mirror of
https://github.com/moons-14/dotfiles.git
synced 2026-10-06 04:48:13 +09:00
91 lines
5.7 KiB
Markdown
91 lines
5.7 KiB
Markdown
# Profiles
|
|
|
|
Profiles are host-selectable compositions of independently owned units. They
|
|
describe why a group of units is enabled; application, service, system, and
|
|
hardware configuration remains in its owning unit.
|
|
|
|
## Layers
|
|
|
|
| Namespace | Purpose | Compatibility |
|
|
| ------------ | ------------------------------------------------------- | --------------- |
|
|
| `base` | Invariants required by every host | NixOS and macOS |
|
|
| `interface` | Command-line and graphical ways to operate a host | Per-profile |
|
|
| `platform` | NixOS foundation and physical or virtual hardware shape | NixOS |
|
|
| `workload` | Optional activities performed on a host | Per-profile |
|
|
| `networking` | Network roles and topology | Per-profile |
|
|
| `security` | Optional security and secret-management policies | Per-profile |
|
|
|
|
`base` contains the shared Nix foundation plus the universally available CLI
|
|
tools (Atuin, tealdeer, trippy, and xh). A unit belongs there only when it is
|
|
required on every supported host.
|
|
|
|
## Compatibility
|
|
|
|
| Profile | Supported host class |
|
|
| ------------------------------------ | --------------------------------------------- |
|
|
| `base` | NixOS, macOS |
|
|
| `interface.cli` | NixOS, macOS with Home Manager |
|
|
| `interface.gui` | NixOS, macOS with Home Manager |
|
|
| `interface.macos` | macOS |
|
|
| `interface.linux-desktop` | NixOS with Home Manager |
|
|
| `interface.labwc` | NixOS with Home Manager |
|
|
| `interface.niri` | NixOS with Home Manager |
|
|
| `interface.wallpaperengine` | NixOS with Home Manager |
|
|
| `platform.nixos` | NixOS |
|
|
| `platform.desktop` | Physical NixOS desktop |
|
|
| `platform.intel-nvidia-desktop` | Intel/NVIDIA physical NixOS desktop |
|
|
| `platform.laptop` | Physical NixOS laptop |
|
|
| `platform.thinkpad-x1` | Intel ThinkPad X1 running NixOS |
|
|
| `platform.vm` | UEFI QEMU NixOS guest with NFS client support |
|
|
| `workload.development` | NixOS, macOS with Home Manager |
|
|
| `workload.game` | NixOS, macOS |
|
|
| `workload.personal` | NixOS, macOS with Home Manager |
|
|
| `workload.remote-access` | NixOS, macOS |
|
|
| `workload.server` | NixOS, macOS with Home Manager |
|
|
| `networking.tailscale-client` | NixOS, macOS |
|
|
| `networking.tailscale-subnet-router` | NixOS |
|
|
| `security.fingerprint` | NixOS, macOS |
|
|
| `security.secrets` | NixOS, macOS |
|
|
| `security.secure-boot` | NixOS |
|
|
| `security.tpm-storage` | NixOS with a host-defined LUKS device |
|
|
|
|
Select independent concerns independently in `hosts/default.nix`. For example,
|
|
a NixOS desktop can combine `interface.labwc` and `interface.niri` to provide
|
|
both sessions while sharing `interface.linux-desktop` and `interface.gui`.
|
|
The shared Linux desktop profile provides the common desktop applications and
|
|
session-independent services; both session profiles select ly. The laptop
|
|
platform selects niri as Ly's default session, while the desktop platform
|
|
selects labwc. A daily-use macOS development machine can combine
|
|
`interface.macos`, `workload.development`, and `workload.personal`. Hardware
|
|
support does not implicitly select an interface or workload.
|
|
|
|
`interface.wallpaperengine` is an opt-in Linux desktop appearance profile. It
|
|
enables Wallpaper Engine and disables Noctalia's wallpaper surface, so hosts
|
|
without this profile retain Noctalia's configured wallpaper.
|
|
|
|
`workload.personal` provides Pear Desktop on both NixOS and macOS. Home Manager
|
|
enables performance improvements, synced lyrics, tracker blocking, the album
|
|
color theme, and custom output-device selection while preserving user-owned
|
|
settings such as the selected device.
|
|
|
|
`workload.personal` also provides Handy for offline speech-to-text. It starts
|
|
hidden when the graphical session begins. On niri and labwc, `Ctrl+Space` is
|
|
owned by the compositor and invokes Handy's `--toggle-transcription` command;
|
|
Handy's own shortcut bindings are disabled on NixOS so it does not monitor
|
|
keyboard events under Wayland. Handy uses the Homebrew cask and starts at login
|
|
on macOS.
|
|
|
|
`workload.personal` provides ActivityWatch for local activity tracking. On
|
|
NixOS, its server and Wayland-compatible watcher run as Home Manager user
|
|
services. On macOS, the Homebrew cask starts at login.
|
|
|
|
On NixOS, `workload.game` provides Steam with Valve Proton and Proton-GE,
|
|
Protontricks, Wayland-compatible Steam Input, GameMode, Gamescope, and MangoHud.
|
|
Enabling Steam also activates the 32-bit graphics and PipeWire support required
|
|
by older games. On macOS the same profile currently provides the portable game
|
|
applications that support that host class.
|
|
|
|
`security.tpm-storage` deliberately does not own a disk identifier. A host that
|
|
selects it must define `boot.initrd.luks.devices.cryptroot.device` in its
|
|
machine-specific NixOS module.
|