Cloonar/nixos
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

some fixes

Browse Source
This commit is contained in:
Dominik Polakovics Polakovics
2024-01-29 19:46:40 +01:00
parent b622a620be
commit 270880c4f2
12 changed files with 45 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files

46
hosts/nb-01.cloonar.com/configuration.nix
View File

@@ -31,6 +31,10 @@
"electron-24.8.6"
];
fonts.packages = with pkgs; [
open-sans
];
virtualisation.waydroid.enable = true;
# security.sudo.wheelNeedsPassword = false;
@@ -187,27 +191,27 @@
ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --dport 51820 -j RETURN || true
'';
};
networking.wireguard.interfaces = {
wg0 = {
# Determines the IP address and subnet of the client's end of the tunnel interface.
ips = [ "10.42.98.201/32" ];
# Path to the private key file.
#
# Note: The private key can also be included inline via the privateKey option,
# but this makes the private key world-readable; thus, using privateKeyFile is
# recommended.
privateKeyFile = config.sops.secrets.wg-cloonar-key.path;
peers = [
{
publicKey = "TKQVDmBnf9av46kQxLQSBDhAeaK8r1zh8zpU64zuc1Q=";
allowedIPs = [ "10.42.97.0/20" "10.14.0.0/16" "10.25.0.0/16" ];
endpoint = "vpn.cloonar.com:51820"; # ToDo: route to endpoint not automatically configured https://wiki.archlinux.org/index.php/WireGuard#Loop_routing https://discourse.nixos.org/t/solved-minimal-firewall-setup-for-wireguard-client/7577
persistentKeepalive = 25;
}
];
};
};
# networking.wireguard.interfaces = {
# wg0 = {
# # Determines the IP address and subnet of the client's end of the tunnel interface.
# ips = [ "10.42.98.201/32" ];
# # Path to the private key file.
# #
# # Note: The private key can also be included inline via the privateKey option,
# # but this makes the private key world-readable; thus, using privateKeyFile is
# # recommended.
# privateKeyFile = config.sops.secrets.wg-cloonar-key.path;
#
# peers = [
# {
# publicKey = "TKQVDmBnf9av46kQxLQSBDhAeaK8r1zh8zpU64zuc1Q=";
# allowedIPs = [ "10.42.97.0/20" "10.14.0.0/16" "10.25.0.0/16" ];
# endpoint = "vpn.cloonar.com:51820"; # ToDo: route to endpoint not automatically configured https://wiki.archlinux.org/index.php/WireGuard#Loop_routing https://discourse.nixos.org/t/solved-minimal-firewall-setup-for-wireguard-client/7577
# persistentKeepalive = 25;
# }
# ];
# };
# };
# Facial recognition "Windows hello"
# services.ir-toggle.enable = true;

4
hosts/nb-01.cloonar.com/pkgs/bento.nix
View File

@@ -5,8 +5,8 @@ stdenv.mkDerivation rec {
name = "bento";
src = fetchgit {
url = "https://github.com/rapenne-s/bento.git";
rev = "6418bd64ecabbfa720c7a87ec39ee1a8b46a907e";
url = "https://github.com/dpolakovics/bento.git";
rev = "54d55f079e485c3be7bc0239806bb64203a911bf";
sha256 = "69b056298cf570debd3718b2e2cb7e63ad9465919c8190cf38043791ce61d0d6";
};

6
hosts/nb-01.cloonar.com/pkgs/bento/default.nix
View File

@@ -5,9 +5,9 @@ stdenv.mkDerivation rec {
name = "bento";
src = fetchgit {
url = "https://github.com/rapenne-s/bento.git";
rev = "6418bd64ecabbfa720c7a87ec39ee1a8b46a907e";
sha256 = "sha256-gLWoZh7fMn3cpIYSJFSVOQHA6qUIJikHXmucHX7P2WI=";
url = "https://github.com/dpolakovics/bento.git";
rev = "54d55f079e485c3be7bc0239806bb64203a911bf";
sha256 = "sha256-47+MM5uuWhMGKGiWK43lF7ynI392aTgLwCPccHMWlC8=";
};
buildInputs = [ ];