nix-laptop/flake.nix at main · cnieg/nix-laptop · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
{
  description = "Configuration NixOS sécurisée et moderne pour Laptop";

  inputs = {
    nixpkgs.url = "github:NixOS/nixpkgs/nixos-25.11";

    disko.url = "github:nix-community/disko";
    disko.inputs.nixpkgs.follows = "nixpkgs";

    home-manager.url = "github:nix-community/home-manager/release-25.11";
    home-manager.inputs.nixpkgs.follows = "nixpkgs";

    securix.url = "github:cloud-gouv/securix";
    securix.flake = false;
  };

  outputs = { self, nixpkgs, disko, home-manager, securix, ... }@inputs: {
    nixosConfigurations = {

      # 1. Cible pour votre VRAI laptop
      nix-laptop = nixpkgs.lib.nixosSystem {
        system = "x86_64-linux";
        modules = [
          disko.nixosModules.disko

          home-manager.nixosModules.home-manager {
            home-manager.useGlobalPkgs = true;
            home-manager.useUserPackages = true;
            home-manager.users.nixos = import ./home/home.nix;
          }
          ./disko-config.nix
          ./configuration.nix
          securix.nixosModules.default or (import "${securix}/modules")
          { hardware.enableRedistributableFirmware = true; }
        ];
      };

      # 2. Cible dédiée aux tests QEMU
      nix-vm = nixpkgs.lib.nixosSystem {
        system = "x86_64-linux";
        modules = [
          disko.nixosModules.disko

          home-manager.nixosModules.home-manager {
            home-manager.useGlobalPkgs = true;
            home-manager.useUserPackages = true;
            home-manager.users.nixos = import ./home/home.nix;
          }
          ./disko-config.nix
          ./configuration.nix
          securix.nixosModules.default or (import "${securix}/modules")

          ({ modulesPath, ... }: {
            imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
          })
        ];
      };

    };
  };
}