summaryrefslogtreecommitdiff
path: root/hosts/desktop/configuration.nix
blob: 177463794161410c2fbc18520625d1bebe7e53d5 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
{
  config,
  lib,
  pkgs,
  inputs,
  ...
}:

{
  imports = [
    # Include the results of the hardware scan.
    ./hardware-configuration.nix
    ../../modules/common.nix
    ../../modules/llm.nix
    # ../../modules/local-llm.nix
    ../../modules/kvm.nix
    ../../modules/wireguard.nix
  ];

  boot.loader.grub = {
    enable = true;
    device = "nodev";
    efiSupport = true;
  };
  boot.loader.efi.canTouchEfiVariables = false;
  boot.loader.efi.efiSysMountPoint = "/boot/efi";

  custom.wireguardAddress = "10.67.40.4/32";

  networking.hostName = "desktop";
  networking.wireless.iwd.enable = true;
  networking.networkmanager.wifi.backend = "iwd";
  networking.networkmanager.wifi.macAddress = "permanent";
  networking.wireless.iwd.settings.General.AddressRandomization = "disabled";
  networking.nameservers = [
    "1.1.1.1"
    "8.8.8.8"
  ];

  services.xserver.videoDrivers = [ "amdgpu" ];

  networking.firewall.allowedTCPPorts = [ 3389 ];
  networking.firewall.trustedInterfaces = [ "virbr0" ];
  networking.nat = {
    enable = true;
    externalInterface = "wlan0";
    internalInterfaces = [ "virbr0" ];
    forwardPorts = [
      {
        destination = "192.168.111.111:3389";
        proto = "tcp";
        sourcePort = 3389;
      }
    ];
  };

  system.stateVersion = "25.11";
}