This repository has no description
3.4 kB
155 lines
1{ config, lib, pkgs, ... }:
2
3{
4 imports = [
5 ../../2configs/mouse.nix
6 ../../2configs/retiolum.nix
7 ../../2configs/baseX.nix
8 ../../2configs/pipewire.nix
9 ../../2configs/exim-retiolum.nix
10 ../../2configs/programs.nix
11 ../../2configs/bitcoin.nix
12 ../../2configs/browsers.nix
13 ../../2configs/games.nix
14 ../../2configs/pass.nix
15 ../../2configs/steam.nix
16 ../../2configs/wine.nix
17 ../../2configs/fetchWallpaper.nix
18 ../../2configs/mail.nix
19 ../../2configs/syncthing.nix
20 ../../2configs/sync/sync.nix
21 ../../2configs/sync/decsync.nix
22 ../../2configs/sync/weechat.nix
23 ../../2configs/sync/the_playlist.nix
24 ../../2configs/br.nix
25 ../../2configs/ableton.nix
26 ../../2configs/dunst.nix
27 ../../2configs/rtl-sdr.nix
28 ../../2configs/print.nix
29 ../../2configs/network-manager.nix
30 ../../2configs/yellow-mounts/samba.nix
31 ../../2configs/ppp/x220-modem.nix
32 ../../2configs/ppp/umts-stick.nix
33 ../../2configs/consul.nix
34 ../../2configs/networkd.nix
35 ../../2configs/autotether.nix
36 {
37 krebs.iptables.tables.filter.INPUT.rules = [
38 #risk of rain
39 { predicate = "-p tcp --dport 11100"; target = "ACCEPT"; }
40 #quake3
41 { predicate = "-p tcp --dport 27950:27965"; target = "ACCEPT"; }
42 { predicate = "-p udp --dport 27950:27965"; target = "ACCEPT"; }
43 ];
44 }
45 {
46 services.nginx = {
47 enable = true;
48 virtualHosts.default = {
49 default = true;
50 serverAliases = [
51 "localhost"
52 "${config.krebs.build.host.name}"
53 "${config.krebs.build.host.name}.r"
54 ];
55 locations."~ ^/~(.+?)(/.*)?\$".extraConfig = ''
56 alias /home/$1/public_html$2;
57 '';
58 };
59 };
60 }
61 {
62 services.redis.enable = true;
63 }
64 {
65 environment.systemPackages = [
66 pkgs.ovh-zone
67 pkgs.bank
68 pkgs.adb-sync
69 pkgs.transgui
70 ];
71 }
72 {
73 services.tor = {
74 enable = true;
75 client.enable = true;
76 };
77 }
78 ];
79
80 krebs.build.host = config.krebs.hosts.mors;
81
82 environment.systemPackages = with pkgs; [
83 acronym
84 brain
85 cac-api
86 sshpass
87 get
88 hashPassword
89 urban
90 mk_sql_pair
91 remmina
92 transmission
93
94 macchanger
95
96 dnsutils
97 woeusb
98 (pkgs.writeDashBin "play-on" ''
99 HOST=$(echo 'styx\nshodan' | fzfmenu)
100 ssh -t "$HOST" -- mpv "$@"
101 '')
102 ];
103
104 #TODO: fix this shit
105 ##fprint stuff
106 ##sudo fprintd-enroll $USER to save fingerprints
107 #services.fprintd.enable = true;
108 #security.pam.services.sudo.fprintAuth = true;
109
110 users.extraGroups = {
111 loot = {
112 members = [
113 config.users.extraUsers.mainUser.name
114 "firefox"
115 "chromium"
116 "google"
117 "virtual"
118 ];
119 };
120 };
121
122 nixpkgs.config.android_sdk.accept_license = true;
123 programs.adb.enable = true;
124
125
126 services.earlyoom = {
127 enable = true;
128 freeMemThreshold = 5;
129 };
130
131
132 # It may leak your data, but look how FAST it is!1!!
133 # https://make-linux-fast-again.com/
134 boot.kernelParams = [
135 "noibrs"
136 "noibpb"
137 "nopti"
138 "nospectre_v2"
139 "nospectre_v1"
140 "l1tf=off"
141 "nospec_store_bypass_disable"
142 "no_stf_barrier"
143 "mds=off"
144 "mitigations=off"
145 ];
146
147 boot.binfmt.emulatedSystems = [
148 "aarch64-linux"
149 ];
150
151 nix.trustedUsers = [ "root" "lass" ];
152
153 services.nscd.enableNsncd = true;
154
155}