixosModules.${system}.default
                #pihole.nixosModules.${system}.default

                home-manager.nixosModules.home-manager
                homeManagerSharedModule
                ({ config, lib, pkgs, modulesPath, ... }@innerArgs: (lib.recursiveUpdate (commonConfigFunc innerArgs []) {
                  imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];

                  # needed for stable restarts of pi-hole container
                  #boot.cleanTmpDir = true;

		  boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "usb_storage" "usbhid" "sd_mod" ];
		  boot.initrd.kernelModules = [ ];
		  boot.kernelModules = [ ];
		  boot.extraModulePackages = [ ];

		  fileSystems."/" = { device = "/dev/disk/by-uuid/b22f705d-8d3d-4d6c-997d-226399f03e18"; fsType = "ext4"; };
		  fileSystems."/boot" = { device = "/dev/disk/by-uuid/BE49-6634"; fsType = "vfat"; };
		  swapDevices = [ { device = "/dev/disk/by-uuid/9b8aa223-f67b-4c1a-9161-a3daec3dfefc"; } ];
          # Mounted data drives for use by glusterfs
		  fileSystems."/data/brick1" = { device = "/dev/disk/by-label/gfs_ssd1"; fsType = "xfs"; };
		  fileSystems."/data/brick2" = { device = "/dev/disk/by-label/gfs_hdd1"; fsType = "xfs"; };
		  fileSystems."/data/brick3" = { device = "/dev/disk/by-label/gfs_hdd2"; fsType = "xfs"; };
          # Glusterfs shared storage
          fileSystems."/ghost_in_the_stream" = { device = "panam:/gv0"; fsType = "glusterfs"; };
		  networking.useDHCP = lib.mkDefault true;
		  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
		  powerManagement.cpuFreqGovernor = lib.mkDefault "powersave";
		  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
          # high-resolution display
		  hardware.video.hidpi.enable = lib.mkDefault true;


                  boot.loader.systemd-boot.enable = true;
                  boot.loader.efi.canTouchEfiVariables = true;

                  # don't suspend on lid close
                  services.logind.lidSwitch = "ignore";
                  networking.hostName = "panam"; # Define your hostname.

                  system.stateVersion = "22.11"; # Did you read the comment?
                }))
            ];
        };
    };
}