add electra, work laptop

.sops.yaml

@@ -10,6 +10,7 @@ keys:
     - &maia age1dn7pkareh83k8el2yt4dmdfdzn7f45fuc785cnnxgzf3h4r5gqhqd4l93h
     - &alcyone age1uxvuygmvwpfjrd9d3ulg6ln8dgvaw4l2c90mw0tr72qg3n8vd9ns3dm000
     - &celaeno age1gxhy9eq38xfplay0kvkeyvsg96g0c4p6rkhajkrj8nc9dswdzqhssgvns0
+    - &electra age1n06f4dcslh8xq686z2fa9ddr3yg5yzj87p727896xsm8xvusdv6qan0grl
 
 creation_rules:
   - path_regex: hosts/celaeno/secrets.ya?ml$
@@ -34,5 +35,6 @@ creation_rules:
       - *maia
       - *alcyone
       - *celaeno
+      - *electra
       pgp:
       - *misterio

flake.nix

@@ -68,6 +68,10 @@
           specialArgs = { inherit inputs outputs; };
           modules = [ ./hosts/pleione ];
         };
+        electra = nixpkgs.lib.nixosSystem {
+          specialArgs = { inherit inputs outputs; };
+          modules = [ ./hosts/electra ];
+        };
         # Secondary Desktop
         maia = nixpkgs.lib.nixosSystem {
           specialArgs = { inherit inputs outputs; };
@@ -105,6 +109,11 @@
           extraSpecialArgs = { inherit inputs outputs; };
           modules = [ ./home/misterio/pleione.nix ];
         };
+        "misterio@electra" = home-manager.lib.homeManagerConfiguration {
+          pkgs = nixpkgs.legacyPackages."x86_64-linux";
+          extraSpecialArgs = { inherit inputs outputs; };
+          modules = [ ./home/misterio/electra.nix ];
+        };
         # Secondary Desktop
         "misterio@maia" = home-manager.lib.homeManagerConfiguration {
           pkgs = nixpkgs.legacyPackages."x86_64-linux";

home/misterio/electra.nix

@@ -1,4 +1,20 @@
-{ inputs, ... }: {
-  imports = [ ./global ];
-  colorscheme = inputs.nix-colors.colorSchemes.silk-dark;
+{ inputs, pkgs, ... }: {
+  imports = [
+    ./global
+    ./features/desktop/hyprland
+    ./features/desktop/wireless
+    ./features/trusted
+  ];
+
+  wallpaper = (import ./wallpapers).aenami-lunar;
+  colorscheme = inputs.nix-colors.colorschemes.paraiso;
+
+  monitors = [{
+    name = "eDP-1";
+    width = 1920;
+    height = 1080;
+    isPrimary = true;
+    workspace = "1";
+  }];
+  wayland.windowManager.hyprland.nvidiaPatches = true;
 }

hosts/common/secrets.yaml

@@ -10,76 +10,85 @@ sops:
         - recipient: age1hm5lf4qk84r4wh00atn6hpts7mpdx80adq26wht2e5qh9ewvhyaszfv82d
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMeFRaQWlzcHFHVUhGVE8y
-            azRKZnBxc1d6QjBwN0N0RzJ3QnJkdFBSblQ0CjUrVmdWRW5nOUw4SzJMa3Z6MUFp
-            OHNrNStHSWx1ZXV4Zlhwa0ZTN0lCek0KLS0tIHVqbVN1VGszUGY3MHdtc2VpRGR4
-            Tk9RTXJIM2t3L3Y3c0pkb2tLcktORUEKWqVje56mlG3gJijnz8rD3u3AV6XjBDRw
-            YOg7UhpG5FwdIr4GA4zQy3uJ8Xn6nM+PETLa+kubK85RnWE3RXUYtg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyTE5PczhoNHpBWWczZHY2
+            dE5aa2tTeGFxMVBhMEtKQkwyNXdjMm5uZHlNCkVRNEFrbWJVeUdLWElBc0hNOXRN
+            cGlCUHYxc0MxejBIKy9JMkR1QlNtbDQKLS0tIFFhcFkwMXRhMnYrcEd2Qks3TjBC
+            bnplZDBhMDlkME9CaklmM1hUK1k2TDAKtZStGRVRFvsJhNBozYwD8FTRWYNpViwT
+            mK3qU6aVRU73MJrjpqmsfgrn7zKZ/pC+BGr3VQSRVb/3q1U2zEIQBQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1709qfrwglm75v5x8lpuhryt83k6p6c90npplzzec6a5w8ct93ejscpqpc3
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTZG9mYmYxWXJxbWhmbFFq
-            MjJkV3Y4ajhjNlZ1d3RYZnpFdEp6eVZzaFdzClFoc2pGOU1QRnIxZCsrZ1NldDMz
-            RlordHEzY1hNQjk0OCtUWWNQMmlJTW8KLS0tIExXbVVWTGhjSVRYR1VwZk50d1BD
-            ZnIrVXB4YVV0VHh3cWlsM3VPSGE4bGcKbej4RrGpLisi8IrGx4bPwlCnz3eUp7lc
-            1yAU5EnOYSOJcWAoFas3cngVxkgNeBDCfji8mvLLfvjGsasdjaalJQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiVkowVnc2aG1qSHBLaDdO
+            RkVuZ0JOeDRWSlE4TDl3bWJ5eVVUZ3ltWkZNCm51VWFNU0dURDhRU3JLVDBoMzcx
+            aks1bC9Vblg2S2RldjcyL2FDMzRSVU0KLS0tIGt0aC9GTmVwV01BdFJrUFZmcTJJ
+            WTJiTFVMV1BZOVFQdDgzTGFrZlRybVkK5sAsALcmI6LaTS8d0N3fovrqy2T5WI8l
+            DFwYJ8cpNwA/b7ImLD4GWYuENk+1JAp4NgbPK5XQ/vdk590080E6Kw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1j9ld6ey62hqd33xkyd2fg9362k6xhm5gavsrpsfalwpcs8smxfdqpk84a2
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1VEFxVjc2VFFYUU5vRyt2
-            emtDL1R6ZXhPdTVISFcyM0lGdVZCeVpPWjNFCjlmOVRhWFdyOWEzVEFQSDgyaW1G
-            N0FPRE5IOEQ1MVJ4Z012aTQwU2l0aXMKLS0tIFQxNlVHZ0xYYnViNis1YWlKdk9M
-            V2tiQkI3a3ZFMFdwSy9Nc3VZY3JCaTQKt8OtWwVjeZRui4Wiky99EQB7fVQQ3urp
-            ZOLD3PWj/EYNNcvx2ApkPaih4sAAF/u4lkQFQZy47kbeZH2NuiQA9Q==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDSS9sd1J3MnVCcUdKVWRV
+            V0EyVm5LVE5zLzJkd0QwR3JaZ09jdFVhdmxzCloxdGpwUGJCRWUvcDU2ZE11SWNw
+            NzBCNzhrTnNXNzEwS1luSlI3aENFb2MKLS0tIDNJMy92bkhnaEJxbUI5OGVnZ1Fa
+            ZVFTa3IzeDVVT01IOXhGOE9KZVFQV2sK7LLx8yGP3iKpXtlIrvWNXCkHuqWfc6AP
+            A6oZMwP6P/uMOiXCSStWhAQpEmY/JcbcyfnfWXV7LckXxL7CElJloQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1dn7pkareh83k8el2yt4dmdfdzn7f45fuc785cnnxgzf3h4r5gqhqd4l93h
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFQ3ZXUWlnK3NQYUFpZVZt
-            QzlZejlPSVcrTGgrWVFrMTZ5U0VyQ0puV0FZClV5S2w5dWpTNkJTOENUWXBYN0Zw
-            ZWo2QjY2U2lzUHl5UHk3RkhtMjNqSDQKLS0tIHJmSzg3S0UxN1Nvak8xeEJKbW1m
-            M2xJbTQ5aTRFNjJDN2M5L0l1TWQ3d3MKhUqhyp5hRYMUIn2WpSLOqsvLJrvWnq2v
-            ANaD0Q2Ph0aOAnfp3jlQ37uDO6DrrfQbn3rZH+k0TAJ7cxHQKOup9Q==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsZW1xVjJUWE1YemN4QVB5
+            SVZLQ0FwcERTbTZBSmJUdkorVWFFVlZLc0NzCmZaMVB5T0VCZ1BFN1ZzR0dBSnZl
+            UE96ZGl3d3g0cDNEOHF5UEhPZDU4blUKLS0tIG9uRThreDhVNHBTUmovTEJyZnRl
+            cU5TMHFyMXNIUnlXcjZHNkNtRG44OFUK9cCjIF6Ip6e+/VEJMhDV5HM2it/eFOdz
+            8sBVBZS6SL4xCRoFMOmnnw9PCLreCws2i34nI0uW1T22JPbh3FExTg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1uxvuygmvwpfjrd9d3ulg6ln8dgvaw4l2c90mw0tr72qg3n8vd9ns3dm000
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMRDhheWI2K2ZNUlpuUHlF
-            U0NpcUFFSUdHWEhMaFJzMFR1aHNITnNTN1ZVCkl3c3dZVW5SanJ1T3hOaExCZjZV
-            SWc5Q0lxbUNNWE5BUTNzc0tSVm1qRzQKLS0tIEZmN3MrV1ZLVHJtZXdqQnU3RHFY
-            TjgxY281OFFXNFJORnJWNzZHTUxMVXcKyP0F12z3J71GwxzRl8MiCOyDRDMxDoQN
-            4LPESxgYizZOd4gt6ALN5XSAnrxnVZ2tYl2GiPhzSI2r5oR4qrBmCA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzTDZBb0dZeEtGN2dFejVo
+            M2JNMGZEUnc4NTlNYUp5WUdadjlEQzVncXhZCjJpS04wRnBFb2g1VE5kdHZnNEZS
+            T21zQUNRc09XUGNaZWxyVWdhOE94Q0EKLS0tIFY4Y3lsWGxHWlJzNDE0cEp4ZE5M
+            YlVKN1VmSzhNam1mRW5xTnVDMG9GYVkKCAx2LVbYHhrWz6qS1oe2IJoSEM+TdiAq
+            hGECp0v9DwoQo8ud3nL4k5sAxa11j0iLNDVS2wGEpsISVNhnjOda0g==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1gxhy9eq38xfplay0kvkeyvsg96g0c4p6rkhajkrj8nc9dswdzqhssgvns0
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZckIrRGp1Q0V5dCtyUVN2
-            Q1ZxR0VRbkJlRTZGU3JFVEp1Z21UNGZTVGdrCmNSYnRONXRoZjkrbitUREpjUUxC
-            eHpEc3ZUbmRyUmxUTEgzb2F1a2h4QUkKLS0tIHBYeU94bzduK0dNUUlwSjA1U2ZK
-            VXBFUDZKY0pVUms2V3RZai9OZVYwMUUKASpBktfx4Y6WBRAj/6918HSEvetGrgjc
-            NNkYKhaYsR2TKRyZNxtSYbS1uXbvgboBsOfSr184JrP0SvRDThAuVw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1eVFvbEI2djYxWVBMdkxy
+            aEVJbUlJYU5WTmZSdGVBQW1VcHdyQlZaZWd3CjNxNTVsSWovNjVuWGs1NnlpMEsz
+            eUJTVUZCbkkweWFPUEF4ZTZCRVlnckkKLS0tIFlGd2x5RTVoY0ZLdjdiM3QyNVFN
+            djJEQW4wc2NnTWhPeXVsNTQ1RW92MGsKr1L803YuhsmaysQogh5I2KUHffYcMA03
+            4dekr1pEEX059oHbbvp90Xs23WWiLftcNozNT1m1iI74ZCpmyMRC/g==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1n06f4dcslh8xq686z2fa9ddr3yg5yzj87p727896xsm8xvusdv6qan0grl
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTRkJ5SFJ5NkRqaE0reCtS
+            cFlLa0l6VVNtM3ZTQ0hEL0Y1cTlYRUJrOGpFCmFMeGtuSkdyZEhtQkphRndxR2pZ
+            c3QySDhJazZpQXB1TDdOVExUR0pFcWcKLS0tIGNqRk85WnllZlNzUWY1QTFmY3ZJ
+            WGFSejNJc3dSWjZSeWN0ZktCYm1WNVkKmjKRIFTUO9VGRS+Q+zX0SFtrraEwXxSS
+            8hpAMFll2qGQFi39bPqg8lUQ/t628/EZtvkRQZOwT7+xNFur28mUPA==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2023-02-05T23:49:40Z"
     mac: ENC[AES256_GCM,data:9nu4DGML+ZgcyJowgfgfUlBw7NlgPK+ujFNJtbnerKU3P2g1FWRupizSyJVbC+pxxOyV2K2MKWosHbFZQdupj51GK/lvnGd8iiJS32Slymb74ovQyUU92rhbOE7OYrFIbiVo4lz539hHGVxEvYhWEhglmAl58FzmtQl+bWqiRE4=,iv:+4yDSD8jf5ZM7OFpP+iHO+seDWZJWK29I8D5S6F4lHA=,tag:irpCuCiuGWSy9tQDPZTEvg==,type:str]
     pgp:
-        - created_at: "2023-02-06T22:01:07Z"
+        - created_at: "2023-03-01T15:18:20Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            wcDMAwa9kVfiDH1CAQv7Bs5AFFkp0j8axdiaZg1Lp9CvlTvZ6lTYcX3ueV26CIsU
-            nAW6tvw26CgPtFqqZ9ZM3fP2cRDLFW8hJ5gftu+kdAFnuuXEcmParTviDQ/LGhji
-            4lqn0GgkNyX7kUWzIPseOvrgNSPzq/rjBRxpIgvtRbCYXeYdHU34U6SG0y6mq92Q
-            FCFq9BHabzA5rk2mBPz4GCFalz/Xfvwdxpqh3MM5Ntf1k6DkNTekvZJa80K1ZWzq
-            FFinJUOfX9DGLJb0qBfIP0XvaC8J96RmRqGdIqF944M5OYrAstP87Y+tFED1ZxR/
-            ssUUP5Jx+BxIGtcxJ6+AZhzCR7PxD3rZw40GkcScZawVRKQLxTJZrIKYDs447ntp
-            0qXGJlpTU9cdWm3pZYWpsJ8vEInZmR0e9kDkTJan1nTx42EVdoXqEn/n/KEEJ2RY
-            yzrSlDmnpunwHpYi2YsoUq79/CIZPD+so8NlEkMjpb5RrV2BgjUFI53Nv2z7xRNJ
-            dsjRbI9x9ZX3wLXWnzcG0lEBm72gT+fEQlU4+8hK7VO+nLnvbHVb7K0Ve2siDgop
-            a03UXWvIQsHYlrZ4GpvzxWLraKXspMS2pzPL9u4G6Y1C88PFTgNsGNhfbieM2ma7
-            NgQ=
-            =ChbV
+            wcDMAwa9kVfiDH1CAQv+JRTEbaBdksdzKsBwIrEbsx6av1pg0dct99LMwLljQNQu
+            Vg3apXYTavC4D+gQLYk6eKcBc4ldjSQDCxqztJH3xvRVooPg0YwAFTPhD4xlOE+N
+            VPElotbjWC/wKzfOe+2/6jwXILBOXPYhIiyskKx+41iPAn0TqFLzGFrx19fWUxbV
+            OvQqCetlU06/X2YzRG4Xw8zB/u29a+hOygpdc5fa4MSgvFcZz2PXYESPDH33jpcH
+            jvjLLnWt8RHiwmnRpF3rrAYbn8MhTrRqF0FShUnw+7IjZYMOqn5XM/d3iAZTijVj
+            XW/McYtIiDLMIX9jA3iKlK/lq4jtefPKD+RkG0eSGSDzw3+Cuvqh/B7fcKwNY1P4
+            jd/mHuAzC4jeT1vme1ocIezqqULA0LKjmatzG+dehQ6+mHfh+G1iuB/C6vFPG+dR
+            RqHM/Kk4ctiNEoellipbHSVQLKZSHVYTlVpxyz2R7tMr619Cuj+OQWYwdWgQy3Vp
+            2m8kPAWA1EOlDKiL81ul0lEBpLFkWVHKTKBXdbin2d4FYhhyT19FpqMqhmPkNgDt
+            0eVoCzyokhl9JJK/BsLHMRq5QSnlen1dE/alVpbtJ4vfNgG6gWRUcNmsMOHL/jfC
+            R14=
+            =MjJK
             -----END PGP MESSAGE-----
           fp: 7088C7421873E0DB97FF17C2245CAB70B4C225E9
     unencrypted_suffix: _unencrypted

hosts/electra/.gitignore

@@ -0,0 +1 @@
+wg*.nix

hosts/electra/default.nix

@@ -0,0 +1,70 @@
+# System configuration for my laptop
+{ pkgs, inputs, ... }: {
+  imports = [
+    inputs.hardware.nixosModules.common-cpu-intel
+    inputs.hardware.nixosModules.common-gpu-nvidia
+    inputs.hardware.nixosModules.common-pc-ssd
+
+    ./hardware-configuration.nix
+
+    ../common/global
+    ../common/users/misterio
+
+    ../common/optional/wireless.nix
+    ../common/optional/greetd.nix
+    ../common/optional/pipewire.nix
+  ];
+
+  # environment.persistence.enable = true;
+
+  # TODO: theme "greeter" user GTK instead of using misterio to login
+  services.greetd.settings.default_session.user = "misterio";
+
+  networking = {
+    hostName = "electra";
+  };
+
+  boot = {
+    kernelPackages = pkgs.linuxKernel.packages.linux_zen;
+  };
+
+  services.dbus.packages = [ pkgs.gcr ];
+
+  powerManagement.powertop.enable = true;
+  programs = {
+    light.enable = true;
+    adb.enable = true;
+    dconf.enable = true;
+    kdeconnect.enable = true;
+  };
+
+  # Lid settings
+  services.logind = {
+    lidSwitch = "suspend";
+    lidSwitchExternalPower = "lock";
+  };
+
+  xdg.portal = {
+    enable = true;
+    wlr.enable = true;
+  };
+  hardware = {
+    nvidia = {
+      prime.offload.enable = false;
+    modesetting.enable = true;
+    open = true;
+    };
+    opengl = {
+      enable = true;
+      driSupport = true;
+      driSupport32Bit = true;
+      extraPackages = with pkgs; [
+        vaapiVdpau
+        libvdpau-va-gl
+        nvidia-vaapi-driver
+      ];
+    };
+  };
+
+  system.stateVersion = "22.05";
+}

hosts/electra/hardware-configuration.nix

@@ -0,0 +1,35 @@
+{
+  imports = [
+    ../common/optional/btrfs-optin-persistence.nix
+  ];
+
+  boot = {
+    initrd = {
+      availableKernelModules = [ "nvme" "xhci_pci" "ahci" "usb_storage" "sd_mod" ];
+      kernelModules = [ "kvm-amd" ];
+    };
+    loader = {
+      systemd-boot = {
+        enable = true;
+        consoleMode = "max";
+      };
+      efi.canTouchEfiVariables = true;
+    };
+  };
+
+  fileSystems = {
+    "/boot" = {
+      device = "/dev/disk/by-label/ESP";
+      fsType = "vfat";
+    };
+  };
+
+  swapDevices = [{
+    device = "/swap/swapfile";
+    size = 8196;
+  }];
+
+  nixpkgs.hostPlatform.system = "x86_64-linux";
+  hardware.cpu.amd.updateMicrocode = true;
+  powerManagement.cpuFreqGovernor = "powersave";
+}

hosts/electra/ssh_host_ed25519_key.pub

@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC31G5d7rQhCpwF/5NnPCVAvPV63gXMyiGqzqgVHI/cC root@nixos

hosts/electra/ssh_host_rsa_key.pub

@@ -0,0 +1 @@
+ssh-rsa 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 root@nixos