Add my new tower system

flake.nix

@@ -78,6 +78,14 @@
         };
       };
 
+      murex-pecten = { name, nodes, pkgs, ... }: {
+        imports = [ self.nixosModules.murex-pecten ];
+        config.deployment = {
+          allowLocalDeployment = true;
+          targetHost = null;
+        };
+      };
+
       achatina-fulica = { ... }: {
         imports = [ self.nixosModules.achatina-fulica ];
         config.deployment = {
@@ -153,6 +161,19 @@
         };
       };
 
+      murex-pecten = { ... }: {
+        imports = [
+          self.nixosModules.x86_64-linux-basics
+          nixos-hardware.nixosModules.common-pc
+          nixos-hardware.nixosModules.common-pc-ssd
+          nixos-hardware.nixosModules.common-cpu-amd
+          nixos-hardware.nixosModules.common-gpu-amd
+
+          ./hosts/murex-pecten.nix
+          ./hardware/aorus.nix
+        ];
+      };
+
       achatina-fulica = { ... }: {
         imports = [
           self.nixosModules.x86_64-linux-basics
@@ -293,6 +314,12 @@
       modules = [ self.nixosModules.helix-texta ];
     };
 
+    # My tower
+    nixosConfigurations.murex-pecten = nixpkgs.lib.nixosSystem {
+      system = "x86_64-linux";
+      modules = [ self.nixosModules.murex-pecten ];
+    };
+
     # Currently hosted by NetCup
     nixosConfigurations.achatina-fulica = nixpkgs.lib.nixosSystem {
       system = "x86_64-linux";

hardware/aorus.nix

@@ -0,0 +1,38 @@
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
+
+  boot.initrd.availableKernelModules =
+    [ "nvme" "xhci_pci" "ahci" "usbhid" "usb_storage" "sd_mod" ];
+  boot.initrd.kernelModules = [ "dm-snapshot" ];
+  boot.initrd.luks.devices."enc".device =
+    "/dev/disk/by-uuid/037d5dc5-17c3-4643-9ad8-7403d280b191";
+
+  boot.kernelModules = [ "kvm-amd" ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" = {
+    device = "/dev/disk/by-uuid/58415934-fb8e-4e36-996e-ddb61d24602a";
+    fsType = "btrfs";
+    options = [ "subvol=nixos" ];
+  };
+
+  fileSystems."/home" = {
+    device = "/dev/disk/by-uuid/58415934-fb8e-4e36-996e-ddb61d24602a";
+    fsType = "btrfs";
+    options = [ "subvol=home" ];
+  };
+
+  fileSystems."/boot" = {
+    device = "/dev/disk/by-uuid/6B2D-BD5B";
+    fsType = "vfat";
+  };
+
+  swapDevices =
+    [{ device = "/dev/disk/by-uuid/a8d98aa8-47e4-4d32-bc95-1f4a9a1c1d91"; }];
+
+  # Enable bluetooth
+  hardware.bluetooth.enable = true;
+  services.hardware.bolt.enable = true;
+}

hosts/murex-pecten.nix

@@ -0,0 +1,106 @@
+{ config, pkgs, ... }:
+
+{
+  # Use the systemd-boot EFI boot loader.
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+
+  networking = {
+    hostName = "murex-pecten";
+    networkmanager.enable = true;
+  };
+
+  system.fsPackages = [ pkgs.sshfs ];
+
+  services.xserver.enable = true;
+  services.xserver.displayManager.gdm.enable = true;
+  services.xserver.desktopManager.gnome.enable = true;
+
+  # Configure keymap in X11
+  # services.xserver.layout = "us-workman";
+  # services.xserver.xkbOptions = "eurosign:e";
+
+  # Enable CUPS to print documents.
+  # Enable sound.
+  sound.enable = true;
+  hardware.pulseaudio.enable = true;
+
+  # Define a user account. Don't forget to set a password with ‘passwd’.
+  users = {
+    # I like my users unmutable
+    mutableUsers = false;
+
+    # Myself
+    users.malte = {
+      description = "Malte Tammena";
+      hashedPassword =
+        "$6$zqEC2iJJ98Ne$lRERO30msyjJm7oJCqRD/xj3NIm4De37gD.VUzfg7aceosE/6S6eNAaruIakgUtSC970MHRPoNlCEy1RoFuyh.";
+      isNormalUser = true;
+      extraGroups = [
+        "wheel"
+        "networkmanager"
+        "video"
+        "lp"
+        "kvm"
+        "libvirtd"
+        "podman"
+        "scanner"
+        config.users.groups.keys.name
+      ];
+      # Yes, use the best, please
+      shell = pkgs.fish;
+    };
+  };
+  #home-manager.users.malte.imports = [ ../malte/home.nix ];
+
+  programs.fish.enable = true;
+
+  fonts = {
+    enableDefaultFonts = true;
+    fonts = with pkgs; [ firaCodeNerd noto-fonts noto-fonts-cjk joypixels ];
+    fontconfig = {
+      enable = true;
+      defaultFonts.monospace = [ "FiraCode Nerd Font" ];
+    };
+  };
+
+  # Configure GPG with SSH support and enable the yubikey
+  programs.gnupg.agent = {
+    enable = true;
+    enableSSHSupport = true;
+    pinentryFlavor = "qt";
+  };
+
+  virtualisation = {
+    podman = {
+      enable = true;
+      # Create a `docker` alias for podman, to use it as a drop-in replacement
+      dockerCompat = true;
+      dockerSocket.enable = true;
+      defaultNetwork.dnsname.enable = true;
+    };
+  };
+
+  programs.dconf.enable = true;
+
+  programs.steam.enable = true;
+
+  services.dbus.packages = [ pkgs.gnome3.dconf ];
+  services.udev.packages = with pkgs; [ yubikey-personalization chrysalis ];
+
+  environment.systemPackages = with pkgs; [ thunderbolt chrysalis ];
+
+  services.printing.enable = true;
+  services.fwupd.enable = true;
+  services.devmon.enable = true;
+
+  # This value determines the NixOS release from which the default
+  # settings for stateful data, like file locations and database versions
+  # on your system were taken. It‘s perfectly fine and recommended to leave
+  # this value at the release version of the first install of this system.
+  # Before changing this value read the documentation for this option
+  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
+  system.stateVersion = "21.11"; # Did you read the comment?
+
+}
+