v2

src/system/machines/desktop/default.nix

@@ -0,0 +1,9 @@
+{ ... }:
+
+{
+  imports = [
+    ../../user
+    ./hardware.nix
+    ./system.nix
+  ];
+}

src/system/machines/desktop/disks.nix

@@ -0,0 +1,106 @@
+{ disks ? [ "/dev/nvme0n1" "/dev/sda" ], ... }: 
+
+{
+  disko.devices = {
+    disk = {
+      one = {
+        type = "disk";
+        device = builtins.elemAt disks 0;
+        content = {
+          type = "table";
+          format = "gpt";
+          partitions = [
+            {
+              name = "boot";
+              start = "0";
+              end = "100M";
+              fs-type = "fat32";
+              bootable = true;
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+              };
+            }
+            {
+              start = "100M";
+              end = "100%FREE";
+              content = {
+                type = "lvm_pv";
+                vg = "stick";
+              };
+            }
+          ];
+        };
+      };
+    };
+    disk = {
+      two = {
+        type = "disk";
+        device = builtins.elemAt disks 1;
+        content = {
+          type = "table";
+          format = "gpt";
+          partitions = [
+            {
+              start = "0";
+              end = "100%";
+              content = {
+                type = "lvm_pv";
+                vg = "ssd";
+              };
+            }
+          ];
+        };
+      };
+    };
+
+    lvm_vg = {
+      stick = {
+        type = "lvm_vg";
+        lvs = {
+          aaa = {
+            size = "1M";
+          };
+          zzz = {
+            size = "1M";
+          };
+          root = {
+            size = "100%";
+            content = {
+              name = "NixOS";
+              type = "filesystem";
+              format = "ext4";
+              mountpoint = "/";
+              mountOptions = [
+                "defaults"
+              ];
+            };
+          };
+        };
+      };
+    };
+    lvm_vg = {
+      ssd = {
+        type = "lvm_vg";
+        lvs = {
+          aaa = {
+            size = "1M";
+          };
+          zzz = {
+            size = "1M";
+          };
+          home = {
+            size = "100%";
+            content = {
+              name = "home";
+              type = "filesystem";
+              format = "ext4";
+              mountpoint = "/home";
+            };
+          };
+        };
+      };
+    };
+  };
+}

src/system/machines/desktop/hardware.nix

@@ -0,0 +1,56 @@
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
+
+# Kernel
+  boot.initrd.availableKernelModules = [ "vmd" "xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod" ];
+  boot.initrd.kernelModules = [ "dm-snapshot" ];
+  boot.extraModulePackages = [ ];
+  boot.kernelPackages = pkgs.linuxPackages_latest;
+  boot.kernelParams = [ "intel_iommu=on" ];
+  boot.kernelModules = [ "kvm-intel" "virtio" "vfio-pci" "coretemp" ];
+
+# FStab
+  fileSystems = {
+    "/" = {
+      device = "/dev/disk/by-uuid/af24c5b3-8a6e-4333-a61d-922a97928cae";
+      fsType = "ext4";
+    };
+
+    "/home" = {
+      device = "/dev/disk/by-uuid/1639ee20-28d6-4649-814d-ba981c138b35";
+      fsType = "ext4";
+    };
+
+    "/boot" = {
+      device = "/dev/disk/by-uuid/74B9-4AAF";
+      fsType = "vfat";
+    };
+  };
+
+# GPU
+  hardware.nvidia.open = true;
+
+# Virtualisation
+  nix.settings.system-features = [ "kvm" ];
+
+  environment.systemPackages = with pkgs; [
+    virt-manager
+  ];
+
+  virtualisation.libvirtd = {
+    enable = true;
+    qemu = {
+      package = pkgs.qemu_kvm;
+      runAsRoot = true;
+      ovmf.enable = true;
+    };
+  };
+
+# CPU
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  powerManagement.cpuFreqGovernor = lib.mkDefault "performance";
+  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}
+

src/system/machines/desktop/home.nix

@@ -0,0 +1,47 @@
+{ config, ... }:
+
+{
+  home-manager.useGlobalPkgs = true;
+  home-manager.useUserPackages = true;
+  home-manager.users.${config.user.name} = {
+    imports = [
+      ../../../user
+      ../../../user/modules
+    ];
+
+    programs.home-manager.enable = true;
+    programs.bash.shellAliases = {
+      nixup = "sudo nixos-rebuild switch --flake /etc/nixos/.#desktop";
+    };
+
+    home.stateVersion = "22.11";
+
+    home.username = "${config.user.name}";
+    home.homeDirectory = "/home/${config.user.name}";
+
+    modules = {
+      bash.enable = true;
+      git.enable = true;
+      gpg.enable = true;
+      security.enable = true;
+
+      utils = {
+        enable = true;
+        dev.enable = true;
+        irc.enable = true;
+        vim.enable = false;
+      };
+
+      gui = {
+        enable = true;
+        alacritty.enable = true;
+        browsers.enable = true;
+        corn.enable = true;
+        fun.enable = true;
+        neovim.enable = true;
+        utils.enable = true;
+        writing.enable = true;
+      };
+    };
+  };
+}

src/system/machines/desktop/system.nix

@@ -0,0 +1,123 @@
+{ pkgs, lib, config, ... }:
+
+{ system.stateVersion = "22.11";
+
+# Users
+  users.users = {
+    ${config.user.name} = {
+      isNormalUser = true;
+      extraGroups = config.user.groups;
+      openssh.authorizedKeys.keys = config.user.sshKeys;
+    };
+  };
+
+# Nix
+  nix = {
+    channel.enable = false;
+    package = pkgs.nixFlakes;
+    extraOptions = "experimental-features = nix-command flakes";
+    settings = {
+      auto-optimise-store = true;
+      trusted-users = [ "${config.user.name}" ];
+    };
+    gc = {
+      automatic = true;
+      dates = "weekly";
+      options = "--delete-older-than 30d";
+    };
+  };
+
+# Bootloader
+  boot.loader = {
+    timeout = null;
+    grub = {
+      enable = true;
+      useOSProber = true;
+      devices = [ "nodev" ];
+      efiSupport = true;
+      configurationLimit = 5;
+    };
+
+    efi = {
+      canTouchEfiVariables = true;
+    };
+  };
+
+  environment.systemPackages = with pkgs; [
+    pavucontrol
+  ];
+
+# DE
+  programs.sway = {
+    enable = true;
+    package = null;
+  };
+
+# Fonts
+  fonts.packages = with pkgs; [
+    terminus_font
+    terminus-nerdfont
+  ];
+
+# Audio
+  services.pipewire = {
+    enable = true;
+    audio.enable = true;
+
+    wireplumber.enable = true;
+
+    pulse.enable = true;
+    jack.enable = true;
+    alsa.enable = true;
+    alsa.support32Bit = true;
+  };
+
+# Sudo Options
+  security.sudo = {
+    wheelNeedsPassword = false;
+    execWheelOnly = true;
+  };
+
+# Locale
+  time = {
+    timeZone = "America/New_York";
+    hardwareClockInLocalTime = true;
+  };
+
+  services.timesyncd = {
+    enable = true;
+    servers = [
+      "0.pool.ntp.org"
+      "1.pool.ntp.org"
+      "2.pool.ntp.org"
+      "3.pool.ntp.org"
+    ];
+  };
+
+  i18n.defaultLocale = "en_US.UTF-8";
+
+  console = {
+    font = "Lat2-Terminus16";
+    useXkbConfig = true;
+  };
+
+# Networking
+  networking = {
+    hostName = "socrates";
+    useDHCP = lib.mkDefault true;
+    networkmanager.enable = true;
+    firewall = {
+      enable = true;
+      allowedTCPPorts = [ 22 80 443 ];
+    };
+  };
+
+  services.openssh = {
+    enable = true;
+    startWhenNeeded = true;
+    settings = {
+      X11Forwarding = false;
+      PasswordAuthentication = false;
+    };
+  };
+}

src/system/machines/laptop/default.nix

@@ -0,0 +1 @@
+#TODO: nixify the shitty laptop

src/system/machines/server/default.nix

@@ -0,0 +1,9 @@
+{ ... }:
+
+{
+  imports = [
+    ../../../user
+    ./hardware.nix
+    ./system.nix
+  ];
+}

src/system/machines/server/home.nix

@@ -0,0 +1,35 @@
+{ config, ... }:
+
+{
+  home-manager.useGlobalPkgs = true;
+  home-manager.useUserPackages = true;
+  home-manager.users.${config.user.name} = {
+    imports = [
+      ../../../user
+      ../../../user/modules
+    ];
+
+    programs.home-manager.enable = true;
+    programs.bash.shellAliases = {
+      nixup = "sudo nixos-rebuild switch --flake /etc/nixos/.#server";
+    };
+
+    home.stateVersion = "23.11";
+
+    home.username = "${config.user.name}";
+    home.homeDirectory = "/home/${config.user.name}";
+
+    modules = {
+      bash.enable = true;
+      git.enable = true;
+      gpg.enable = true;
+
+      utils = {
+        enable = true;
+        vim.enable = true;
+      };
+
+      gui.enable = false;
+    };
+  };
+}

src/system/machines/server/system.nix

@@ -0,0 +1,113 @@
+{ pkgs, lib, config, ... }:
+
+{ system.stateVersion = "23.11";
+
+  imports = [
+    ../modules
+  ];
+
+  modules = {
+    bitcoin = {
+      enable = true;
+      clightning = true;
+      electrs = true;
+      sparrow-server = true;
+    };
+  };
+
+# Users
+  users.users = {
+    ${config.user.name} = {
+      isNormalUser = true;
+      extraGroups = config.user.groups;
+      openssh.authorizedKeys.keys = config.user.sshKeys;
+    };
+  };
+
+# Nix
+  nix = {
+    channel.enable = false;
+    package = pkgs.nixFlakes;
+    extraOptions = "experimental-features = nix-command flakes";
+    settings = {
+      auto-optimise-store = true;
+      trusted-users = [ "${config.user.name}" ];
+    };
+    gc = {
+      automatic = true;
+      dates = "weekly";
+      options = "--delete-older-than 30d";
+    };
+  };
+
+# Bootloader
+  boot.loader = {
+    timeout = null;
+    grub = {
+      enable = true;
+      useOSProber = true;
+      devices = [ "nodev" ];
+      efiSupport = true;
+      configurationLimit = 5;
+    };
+
+    efi = {
+      canTouchEfiVariables = true;
+    };
+  };
+
+# Fonts
+  fonts.packages = with pkgs; [
+    terminus_font
+    terminus-nerdfont
+  ];
+
+# Sudo Options
+  security.sudo = {
+    wheelNeedsPassword = false;
+    execWheelOnly = true;
+  };
+
+# Locale
+  time = {
+    timeZone = "America/New_York";
+    hardwareClockInLocalTime = true;
+  };
+
+  services.timesyncd = {
+    enable = true;
+    servers = [
+      "0.pool.ntp.org"
+      "1.pool.ntp.org"
+      "2.pool.ntp.org"
+      "3.pool.ntp.org"
+    ];
+  };
+
+  i18n.defaultLocale = "en_US.UTF-8";
+
+  console = {
+    font = "Lat2-Terminus16";
+    useXkbConfig = true;
+  };
+
+# Networking
+  networking = {
+    hostName = "archimedes";
+    useDHCP = lib.mkDefault true;
+    networkmanager.enable = true;
+    firewall = {
+      enable = true;
+      allowedTCPPorts = [ 22 80 443 ];
+    };
+  };
+
+  services.openssh = {
+    enable = true;
+    startWhenNeeded = true;
+    settings = {
+      X11Forwarding = false;
+      PasswordAuthentication = false;
+    };
+  };
+}

src/system/machines/wsl/default.nix

@@ -0,0 +1,8 @@
+{ ... }:
+
+{
+  imports = [
+    ../../user
+    ./system.nix
+  ];
+}

src/system/machines/wsl/home.nix

@@ -0,0 +1,37 @@
+{ config, ... }:
+
+{
+  home-manager.useGlobalPkgs = true;
+  home-manager.useUserPackages = true;
+  home-manager.users.${config.user.name} = {
+    imports = [
+      ../../../user
+      ../../../user/modules
+    ];
+
+    programs.home-manager.enable = true;
+    programs.bash.shellAliases = {
+      nixup = "sudo nixos-rebuild switch --flake /etc/nixos/.#windows";
+    };
+
+    home.stateVersion = "23.11";
+
+    home.username = "${config.user.name}";
+    home.homeDirectory = "/home/${config.user.name}";
+
+    modules = {
+      bash.enable = true;
+      git.enable = true;
+      gpg.enable = true;
+      gui.enable = false;
+      security.enable = true;
+      utils = {
+        enable = true;
+        dev.enable = true;
+        email.enable = true;
+        irc.enable = true;
+        vim.enable = true;
+      };
+    };
+  };
+}

src/system/machines/wsl/system.nix

@@ -0,0 +1,84 @@
+{ pkgs, lib, config, ... }:
+
+{ system.stateVersion = "23.11";
+
+# Users
+  users.users = {
+    ${config.user.name} = {
+      isNormalUser = true;
+      extraGroups = config.user.groups;
+      openssh.authorizedKeys.keys = config.user.sshKeys;
+    };
+  };
+  boot.isContainer = true;
+
+# Nix
+  nix = {
+    channel.enable = false;
+    package = pkgs.nixFlakes;
+    extraOptions = "experimental-features = nix-command flakes";
+    settings = {
+      auto-optimise-store = true;
+      trusted-users = [ "${config.user.name}" ];
+    };
+    gc = {
+      automatic = true;
+      dates = "weekly";
+      options = "--delete-older-than 30d";
+    };
+  };
+
+# Sudo Options
+  security.sudo = {
+    wheelNeedsPassword = false;
+    execWheelOnly = true;
+  };
+
+# System Services
+  services = {
+    cron = {
+      enable = true;
+      systemCronJobs = [];
+    };
+  };
+
+# Locale
+  time = {
+    timeZone = "America/New_York";
+  };
+
+  services.timesyncd = {
+    enable = true;
+    servers = [
+      "0.pool.ntp.org"
+      "1.pool.ntp.org"
+      "2.pool.ntp.org"
+      "3.pool.ntp.org"
+    ];
+  };
+
+  i18n.defaultLocale = "en_US.UTF-8";
+
+  console = {
+    font = "Lat2-Terminus16";
+    useXkbConfig = true;
+  };
+
+# Networking
+  networking = {
+    useDHCP = lib.mkDefault true;
+    firewall = {
+      enable = true;
+      allowedTCPPorts = [ 22 80 443 ];
+    };
+  };
+
+  services.openssh = {
+    enable = true;
+    startWhenNeeded = true;
+    settings = {
+      X11Forwarding = false;
+      PasswordAuthentication = false;
+    };
+  };
+}

src/system/machines/wsl/wsl.nix

@@ -0,0 +1,21 @@
+{ pkgs, config, ... }:
+
+{
+  imports = [
+    ../../user
+  ];
+
+  wsl = {
+    enable = true;
+    defaultUser = pkgs.lib.mkDefault "${config.user.name}";
+    nativeSystemd = true;
+
+    wslConf = {
+      boot.command = "cd";
+      network = {
+        hostname = "plato";
+        generateHosts = true;
+      };
+    };
+  };
+}

src/system/modules/bitcoin/default.nix

@@ -0,0 +1,45 @@
+{ pkgs, lib, config, ... }:
+
+with lib;
+let
+  cfg = config.modules.bitcoin;
+
+in
+{ options.modules.bitcoin = { enable = mkEnableOption "bitcoin"; };
+
+  imports = [
+    ./core-lightning
+    ./sparrow-cli
+  ];
+
+  config = mkIf cfg.enable {
+    programs.bash.shellAliases = {
+      btc = "bitcoin-cli";
+    };
+
+    users = {
+      users = {
+        "bitcoind" = {
+          description = "bitcoind system user";
+          isSystemUser = true;
+          group = "bitcoin";
+        };
+      };
+      groups = {
+        "bitcoin" = {
+          members = [ "clightning" "electrs" ];
+        };
+      };
+    };
+
+    services.bitcoind = {
+      "bitcoind" = {
+        enable = true;
+        testnet = false;
+        user = "bitcoind";
+        group = "bitcoin";
+        #extraConfig = TODO;
+      };
+    };
+  };
+}

src/system/modules/bitcoin/modules/core-lightning/default.nix

@@ -0,0 +1,40 @@
+{ lib, pkgs, config, ... }:
+
+with lib;
+  let cfg = config.modules.bitcoin.core-lightning;
+
+in
+{ options.modules.bitcoin.core-lightning = { enable = mkEnableOption "bitcoin.core-lightning"; };
+  config = mkIf cfg.enable {
+    programs.bash.shellAliases = {
+      cln = "lightningd";
+    };
+
+    home.packages = with pkgs; [
+      clightning
+    ];
+
+    users = {
+      users = {
+        "clightning" = {
+          description = "clightning system user";
+          isSystemUser = true;
+          group = "bitcoin";
+        };
+      };
+    };
+
+    systemd.services.clightning = {
+      Unit = {
+        after = [ "network.target" "bitcoind.service" ];
+        wantedBy = [ "multi-user.target" ];
+      };
+      Service = {
+        ExecStart = "${pkgs.clightning}/bin/lightningd --conf=...";
+        Restart = "always";
+        User = "clightning";
+        Group = "bitcoin";
+      };
+    };
+  };
+}

src/system/modules/bitcoin/modules/default.nix

@@ -0,0 +1,7 @@
+{
+  imports = [
+    ./core-lightning
+    ./electrs
+    ./sparrow-cli
+  ];
+}

src/system/modules/bitcoin/modules/electrs/default.nix

@@ -0,0 +1,35 @@
+{ lib, pkgs, config, ... }:
+
+with lib;
+  let cfg = config.modules.bitcoin.electrs;
+in
+{ options.modules.bitcoin.electrs = { enable = mkEnableOption "bitcoin.electrs"; };
+  config = mkIf cfg.enable {
+    environment.systemPackages = with pkgs; [
+      electrs
+    ];
+
+    users = {
+      users = {
+        "electrs" = {
+          description = "electrs system user";
+          isSystemUser = true;
+          group = "bitcoin";
+        };
+      };
+    };
+
+    systemd.services.electrs = {
+      Unit = {
+        after = [ "network.target" "bitcoind.service" ];
+        wantedBy = [ "multi-user.target" ];
+      };
+      Service = {
+        ExecStart = "${pkgs.electrs}/bin/electrs --conf=...";
+        Restart = "always";
+        User = "electrs";
+        Group = "bitcoin";
+      };
+    };
+  };
+}

src/system/modules/bitcoin/modules/sparrow-server/default.nix

@@ -0,0 +1,14 @@
+{ lib, pkgs, config, ... }:
+
+with lib;
+  let
+    cfg = config.modules.bitcoin.sparrow-server;
+    sparrow-server = import ./derivation.nix { inherit pkgs; };
+in
+{ options.modules.bitcoin.sparrow-server = { enable = mkEnableOption "bitcoin.sparrow-server"; };
+  config = mkIf cfg.enable {
+    home.packages = with pkgs; [
+      sparrow-server
+    ];
+  };
+}

src/system/modules/bitcoin/modules/sparrow-server/derivation.nix

@@ -0,0 +1,24 @@
+{ pkgs, ... }:
+
+with pkgs;
+stdenv.mkDerivation rec {
+  pname = "sparrow-server";
+  version = "1.8.2";
+
+  src = fetchurl {
+    url = "https://github.com/sparrowwallet/sparrow/releases/download/${version}/sparrow-server-${version}-x86_64.tar.gz";
+    sha256 = "16hyrf8j7mv3m1ry7r2k3w70yxbf6smgcm5d35xy2hjqfmahv65m";
+  };
+
+  installPhase = ''
+    mkdir -p $out/bin
+    cp -r * $out/bin
+  '';
+
+  meta = {
+    description = "Sparrow Server";
+    homepage = "https://sparrowwallet.com/";
+    license = stdenv.lib.licenses.mit;
+    platforms = stdenv.lib.platforms.linux;
+  };
+}

src/system/modules/default.nix

@@ -0,0 +1,6 @@
+{
+  imports = [
+    ./corn
+    ./security
+  ];
+}