pogrupowanie konfiguracji oraz dodanie serwerów dns i DNS-over-TLS

hosts/garand-laptop/config.nix

@@ -31,8 +31,10 @@ in {
       "vm.max_map_count" = 2147483642;
     };
     # Bootloader.
-    loader.systemd-boot.enable = true;
+    loader = {
-    loader.efi.canTouchEfiVariables = true;
+      systemd-boot.enable = true;
+      efi.canTouchEfiVariables = true;
+    };
     # Make /tmp a tmpfs
     tmp = {
       useTmpfs = false;
@@ -74,9 +76,11 @@ in {
     # };
     polarity = "dark";
     opacity.terminal = 0.8;
-    cursor.package = pkgs.bibata-cursors;
+    cursor = {
-    cursor.name = "Bibata-Modern-Ice";
+      package = pkgs.bibata-cursors;
-    cursor.size = 24;
+      name = "Bibata-Modern-Ice";
+      size = 24;
+    };
     fonts = {
       monospace = {
         package = pkgs.nerdfonts.override {fonts = ["JetBrainsMono"];};
@@ -100,21 +104,39 @@ in {
   };
 
   # Extra Module Options
-  drivers.amdgpu.enable = true;
+  drivers = {
-  drivers.nvidia.enable = false;
+    amdgpu.enable = true;
-  drivers.nvidia-prime = {
+    nvidia.enable = false;
+    nvidia-prime = {
       enable = false;
       intelBusID = "";
       nvidiaBusID = "";
     };
-  drivers.intel.enable = false;
+    intel.enable = false;
+  };
   vm.guest-services.enable = false;
   local.hardware-clock.enable = false;
 
+  services.resolved = {
+    enable = true;
+    dnssec = "true";
+    domains = ["~."]; # "use as default interface for all requests"
+    # (see man resolved.conf)
+    # let Avahi handle mDNS publication
+    extraConfig = ''
+      DNSOverTLS=opportunistic
+      MulticastDNS=resolve
+    '';
+    llmnr = "true";
+  };
+
   # Enable networking
-  networking.networkmanager.enable = true;
+  networking = {
-  networking.hostName = host;
+    nameservers = ["176.9.1.117" "213.196.191.96" "2a01:4f8:151:34aa::198"];
-  networking.timeServers = options.networking.timeServers.default ++ ["pool.ntp.org"];
+    networkmanager.enable = true;
+    hostName = host;
+    timeServers = options.networking.timeServers.default ++ ["pool.ntp.org"];
+  };
 
   # Set your time zone.
   time.timeZone = "Europe/Warsaw";
@@ -408,23 +430,33 @@ in {
     disabledDefaultBackends = ["escl"];
   };
 
-  # Extra Logitech Support
+  hardware = {
-  hardware.logitech.wireless.enable = false;
+    logitech = {
-  hardware.logitech.wireless.enableGraphical = false;
+      wireless = {
-
+        enable = false;
-  # Bluetooth Support
+        enableGraphical = false;
-  hardware.bluetooth.enable = true;
+      };
-  hardware.bluetooth.powerOnBoot = true;
+    };
+    bluetooth = {
+      enable = true;
+      powerOnBoot = true;
+    };
+    pulseaudio = {
+      enable = false;
+    };
+    graphics = {
+      enable = true;
+      enable32Bit = true;
+    };
+  };
   services.blueman.enable = true;
 
-  # Enable sound with pipewire.
-  hardware.pulseaudio.enable = false;
-
   # Security / Polkit
   security = {
     rtkit.enable = true;
-    polkit.enable = true;
+    polkit = {
-    polkit.extraConfig = ''
+      enable = true;
+      extraConfig = ''
         polkit.addRule(function(action, subject) {
           if (
             subject.isInGroup("users")
@@ -440,6 +472,7 @@ in {
           }
         })
       '';
+    };
     pam.services.swaylock = {
       text = ''
         auth include login
@@ -469,22 +502,17 @@ in {
       dates = "weekly";
       options = "--delete-older-than 7d";
     };
-
     nixPath = ["nixpkgs=${inputs.nixpkgs}"];
   };
 
   # Virtualization / Containers
-  virtualisation.libvirtd.enable = true;
+  virtualisation = {
-  virtualisation.podman = {
+    libvirtd.enable = true;
+    podman = {
       enable = true;
       dockerCompat = true;
       defaultNetwork.settings.dns_enabled = true;
     };
-
-  # OpenGL
-  hardware.graphics = {
-    enable = true;
-    enable32Bit = true;
   };
 
   console.keyMap = "${keyboardLayout}";

hosts/garand-laptop/home.nix

@@ -27,17 +27,14 @@ in {
   ];
 
   # Place Files Inside Home Directory
-  home.file."Pictures/Wallpapers" = {
+  home.file = {
-    source = ../../config/wallpapers;
+    "Pictures/Wallpapers".source = ../../config/wallpapers;
-    recursive = true;
+    "Pictures/Wallpapers".recursive = true;
-  };
+    ".config/wlogout/icons".source = ../../config/wlogout;
-  home.file.".config/wlogout/icons" = {
+    ".config/wlogout/icons".recursive = true;
-    source = ../../config/wlogout;
+    ".face.icon".source = ../../config/face.jpg;
-    recursive = true;
+    ".config/face.jpg".source = ../../config/face.jpg;
-  };
+    ".config/swappy/config".text = ''
-  home.file.".face.icon".source = ../../config/face.jpg;
-  home.file.".config/face.jpg".source = ../../config/face.jpg;
-  home.file.".config/swappy/config".text = ''
       [Default]
       save_dir=/home/${username}/Pictures/Screenshots
       save_filename_format=swappy-%Y%m%d-%H%M%S.png
@@ -49,6 +46,7 @@ in {
       early_exit=true
       fill_shape=false
     '';
+  };
 
   # Install & Configure Git
   programs.git = {
@@ -73,9 +71,19 @@ in {
   };
 
   # Styling Options
-  stylix.targets.waybar.enable = false;
+  stylix = {
-  stylix.targets.rofi.enable = false;
+    targets = {
-  stylix.targets.hyprland.enable = false;
+      waybar = {
+        enable = false;
+      };
+      rofi = {
+        enable = false;
+      };
+      hyprland = {
+        enable = false;
+      };
+    };
+  };
   gtk = {
     iconTheme = {
       name = "Papirus-Dark";