finn.markwitzandClaude Sonnet 5
4de92dcbe8
autoUpgrade was silently failing daily on both hosts (legacy channel path, no --flake set) without reaching the network — disabled outright since rebuilds should only happen manually. Separately, nix-gc.timer's nightly sweep was deleting eval-time-only flake input sources (not part of the runtime closure), forcing the next evaluation to cold-refetch hermes-agent's entire dependency tree from GitHub in one burst, which alone was enough to hit the unauthenticated codeload rate limit. keep-outputs/keep-derivations stop GC from evicting those sources. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01TJS8qsYPXSUm5mdWGdaHjF
70 lines
1.5 KiB
Nix
70 lines
1.5 KiB
Nix
{
|
|
config,
|
|
pkgs,
|
|
lib,
|
|
...
|
|
}:
|
|
{
|
|
imports = [
|
|
|
|
./disks.nix
|
|
./hardware-configuration.nix
|
|
./environments.nix
|
|
./network.nix
|
|
./secrets.nix
|
|
# ./system.nix use docker here
|
|
];
|
|
|
|
networking.hostName = "mibook";
|
|
|
|
swapDevices = [
|
|
{
|
|
device = "/var/lib/swapfile";
|
|
size = 8 * 1024; # 8G, headroom for nix builds (7.7G RAM, no prior swap)
|
|
}
|
|
];
|
|
boot.loader.grub = {
|
|
enable = true;
|
|
device = "/dev/nvme0n1";
|
|
useOSProber = true;
|
|
};
|
|
|
|
# Configure keymap in X11
|
|
services.xserver.xkb = {
|
|
layout = "de";
|
|
variant = "";
|
|
};
|
|
|
|
# Configure console keymap
|
|
console.keyMap = "de";
|
|
|
|
# Enable CUPS to print documents.
|
|
services.printing.enable = true;
|
|
nixpkgs.config.allowUnfree = true;
|
|
|
|
hardware.nvidia.prime = {
|
|
sync.enable = false;
|
|
|
|
nvidiaBusId = "PCI:01:00:0";
|
|
intelBusId = "PCI:00:2:0";
|
|
};
|
|
|
|
services.openssh.enable = true;
|
|
|
|
# KDE (PowerDevil) power settings: do nothing on lid close while on AC power.
|
|
# Shipped as a system-wide default; KConfig cascades so a user's own
|
|
# ~/.config/powerdevilrc will override this if present.
|
|
environment.etc."xdg/powerdevilrc".text = ''
|
|
[AC][SuspendAndShutdown]
|
|
LidAction=0
|
|
'';
|
|
|
|
system = {
|
|
stateVersion = "23.05";
|
|
# Was silently failing daily (legacy channel path, no --flake set) without
|
|
# ever reaching the network. Disabled rather than fixed: rebuilds should
|
|
# only happen when triggered manually.
|
|
autoUpgrade.enable = false;
|
|
};
|
|
}
|