This repository has no description
3.1 kB
145 lines
1{
2 self,
3 config,
4 pkgs,
5 ...
6}:
7
8{
9 imports = [
10 ../../2configs/mouse.nix
11 ../../2configs/retiolum.nix
12 ../../2configs/desktops/qtile/nixos.nix
13 ../../2configs/pipewire.nix
14 ../../2configs/exim-retiolum.nix
15 ../../2configs/programs.nix
16 ../../2configs/browsers.nix
17 ../../2configs/pass.nix
18 ../../2configs/steam.nix
19 ../../2configs/fetchWallpaper.nix
20 ../../2configs/mail.nix
21 ../../2configs/syncthing.nix
22 ../../2configs/ableton.nix
23 ../../2configs/dunst.nix
24 ../../2configs/rtl-sdr.nix
25 ../../2configs/printing
26 ../../2configs/network-manager.nix
27 ../../2configs/yellow-mounts/samba.nix
28 ../../2configs/consul.nix
29 ../../2configs/networkd.nix
30 ../../2configs/autotether.nix
31 ../../2configs/autoupdate.nix
32 {
33 krebs.iptables.tables.filter.INPUT.rules = [
34 #risk of rain
35 {
36 predicate = "-p tcp --dport 11100";
37 target = "ACCEPT";
38 }
39 #quake3
40 {
41 predicate = "-p tcp --dport 27950:27965";
42 target = "ACCEPT";
43 }
44 {
45 predicate = "-p udp --dport 27950:27965";
46 target = "ACCEPT";
47 }
48 ];
49 }
50 {
51 services.nginx = {
52 enable = true;
53 virtualHosts.default = {
54 default = true;
55 serverAliases = [
56 "localhost"
57 "${config.krebs.build.host.name}"
58 "${config.krebs.build.host.name}.r"
59 ];
60 locations."~ ^/~(.+?)(/.*)?\$".extraConfig = ''
61 alias /home/$1/public_html$2;
62 '';
63 };
64 };
65 }
66 {
67 services.redis.enable = true;
68 }
69 {
70 environment.systemPackages = [
71 pkgs.ovh-zone
72 self.packages.${pkgs.system}.bank
73 pkgs.adb-sync
74 pkgs.transgui
75 ];
76 }
77 {
78 services.tor = {
79 enable = true;
80 client.enable = true;
81 };
82 }
83 ];
84
85 krebs.build.host = config.krebs.hosts.mors;
86
87 environment.systemPackages = with pkgs; [
88 self.packages.${pkgs.system}.acronym
89
90 dnsutils
91 woeusb
92 (pkgs.writeDashBin "play-on" ''
93 HOST=$(echo 'styx\nshodan' | fzfmenu)
94 ssh -t "$HOST" -- mpv "$@"
95 '')
96 ];
97
98 #TODO: fix this shit
99 ##fprint stuff
100 ##sudo fprintd-enroll $USER to save fingerprints
101 #services.fprintd.enable = true;
102 #security.pam.services.sudo.fprintAuth = true;
103
104 users.extraGroups = {
105 loot = {
106 members = [
107 config.users.extraUsers.mainUser.name
108 "firefox"
109 "chromium"
110 "google"
111 "virtual"
112 ];
113 };
114 };
115
116 nixpkgs.config.android_sdk.accept_license = true;
117 programs.adb.enable = true;
118
119 # It may leak your data, but look how FAST it is!1!!
120 # https://make-linux-fast-again.com/
121 boot.kernelParams = [
122 "noibrs"
123 "noibpb"
124 "nopti"
125 "nospectre_v2"
126 "nospectre_v1"
127 "l1tf=off"
128 "nospec_store_bypass_disable"
129 "no_stf_barrier"
130 "mds=off"
131 "mitigations=off"
132 ];
133
134 boot.binfmt.emulatedSystems = [
135 "aarch64-linux"
136 ];
137
138 nix.trustedUsers = [
139 "root"
140 "lass"
141 ];
142
143 services.nscd.enableNsncd = true;
144
145}