diff --git a/.sops.yaml b/.sops.yaml new file mode 100644 index 0000000..4cdbe8c --- /dev/null +++ b/.sops.yaml @@ -0,0 +1,7 @@ +keys: + - &primary age1h0srffx69v9cp0xd8nzgac9zmxx0x5d8d7jrf3wgl3zea9luy5fsn9llrl +creation_rules: + - path_regex: secrets/secrets.yaml$ + key_groups: + - age: + - *primary diff --git a/modules/nixos/gamming/nvidia.nix b/modules/nixos/gamming/nvidia.nix index 58ae88b..2dd2a19 100644 --- a/modules/nixos/gamming/nvidia.nix +++ b/modules/nixos/gamming/nvidia.nix @@ -7,13 +7,44 @@ }; #Nvidia Drivers nvidia = { - open = true; + open = false; # My 1660S works better with closed source drivers modesetting = { enable = true; }; }; }; + boot = { + kernelParams = [ + "nvidia-drm.modset=1" # DRM modesetting + ]; + initrd.kernelModules = [ + "nvidia" + "nvidia_modeset" + "nvidia_uvm" + "nvidia_drm" + ]; + }; + + # Environment variables + environment.sessionVariables = { + # Backend GBM for NVIDIA + GBM_BACKEND = "nvidia-drm"; + + # Use NVIDIA pilot for libva (video acceleration) + LIBVA_DRIVER_NAME = "nvidia"; + + # Vendor library OpenGL + __GLX_VENDOR_LIBRARY_NAME = "nvidia"; + + XDG_SESSION_TYPE = "wayland"; + + WLR_NO_HARDWARE_CURSORS = "1"; + + # Native Wayland Electron Apps + NIXOS_OZONE_WL = "1"; + }; + # Nvidia Drivers services.xserver.videoDrivers = ["nvidia"]; } diff --git a/secrets/secrets.yaml b/secrets/secrets.yaml new file mode 100644 index 0000000..1ba03ee --- /dev/null +++ b/secrets/secrets.yaml @@ -0,0 +1,21 @@ +hello: ENC[AES256_GCM,data:iUTvN5BcSq9z1rm8A9IGi/bC6Y9ktTb0ZJHVnT2FDxX18LBVw9fPJ/u1mzZ4AQ==,iv:RQKjSPXBGmvv2zxtCNWgzwa6M1U6ae8FEVdZ8un4z84=,tag:OgrBQgzjmHELcztURokRAw==,type:str] +example-key: ENC[AES256_GCM,data:b2Gx6CGtub7rAnd/kw==,iv:uWJTovo9X/VkXUW7HRfSuQfo2wZ7yjShfUeRghEQcW0=,tag:R0T8tbijxfAUu19wN9iQdw==,type:str] +#ENC[AES256_GCM,data:igl42zvcTfvOnZ5eKnWHpw==,iv:ImJmyaweKF5ADkwTarcVGaKb3zb2ycXPzq0KItU64+k=,tag:ydg9C6ZO47QsLoguq60JCg==,type:comment] +myservice: + my_subdir: + my_secret: ENC[AES256_GCM,data:LReh8HM87Fbj,iv:HJT6/8NYWePsSo1oBpoB62cnBS68ntkyYX7Pd0Q3DsA=,tag:sKSdst4zkQAHS+7JSDhbIg==,type:str] +sops: + age: + - recipient: age1h0srffx69v9cp0xd8nzgac9zmxx0x5d8d7jrf3wgl3zea9luy5fsn9llrl + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRazdLc2V3bU5WTXlLVnlB + TlZGMlo2SlB6QlFyMzVPYmErVTh6QUpvMFJFCkdXTXozdlpiTVhkTEN5S2d5aVBu + YjZ6SU5NRVFxR1VZb2loeWZGN3VqUDQKLS0tIGxlZXhxTS9HL0V2YXRXVEc0RDVz + TGNWMXd1MmVaMndERGpFc1N0TklFNncKFvO2Y80Z0pLEdoKlmAJ0Me4SM/Y5v9bE + qh5J4MvY2MFK9wlgYtql6Xe/OQjzsFLa0sgWE9FBwRwMefWFOgGuRQ== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2025-12-27T00:54:06Z" + mac: ENC[AES256_GCM,data:1hvMwkfHxmnItx5XdCRx3vACIJ/+Zdf5r+YLnh2n6akn5LtlCtU+btDV3KgmBNg78RFaeqbJxlZfp6GPaaTbBky2IZ8hKFsQbxjdFfH7tgsQRz2VIsUgPSwuSAmWFbpxVMIf932FCqlVyzpiPBV3QzsMo+Iu7ehVHKB3tamoQ+U=,iv:aekLtJU6gShqWKHkLKoj0rxLJ1VhHiIQjzpvGyg5+xw=,tag:JKLwryAEG/suSjrIas7ihQ==,type:str] + unencrypted_suffix: _unencrypted + version: 3.11.0