Added secrets and modified Nvidia settings

This commit is contained in:
Alexandre 2025-12-27 02:10:48 +01:00
parent 3279e6837a
commit a9170a1eca
3 changed files with 60 additions and 1 deletions

7
.sops.yaml Normal file
View File

@ -0,0 +1,7 @@
keys:
- &primary age1h0srffx69v9cp0xd8nzgac9zmxx0x5d8d7jrf3wgl3zea9luy5fsn9llrl
creation_rules:
- path_regex: secrets/secrets.yaml$
key_groups:
- age:
- *primary

View File

@ -7,13 +7,44 @@
}; };
#Nvidia Drivers #Nvidia Drivers
nvidia = { nvidia = {
open = true; open = false; # My 1660S works better with closed source drivers
modesetting = { modesetting = {
enable = true; enable = true;
}; };
}; };
}; };
boot = {
kernelParams = [
"nvidia-drm.modset=1" # DRM modesetting
];
initrd.kernelModules = [
"nvidia"
"nvidia_modeset"
"nvidia_uvm"
"nvidia_drm"
];
};
# Environment variables
environment.sessionVariables = {
# Backend GBM for NVIDIA
GBM_BACKEND = "nvidia-drm";
# Use NVIDIA pilot for libva (video acceleration)
LIBVA_DRIVER_NAME = "nvidia";
# Vendor library OpenGL
__GLX_VENDOR_LIBRARY_NAME = "nvidia";
XDG_SESSION_TYPE = "wayland";
WLR_NO_HARDWARE_CURSORS = "1";
# Native Wayland Electron Apps
NIXOS_OZONE_WL = "1";
};
# Nvidia Drivers # Nvidia Drivers
services.xserver.videoDrivers = ["nvidia"]; services.xserver.videoDrivers = ["nvidia"];
} }

21
secrets/secrets.yaml Normal file
View File

@ -0,0 +1,21 @@
hello: ENC[AES256_GCM,data:iUTvN5BcSq9z1rm8A9IGi/bC6Y9ktTb0ZJHVnT2FDxX18LBVw9fPJ/u1mzZ4AQ==,iv:RQKjSPXBGmvv2zxtCNWgzwa6M1U6ae8FEVdZ8un4z84=,tag:OgrBQgzjmHELcztURokRAw==,type:str]
example-key: ENC[AES256_GCM,data:b2Gx6CGtub7rAnd/kw==,iv:uWJTovo9X/VkXUW7HRfSuQfo2wZ7yjShfUeRghEQcW0=,tag:R0T8tbijxfAUu19wN9iQdw==,type:str]
#ENC[AES256_GCM,data:igl42zvcTfvOnZ5eKnWHpw==,iv:ImJmyaweKF5ADkwTarcVGaKb3zb2ycXPzq0KItU64+k=,tag:ydg9C6ZO47QsLoguq60JCg==,type:comment]
myservice:
my_subdir:
my_secret: ENC[AES256_GCM,data:LReh8HM87Fbj,iv:HJT6/8NYWePsSo1oBpoB62cnBS68ntkyYX7Pd0Q3DsA=,tag:sKSdst4zkQAHS+7JSDhbIg==,type:str]
sops:
age:
- recipient: age1h0srffx69v9cp0xd8nzgac9zmxx0x5d8d7jrf3wgl3zea9luy5fsn9llrl
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRazdLc2V3bU5WTXlLVnlB
TlZGMlo2SlB6QlFyMzVPYmErVTh6QUpvMFJFCkdXTXozdlpiTVhkTEN5S2d5aVBu
YjZ6SU5NRVFxR1VZb2loeWZGN3VqUDQKLS0tIGxlZXhxTS9HL0V2YXRXVEc0RDVz
TGNWMXd1MmVaMndERGpFc1N0TklFNncKFvO2Y80Z0pLEdoKlmAJ0Me4SM/Y5v9bE
qh5J4MvY2MFK9wlgYtql6Xe/OQjzsFLa0sgWE9FBwRwMefWFOgGuRQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-12-27T00:54:06Z"
mac: ENC[AES256_GCM,data:1hvMwkfHxmnItx5XdCRx3vACIJ/+Zdf5r+YLnh2n6akn5LtlCtU+btDV3KgmBNg78RFaeqbJxlZfp6GPaaTbBky2IZ8hKFsQbxjdFfH7tgsQRz2VIsUgPSwuSAmWFbpxVMIf932FCqlVyzpiPBV3QzsMo+Iu7ehVHKB3tamoQ+U=,iv:aekLtJU6gShqWKHkLKoj0rxLJ1VhHiIQjzpvGyg5+xw=,tag:JKLwryAEG/suSjrIas7ihQ==,type:str]
unencrypted_suffix: _unencrypted
version: 3.11.0