This repository has no description
3.1 kB
146 lines
1{
2 self,
3 config,
4 pkgs,
5 ...
6}:
7
8{
9 imports = [
10 ../../2configs
11 ../../2configs/mouse.nix
12 ../../2configs/retiolum.nix
13 ../../2configs/desktops/qtile/nixos.nix
14 ../../2configs/pipewire.nix
15 ../../2configs/exim-retiolum.nix
16 ../../2configs/programs.nix
17 ../../2configs/browsers.nix
18 ../../2configs/pass.nix
19 ../../2configs/steam.nix
20 ../../2configs/fetchWallpaper.nix
21 ../../2configs/mail.nix
22 ../../2configs/syncthing.nix
23 ../../2configs/ableton.nix
24 ../../2configs/dunst.nix
25 ../../2configs/rtl-sdr.nix
26 ../../2configs/printing
27 ../../2configs/network-manager.nix
28 ../../2configs/yellow-mounts/samba.nix
29 ../../2configs/consul.nix
30 ../../2configs/networkd.nix
31 ../../2configs/autotether.nix
32 ../../2configs/autoupdate.nix
33 {
34 krebs.iptables.tables.filter.INPUT.rules = [
35 #risk of rain
36 {
37 predicate = "-p tcp --dport 11100";
38 target = "ACCEPT";
39 }
40 #quake3
41 {
42 predicate = "-p tcp --dport 27950:27965";
43 target = "ACCEPT";
44 }
45 {
46 predicate = "-p udp --dport 27950:27965";
47 target = "ACCEPT";
48 }
49 ];
50 }
51 {
52 services.nginx = {
53 enable = true;
54 virtualHosts.default = {
55 default = true;
56 serverAliases = [
57 "localhost"
58 "${config.krebs.build.host.name}"
59 "${config.krebs.build.host.name}.r"
60 ];
61 locations."~ ^/~(.+?)(/.*)?\$".extraConfig = ''
62 alias /home/$1/public_html$2;
63 '';
64 };
65 };
66 }
67 {
68 services.redis.servers."".enable = true;
69 }
70 {
71 environment.systemPackages = [
72 pkgs.ovh-zone
73 self.packages.${pkgs.system}.bank
74 pkgs.adb-sync
75 pkgs.transgui
76 ];
77 }
78 {
79 services.tor = {
80 enable = true;
81 client.enable = true;
82 };
83 }
84 ];
85
86 krebs.build.host = config.krebs.hosts.mors;
87
88 environment.systemPackages = with pkgs; [
89 self.packages.${pkgs.system}.acronym
90
91 dnsutils
92 woeusb
93 (pkgs.writeDashBin "play-on" ''
94 HOST=$(echo 'styx\nshodan' | fzfmenu)
95 ssh -t "$HOST" -- mpv "$@"
96 '')
97 ];
98
99 #TODO: fix this shit
100 ##fprint stuff
101 ##sudo fprintd-enroll $USER to save fingerprints
102 #services.fprintd.enable = true;
103 #security.pam.services.sudo.fprintAuth = true;
104
105 users.extraGroups = {
106 loot = {
107 members = [
108 config.users.extraUsers.mainUser.name
109 "firefox"
110 "chromium"
111 "google"
112 "virtual"
113 ];
114 };
115 };
116
117 nixpkgs.config.android_sdk.accept_license = true;
118 programs.adb.enable = true;
119
120 # It may leak your data, but look how FAST it is!1!!
121 # https://make-linux-fast-again.com/
122 boot.kernelParams = [
123 "noibrs"
124 "noibpb"
125 "nopti"
126 "nospectre_v2"
127 "nospectre_v1"
128 "l1tf=off"
129 "nospec_store_bypass_disable"
130 "no_stf_barrier"
131 "mds=off"
132 "mitigations=off"
133 ];
134
135 boot.binfmt.emulatedSystems = [
136 "aarch64-linux"
137 ];
138
139 nix.settings.trusted-users = [
140 "root"
141 "lass"
142 ];
143
144 services.nscd.enableNsncd = true;
145
146}