bleghh

systems/x86_64-linux/navis/default.nix

@@ -6,35 +6,39 @@
   ...
 }:
 with lib // pkgs // inputs; {
-  imports = [
-    ./hardware.nix
-  ];
+  imports = [./hardware.nix];
 
   security = {
     rtkit.enable = true;
 
-    pam.loginLimits = [
-      {
-        domain = "*";
-        item = "nofile";
-        type = "-";
-        value = "32768";
-      }
-      {
-        domain = "*";
-        item = "memlock";
-        type = "-";
-        value = "32768";
-      }
-    ];
+    pam = {
+      services.greetd.enableGnomeKeyring = true;
 
-    sudo.extraConfig = ''
-      Defaults lecture = never, pwfeedback
-    '';
+      loginLimits = [
+        {
+          domain = "*";
+          item = "nofile";
+          type = "-";
+          value = "32768";
+        }
+        {
+          domain = "*";
+          item = "memlock";
+          type = "-";
+          value = "32768";
+        }
+      ];
+    };
+
+    sudo.wheelNeedsPassword = false;
   };
 
   console.catppuccin.enable = true;
 
+  systemd.tmpfiles.rules = [
+    "f /dev/shm/looking-glass 0660 marshall qemu-libvirtd -"
+  ];
+
   systemd.user.extraConfig = let
     path = lib.concatStringsSep ":" [
       "/run/wrappers/bin"
@@ -68,9 +72,14 @@ with lib // pkgs // inputs; {
 
     libvirtd = {
       enable = true;
+
+      onBoot = "ignore";
+      onShutdown = "shutdown";
+
       qemu = {
         package = qemu_kvm;
         swtpm.enable = true;
+        runAsRoot = false;
         ovmf.enable = true;
         ovmf.packages = [OVMFFull.fd];
       };
@@ -86,17 +95,20 @@ with lib // pkgs // inputs; {
   environment = {
     sessionVariables = {
       BROWSER = "firefox-nightly";
-      EDITOR = "nvim";
-      TERMINAL = "wezterm";
       DIRENV_WARN_TIMEOUT = "100s";
+      EDITOR = "nvim";
+      NIXOS_OZONE_WL = "1";
+      TERMINAL = "wezterm";
     };
 
     systemPackages = [
       agenix.packages.${system}.default
       gnome.nautilus
       internal.lightly-boehs-qt6
+      looking-glass-client
       snowfallorg.flake
       sound-theme-freedesktop
+      virtio-win
       winetricks
       wineWowPackages.staging
       xclip
@@ -106,12 +118,13 @@ with lib // pkgs // inputs; {
     persistence."/persist" = {
       hideMounts = true;
       directories = [
+        "/etc/mullvad-vpn"
         "/etc/NetworkManager"
         "/etc/secrets"
         "/etc/ssh"
-        "/etc/mullvad-vpn"
         "/root/.ssh"
         "/var/lib/bluetooth"
+        "/var/lib/libvirt"
         "/var/lib/nixos"
         "/var/lib/systemd/coredump"
       ];
@@ -205,8 +218,6 @@ with lib // pkgs // inputs; {
       min-free = "${toString (5 * 1024 * 1024 * 1024)}";
       max-free = "${toString (10 * 1024 * 1024 * 1024)}";
 
-      extra-sandbox-paths = [config.programs.ccache.cacheDir];
-
       extra-experimental-features = [
         "flakes" # flakes
         "nix-command" # experimental nix commands
@@ -238,7 +249,6 @@ with lib // pkgs // inputs; {
   };
 
   programs = {
-    ccache.enable = true;
     dconf.enable = true;
     fish.enable = true;
     gamemode.enable = true;
@@ -253,8 +263,6 @@ with lib // pkgs // inputs; {
 
     nh = {
       enable = true;
-      clean.enable = true;
-      clean.extraArgs = "--keep-since 4d --keep 3";
       flake = "/home/marshall/nix-config";
     };
   };
@@ -316,7 +324,7 @@ with lib // pkgs // inputs; {
 
     users.marshall = {
       isNormalUser = true;
-      extraGroups = ["wheel" "gamemode" "libvirtd" "networkmanager"];
+      extraGroups = ["wheel" "gamemode" "libvirtd" "qemu-libvirtd" "disk" "networkmanager"];
       shell = fish;
       hashedPasswordFile = config.age.secrets.passwd.path;
     };
@@ -352,5 +360,7 @@ with lib // pkgs // inputs; {
     };
   };
 
+  xdg.portal.enable = true;
+
   system.stateVersion = "24.05";
 }