ADD : d2nix new config

FIX : archive old d2nix conf

hosts/d2nix-archives/home-manager/home.nix

@@ -0,0 +1,25 @@
+{ pkgs, config, ... }: {
+  imports = [
+    ./packages.nix
+    ./gnupg.nix
+    ./git.nix
+    ./variables.nix
+    ./i3status.nix
+    ./dunst.nix
+#    ./himalaya.nix
+    ./mails.nix
+    ../../../modules/tmux.nix
+    ../../../modules/emacs.nix
+    ../../../modules/neovim.nix
+  ];
+  home.stateVersion = "23.05";
+  home.username = "alexandre";
+  home.homeDirectory = "/home/alexandre";
+  home.keyboard = {
+    layout = "fr";
+    variant = "bepo";
+  };
+  xdg.configFile = {
+    "i3/config".source = ./configs/i3config;
+  };
+}

hosts/d2nix-archives/nixos/configuration.nix

@@ -0,0 +1,127 @@
+# Edit this configuration file to define what should be installed on
+# your system.  Help is available in the configuration.nix(5) man page
+# and in the NixOS manual (accessible by running ‘nixos-help’).
+
+{ config, lib, pkgs, ... }:
+
+{
+  imports =
+    [ # Include the results of the hardware scan.
+      <nixpkgs/nixos/modules/services/hardware/sane_extra_backends/brscan4.nix>
+      ./hardware-configuration.nix
+      ./services.nix
+      ./network.nix
+      modules/common.nix
+      modules/smtp.nix
+      modules/redshift.nix
+#      modules/starship.nix
+      modules/syncthing.nix
+#      modules/powermanagement.nix
+
+    ];
+
+  boot = {
+    loader.systemd-boot.enable = true;
+    loader.efi.canTouchEfiVariables = true;
+    plymouth.enable = true;
+    tmp.cleanOnBoot = true;
+    kernelParams = [ "i915.enable_fbc=1" ];
+  };
+  boot.initrd.luks.fido2Support = true;
+  boot.initrd.luks.devices."/dev/sda2".device = "/dev/sda2";
+  boot.initrd.luks.devices."/dev/sda2".fido2.credential = "a67d17616bf2568727498dffa95205df943383ab3a2f9798606532d5791a155a37dd52dae2262619c1da2be7562ec9dd94888c71a9326fea70dfe16214b5ea8ec0143b010000";
+
+  hardware = {
+    # Enable microcode updates for Intel CPU
+    cpu.intel.updateMicrocode = true;
+    # Enable Kernel same-page merging
+    ksm.enable = true;
+    # Enable all the firmware
+    enableAllFirmware = true;
+    # Enable all the firmware with a license allowing redistribution. (i.e. free firmware and firmware-linux-nonfree)
+    enableRedistributableFirmware = true;
+    # Enable OpenGL drivers
+    opengl.enable = true;
+    opengl.extraPackages = with pkgs; [
+      vaapiIntel
+      vaapiVdpau
+      libvdpau-va-gl
+    ];
+    pulseaudio = {
+      enable = true;
+    };
+  };
+
+  # Set your time zone.
+  time.timeZone = "Europe/Paris";
+
+  nixpkgs.config.allowUnfree = true;
+
+  i18n.defaultLocale = "fr_FR.UTF-8";
+  console = {
+    font = "Lat2-Terminus16";
+    keyMap = "fr";
+  };
+
+  fonts = {
+    fontDir.enable = true;
+    enableGhostscriptFonts = true;
+    fonts = with pkgs; [
+      corefonts
+      vistafonts
+      inconsolata
+      terminus_font
+      proggyfonts
+      dejavu_fonts
+      font-awesome
+      nerdfonts
+      source-code-pro
+      source-sans-pro
+      source-serif-pro
+    ];
+  };
+
+  programs = {
+    fish.enable = true;
+    fish.interactiveShellInit = ''
+      set -gx EDITOR nvim
+    '';
+    ssh = {
+      setXAuthLocation = true;   
+      forwardX11 = true;
+    };
+    dconf.enable=true;
+  };
+  programs.thunar.enable = true;
+
+  programs.thunar.plugins = with pkgs.xfce; [
+  thunar-archive-plugin
+  thunar-volman
+];
+  # Enable sound.
+   sound.enable = true;
+
+  system.stateVersion = "23.05"; # Did you read the comment?
+  users = {
+    groups.ntp = {};
+    defaultUserShell = "/run/current-system/sw/bin/fish";
+    extraUsers.alexandre = {
+      isNormalUser = true;
+      home = "/home/alexandre";
+      description = "alexandre";
+      extraGroups = [ "wheel" "networkmanager" "docker" "libvirtd" "scanner" "plocate" "lp" ];
+#      hashedPassword = "$6$7m77oPQxa$W9YnRLo1X2eqztBHwpoH8diHGkBno5O39AMyL9Qm8y8I6uW63H2Nwx4p239OG5zhOxA8J1lZvHTQ3hKPSP9mT/";
+    };
+  };
+
+   environment.systemPackages = with pkgs; [
+    google-fonts
+    gnome.adwaita-icon-theme
+    networkmanagerapplet
+  ];
+
+  environment.variables.EDITOR = "nvim";
+
+    nix.settings.experimental-features = [ "nix-command" "flakes" ];
+}
+

hosts/d2nix-archives/nixos/hardware-configuration.nix

@@ -0,0 +1,47 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports =
+    [ (modulesPath + "/installer/scan/not-detected.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "usbhid" "usb_storage" "sd_mod" "sr_mod" ];
+  boot.initrd.kernelModules = [ "dm-snapshot" ];
+  boot.kernelModules = [ "kvm-intel" ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" =
+    { device = "/dev/disk/by-uuid/b670bb55-7e29-4477-8f58-118c42598f40";
+      fsType = "ext4";
+    };
+
+  fileSystems."/boot" =
+  { device = "/dev/disk/by-uuid/0BEC-722D";
+    fsType = "vfat";
+  };
+
+  swapDevices =
+    [ { device = "/dev/disk/by-uuid/d52b6afe-cb3f-4e92-8e4b-5394a0bef647"; }
+    ];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp0s31f6.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  powerManagement.cpuFreqGovernor = lib.mkDefault "powersave";
+  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+
+  boot.initrd.luks.devices = {
+    "partitions" = {
+      device = "/dev/sda2";
+      preLVM = true; # You may want to set this to false if you need to start a network service first
+      };
+    }; 
+}

hosts/d2nix-archives/nixos/services.nix

@@ -0,0 +1,50 @@
+{ config, pkgs, ... }:
+
+{
+  services = {
+    avahi = {
+      enable = true;
+      openFirewall = true;
+    };
+    printing.enable = true;
+    clamav = {
+      daemon.enable = true;
+      updater.enable = true;
+    };
+    locate = {
+      enable = true;
+      locate = pkgs.plocate;
+      interval = "hourly";
+      localuser = null;
+    };
+    redshift = {
+      enable = true;
+      brightness = {
+        # Note the string values below.
+        day = "1";
+        night = "1";
+      };
+      temperature = {
+        day = 5500;
+        night = 3700;
+      };
+    };
+    geoclue2.appConfig.redshift.isAllowed = true;
+    automatic-timezoned.enable = true;
+    xserver = {
+      enable = true;
+      autorun = true;
+      windowManager.i3.enable = true;
+      displayManager.defaultSession = "none+i3";
+      layout = "fr";
+      xkbOptions = "eurosign:e";
+    };
+    openssh = {
+      enable = true;
+      settings.PermitRootLogin = "no";
+    };
+    ntp.enable = true;
+    tlp.enable = true;
+    fstrim.enable = true;
+  };
+}

hosts/d2nix/home-manager/firefox.nix

@@ -0,0 +1,84 @@
+{ config, pkgs, theme, ... }:
+{
+
+    programs.firefox = {
+        enable = true;
+        package = pkgs.wrapFirefox pkgs.firefox-unwrapped {
+            extraPolicies = {
+                CaptivePortal = false;
+                DisableFirefoxStudies = true;
+                DisablePocket = true;
+                DisableTelemetry = true;
+                DisableFirefoxAccounts = false;
+                NoDefaultBookmarks = true;
+                OfferToSaveLogins = true;
+                OfferToSaveLoginsDefault = true;
+                PasswordManagerEnabled = true;
+                FirefoxHome = {
+                    Search = true;
+                    Pocket = false;
+                    Snippets = false;
+                    TopSites = false;
+                    Highlights = false;
+                };
+                UserMessaging = {
+                    ExtensionRecommendations = false;
+                    SkipOnboarding = true;
+                };
+            };
+        };
+        profiles = {
+            alexandre = {
+                id = 0;
+                name = "alexandre";
+                search = {
+                    force = true;
+                    default = "Google";
+                    engines = {
+                        "Nix Packages" = {
+                            urls = [{
+                                template = "https://search.nixos.org/packages";
+                                params = [
+                                    { name = "type"; value = "packages"; }
+                                    { name = "query"; value = "{searchTerms}"; }
+                                ];
+                            }];
+                            icon = "${pkgs.nixos-icons}/share/icons/hicolor/scalable/apps/nix-snowflake.svg";
+                            definedAliases = [ "@np" ];
+                        };
+                        "NixOS Wiki" = {
+                            urls = [{ template = "https://nixos.wiki/index.php?search={searchTerms}"; }];
+                            iconUpdateURL = "https://nixos.wiki/favicon.png";
+                            updateInterval = 24 * 60 * 60 * 1000;
+                            definedAliases = [ "@nw" ];
+                        };
+                        "Wikipedia (en)".metaData.alias = "@wiki";
+                        "Google".metaData.hidden = false;
+                        "Amazon.com".metaData.hidden = true;
+                        "Bing".metaData.hidden = true;
+                        "eBay".metaData.hidden = true;
+                    };
+                };
+
+	        extensions = with pkgs.nur.repos.rycee.firefox-addons; [
+	            ublock-origin
+                    privacy-badger
+                    keepassxc-browser
+                    clearurls
+                    decentraleyes
+                    floccus
+                    languagetool
+                    disconnect
+                ];
+              settings = {
+                   "general.smoothScroll" = true;
+               };
+               # extraConfig = ''
+               #     user_pref("full-screen-api.ignore-widgets", true);
+               #     user_pref("media.ffmpeg.vaapi.enabled", true);
+               #     user_pref("media.rdd-vpx.enabled", true);
+               # '';
+            };
+        };
+    };
+}

hosts/d2nix/home-manager/home.nix

@@ -1,25 +1,73 @@
-{ pkgs, config, ... }: {
+{ config, pkgs, ... }:
+
+{
   imports = [
-    ./packages.nix
-    ./gnupg.nix
-    ./git.nix
-    ./variables.nix
-    ./i3status.nix
-    ./dunst.nix
-#    ./himalaya.nix
-    ./mails.nix
-    ../../../modules/tmux.nix
-    ../../../modules/emacs.nix
-    ../../../modules/neovim.nix
+    ./firefox.nix
   ];
-  home.stateVersion = "23.05";
+  # Home Manager needs a bit of information about you and the paths it should
+  # manage.
   home.username = "alexandre";
   home.homeDirectory = "/home/alexandre";
-  home.keyboard = {
-    layout = "fr";
-    variant = "bepo";
+
+  # This value determines the Home Manager release that your configuration is
+  # compatible with. This helps avoid breakage when a new Home Manager release
+  # introduces backwards incompatible changes.
+  #
+  # You should not change this value, even if you update Home Manager. If you do
+  # want to update the value, then make sure to first check the Home Manager
+  # release notes.
+  home.stateVersion = "23.05"; # Please read the comment before changing.
+
+  # The home.packages option allows you to install Nix packages into your
+  # environment.
+  home.packages = [
+    # # Adds the 'hello' command to your environment. It prints a friendly
+    # # "Hello, world!" when run.
+    # pkgs.hello
+
+    # # It is sometimes useful to fine-tune packages, for example, by applying
+    # # overrides. You can do that directly here, just don't forget the
+    # # parentheses. Maybe you want to install Nerd Fonts with a limited number of
+    # # fonts?
+    # (pkgs.nerdfonts.override { fonts = [ "FantasqueSansMono" ]; })
+
+    # # You can also create simple shell scripts directly inside your
+    # # configuration. For example, this adds a command 'my-hello' to your
+    # # environment:
+    # (pkgs.writeShellScriptBin "my-hello" ''
+    #   echo "Hello, ${config.home.username}!"
+    # '')
+  ];
+
+  # Home Manager is pretty good at managing dotfiles. The primary way to manage
+  # plain files is through 'home.file'.
+  home.file = {
+    # # Building this configuration will create a copy of 'dotfiles/screenrc' in
+    # # the Nix store. Activating the configuration will then make '~/.screenrc' a
+    # # symlink to the Nix store copy.
+    # ".screenrc".source = dotfiles/screenrc;
+
+    # # You can also set the file content immediately.
+    # ".gradle/gradle.properties".text = ''
+    #   org.gradle.console=verbose
+    #   org.gradle.daemon.idletimeout=3600000
+    # '';
   };
-  xdg.configFile = {
-    "i3/config".source = ./configs/i3config;
+
+  # You can also manage environment variables but you will have to manually
+  # source
+  #
+  #  ~/.nix-profile/etc/profile.d/hm-session-vars.sh
+  #
+  # or
+  #
+  #  /etc/profiles/per-user/alexandre/etc/profile.d/hm-session-vars.sh
+  #
+  # if you don't want to manage your shell through Home Manager.
+  home.sessionVariables = {
+    # EDITOR = "emacs";
   };
+
+  # Let Home Manager install and manage itself.
+  programs.home-manager.enable = true;
 }

hosts/d2nix/nixos/configuration.nix

@@ -1,74 +1,48 @@
 # Edit this configuration file to define what should be installed on
 # your system.  Help is available in the configuration.nix(5) man page
-# and in the NixOS manual (accessible by running ‘nixos-help’).
+# and in the NixOS manual (accessible by running `nixos-help`).
 
-{ config, lib, pkgs, ... }:
+{ config, pkgs, ... }:
 
 {
   imports =
     [ # Include the results of the hardware scan.
-      <nixpkgs/nixos/modules/services/hardware/sane_extra_backends/brscan4.nix>
       ./hardware-configuration.nix
       ./services.nix
-      ./network.nix
-      modules/common.nix
-      modules/smtp.nix
-      modules/redshift.nix
-#      modules/starship.nix
-      modules/syncthing.nix
-#      modules/powermanagement.nix
-
+      ./extra_hw.nix
     ];
 
   boot = {
     loader.systemd-boot.enable = true;
-    loader.efi.canTouchEfiVariables = true;
+    loader.grub.efiSupport = true;
+    loader.grub.efiInstallAsRemovable = true;
+    loader.grub.device = "nodev"; 
     plymouth.enable = true;
-    tmp.cleanOnBoot = true;
+    tmp.cleanOnBoot = true ;
     kernelParams = [ "i915.enable_fbc=1" ];
   };
-  boot.initrd.luks.fido2Support = true;
-  boot.initrd.luks.devices."/dev/sda2".device = "/dev/sda2";
-  boot.initrd.luks.devices."/dev/sda2".fido2.credential = "a67d17616bf2568727498dffa95205df943383ab3a2f9798606532d5791a155a37dd52dae2262619c1da2be7562ec9dd94888c71a9326fea70dfe16214b5ea8ec0143b010000";
 
-  hardware = {
-    # Enable microcode updates for Intel CPU
-    cpu.intel.updateMicrocode = true;
-    # Enable Kernel same-page merging
-    ksm.enable = true;
-    # Enable all the firmware
-    enableAllFirmware = true;
-    # Enable all the firmware with a license allowing redistribution. (i.e. free firmware and firmware-linux-nonfree)
-    enableRedistributableFirmware = true;
-    # Enable OpenGL drivers
-    opengl.enable = true;
-    opengl.extraPackages = with pkgs; [
-      vaapiIntel
-      vaapiVdpau
-      libvdpau-va-gl
-    ];
-    pulseaudio = {
-      enable = true;
-    };
+  networking = {
+    hostName = "d2nix"; # Define your hostname.
+    networkmanager.enable = true;
+    firewall.enable = true;
   };
 
   # Set your time zone.
   time.timeZone = "Europe/Paris";
 
-  nixpkgs.config.allowUnfree = true;
-
   i18n.defaultLocale = "fr_FR.UTF-8";
   console = {
     font = "Lat2-Terminus16";
     keyMap = "fr";
   };
-
   fonts = {
     fontDir.enable = true;
     enableGhostscriptFonts = true;
     fonts = with pkgs; [
       corefonts
       vistafonts
+      powerline-fonts
       inconsolata
       terminus_font
       proggyfonts
@@ -78,30 +52,15 @@
       source-code-pro
       source-sans-pro
       source-serif-pro
+      iosevka
+      roboto-mono
+      fira-code
     ];
   };
 
-  programs = {
-    fish.enable = true;
-    fish.interactiveShellInit = ''
-      set -gx EDITOR nvim
-    '';
-    ssh = {
-      setXAuthLocation = true;   
-      forwardX11 = true;
-    };
-    dconf.enable=true;
-  };
-  programs.thunar.enable = true;
+  #sound.enable = true;
 
-  programs.thunar.plugins = with pkgs.xfce; [
-  thunar-archive-plugin
-  thunar-volman
-];
-  # Enable sound.
-   sound.enable = true;
-
-  system.stateVersion = "23.05"; # Did you read the comment?
+  # Define a user account. Don't forget to set a password with ‘passwd’.
   users = {
     groups.ntp = {};
     defaultUserShell = "/run/current-system/sw/bin/fish";
@@ -110,18 +69,109 @@
       home = "/home/alexandre";
       description = "alexandre";
       extraGroups = [ "wheel" "networkmanager" "docker" "libvirtd" "scanner" "plocate" "lp" ];
-#      hashedPassword = "$6$7m77oPQxa$W9YnRLo1X2eqztBHwpoH8diHGkBno5O39AMyL9Qm8y8I6uW63H2Nwx4p239OG5zhOxA8J1lZvHTQ3hKPSP9mT/";
+      packages = with pkgs; [
+        firefox
+	gitAndTools.gitFull
+      ];
+    };
+    extraUsers.oem = {
+      isNormalUser = true;
+      home = "/home/oem";
+      description = "oem";
+      extraGroups = [ "wheel" "networkmanager" ];
     };
   };
 
-   environment.systemPackages = with pkgs; [
-    google-fonts
-    gnome.adwaita-icon-theme
-    networkmanagerapplet
+  environment.variables = {
+    EDITOR = "nvim";
+    BROWSER = "firefox";
+    LESS = "--quit-if-one-screen --RAW-CONTROL-CHARS";
+    TERMINAL = "xfce4-terminal";
+    PRIVATE_BROWSER = "firefox -private";
+  };
+
+  security = {
+    rtkit.enable = true; # for pipewire
+    apparmor.enable = true;
+    pam = {
+      u2f = {
+        enable = true;
+        control = "requisite";
+      };
+    services = {
+        login.u2fAuth = true;
+        lightdm.u2fAuth = true;
+	gdm.u2fAuth = true;
+      };
+    };
+  };
+
+  nix.settings.experimental-features = [ "nix-command" "flakes" ];
+
+  nixpkgs.config = {
+    allowUnfree = true;
+  };
+
+  nix.settings.auto-optimise-store = true;
+  nix.gc = {
+    automatic = true;
+    dates = "weekly";
+    persistent = true;
+    options = "--delete-older-than 10d";
+  };		
+
+
+  programs = {
+    htop = {
+      enable = true;
+      settings.show_cpu_temperature = 1;
+    };
+    fish = {
+      enable = true;
+      interactiveShellInit = ''
+        set -gx EDITOR nvim
+      '';
+      shellAliases = {
+        ll = "ls -l";
+        ls = "lsd";
+        cat = "bat";
+        sysrs = "sudo nixos-rebuild switch";
+        sysup = "sudo nixos-rebuild switch --upgrade";
+        sysclean = "sudo nix-collect-garbage -d; and sudo nix-store --optimise";
+#        nvim = "nvim -u ~/.config/nvim/init.lua";
+      };
+    };  
+  };
+  environment.systemPackages = with pkgs; [
+    neovim
+    bat
+    lsd
+    pam_u2f
+    gsmartcontrol
+    lm_sensors
   ];
 
-  environment.variables.EDITOR = "nvim";
+  # Some programs need SUID wrappers, can be configured further or are
+  # started in user sessions.
+  # programs.gnupg.agent = {
+  #   enable = true;
+  #   enableSSHSupport = true;
+  # };
 
-    nix.settings.experimental-features = [ "nix-command" "flakes" ];
+
+
+  # This value determines the NixOS release from which the default
+  # settings for stateful data, like file locations and database versions
+  # on your system were taken. It's perfectly fine and recommended to leave
+  # this value at the release version of the first install of this system.
+  # Before changing this value read the documentation for this option
+  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
+  system.stateVersion = "23.05"; # Did you read the comment?
+
+	 nixpkgs.config.packageOverrides = pkgs: {
+    nur = import (builtins.fetchTarball "https://github.com/nix-community/NUR/archive/master.tar.gz") {
+      inherit pkgs;
+    };
+  };
 }
 

hosts/d2nix/nixos/extra_hw.nix

@@ -0,0 +1,33 @@
+{ config, pkgs, ... }:
+{
+  hardware = {
+    cpu.intel.updateMicrocode = true;
+    enableAllFirmware = true;
+    pulseaudio.enable = false;
+    bluetooth = {
+      enable = true;
+      settings = {
+        General = {
+          Enable = "Source,Sink,Media,Socket";
+        };
+      };
+    };
+    logitech = {
+      wireless.enable = true;
+      wireless.enableGraphical = true;
+    };
+    opengl = {
+      enable = true;
+      extraPackages = with pkgs; [
+        intel-media-driver # LIBVA_DRIVER_NAME=iHD
+        vaapiIntel         # LIBVA_DRIVER_NAME=i965 (older but works better for Firefox/Chromium)
+        vaapiVdpau
+        libvdpau-va-gl
+      ];
+     };
+  };
+  # Video acceleration
+  nixpkgs.config.packageOverrides = pkgs: {
+    vaapiIntel = pkgs.vaapiIntel.override { enableHybridCodec = true; };
+  };
+}

hosts/d2nix/nixos/hardware-configuration.nix

@@ -8,40 +8,42 @@
     [ (modulesPath + "/installer/scan/not-detected.nix")
     ];
 
-  boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "usbhid" "usb_storage" "sd_mod" "sr_mod" ];
-  boot.initrd.kernelModules = [ "dm-snapshot" ];
+  boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "usb_storage" "usbhid" "sd_mod" "sr_mod" "vfat" "nls_cp437" "nls_iso8859-1" ];
+  boot.initrd.kernelModules = [ "dm-snapshot" "coretemp" ];
   boot.kernelModules = [ "kvm-intel" ];
   boot.extraModulePackages = [ ];
 
   fileSystems."/" =
-    { device = "/dev/disk/by-uuid/b670bb55-7e29-4477-8f58-118c42598f40";
+    { device = "/dev/disk/by-uuid/8eea016d-9dd3-4149-8e5c-014d7d90695f";
       fsType = "ext4";
     };
 
   fileSystems."/boot" =
-  { device = "/dev/disk/by-uuid/0BEC-722D";
-    fsType = "vfat";
-  };
+    { device = "/dev/disk/by-uuid/0382-3D00";
+      fsType = "vfat";
+    };
 
   swapDevices =
-    [ { device = "/dev/disk/by-uuid/d52b6afe-cb3f-4e92-8e4b-5394a0bef647"; }
+    [ { device = "/dev/disk/by-uuid/1ffd2601-020f-4635-923b-4053676070d7"; }
     ];
-
+#  boot.initrd.luks.yubikeySupport = true;
+  boot.initrd.luks.devices = {
+    "partitions" = {
+      device = "/dev/sda2";
+      preLVM = true; 
+      crypttabExtraOpts = ["fido2-device=auto"];
+    };
+  }; 
+  boot.initrd.systemd.enable = true;
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's
   # still possible to use this option, but it's recommended to use it in conjunction
   # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
   networking.useDHCP = lib.mkDefault true;
   # networking.interfaces.enp0s31f6.useDHCP = lib.mkDefault true;
+  # networking.interfaces.wlp0s20f0u10.useDHCP = lib.mkDefault true;
 
   nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
   powerManagement.cpuFreqGovernor = lib.mkDefault "powersave";
   hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
-
-  boot.initrd.luks.devices = {
-    "partitions" = {
-      device = "/dev/sda2";
-      preLVM = true; # You may want to set this to false if you need to start a network service first
-      };
-    }; 
 }

hosts/d2nix/nixos/laptop.nix

@@ -0,0 +1,7 @@
+{ config, pkgs, ... }:
+{
+
+  # Enable touchpad support (enabled default in most desktopManager).
+  # services.xserver.libinput.enable = true;
+
+}

hosts/d2nix/nixos/services.nix

@@ -1,50 +1,54 @@
 { config, pkgs, ... }:
-
 {
   services = {
     avahi = {
       enable = true;
       openFirewall = true;
     };
-    printing.enable = true;
+    
     clamav = {
       daemon.enable = true;
       updater.enable = true;
     };
+  
+    ntp = {
+      enable = true;
+    };
+  
+    thermald = {
+      enable = true;
+    };
+  
+    fstrim = {
+      enable = true;
+    };
+  
     locate = {
-      enable = true;
-      locate = pkgs.plocate;
-      interval = "hourly";
-      localuser = null;
-    };
-    redshift = {
-      enable = true;
-      brightness = {
-        # Note the string values below.
-        day = "1";
-        night = "1";
-      };
-      temperature = {
-        day = 5500;
-        night = 3700;
+        enable = true;
+        locate = pkgs.plocate;
+        interval = "hourly";
+        localuser = null;
       };
+  
+    pipewire = {
+      enable = true;
+      alsa.enable = true;
+      alsa.support32Bit = true;
+      pulse.enable = true;
     };
-    geoclue2.appConfig.redshift.isAllowed = true;
-    automatic-timezoned.enable = true;
+
+    # Enable the X11 windowing system.
     xserver = {
       enable = true;
-      autorun = true;
-      windowManager.i3.enable = true;
-      displayManager.defaultSession = "none+i3";
+      # Configure keymap in X11
       layout = "fr";
-      xkbOptions = "eurosign:e";
+      xkbOptions = "eurosign:e,caps:escape";
+      # Enable the GNOME Desktop Environment.
+      displayManager.gdm.enable = true;
+      desktopManager.gnome.enable = true;
     };
-    openssh = {
-      enable = true;
-      settings.PermitRootLogin = "no";
-    };
-    ntp.enable = true;
-    tlp.enable = true;
-    fstrim.enable = true;
+    udev.extraRules = ''
+  ACTION=="remove", ENV{ID_VENDOR_ID}=="1050", ENV{ID_MODEL_ID}=="0407", ENV{DISPLAY}=":0", ENV{XAUTHORITY}="/home/alexandre/.Xauthority" RUN+="${pkgs.sudo}/bin/sudo -u alexandre ${pkgs.xdg-utils}/bin/xdg-screensaver lock"
+    '';
   };
 }