main

Use

Install

nix --experimental-features "nix-command flakes" run 'github:nix-community/disko#disko-install' -- --write-efi-boot-entries --flake 'github:lazycaat/nixos-config#machine1' --disk main /dev/vda

Upgrade

nixos-rebuild boot --refresh --flake 'github:lazycaat/nixos-config#machine1'

nixos [0/1]

[ ] security [0/7]

• [ ] sandbox [0/4]
  • [ ] firejail
  • [ ] boxxy
  • [ ] apparmor?
  • [ ] selinux ?
• [-] network [0/6]
  • [-] firewall
    • [ ] opensnitch
    • [ ] openGFW
    • [ ] nftables
    • [X] iptables
  • [ ] networks [0/9]
    • [ ] vpn
    • [ ] ygg
    • [ ] tor
    • [ ] i2p
    • [ ] wireguard
    • [ ] openconnect
    • [ ] tailscale
    • [ ] zerotier
    • [ ] nebula
  • [ ] noise traffic generator
  • [ ] ntp config (chrony?)
  • [ ] dns config
  • [ ] wi-fi config [0/1]
    • [ ] mac randomize
• [ ] secrets [0/3]
  • [ ] agenix
  • [ ] tomb ?
  • [ ] fido2 ?
• [ ] scan system [0/2]
  • [ ] cve
  • [ ] viruses
• [ ] notification [0/4]
  • [ ] clipboard notify
  • [ ] waybar screencast notify
  • [ ] email/ntfy
  • [ ] scan info
• [-] system [2/11]
  • [ ] graphene malloc
  • [X] hardened kernel
  • [ ] secure boot
  • [ ] journailung
  • [ ] fido2 support
  • [ ] no logs on disks (impremenance)
  • [ ] sudo alter (su, sudo-rs, please, doas)?
  • [X] proprietarity only for users or drivers
  • [ ] identifier leaks protect
  • [ ] auto reboot every 18h
  • [ ] anti hack text (moth)
• [ ] user [0/1]
  • [ ] keyboard leaks (kloak)

system nix

• [X] flake structure
• [X] users standalone
• [-] modules [3/6]
  • [X] home-manager
  • [X] stylix
  • [ ] lanzaboot
  • [-] disko
    • [X] zfs
    • [ ] luks
    • [ ] fido2
  • [X] impremenance
  • [ ] agenix
• [ ] hardware [0/4]
  • [ ] nvidia
  • [ ] bluetooth
  • [ ] printers
  • [ ] equalizer
• [X] nix [3/3]
  • [X] flake
  • [X] diff update
  • [X] optimise & gc
• [ ] keyboard [0/3]
  • [ ] miryoku
  • [ ] autocomplete
  • [ ] text correction
• [-] tweaks [8/9]
  • [X] zram
  • [X] auto-cpu-freq
  • [ ] nss
  • [X] documentation
  • [X] fwupd
  • [X] ananicy
  • [X] ksm
  • [X] powertop
  • [X] gvfs
• [ ] may be
  • plymouth
  • nix-index
  • command-not-found

user env

• [ ] de [0/3]
  • [ ] DE [0/2]
    • [ ] GNOME
    • [ ] KDE
  • [ ] WM [0/1]
    • [ ] Hyprland
  • [ ] WM other [0/8]
    • [ ] bar
      • [ ] waybar
      • [ ] eww
    • [ ] runner
      • [ ] wofi
      • [ ] anyrun
    • [ ] notify
      • [ ] swaynotificationcenter
    • [ ] locker
      • [ ] gtklock
      • [ ] swaylock
    • [ ] disk manager
      • [ ] udiskie
    • [ ] display manager
      • [ ] gdm
      • [ ] regreet
      • [ ] tuigreet
    • [ ] screenshot manager
      • [ ] grim + slurp
      • [ ] ocr
      • [ ] satty
    • [ ] copy paste manager
• [ ] flake for prog [0/4]
  • [ ] python
  • [ ] rust
  • [ ] latex
  • [ ] typst
• [-] terminal apps [1/4]
  • [ ] terminals
    • [ ] foot
    • [ ] kitty
  • [X] file manager
    • [X] yazi
  • [ ] text editor
    • [ ] helix
    • [ ] neovim
  • [-] other
    • [ ] ssh client
    • [ ] git client
    • [X] zellj
• [ ] tweaks [0/1]
  • [ ] boxxy
• [ ] emacs [0/0]
• [ ] internet [0/2]
  • [ ] browsers [0/3]
    • [ ] firefox
    • [ ] librewolf
    • [ ] floorp
  • [ ] browsers plugins [0/3]
    • [ ] dark reader
    • [ ] ublock
    • [ ] containers
• [ ] other [0/1]
  • [ ] choose default apps