greenhouse

kore

my public infrastructure monorepo

git clone [email protected]:kore.git

feat(nixos): trim gomphrena closure

commit2c43f2fcf5b8948d445e8075b62c263704deeb36
parent78b2e8497868f71d2328564538555d1fa246b4e4
authorlostduk <[email protected]>
date2026-10-14 07:00 +0000
home/features/global.nix3+++
nixos/features/global.nix19+++++++++++--------
nixos/hosts/gomphrena.nix17++++++++++-------
nixos/roles/desktop.nix21++++++++++++++-------

4 files changed, -22/+38

home/features/global.nix

@@ -1,6 +1,9 @@ { osConfig, pkgs, ... }:  {+  programs.man.enable = false;+  manual.manpages.enable = false;+   home = {     stateVersion = osConfig.system.stateVersion; 

nixos/features/global.nix

@@ -1,4 +1,4 @@-{ inputs, outputs, config, lib, pkgs, utils, ... }:+{ inputs, outputs, config, lib, pkgs, utils, modulesPath, ... }:  # Policy for every host. Values under mkForce are invariants: roles and # hosts must not weaken them.@@ -9,7 +9,11 @@ let   rootDevice = config.fileSystems."/".device;   rootUnit = "${utils.escapeSystemdPath rootDevice}.device"; in {-  imports = [ inputs.impermanence.nixosModules.impermanence ];+  imports = [+    inputs.impermanence.nixosModules.impermanence++    ( modulesPath + "/profiles/minimal.nix" )+  ];    i18n = {     defaultLocale = "en_US.UTF-8";@@ -17,12 +21,6 @@ in {   };   time.timeZone = "UTC"; -  documentation = {-    nixos.enable = false;-    doc.enable = false;-    info.enable = false;-  };-   nix = {     package = pkgs.nixVersions.latest; @@ -45,6 +43,11 @@ in {   nixpkgs = {     overlays = builtins.attrValues outputs.overlays; +    flake = {+      setFlakeRegistry = false;+      setNixPath = false;+    };+     config = {       allowUnfree = lib.mkForce false;       allowBroken = lib.mkForce false;

nixos/hosts/gomphrena.nix

@@ -1,4 +1,4 @@-{ inputs, ... }:+{ inputs, lib, ... }:  {   imports = [ inputs.nixos-wsl.nixosModules.default ];@@ -6,19 +6,22 @@   # WSL can't mount /persist at boot.   kore.impermanence.enable = false; +  # WSL can't register auditd ("Unable to set audit pid").+  security = {+    audit.enable = lib.mkForce false;+    auditd.enable = lib.mkForce false;+  };++  # CLI only here: no mesa/LLVM (~830 MiB).+  hardware.graphics.enable = lib.mkForce false;+   wsl = {     enable = true;     defaultUser = "lostduk";-    useWindowsDriver = true;      usbip = {       enable = true;       autoAttach = [ "1-14" ];     };   };--  hardware = {-    graphics.enable = true;-    cpu.intel.updateMicrocode = true;-  }; }

nixos/roles/desktop.nix

@@ -1,15 +1,22 @@ { pkgs, ... }:  {-  xdg.portal = {-    enable = true;-    extraPortals = [ pkgs.xdg-desktop-portal-wlr ];-    configPackages = [ pkgs.xdg-desktop-portal-gtk pkgs.xdg-desktop-portal-wlr ];+  xdg = {+    autostart.enable = true;+    icons.enable = true;+    mime.enable = true;+    sounds.enable = true; -    wlr.enable = true;+    portal = {+      enable = true;+      extraPortals = [ pkgs.xdg-desktop-portal-wlr ];+      configPackages = [ pkgs.xdg-desktop-portal-gtk pkgs.xdg-desktop-portal-wlr ];++      wlr.enable = true; -    config.common = {-      default = [ "wlr" ];+      config.common = {+        default = [ "wlr" ];+      };     };   };