mikl
411a8ba689
- common/default.nix: add mikl to wheel + security.sudo.wheelNeedsPassword=false. Without this, root is unreachable on a fresh NixOS-yc image (no root password, no rescue channel) — nixos-rebuild switch is impossible. Mirrors the NOPASSWD:ALL that old YC boxes got via cloud-config user-data. - home/server.nix: programs.git.extraConfig -> .settings, programs.git.delta -> programs.delta with enableGitIntegration=true (deprecated warnings). - image.nix: boot.loader.grub.timeout -> boot.loader.timeout (renamed option).
50 lines
1.4 KiB
Nix
50 lines
1.4 KiB
Nix
{ pkgs, ... }:
|
||
{
|
||
# All poppy apps (brew casks + nix GUI packages)
|
||
# импортируется только в hosts/poppy/default.nix
|
||
|
||
# Brew casks (приложения которых нет в nixpkgs)
|
||
homebrew = {
|
||
enable = true;
|
||
onActivation.cleanup = "none"; # "none" для безопасности, "zap" после полного аудита
|
||
taps = [];
|
||
|
||
brews = [
|
||
"kew"
|
||
"tea" # Forgejo/Gitea CLI
|
||
"node" # Node.js для pi-coding-agent (не из nix — read-only)
|
||
];
|
||
|
||
casks = [
|
||
"google-chrome"
|
||
"google-drive"
|
||
"marta"
|
||
"vscodium"
|
||
"github"
|
||
"docker-desktop"
|
||
"ollama-app"
|
||
"obsidian"
|
||
"anki"
|
||
"calibre"
|
||
"telegram"
|
||
"maccy"
|
||
"mos"
|
||
"caffeine"
|
||
"lunacy"
|
||
"skim"
|
||
"mark-text"
|
||
"amneziavpn"
|
||
"element"
|
||
"prismlauncher"
|
||
"losslesscut" # lossless-нарезка/remux видео (GUI на базе ffmpeg)
|
||
];
|
||
};
|
||
|
||
# Nix GUI пакеты (нет в brew)
|
||
# pureref — только x86_64-darwin, не работает на M1
|
||
# aseprite — в nixpkgs, но компилируется с нуля (10-30 мин на M1)
|
||
# раскомментировать после первой полной сборки (см. docs/apps.md)
|
||
environment.systemPackages = with pkgs; [
|
||
# aseprite # пиксельный редактор (uncomment after first build)
|
||
];
|
||
}
|