https://github.com/pipelight/crocuda.nixos

A set of nixos modules for paranoids and hypocondriacs
https://github.com/pipelight/crocuda.nixos

nixos-configuration

Last synced: 21 days ago
JSON representation

A set of nixos modules for paranoids and hypocondriacs

• Host: GitHub
• URL: https://github.com/pipelight/crocuda.nixos
• Owner: pipelight
• Created: 2024-03-14T09:58:15.000Z (10 months ago)
• Default Branch: master
• Last Pushed: 2024-05-22T14:26:48.000Z (8 months ago)
• Last Synced: 2024-05-22T16:57:09.650Z (8 months ago)
• Topics: nixos-configuration
• Language: Nix
• Homepage:
• Size: 351 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# crocuda.nixos

!! Early development !!

A set of **nixos modules** which provide trivial configuration for

**paranoids** and **hypocondriacs**.

## Motivations

This project aims to provide a well-documented NixOs base configuration with:

- **security and privacy**.

- **keyboard first** apps (qwerty, colemak-dh).

It is devided in **modules** that can be cherry picked or copy/pasted and

modified at your will.

## Configuration directory architecture

This flake makes a heavy use of [home-merger](https://github.com/pipelight/nixos-utils) to

keep config files in separate dotfiles in their original formats, and keep a

consistent file tree.

## Installation and Usage (Flake)

Setting up a user is sufficient to get you up and running on a fresh nixos

installation.

Enable the software you whish to use via the module options and you are done.

Refer to `default.nix` for the list of all available options.

```nix

# crocuda.nix

{

  config,

  pkgs,

  inputs,

  ...

}: {

  crocuda = {

    users = ["anon"];

    keyboard.layout = "colemak-dh";

    base.enable = true;

    # Graphical

    wm.hyprland.enable = true;

    # Terminal stuffs

    terminal = {

      shell = {

        fish.enable = true;

      };

      editor = {

        nvchad.enable = true;

        vim.enable = true;

      };

      file_manager = {

        yazi.enable = true;

      };

    };

    browser = {

      firefox.enable = true;

      searxng.enable = true;

      i2p.enable = true;

      tor.enable = true;

    };

    finance = {

      monero.enable = false;

      darkfi.enable = false;

    };

  };

}

```

Then import the module and its configuration file from your flake.nix.

```nix

# flake.nix

nixosConfigurations = {

  # CrocudaVM config

  my_machine = pkgs.lib.nixosSystem {

    specialArgs = {inherit inputs;};

    modules = [

        # Import the module and the related configuration

        inputs.crocuda.nixosModules.default

        ./crocuda.nix

    ];

  };

};

```

```sh

nixos-rebuild switch

```

## What is inside ?

### Browsing and Search engines

Internet navigation:

- firefox security enhanced: with an hardened version of arkenfox

- secure dns: with bind9 dns over https

- search engine: searxng search engine configuration.

Linux ipv6 privacy features enabled.

### Passwords and keys

Password manager:

- KeepassXC (custom security centric layout)

### Desktop environments

- Gnome vanilla.

- Hyprland, Eww, Dunst

A hyprland rice to use at your own risks.



### Per layout configurations.

Every command-line tool that has vim specific bindings has been customized to be usable with:

- Qwerty

- Azerty

  and

- Colemak-dh