230 current 2025-06-13 02:20:57 25.11.20250607.3e3afe5 6.15.1 *

nixos/base.nix

@@ -6,34 +6,31 @@
   ...
 }: {
   # Bootloader.
-  boot.loader.systemd-boot = {
-    enable = true;
-    configurationLimit = 10;
+  boot.loader = {
+    efi.canTouchEfiVariables = true;
+    systemd-boot = {
+      enable = true;
+      configurationLimit = 10;
+    };
   };
-  boot.loader.efi.canTouchEfiVariables = true;
 
   # Garbage collection
-  nix.gc = {
-    automatic = true;
-    dates = "weekly";
-    options = "--delete-older-than 1w";
+  nix = {
+    gc = {
+      automatic = true;
+      dates = "weekly";
+      options = "--delete-older-than 1w";
+    };
+    nixPath = ["nixpkgs=${inputs.nixpkgs}"];
+    settings = {
+      auto-optimise-store = true;
+      download-buffer-size = 524288000;
+      experimental-features = ["nix-command" "flakes"];
+    };
   };
 
-  # Optimize store
-  nix.settings = {
-    auto-optimise-store = true;
-    download-buffer-size = 524288000;
-    experimental-features = ["nix-command" "flakes"];
-  };
-
-  # Allow power management
-  powerManagement.enable = true;
-
-  # Firmware updates
-  services.fwupd.enable = true;
-
-  # Enable networking
-  networking.networkmanager.enable = true;
+  # Allow unfree packages
+  nixpkgs.config.allowUnfree = true;
 
   # Set your time zone.
   time.timeZone = "America/New_York";
@@ -53,12 +50,6 @@
     LC_TIME = "C.UTF-8";
   };
 
-  # Catppuccin
-  catppuccin = {
-    enable = true;
-    flavor = "mocha";
-  };
-
   # Configure keymap
   console.keyMap = lib.mkDefault "jp106";
 
@@ -67,11 +58,17 @@
     model = lib.mkDefault "jp106";
   };
 
-  # Enable CUPS to print documents.
-  services.printing.enable = true;
+  # Allow power management
+  powerManagement.enable = true;
 
-  # Allow unfree packages
-  nixpkgs.config.allowUnfree = true;
+  # Enable networking
+  networking.networkmanager.enable = true;
+
+  # Catppuccin
+  catppuccin = {
+    enable = true;
+    flavor = "mocha";
+  };
 
   # Android debug tools
   programs.adb.enable = true;
@@ -145,6 +142,13 @@
     vimAlias = true;
   };
 
+  # ssh agent
+  programs.gnupg.agent.enable = true;
+
+  programs.ssh = {
+    enableAskPassword = false;
+  };
+
   sops = {
     defaultSopsFile = ../secrets.yaml;
     validateSopsFiles = false;
@@ -185,36 +189,6 @@
     yubikey-manager
   ];
 
-  nix.nixPath = ["nixpkgs=${inputs.nixpkgs}"];
-
-  # ssh agent
-  # programs.mtr.enable = true;
-  programs.gnupg.agent.enable = true;
-
-  programs.ssh = {
-    enableAskPassword = false;
-  };
-
-  services.fstrim.enable = lib.mkDefault true;
-
-  # Enable the OpenSSH daemon.
-  services.openssh = {
-    enable = true;
-    settings = {
-      PermitRootLogin = "no";
-      PasswordAuthentication = false;
-      KbdInteractiveAuthentication = false;
-    };
-  };
-
-  services.pcscd.enable = true;
-
-  services.udev.packages = with pkgs; [
-    yubikey-personalization
-  ];
-
-  services.yubikey-agent.enable = true;
-
   security.pam = lib.optionalAttrs pkgs.stdenv.isLinux {
     sshAgentAuth.enable = true;
     u2f = {
@@ -237,4 +211,30 @@
     pkcs11.enable = true;
     tctiEnvironment.enable = true;
   };
+
+  services.fstrim.enable = lib.mkDefault true;
+
+  # Firmware updates
+  services.fwupd.enable = true;
+
+  # Enable the OpenSSH daemon.
+  services.openssh = {
+    enable = true;
+    settings = {
+      PermitRootLogin = "no";
+      PasswordAuthentication = false;
+      KbdInteractiveAuthentication = false;
+    };
+  };
+
+  services.pcscd.enable = true;
+
+  # Enable CUPS to print documents.
+  services.printing.enable = true;
+
+  services.udev.packages = with pkgs; [
+    yubikey-personalization
+  ];
+
+  services.yubikey-agent.enable = true;
 }