Split system config into tons of modules!

flake.nix

@@ -94,6 +94,8 @@
           myName = name;
           myTheme = theme;
           myHostname = hostname;
+          myTimezone = timezone;
+          myLocale = locale;
           myThemePolarity = themePolarity;
           myBackgroundUrl = backgroundUrl;
           myBackgroundSha256 = backgroundSha256;

profiles/personal/configuration.nix

@@ -2,139 +2,66 @@
 # your system.  Help is available in the configuration.nix(5) man page
 # and in the NixOS manual (accessible by running ‘nixos-help’).
 
-{ config, lib, pkgs, blocklist-hosts, myName, myHostname, myTheme, myBackgroundUrl, myBackgroundSha256, ... }:
+{ config, lib, pkgs, blocklist-hosts, myName, myHostname, myTimezone, myLocale, myTheme, myBackgroundUrl, myBackgroundSha256, ... }:
-let blocklist = builtins.readFile "${blocklist-hosts}/alternates/gambling-porn/hosts";
-in
 {
   imports =
     [ ../../system/hardware-configuration.nix
+      ../../system/hardware/power.nix
+      ../../system/hardware/opengl.nix
+      ../../system/hardware/printing.nix
+      #../../system/hardware/bluetooth.nix
+      #../../system/hardware/openrgb.nix
+      ../../system/wm/xmonad.nix
+      ../../system/app/flatpak.nix
+      ../../system/app/gamemode.nix
+      ../../system/security/doas.nix
+      ../../system/security/gpg.nix
+      ../../system/security/blocklist.nix
+      ../../system/security/firewall.nix
+      ../../system/security/openvpn.nix
       ../../system/style/stylix.nix
     ];
 
+  # Fix nix path
   nix.nixPath = [ "nixpkgs=/nix/var/nix/profiles/per-user/root/channels/nixos"
                   "nixos-config=$HOME/dotfiles/system/configuration.nix"
                   "/nix/var/nix/profiles/per-user/root/channels"
                 ];
 
+  # Experimental features
   nix.settings.experimental-features = [ "nix-command" "flakes" ];
 
-  # Need some flatpaks
+  # Bless me father for I have sinned
-  services.flatpak.enable = true;
+  nixpkgs.config.allowUnfree = true;
-  xdg.portal.enable = true;
-  
-  # Doas instead of sudo
-  security.doas.enable = true;
-  security.sudo.enable = false;
-  security.doas.extraRules = [{
-    users = [ "${myName}" ];
-    keepEnv = true;
-    persist = true;
-  }];
-
-  # Pipewire
-  security.rtkit.enable = true;
-  services.pipewire = {
-    enable = true;
-    alsa.enable = true;
-    alsa.support32Bit = true;
-    pulse.enable = true;
-    jack.enable = true;
-  };
 
   # Kernel modules
-  boot.kernelModules = [ "i2c-dev" "i2c-piix4" ];
+  boot.kernelModules = [ "i2c-dev" "i2c-piix4" "cpufreq_powersave" ];
 
-  # Bootloader.
+  # Bootloader
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;
   boot.loader.efi.efiSysMountPoint = "/boot/efi";
 
-  # Setup keyfile
+  # Networking
-  boot.initrd.secrets = {
-    "/crypto_keyfile.bin" = null;
-  };
-
   networking.hostName = myHostname; # Define your hostname.
-  # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
+  networking.networkmanager.enable = true; # Use networkmanager
-
-  networking.extraHosts = ''
-    "${blocklist}"
-  '';
-
-  # Enable networking
-  networking.networkmanager.enable = true;
-
-  # Set your time zone.
-  time.timeZone = "America/Chicago";
-
-  # Select internationalisation properties.
-  i18n.defaultLocale = "en_US.UTF-8";
 
+  # Timezone and locale
+  time.timeZone = myTimezone; # time zone
+  i18n.defaultLocale = myLocale;
   i18n.extraLocaleSettings = {
-    LC_ADDRESS = "en_US.UTF-8";
+    LC_ADDRESS = myLocale;
-    LC_IDENTIFICATION = "en_US.UTF-8";
+    LC_IDENTIFICATION = myLocale;
-    LC_MEASUREMENT = "en_US.UTF-8";
+    LC_MEASUREMENT = myLocale;
-    LC_MONETARY = "en_US.UTF-8";
+    LC_MONETARY = myLocale;
-    LC_NAME = "en_US.UTF-8";
+    LC_NAME = myLocale;
-    LC_NUMERIC = "en_US.UTF-8";
+    LC_NUMERIC = myLocale;
-    LC_PAPER = "en_US.UTF-8";
+    LC_PAPER = myLocale;
-    LC_TELEPHONE = "en_US.UTF-8";
+    LC_TELEPHONE = myLocale;
-    LC_TIME = "en_US.UTF-8";
+    LC_TIME = myLocale;
   };
 
-  services.gnome = {
+  # User account
-    gnome-keyring.enable = true;
-  };
-
-  services.upower.enable = true;
-
-  services.dbus = {
-    enable = true;
-    packages = [ pkgs.dconf ];
-  };
-
-  programs.dconf = {
-    enable = true;
-#    packages = [ pkgs.dconf ];
-  };
-
-  # Configure X11
-  services.xserver = {
-    enable = true;
-    layout = "us";
-    xkbVariant = "";
-    xkbOptions = "caps:escape";
-    windowManager.xmonad = {
-      enable = true;
-      enableContribAndExtras = true;
-    };
-    displayManager = {
-      lightdm.enable = true;
-      defaultSession = "none+xmonad";
-    };
-    libinput = {
-      touchpad.disableWhileTyping = true;
-    };
-  };
-
-  services.xserver.displayManager.sessionCommands = ''
-    xset -dpms
-    xset s blank
-    xset r rate 350 50
-    xset s 300
-    ${pkgs.lightlocker}/bin/light-locker --idle-hint &
-  '';
-
-  # Bluetooth
-  # hardware.bluetooth.enable = true;
-  # services.blueman.enable = true;
-
-  systemd.services.upower.enable = true;
-  systemd.services.auto-cpufreq.enable = true;
-
-  users.defaultUserShell = pkgs.zsh;
-
-  # Define a user account. Don't forget to set a password with ‘passwd’.
   users.users.${myName} = {
     isNormalUser = true;
     description = "Emmet";
@@ -143,86 +70,20 @@ in
     uid = 1000;
   };
 
-  # Allow unfree packages
+  # System packages
-  nixpkgs.config.allowUnfree = true;
-
-  # List packages installed in system profile. To search, run:
-  # $ nix search wget
   environment.systemPackages = with pkgs; [
-    vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
+    vim
     wget
     zsh
-    auto-cpufreq
     git
-    # openrgb-with-all-plugins
-    (pkgs.writeScriptBin "sudo" ''exec doas "$@"'')
   ];
 
-  # OpenRGB setup
+  # I use zsh btw
-  # services.hardware.openrgb = {
-  #  enable = true;
-  #  motherboard = "amd";
-  #};
-
   environment.shells = with pkgs; [ zsh ];
+  users.defaultUserShell = pkgs.zsh;
   programs.zsh.enable = true;
 
-  fonts.fonts = with pkgs; [
+  # It is ok to leave this unchanged for compatibility purposes
-    # Fonts
+  system.stateVersion = "22.11";
-    (nerdfonts.override { fonts = [ "Inconsolata" ]; })
-    powerline
-    inconsolata
-    inconsolata-nerdfont
-    iosevka
-    font-awesome
-    ubuntu_font_family
-    terminus_font
-    gamemode
-    openvpn
-  ];
-
-
-  # Some programs need SUID wrappers, can be configured further or are
-  # started in user sessions.
-  # programs.mtr.enable = true;
-  programs.gnupg.agent = {
-    enable = true;
-    enableSSHSupport = true;
-  };
-
-  # List services that you want to enable:
-
-  # Enable the OpenSSH daemon.
-  # services.openssh.enable = true;
-
-  # Firewall
-  networking.firewall.enable = true;
-  # Open ports in the firewall.
-  # networking.firewall.allowedTCPPorts = [ ... ];
-  # networking.firewall.allowedUDPPorts = [ ... ];
-  # Or disable the firewall altogether.
-  # networking.firewall.enable = false;
-
-  environment.etc.openvpn.source = "${pkgs.update-resolv-conf}/libexec/openvpn";
-
-  # Printing
-  services.printing.enable = true;
-  services.avahi.enable = true;
-  services.avahi.nssmdns = true;
-  services.avahi.openFirewall = true;
-
-  # OpenGL
-  hardware.opengl.enable = true;
-
-  # Feral GameMode
-  programs.gamemode.enable = true;
-
-  # This value determines the NixOS release from which the default
-  # settings for stateful data, like file locations and database versions
-  # on your system were taken. It‘s perfectly fine and recommended to leave
-  # this value at the release version of the first install of this system.
-  # Before changing this value read the documentation for this option
-  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
-  system.stateVersion = "22.11"; # Did you read the comment?
 
 }

system/app/flatpak.nix

@@ -0,0 +1,7 @@
+{ config, pkgs, ... }:
+
+{
+  # Need some flatpaks
+  services.flatpak.enable = true;
+  xdg.portal.enable = true;
+}

system/app/gamemode.nix

@@ -0,0 +1,7 @@
+{ config, pkgs, ... }:
+
+{
+  # Feral GameMode
+  environment.systemPackages = [ pkgs.gamemode ];
+  programs.gamemode.enable = true;
+}

system/hardware/bluetooth.nix

@@ -0,0 +1,7 @@
+{ config, pkgs, ... }:
+
+{
+  # Bluetooth
+  hardware.bluetooth.enable = true;
+  services.blueman.enable = true;
+}

system/hardware/opengl.nix

@@ -0,0 +1,6 @@
+{ config, pkgs, ... }:
+
+{
+  # OpenGL
+  hardware.opengl.enable = true;
+}

system/hardware/openrgb.nix

@@ -0,0 +1,11 @@
+{ config, pkgs, ... }:
+
+{
+  environment.systemPackages = [ pkgs.openrgb-with-all-plugins ];
+
+  # OpenRGB setup
+  services.hardware.openrgb = {
+    enable = true;
+    motherboard = "amd";
+  };
+}

system/hardware/power.nix

@@ -0,0 +1,9 @@
+{ config, pkgs, ... }:
+
+{
+  environment.systemPackages = [ pkgs.auto-cpufreq ];
+  systemd.services.auto-cpufreq.enable = true;
+
+  services.upower.enable = true;
+  systemd.services.upower.enable = true;
+}

system/hardware/printing.nix

@@ -0,0 +1,9 @@
+{ config, pkgs, ... }:
+
+{
+  # Enable printing
+  services.printing.enable = true;
+  services.avahi.enable = true;
+  services.avahi.nssmdns = true;
+  services.avahi.openFirewall = true;
+}

system/security/blocklist.nix

@@ -0,0 +1,9 @@
+{ config, blocklist-hosts, pkgs, ... }:
+
+let blocklist = builtins.readFile "${blocklist-hosts}/alternates/gambling-porn/hosts";
+in
+{
+  networking.extraHosts = ''
+    "${blocklist}"
+  '';
+}

system/security/doas.nix

@@ -0,0 +1,16 @@
+{ config, myName, pkgs, ... }:
+
+{
+  # Doas instead of sudo
+  security.doas.enable = true;
+  security.sudo.enable = false;
+  security.doas.extraRules = [{
+    users = [ "${myName}" ];
+    keepEnv = true;
+    persist = true;
+  }];
+
+  environment.systemPackages = [
+    (pkgs.writeScriptBin "sudo" ''exec doas "$@"'')
+  ];
+}

system/security/firewall.nix

@@ -0,0 +1,11 @@
+{ config, pkgs, ... }:
+
+{
+  # Firewall
+  networking.firewall.enable = true;
+  # Open ports in the firewall.
+  # networking.firewall.allowedTCPPorts = [ ... ];
+  # networking.firewall.allowedUDPPorts = [ ... ];
+  # Or disable the firewall altogether.
+  # networking.firewall.enable = false;
+}

system/security/gpg.nix

@@ -0,0 +1,11 @@
+{ config, pkgs, ... }:
+
+{
+  # Some programs need SUID wrappers, can be configured further or are
+  # started in user sessions.
+  # programs.mtr.enable = true;
+  programs.gnupg.agent = {
+    enable = true;
+    enableSSHSupport = true;
+  };
+}

system/security/openvpn.nix

@@ -0,0 +1,6 @@
+{ config, pkgs, ... }:
+
+{
+  environment.systemPackages = [ pkgs.openvpn ];
+  environment.etc.openvpn.source = "${pkgs.update-resolv-conf}/libexec/openvpn";
+}

system/security/sshd.nix

@@ -0,0 +1,10 @@
+{ config, pkgs, ... }:
+
+{
+  # Enable incoming ssh
+  services.openssh = {
+    enable = true;
+    openFirewall = true;
+    # TODO authorizedKeysFiles = "";
+  };
+}

system/wm/dbus.nix

@@ -0,0 +1,12 @@
+{ config, pkgs, ... }:
+
+{
+  services.dbus = {
+    enable = true;
+    packages = [ pkgs.dconf ];
+  };
+
+  programs.dconf = {
+    enable = true;
+  };
+}

system/wm/fonts.nix

@@ -0,0 +1,17 @@
+{ config, pkgs, ... }:
+
+{
+  # Fonts are nice to have
+  fonts.fonts = with pkgs; [
+    # Fonts
+    (nerdfonts.override { fonts = [ "Inconsolata" ]; })
+    powerline
+    inconsolata
+    inconsolata-nerdfont
+    iosevka
+    font-awesome
+    ubuntu_font_family
+    terminus_font
+  ];
+
+}

system/wm/gnome-keyring.nix

@@ -0,0 +1,7 @@
+{ config, pkgs, ... }:
+
+{
+  services.gnome = {
+    gnome-keyring.enable = true;
+  };
+}

system/wm/pipewire.nix

@@ -0,0 +1,13 @@
+{ config, pkgs, ... }:
+
+{
+  # Pipewire
+  security.rtkit.enable = true;
+  services.pipewire = {
+    enable = true;
+    alsa.enable = true;
+    alsa.support32Bit = true;
+    pulse.enable = true;
+    jack.enable = true;
+  };
+}

system/wm/x11.nix

@@ -0,0 +1,35 @@
+{ config, pkgs, ... }:
+
+{
+  imports = [ ./pipewire.nix
+              ./dbus.nix
+              ./gnome-keyring.nix
+              ./fonts.nix
+            ];
+
+  # Configure X11
+  services.xserver = {
+    enable = true;
+    layout = "us";
+    xkbVariant = "";
+    xkbOptions = "caps:escape";
+    windowManager.xmonad = {
+      enable = true;
+      enableContribAndExtras = true;
+    };
+    displayManager = {
+      lightdm.enable = true;
+      defaultSession = "none+xmonad";
+      sessionCommands = ''
+      xset -dpms
+      xset s blank
+      xset r rate 350 50
+      xset s 300
+      ${pkgs.lightlocker}/bin/light-locker --idle-hint &
+    '';
+    };
+    libinput = {
+      touchpad.disableWhileTyping = true;
+    };
+  };
+}

system/wm/xmonad.nix

@@ -0,0 +1,20 @@
+{ config, pkgs, ... }:
+
+{
+  # import X11
+  imports = [ ./x11.nix
+              ./pipewire.nix
+              ./dbus.nix
+            ];
+
+  # Setup XMonad
+  services.xserver = {
+    windowManager.xmonad = {
+      enable = true;
+      enableContribAndExtras = true;
+    };
+    displayManager = {
+      defaultSession = "none+xmonad";
+    };
+  };
+}