Included HSA_OVERRIDE_GFX_VERSION for ROCm acceleration. Added LIBVA_DRIVER_NAME and commented NIXOS_OZONE_WL to environment.sessionVariables settings.
Disable the NIXOS_OZONE_WL environment variable in session variables to avoid potential conflicts. This change ensures the stability of the GUI service while leaving the intel-media-driver configuration untouched.
Enabled Intel media driver support and set environment variables for better compatibility with Wayland. Also updated MPV configuration for hardware decoding and GPU settings.
Move and enhance OpenGL configuration in GUI services. The configuration now includes onevpl-intel-gpu and retains intel-compute-runtime from base services.
Added an HTTP SSL CA certificate configuration to enhance security and ensure trusted connections. This change sets the CA certificate file path to '/etc/ssl/certs/ca-certificates.crt'.
Added a custom shell script for qemu-system-x86_64 enabling UEFI support using OVMF. This ensures that the command uses the specified OVMF firmware for UEFI boot.
Add chromium and rustup to systemPackages, and move pcsctools and yubikey-personalization entries. Introduce environment session variable NIXOS_OZONE_WL for better Wayland support.
Enable temporary file storage on tmpfs and configure TMPDIR for the nix-daemon. Also, ensure temporary files are cleaned on boot and enable fstrim service for filesystem maintenance.
This commit adds the `autohide-battery@sitnik.ru` extension to the home configurations of `harald@t15` and `harald@x1`. It also adjusts the path of the `xkb.layout` setting in the GUI service's configuration. Furthermore, the `sound-output-device-chooser` extension has been removed.
This commit adds three new GNOME extensions to the gui module in the NixOS service. Specifically, 'gnome-browser-connector', 'autohide-battery', and 'sound-output-device-chooser' were added. This update is intended to enhance the system's user experience.
This commit modifies several settings of the home printer module in default.nix. The PageSize parameter was changed, and several new parameters related to print quality and color correction were added for better print results, specifically for photos.
Created a new module for home printer setup and enabled it on x86_64-linux systems. The module configures printing drivers and ensures that printers are set up properly. In addition, moved specific printer configurations into the newly created homeprinter module.
The user's extraGroups in the NixOS module now contains 'wheel' by default. This change provides the user with more privileges. Consequently, 'wheel' has been removed from the SGX-Attic's 'user.extraGroups' as it became redundant.
This commit introduces a new substituter 'https://attic.teepot.org/tee-pot' and its associated trusted key 'tee-pot:SS6HcrpG87S1M6HZGPsfo7d1xJccCGev7/tXc5+I4jg='. The changes affect the Nix, aesmd_dcap, home settings, and pccs modules. This update provides additional package sources for these modules.
The default value for `wheelNeedsPassword` has been changed to `true` in `base/default.nix`. The redundant entry in `gui/default.nix` setting `wheelNeedsPassword` to `true` was removed as it is now enforced by the base module.
This change updates the settings in the GUI module for the sudo wheel group. The security policy has been modified to require a password when a member of the wheel group attempts to use sudo.
Adjust default garbage collection intervals and retention periods. Set default GC to run weekly and retain 14 days on nixos module and to run daily and retain 7 days on the 64-linux module.
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
The update modifies the default setting for the 'sudo wheelNeedsPassword' option in both the base and gui modules/services. Now, the base service has 'sudo wheelNeedsPassword' marked as a default option and disabled by default in the gui service.
This commit corrects the code's formatting in two parts:
1) It normalizes the indentation in the BindPaths block under aesmd_dcap/default.nix.
2) It also removes the extra space before "DE" in the default_phone_region setting in nextcloud.nix.
This commit removes the "--refresh" flag from the system.autoUpgrade field in the default.nix file. The update function will now rely on the remaining flags only.
The primary change in this commit enables the Git program in the base/default service module. This marks a configuration alteration at the systems level, transferring the 'programs.git.enable' declaration from 'systems/x86_64-linux/mx/default.nix' to 'modules/nixos/services/base/default.nix'. We've undertaken this change for better structuring of our service configuration.
This commit moves the kernel package version override from the base nixos service to specific system configurations. Now, the latest linux packages will be used only in the system configurations where the override has been explicitly added. This approach gives us more flexibility to handle different kernel package versions for different systems.
This commit updates systemd services configuration of aesmd_dcap by adding a new directory to BindPaths. The file "/dev/log" has been added to ensure proper logging.
This commit includes gnome.cheese and pstree to the list of default services in the gui module. Users will now have these services available by default in the graphical user interface.
Harald Hoyer