{ inputs, pkgs, ... }: { imports = [ ./stylix.nix ./nixvim/nixvim.nix ]; boot.loader.systemd-boot = { edk2-uefi-shell.enable = true; configurationLimit = 5; }; boot.loader.efi.canTouchEfiVariables = true; boot.kernelPackages = pkgs.linuxPackages_latest; nix.settings.experimental-features = [ "nix-command" "flakes" ]; nix.package = pkgs.lixPackageSets.stable.lix; nix.settings.trusted-users = [ "lucy" ]; networking.hostName = "nixos"; # Define your hostname. networking.networkmanager.enable = true; networking.networkmanager.wifi.powersave = false; time.timeZone = "Europe/Berlin"; i18n.defaultLocale = "en_US.UTF-8"; i18n.extraLocaleSettings = { LC_ADDRESS = "de_DE.UTF-8"; LC_IDENTIFICATION = "de_DE.UTF-8"; LC_MEASUREMENT = "de_DE.UTF-8"; LC_MONETARY = "de_DE.UTF-8"; LC_NAME = "de_DE.UTF-8"; LC_NUMERIC = "de_DE.UTF-8"; LC_PAPER = "de_DE.UTF-8"; LC_TELEPHONE = "de_DE.UTF-8"; LC_TIME = "de_DE.UTF-8"; }; services.xserver.xkb = { layout = "eu"; variant = ""; }; services.displayManager.ly.enable = true; programs.steam = { enable = true; remotePlay.openFirewall = true; # Open ports in the firewall for Steam Remote Play dedicatedServer.openFirewall = true; # Open ports in the firewall for Source Dedicated Server localNetworkGameTransfers.openFirewall = true; # Open ports in the firewall for Steam Local Network Game Transfers }; programs.hyprland = { package = pkgs.hyprland; enable = true; withUWSM = true; # recommended for most users xwayland.enable = true; # Xwayland can be disabled. }; security.doas.enable = true; security.sudo.enable = false; security.doas.extraRules = [ { users = [ "lucy" "root" ]; groups = [ "wheel" ]; keepEnv = true; persist = true; # Optional, only require password verification a single time } ]; programs.bash = { completion.enable = true; shellAliases = { "rebuild" = "doas nixos-rebuild switch --flake $HOME/nixos/ --impure"; }; promptInit = '' PS1='\[\033[01;32m\]\u@\h\[\033[01;34m\] \w \$\[\033[00m\] ' ''; interactiveShellInit = '' complete -F _command doas eval "$(devenv hook bash)" ''; }; # Enable CUPS to print documents. services.printing.enable = true; # Enable sound with pipewire. services.pulseaudio.enable = false; security.rtkit.enable = true; services.pipewire = { enable = true; alsa.enable = true; alsa.support32Bit = true; pulse.enable = true; }; # Enable touchpad support (enabled default in most desktopManager). services.libinput.enable = true; programs.xppen = { enable = true; package = pkgs.xppen_4.overrideAttrs (old: { src = pkgs.fetchurl { url = "https://download01.xp-pen.com/file/2026/04/XPPenLinux4.0.15-260422.tar.gz"; hash = "sha256-Jady+pbqnzmVMuM0Io4/aE5B7dqNlDKPsnRj/Fbln6U="; }; buildInputs = (old.buildInputs or [ ]) ++ [ pkgs.libXtst pkgs.libXrandr ]; }); }; # Define a user account. Don't forget to set a password with ‘passwd’. fonts.packages = with pkgs; [ noto-fonts noto-fonts-cjk-sans noto-fonts-color-emoji nerd-fonts.symbols-only ]; users.users."lucy" = { isNormalUser = true; description = "lucy"; extraGroups = [ "networkmanager" "wheel" ]; }; programs.direnv.enable = true; # Allow unfree packages nixpkgs.config.allowUnfree = true; environment.systemPackages = with pkgs; [ wl-clipboard btop ripgrep fd bat grimblast git blueman devenv inetutils filezilla ]; hardware.bluetooth = { enable = true; powerOnBoot = true; settings = { General = { Experimental = true; FastConnectable = true; }; Policy = { AutoEnable = true; }; }; }; # DO NOT CHANGE!! system.stateVersion = "26.05"; # Did you read the comment? }