calcite: remove unused packages

machines/calcite/configuration.nix

@@ -28,6 +28,11 @@
 
   networking.hostName = "calcite";
 
+  programs.steam = {
+    enable = true;
+    gamescopeSession = { enable = true; };
+  };
+
   programs.vim.defaultEditor = true;
 
   # Keep this even if enabled in home manager
@@ -99,7 +104,7 @@
     enable = true;
     wireplumber.enable = true;
     alsa.enable = true;
-    #alsa.support32Bit = true;
+    alsa.support32Bit = true;
     pulse.enable = true;
     # If you want to use JACK applications, uncomment this
     jack.enable = true;
@@ -112,6 +117,17 @@
     extraGroups = [ "networkmanager" "wheel" "wireshark" "tss" ];
   };
 
+  services.kanidm = {
+    enableClient = true;
+    enablePam = true;
+    clientSettings = {
+      uri = "https://auth.xinyang.life";
+    };
+    unixSettings = {
+      pam_allowed_login_groups = [ "linux_users" "xin@auth.xinyang.life" "test" ];
+    };
+  };
+
   # Enable automatic login for the user.
   services.xserver.displayManager.autoLogin.enable = true;
   services.xserver.displayManager.autoLogin.user = "xin";
@@ -129,6 +145,7 @@
     "openssl-1.1.1w"
     # For wechat-uos
     "electron-19.1.9"
+    "electron-25.9.0"
   ];
   # List packages installed in system profile. To search, run:
   # $ nix search wget
@@ -141,23 +158,10 @@
     wineWowPackages.waylandFull
     faudio
 
-    # ==== CLI tools ==== #
-    rust-analyzer
-
     # tesseract5 # ocr
     ocrmypdf # pdfocr
 
-    grc
-
-    sops
-    git-crypt
-
     # ==== Development ==== #
-
-    # Language server
-    clang-tools
-    rnix-lsp
-
     # Python
     # reference: https://nixos.wiki/wiki/Python
     (
@@ -173,37 +177,28 @@
       python-with-my-packages
     )
 
-    # Tex
-    texlive.combined.scheme-full
-
     # ==== GUI Softwares ==== #
 
-    # IDE
-    jetbrains.jdk # patch jetbrain runtime java
-    jetbrains.clion
-    jetbrains.pycharm-professional
-    jetbrains.idea-ultimate
-    android-studio
-
     # Gnome tweaks
     gnomeExtensions.paperwm
     gnomeExtensions.search-light
     gnomeExtensions.tray-icons-reloaded
     gnome.gnome-tweaks
     gthumb
+    oculante
 
     # Multimedia
     vlc
     obs-studio
     spotify
 
+    rawtherapee
     digikam
 
     # IM
     element-desktop
     tdesktop
     qq
-    config.nur.repos.xddxdd.wechat-uos
 
     # Password manager
     bitwarden
@@ -212,19 +207,16 @@
     firefox
     chromium
     brave
-    microsoft-edge
 
     # Writting
     obsidian
     zotero
-    wpsoffice
     onlyoffice-bin
+    wpsoffice
 
     config.nur.repos.linyinfeng.wemeet
 
     virt-manager
-
-    ghidra
   ];
 
   system.stateVersion = "22.05";
@@ -291,9 +283,10 @@
       defaultFonts = {
         serif = [ "Noto Serif CJK SC" "Ubuntu" ];
         sansSerif = [ "Noto Sans CJK SC" "Ubuntu" ];
-        monospace = [ "FiraCode NerdFont Mono" "Ubuntu" ];
+        monospace = [ "FiraCode NerdFont Mono" "Noto Sans Mono CJK SC" "Ubuntu" ];
       };
     };
+    enableDefaultPackages = true;
   };
   # Virtualization
   virtualisation = {

machines/calcite/hardware-configuration.nix

@@ -23,6 +23,12 @@
       fsType = "vfat";
     };
 
+  fileSystems."/media/data" =
+    { device = "/dev/nvme0n1p7";
+      fsType = "ntfs-3g";
+      options = [ "rw" "uid=1000" "nofail" "x-systemd.device-timeout=2" ];
+    };
+
   swapDevices =
     [ { device = "/dev/disk/by-label/NIXSWAP"; }
     ];
@@ -41,6 +47,6 @@
   hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
   hardware.opengl = {
     enable = true;
-    driSupport32Bit = false;
+    driSupport32Bit = true;
   };
 }

machines/secrets.yaml

@@ -7,6 +7,7 @@ singbox_jp_server: ENC[AES256_GCM,data:xKTcxkcu1WIsT/wlMpEoqGJK,iv:nXetY339YuOi2
 singbox_password: ENC[AES256_GCM,data:0tBIzwtNSQqbGlD+CDnQfJigbFVBChEL,iv:W2HaHeSkvmS6jHSnfOJ6tD2QXuUq1A+mfZf7sEXB++E=,tag:5BtYAv1NO70IL4m/uG8QKA==,type:str]
 singbox_uuid: ENC[AES256_GCM,data:ufN+vDl/rDASoQL23tHwlr3ybMyrlC/Kd7bT0c5+SP+bc6Zj,iv:+uwt/N9LpFaJK6MjoczyrZ039MDZn4kRmtEoq4OvdFU=,tag:6Yma9+yrISwQoSRDgUbuwA==,type:str]
 grafana_cloud_api: ENC[AES256_GCM,data:Pz+tE09dcJa+ZEWS3vtpOtitGCA9Cg/+gOd/0FsF8ooxzPyN9/UMuTcP02aIPW5v7yZCkGJOAXufIyechNf0crgAV/KmwGGwixH7I+1f3sDtGiFZEMnQgrysyfJo0KIrIZ8XP0SyXDs3vKjDU8cUI4+IyucHacWQ1kWdEtINjcPNHRPS2yaMUIvsRn0z8Cs2byMD3ghUHHHOz40CuO6r4A==,iv:cHvbeCmLFmJPNKsl1BBYx9WJP7ZJWi+8c9yHZWc6FTs=,tag:yWXtPokYE4frCmzzzyEqEg==,type:str]
+private_dns_address: ENC[AES256_GCM,data:m/u3oc+6ef8dLa7Dpu+5T9TTSdXqJjS9ecA+sPj0r8qX06+QgiQnpmEW4w==,iv:8+qG5rQXAKfrykEjt9qrbtyNaBuKvi7EaIWouRqEipY=,tag:XlMccTKL239/NnAprtqYrg==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -67,8 +68,8 @@ sops:
             c1E1Sld1ejZhTStKTU5teEJKT2JwVXcKuEQnA6b1WJ+RNqmrZ8t3joiEZ57Oq9M1
             P4tMGerB12A1myTJlt5Ss2OCTBUV7ooVRNsyPjyvJy/YTyjqZ5xmxg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-12-20T01:34:00Z"
-    mac: ENC[AES256_GCM,data:6MLBRPA5g2r3yy/i7DSxjWaYhHH/4GiAqL/pRIvYyIrKQWYvfviWlTX9dqHVzzCXjueEXUM5dXFb2B+Sds68EGgBuBlZvBchtstHUOtMLE3pttC+xCzerQFyrPDrXbnpfdDYPHWxvhhhFpWu8G5RSfzSgkgp7+cx9iZHq/g1k/Q=,iv:8yFIOgHtBiCtbamufrXXHrjIq5DV3MIJbTJPtXlgpPg=,tag:CVOIojTN2KkXJsDVyiZjMQ==,type:str]
+    lastmodified: "2024-01-07T13:13:50Z"
+    mac: ENC[AES256_GCM,data:cAc3Wp5KjuaKWv0e2ciPVzvsK2L6BgupYS2+5Vlr+Wn0RBsuLA0OEW2pQbm5hpUJaWO65qQk5IeMvK/h8otYLgGHGzz23NiZTNeAknw6z2mL5y+GgP22mBOMzPU2PtaJKXkt624T1sZzW4QTMo8TqBlzy7D10odyjkVn6Wd+OGE=,iv:zucnHwHjY4DX3jIKuuIGpa2no9svOEordGN0LsPKDuc=,tag:JQZMyBO3yZIW+ZTIKDUPCQ==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.8.1

machines/sops.nix

@@ -1,31 +1,33 @@
-{ inputs, ... }:
+{ inputs, config, lib, ... }:
 {
   imports = [ inputs.sops-nix.nixosModules.sops ];
-  sops = {
-    defaultSopsFile = ./secrets.yaml;
-    # TODO: How to generate this key when bootstrap?
-    age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
-    secrets = {
-      github_public_token = {
-        owner = "root";
+  config = {
+    sops = {
+      defaultSopsFile = ./secrets.yaml;
+      # TODO: How to generate this key when bootstrap?
+      age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
+      secrets = {
+        github_public_token = {
+          owner = "root";
+        };
+        singbox_sg_server = {
+           owner = "root";
+        };
+        singbox_jp_server = {
+           owner = "root";
+        };
+        singbox_password = {
+           owner = "root";
+        };
+        singbox_uuid = {
+           owner = "root";
+        };
+        private_dns_address = {
+           owner = "root";
+        };
       };
-      clash_subscription_link = { 
-        owner = "root";
-      };
-      singbox_sg_server = {
-         owner = "root";
-      };
-      singbox_jp_server = {
-         owner = "root";
-      };
-      singbox_password = {
-         owner = "root";
-      };
-      singbox_uuid = {
-         owner = "root";
-      };
-      grafana_cloud_api = {
-         owner = "prometheus";
+      secrets.grafana_cloud_api = lib.mkIf config.services.prometheus.enable {
+        owner = "prometheus";
       };
     };
   };