steam, dev tools

modules/packages.nix

@@ -7,6 +7,11 @@
     "castlabs-electron"
     "tidal-hifi"
     "discord-ptb"
+    "steam"
+    "steam-original"
+    "steam-unwrapped"
+    "steam-run"
+    "terraform"
   ];
 
   # List packages installed in system profile.
@@ -38,6 +43,8 @@
     usbutils    # lsusb
     lsof        # list open files
     iotop       # disk I/O monitor
+    smartmontools # smartctl
+    nvme-cli    # nvme
 
     # Networking tools
     net-tools   # netstat, ifconfig (legacy)
@@ -49,14 +56,42 @@
     # Filesystem
     os-prober
     btrfs-progs
+    gparted
 
     # Development
     nodejs_20
     gnupg
 
+    # Automation / Cloud tools
+    ansible
+    ansible-lint
+    sshpass         # for ansible password authentication
+    terraform
+    opentofu        # open-source Terraform fork
+    kubectl
+    kubernetes-helm # helm
+    k9s             # Kubernetes TUI
+    awscli2
+    # azure-cli
+    google-cloud-sdk
+    docker-compose
+    argocd
+    fluxcd
+    kubectx         # switch between contexts/namespaces
+    stern           # multi-pod log tailing
+
     # WWAN modem tools
     libmbim
     libqmi
     modemmanager
+
+    # Estonian ID / digital signature
+    qdigidoc
+
+    # Privacy / Anonymity
+    tor-browser
+    ivpn
+    ivpn-service
+    ivpn-ui
   ];
 }

modules/programs.nix

@@ -26,6 +26,16 @@
   # Enable flakes
   nix.settings.experimental-features = [ "nix-command" "flakes" ];
 
+  # Steam gaming platform
+  programs.steam = {
+    enable = true;
+    remotePlay.openFirewall = true;
+    dedicatedServer.openFirewall = true;
+  };
+
   # Enable the OpenSSH daemon.
   # services.openssh.enable = true;
+
+  # Enable fwupd service
+  services.fwupd.enable = true;
 }

modules/users.nix

@@ -2,6 +2,8 @@
 { config, pkgs, lib, ... }:
 
 {
+  # Enable passwordless sudo for wheel group
+  security.sudo.wheelNeedsPassword = false;
   # Define a user account. Don't forget to set a password with 'passwd'.
   users.users.asxpi = {
     isNormalUser = true;