configuration-desktop.nix

@@ -45,19 +45,13 @@
     kdePackages.plasma-thunderbolt
   ];
 
-  systemd.tmpfiles.settings.usersetup."e!"."/home/audrey/Downloads" = {
+  systemd.services.clear-downloads = {
-    user = "audrey";
+    description = "Wipe downloads on boot";
-    group = "users";
-    mode = "0700";
-    age = "1d";
-  };
-  systemd.services.sysfs-settings = {
-    description = "Set desktop sysfs tunables";
     script = ''
-      # https://bugzilla.kernel.org/show_bug.cgi?id=219112
+      rm -rf /home/audrey/Downloads
-      test "$(cat /sys/module/kvm/parameters/nx_huge_pages)" = "never" && exit 0 || true
+      mkdir /home/audrey/Downloads
-      echo "never" | tee /sys/module/kvm/parameters/nx_huge_pages
+      chown audrey:users /home/audrey/Downloads
     '';
-    before = [ "boot-complete.target" ];
+    wantedBy = [ "multi-user.target" ];
   };
 }

configuration.nix

@@ -1,6 +1,6 @@
 { config, lib, pkgs, ... }:
-let nixKey = "/var/lib/nix/binary-cache-key";
+
-in {
+{
   imports = [ ./overlays/packages.nix ];
   nixpkgs.config.allowUnfree = true;
 
@@ -11,20 +11,6 @@ in {
   boot.loader.efi.efiSysMountPoint = "/boot";
 
   nix.settings.extra-experimental-features = "nix-command flakes";
-  nix.settings.trusted-users = [ "audrey" ];
-  nix.settings.max-jobs = 1;
-  nix.settings.cores = 0;
-  nix.settings.secret-key-files = [ nixKey ];
-
-  systemd.services.nix-key-setup = {
-    description = "Generate a nix build signing key";
-    script = ''
-      test -f ${nixKey} && test -f ${nixKey}.pub && exit 0 || true
-      mkdir -p "$(dirname "${nixKey}")"
-      ${config.nix.package}/bin/nix-store --generate-binary-cache-key ${config.networking.hostName} ${nixKey} ${nixKey}.pub
-    '';
-    wantedBy = [ "multi-user.target" ];
-  };
 
   # Select internationalisation properties.
   i18n.defaultLocale = "en_US.UTF-8";
@@ -45,6 +31,7 @@ in {
     description = "Audrey Dutcher";
     isNormalUser = true;
     extraGroups = [ "wheel" "docker" ];
+    packages = with pkgs; [ ];
   };
 
   environment.systemPackages = with pkgs; [
@@ -57,7 +44,6 @@ in {
     file
     stdenv.cc
     patchelf
-    meld
 
     # language servers
     nil

sites/daisy/configuration.nix

@@ -10,8 +10,6 @@
   # fstrim is also enabled by nixos-hardware, but only runs for /boot
 
   services.fprintd.enable = true;
-  # fix hang on initial login
-  security.pam.services.login.fprintAuth = false;
 
   networking.hostName = "daisy";
   networking.hostId = "293a1290";
@@ -28,11 +26,5 @@
 
   environment.systemPackages = [
     pkgs.idapro9
-    pkgs.qemu_kvm
-    (pkgs.runCommand "OVMF-fd" {} ''
-      mkdir -p $out/share/FV
-      ln -s ${pkgs.OVMF.fd}/FV/OVMF_CODE.fd $out/share/FV/OVMF_CODE.fd
-    '')
-    pkgs.OVMF.fd
   ];
 }