feat: add basic 'gaming' module to 'andromache'

flake.nix

@@ -55,7 +55,6 @@
       home-manager,
       nixgl,
       git-hooks,
-      colmena,
       ...
     }@inputs:
     let

hosts/andromache/default.nix

@@ -27,6 +27,7 @@ in
     ../../modules/desktops/niri
     ../../modules/backups
     ../../modules/bluetooth
+    ../../modules/gaming
     ../../modules/keyboard
     (import ../../modules/networking { inherit hostName; })
     ../../modules/users
@@ -38,6 +39,7 @@ in
     (import ../../modules/secrets { inherit lib inputs config; })
     ../../modules/docker
     ../../modules/syncthing
+    ../../modules/nvidia
   ];
 
   home-manager.users.${username} = import ../../home/hosts/andromache {
@@ -79,18 +81,7 @@ in
     };
   };
 
-  hardware = {
-    cpu.intel.updateMicrocode = true;
-    graphics.enable = true;
-    nvidia = {
-      modesetting.enable = true;
-      powerManagement.enable = true;
-      powerManagement.finegrained = false;
-      open = true;
-      nvidiaSettings = true;
-      package = config.boot.kernelPackages.nvidiaPackages.stable;
-    };
-  };
+  hardware.cpu.intel.updateMicrocode = true;
 
   boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
 
@@ -99,19 +90,15 @@ in
   ];
 
   services = {
-    xserver = {
-      videoDrivers = [ "nvidia" ];
+    locate = {
+      enable = true;
+      package = pkgs.plocate;
     };
 
     openssh = {
       enable = true;
       harden = true;
     };
-    locate = {
-      enable = true;
-      package = pkgs.plocate;
-    };
-  };
 
   my.syncthing.enable = true;
 

modules/audio/default.nix

@@ -1,6 +1,9 @@
-_:
-
 {
+  nixpkgs.allowedUnfree = [
+    "spotify"
+    "spotify-unwrapped"
+  ];
+
   security.rtkit.enable = true;
   services = {
     pulseaudio.enable = false;

modules/common/default.nix

@@ -1,18 +1,25 @@
-let
-  flakePath = "/home/h/nix";
-in
 {
   inputs,
   outputs,
   dotsPath,
+  config,
   ...
 }:
 
+let
+  inherit (inputs.nixpkgs) lib;
+in
 {
   imports = [
     inputs.home-manager.nixosModules.default
   ];
 
+  options.nixpkgs.allowedUnfree = lib.mkOption {
+    type = lib.types.listOf lib.types.str;
+    default = [ ];
+  };
+
+  config = {
     system.stateVersion = "25.05";
 
     nix.settings.experimental-features = [
@@ -20,7 +27,8 @@ in
       "flakes"
     ];
 
-  nixpkgs.config.allowUnfree = true;
+    nixpkgs.config.allowUnfreePredicate =
+      pkg: builtins.elem (lib.getName pkg) config.nixpkgs.allowedUnfree;
 
     home-manager = {
       useGlobalPkgs = true;
@@ -44,7 +52,6 @@ in
 
     system.autoUpgrade = {
       enable = true;
-    flake = flakePath;
       flags = [
         "--recreate-lock-file"
         "--commit-lock-file"
@@ -55,4 +62,5 @@ in
       randomizedDelaySec = "45min";
       allowReboot = false;
     };
+  };
 }

modules/gaming/default.nix

@@ -0,0 +1,12 @@
+{
+  nixpkgs.allowedUnfree = [
+    "steam"
+    "steam-unwrapped"
+  ];
+
+  programs.steam = {
+    enable = true;
+    remotePlay.openFirewall = false;
+    dedicatedServer.openFirewall = false;
+  };
+}

modules/nvidia/default.nix

@@ -0,0 +1,22 @@
+{ config, ... }:
+
+{
+  nixpkgs.allowedUnfree = [
+    "nvidia-x11"
+    "nvidia-persistenced"
+    "nvidia-settings"
+  ];
+
+  hardware.graphics.enable = true;
+
+  hardware.nvidia = {
+    modesetting.enable = true;
+    powerManagement.enable = true;
+    powerManagement.finegrained = false;
+    open = true;
+    nvidiaSettings = true;
+    package = config.boot.kernelPackages.nvidiaPackages.stable;
+  };
+
+  services.xserver.videoDrivers = [ "nvidia" ];
+}