steveej/infra
1
0
Fork 0
Code Issues 2 Pull requests Projects Releases Packages Wiki Activity Actions

flakfiy some Justfile recipes and experiment with wayland based custom desktop

Browse source
This commit is contained in:
steveej 2023-05-21 11:58:57 +02:00
parent 06a47c0d23
commit 476e10780b
18 changed files with 739 additions and 149 deletions
Download patch file Download diff file Expand all files Collapse all files

20
nix/os/devices/steveej-t14/system.nix
View file

@ -31,13 +31,22 @@ in {
];
networking.firewall.enable = true;
networking.firewall.allowedTCPPorts = [
services.openssh.openFirewall = false;
# TODO: upstream feature for inverse rule to work: `! --in-interface zt+`
networking.firewall.interfaces."eth+".allowedTCPPorts = [
22
# syncthing
22000
# iperf3
5201
];
networking.firewall.interfaces."eth+".allowedUDPPorts = [
# syncthing
22000 21027
];
networking.firewall.logRefusedConnections = false;
networking.usePredictableInterfaceNames = false;
@ -62,7 +71,7 @@ in {
podman = {
enable = true;
dockerCompat = true;
defaultNetwork.dnsname.enable = true;
# defaultNetwork.dnsname.enable = true;
};
};
@ -83,4 +92,11 @@ in {
time.timeZone = lib.mkForce passwords.timeZone.stefan;
hardware.ledger.enable = true;
services.zerotierone = {
enable = true;
joinNetworks = [
"93afae5963c547f1"
];
};
}