This repository has no description
3.3 kB
150 lines
1{
2 self,
3 config,
4 pkgs,
5 ...
6}:
7
8{
9 imports = [
10 ../../2configs/mouse.nix
11 ../../2configs/retiolum.nix
12 ../../2configs/desktops/qtile
13 ../../2configs/pipewire.nix
14 ../../2configs/exim-retiolum.nix
15 ../../2configs/programs.nix
16 ../../2configs/bitcoin.nix
17 ../../2configs/browsers.nix
18 ../../2configs/games.nix
19 ../../2configs/pass.nix
20 ../../2configs/steam.nix
21 ../../2configs/wine.nix
22 ../../2configs/fetchWallpaper.nix
23 ../../2configs/mail.nix
24 ../../2configs/syncthing.nix
25 ../../2configs/br.nix
26 ../../2configs/ableton.nix
27 ../../2configs/dunst.nix
28 ../../2configs/rtl-sdr.nix
29 ../../2configs/printing
30 ../../2configs/network-manager.nix
31 ../../2configs/yellow-mounts/samba.nix
32 ../../2configs/ppp/x220-modem.nix
33 ../../2configs/ppp/umts-stick.nix
34 ../../2configs/consul.nix
35 ../../2configs/networkd.nix
36 ../../2configs/autotether.nix
37 {
38 krebs.iptables.tables.filter.INPUT.rules = [
39 #risk of rain
40 {
41 predicate = "-p tcp --dport 11100";
42 target = "ACCEPT";
43 }
44 #quake3
45 {
46 predicate = "-p tcp --dport 27950:27965";
47 target = "ACCEPT";
48 }
49 {
50 predicate = "-p udp --dport 27950:27965";
51 target = "ACCEPT";
52 }
53 ];
54 }
55 {
56 services.nginx = {
57 enable = true;
58 virtualHosts.default = {
59 default = true;
60 serverAliases = [
61 "localhost"
62 "${config.krebs.build.host.name}"
63 "${config.krebs.build.host.name}.r"
64 ];
65 locations."~ ^/~(.+?)(/.*)?\$".extraConfig = ''
66 alias /home/$1/public_html$2;
67 '';
68 };
69 };
70 }
71 {
72 services.redis.enable = true;
73 }
74 {
75 environment.systemPackages = [
76 pkgs.ovh-zone
77 self.packages.${pkgs.system}.bank
78 pkgs.adb-sync
79 pkgs.transgui
80 ];
81 }
82 {
83 services.tor = {
84 enable = true;
85 client.enable = true;
86 };
87 }
88 ];
89
90 krebs.build.host = config.krebs.hosts.mors;
91
92 environment.systemPackages = with pkgs; [
93 self.packages.${pkgs.system}.acronym
94
95 dnsutils
96 woeusb
97 (pkgs.writeDashBin "play-on" ''
98 HOST=$(echo 'styx\nshodan' | fzfmenu)
99 ssh -t "$HOST" -- mpv "$@"
100 '')
101 ];
102
103 #TODO: fix this shit
104 ##fprint stuff
105 ##sudo fprintd-enroll $USER to save fingerprints
106 #services.fprintd.enable = true;
107 #security.pam.services.sudo.fprintAuth = true;
108
109 users.extraGroups = {
110 loot = {
111 members = [
112 config.users.extraUsers.mainUser.name
113 "firefox"
114 "chromium"
115 "google"
116 "virtual"
117 ];
118 };
119 };
120
121 nixpkgs.config.android_sdk.accept_license = true;
122 programs.adb.enable = true;
123
124 # It may leak your data, but look how FAST it is!1!!
125 # https://make-linux-fast-again.com/
126 boot.kernelParams = [
127 "noibrs"
128 "noibpb"
129 "nopti"
130 "nospectre_v2"
131 "nospectre_v1"
132 "l1tf=off"
133 "nospec_store_bypass_disable"
134 "no_stf_barrier"
135 "mds=off"
136 "mitigations=off"
137 ];
138
139 boot.binfmt.emulatedSystems = [
140 "aarch64-linux"
141 ];
142
143 nix.trustedUsers = [
144 "root"
145 "lass"
146 ];
147
148 services.nscd.enableNsncd = true;
149
150}