This repository has no description
3.3 kB
151 lines
1{ config, lib, pkgs, ... }:
2
3{
4 imports = [
5 ../../2configs/mouse.nix
6 ../../2configs/retiolum.nix
7 ../../2configs/baseX.nix
8 ../../2configs/pipewire.nix
9 ../../2configs/exim-retiolum.nix
10 ../../2configs/programs.nix
11 ../../2configs/bitcoin.nix
12 ../../2configs/browsers.nix
13 ../../2configs/games.nix
14 ../../2configs/pass.nix
15 ../../2configs/steam.nix
16 ../../2configs/wine.nix
17 ../../2configs/fetchWallpaper.nix
18 ../../2configs/mail.nix
19 ../../2configs/syncthing.nix
20 ../../2configs/br.nix
21 ../../2configs/ableton.nix
22 ../../2configs/dunst.nix
23 ../../2configs/rtl-sdr.nix
24 ../../2configs/print.nix
25 ../../2configs/network-manager.nix
26 ../../2configs/yellow-mounts/samba.nix
27 ../../2configs/ppp/x220-modem.nix
28 ../../2configs/ppp/umts-stick.nix
29 ../../2configs/consul.nix
30 ../../2configs/networkd.nix
31 ../../2configs/autotether.nix
32 {
33 krebs.iptables.tables.filter.INPUT.rules = [
34 #risk of rain
35 { predicate = "-p tcp --dport 11100"; target = "ACCEPT"; }
36 #quake3
37 { predicate = "-p tcp --dport 27950:27965"; target = "ACCEPT"; }
38 { predicate = "-p udp --dport 27950:27965"; target = "ACCEPT"; }
39 ];
40 }
41 {
42 services.nginx = {
43 enable = true;
44 virtualHosts.default = {
45 default = true;
46 serverAliases = [
47 "localhost"
48 "${config.krebs.build.host.name}"
49 "${config.krebs.build.host.name}.r"
50 ];
51 locations."~ ^/~(.+?)(/.*)?\$".extraConfig = ''
52 alias /home/$1/public_html$2;
53 '';
54 };
55 };
56 }
57 {
58 services.redis.enable = true;
59 }
60 {
61 environment.systemPackages = [
62 pkgs.ovh-zone
63 pkgs.bank
64 pkgs.adb-sync
65 pkgs.transgui
66 ];
67 }
68 {
69 services.tor = {
70 enable = true;
71 client.enable = true;
72 };
73 }
74 ];
75
76 krebs.build.host = config.krebs.hosts.mors;
77
78 environment.systemPackages = with pkgs; [
79 acronym
80 brain
81 cac-api
82 sshpass
83 get
84 hashPassword
85 urban
86 mk_sql_pair
87 remmina
88 transmission
89
90 macchanger
91
92 dnsutils
93 woeusb
94 (pkgs.writeDashBin "play-on" ''
95 HOST=$(echo 'styx\nshodan' | fzfmenu)
96 ssh -t "$HOST" -- mpv "$@"
97 '')
98 ];
99
100 #TODO: fix this shit
101 ##fprint stuff
102 ##sudo fprintd-enroll $USER to save fingerprints
103 #services.fprintd.enable = true;
104 #security.pam.services.sudo.fprintAuth = true;
105
106 users.extraGroups = {
107 loot = {
108 members = [
109 config.users.extraUsers.mainUser.name
110 "firefox"
111 "chromium"
112 "google"
113 "virtual"
114 ];
115 };
116 };
117
118 nixpkgs.config.android_sdk.accept_license = true;
119 programs.adb.enable = true;
120
121
122 services.earlyoom = {
123 enable = true;
124 freeMemThreshold = 5;
125 };
126
127
128 # It may leak your data, but look how FAST it is!1!!
129 # https://make-linux-fast-again.com/
130 boot.kernelParams = [
131 "noibrs"
132 "noibpb"
133 "nopti"
134 "nospectre_v2"
135 "nospectre_v1"
136 "l1tf=off"
137 "nospec_store_bypass_disable"
138 "no_stf_barrier"
139 "mds=off"
140 "mitigations=off"
141 ];
142
143 boot.binfmt.emulatedSystems = [
144 "aarch64-linux"
145 ];
146
147 nix.trustedUsers = [ "root" "lass" ];
148
149 services.nscd.enableNsncd = true;
150
151}