commit 048980110d49a81f59e07a83c6c6a3411f2ad2c7 · aylac.top/nixcfg-own-knot

+3 -3

flake.lock

···

       845
       845
        
           "secrets": {

     

       846
       846
        
             "flake": false,

     

       847
       847
        
             "locked": {

     

       848
       848
       -
               "lastModified": 1755538042,

     

       849
       849
       -
               "narHash": "sha256-kL2EyRZPQUUqdurdwJjtbqNhAUJ5Rmr9FnrGvgzINag=",

     

       848
       848
       +
               "lastModified": 1755567543,

     

       849
       849
       +
               "narHash": "sha256-ReQ7sLfWYvtrZ+k2y2Fww3eKxrL8TSnxX4YE3HrGa28=",

     

       850
       850
        
               "owner": "ayla6",

     

       851
       851
        
               "repo": "secrets",

     

       852
       852
       -
               "rev": "a81f823b6c21211436c2e1114534a6bb41f11462",

     

       852
       852
       +
               "rev": "7a6420dfc665bee84133361782630be2883110f4",

     

       853
       853
        
               "type": "github"

     

       854
       854
        
             },

     

       855
       855
        
             "original": {

+4 -1

hosts/jezebel/default.nix

···

       22
       22
        
           };

     

       23
       23
        
           profiles = {

     

       24
       24
        
             base.enable = true;

     

       25
       25
       -
             btrfs.enable = true;

     

       25
       25
       +
             btrfs = {

     

       26
       26
       +
               enable = true;

     

       27
       27
       +
               deduplicate = true;

     

       28
       28
       +
             };

     

       26
       29
        
             server.enable = true;

     

       27
       30
        
             backups.enable = true;

     

       28
       31
        
             vps.enable = true;

+4 -1

hosts/morgana/default.nix

···

       45
       45
        
           };

     

       46
       46
        
           desktop.gnome.enable = true;

     

       47
       47
        
           services = {

     

       48
       48
       -
             # i can't make caddy work :(

     

       49
       48
        
             caddy.enable = true;

     

       49
       49
       +
             dnsmasq = {

     

       50
       50
       +
               enable = true;

     

       51
       51
       +
               longCaches = false;

     

       52
       52
       +
             };

     

       50
       53
        
             tailscale = {

     

       51
       54
        
               enable = true;

     

       52
       55
        
               enableCaddy = true;

+1 -1

modules/home/desktop/gnome/default.nix

···

       61
       61
        
                 switch-to-application-10 = [];

     

       62
       62
        
               };

     

       63
       63
        
       

     

       64
       64
       -
               "org/gnome/system/location".enabled = true;

     

       64
       64
       +
               "org/gnome/system/location".enabled = false;

     

       65
       65
        
       

     

       66
       66
        
               "org/gnome/desktop/wm/keybindings" = {

     

       67
       67
        
                 move-to-monitor-down = [

+3 -2

modules/home/programs/chromium/default.nix

···

       12
       12
        
       

     

       13
       13
        
             extensions = [

     

       14
       14
        
               {id = "ddkjiahejlhfcafbddmgiahcphecmpfh";} # ublock origin lite

     

       15
       15
       +
               {id = "cjpalhdlnbpafiamejdnhcphjbkeiagm";} # ublock origin

     

       15
       16
        
               {id = "mdjildafknihdffpkfmmpnpoiajfjnjd";} # consent-o-matic

     

       16
       17
        
               {id = "clngdbkpkpeebahjckkjfobafhncgmne";} # stylus

     

       17
       18
        
               {id = "oboonakemofpalcgghocfoadofidjkkk";} # keepassxc

     
···

       42
       43
        
             package =

     

       43
       44
        
               if pkgs.stdenv.isDarwin

     

       44
       45
        
               then (pkgs.runCommand "chromium-0.0.0" {} "mkdir $out")

     

       45
       45
       -
               else pkgs.chromium;

     

       46
       46
       -
             # else pkgs.ungoogled-chromium;

     

       46
       46
       +
               # else pkgs.chromium;

     

       47
       47
       +
               else pkgs.ungoogled-chromium;

     

       47
       48
        
       

     

       48
       49
        
             commandLineArgs = lib.mkIf pkgs.stdenv.isLinux [

     

       49
       50
        
               "--enable-features=TouchpadOverscrollHistoryNavigation"

+2 -2

modules/home/programs/firefox/betterfox/securefox.nix

···

       414
       414
        
       

     

       415
       415
        
         # "accessibility.force_disabled" = 1;

     

       416
       416
        
         #   "devtools.accessibility.enabled" = false;

     

       417
       417
       -
         "identity.fxaccounts.enabled" = false;

     

       418
       418
       -
         "identity.fxaccounts.autoconfig.uri" = "";

     

       417
       417
       +
         # "identity.fxaccounts.enabled" = false;

     

       418
       418
       +
         # "identity.fxaccounts.autoconfig.uri" = "";

     

       419
       419
        
       

     

       420
       420
        
         #############################################################

     

       421
       421
        
         # SECTION: TELEMETRY

-1

modules/home/programs/mpv/default.nix

···

       20
       20
        
             config = {

     

       21
       21
        
               # Video output and rendering

     

       22
       22
        
               vo = "gpu-next";

     

       23
       23
       -
               hwdec = "vaapi";

     

       24
       23
        
               dither-depth = "auto";

     

       25
       24
        
       

     

       26
       25
        
               # Window and display

+1 -1

modules/nixos/profiles/btrfs/default.nix

···

       32
       32
        
             value = {

     

       33
       33
        
               # hashTableSizeMB = 2048;

     

       34
       34
        
               # this is ugly but who cares, i can't just get the size of the partition

     

       35
       35
       -
               # basically it's like, if it's one /data and on morgana then for sure it's like a terabyte of data, if it's on nanpi then it's 512gb, anything else is my laptop's ssd, 128gb, so 16mb

     

       35
       35
       +
               # basically it's like, if it's one /data and on morgana then for sure it's like a terabyte of data, if it's on nanpi then it's 512gb, anything else is my laptop's ssd, 128gb, so 16mb, but could also be the tiny 20gb jezebel disk, as it can't go lower than 16mb

     

       36
       36
        
               hashTableSizeMB =

     

       37
       37
        
                 if config.networking.hostName == "morgana" && fs.mountPoint == "/data"

     

       38
       38
        
                 then 128

+1 -1

modules/nixos/programs/firefox/default.nix

···

       19
       19
        
               DisableSetDesktopBackground = true;

     

       20
       20
        
               DisableTelemetry = true;

     

       21
       21
        
               DisplayBookmarksToolbar = "newtab";

     

       22
       22
       -
               DisableFirefoxAccounts = true;

     

       22
       22
       +
               #DisableFirefoxAccounts = true;

     

       23
       23
        
               DisableSafeMode = true;

     

       24
       24
        
       

     

       25
       25
        
               AutofillAddressEnabled = false;

+3

modules/nixos/programs/lanzaboote/default.nix

···

       15
       15
        
               configurationLimit = 10;

     

       16
       16
        
               pkiBundle = lib.mkDefault "/var/lib/sbctl";

     

       17
       17
        
               sortKey = "lanza";

     

       18
       18
       +
               settings = {

     

       19
       19
       +
                 inherit (config.boot.loader) timeout;

     

       20
       20
       +
               };

     

       18
       21
        
             };

     

       19
       22
        
       

     

       20
       23
        
             loader = {

+16 -3

modules/nixos/services/dnsmasq/default.nix

···

       3
       3
        
         config,

     

       4
       4
        
         ...

     

       5
       5
        
       }: {

     

       6
       6
       -
         options.myNixOS.services.dnsmasq.enable = lib.mkEnableOption "dnsmasq";

     

       6
       6
       +
         options.myNixOS.services.dnsmasq = {

     

       7
       7
       +
           enable = lib.mkEnableOption "dnsmasq";

     

       8
       8
       +
           longCaches = lib.mkOption {

     

       9
       9
       +
             type = lib.types.bool;

     

       10
       10
       +
             default = true;

     

       11
       11
       +
             description = "Have really long cache times.";

     

       12
       12
       +
           };

     

       13
       13
       +
         };

     

       7
       14
        
       

     

       8
       15
        
         config = lib.mkIf config.myNixOS.services.dnsmasq.enable {

     

       9
       16
        
           services.dnsmasq = {

     
···

       15
       22
        
       

     

       16
       23
        
               server = ["100.100.100.100"];

     

       17
       24
        
       

     

       18
       18
       -
               min-cache-ttl = 3600;

     

       19
       19
       -
               max-cache-ttl = 172800;

     

       25
       25
       +
               min-cache-ttl =

     

       26
       26
       +
                 if config.myNixOS.services.dnsmasq.longCaches

     

       27
       27
       +
                 then 3600

     

       28
       28
       +
                 else 300;

     

       29
       29
       +
               max-cache-ttl =

     

       30
       30
       +
                 if config.myNixOS.services.dnsmasq.longCaches

     

       31
       31
       +
                 then 172800

     

       32
       32
       +
                 else 3600;

     

       20
       33
        
             };

     

       21
       34
        
           };

     

       22
       35
        
           services.tailscale.extraUpFlags = ["--accept-dns=false"];

+5

modules/snippets/tailnet/default.nix

···

       44
       44
        
                 port = 3008;

     

       45
       45
        
                 vHost = "uptime-kuma.${config.mySnippets.tailnet.name}";

     

       46
       46
        
               };

     

       47
       47
       +
       

     

       48
       48
       +
               davis = {

     

       49
       49
       +
                 hostName = "nanpi";

     

       50
       50
       +
                 vHost = "davis.${config.mySnippets.tailnet.name}";

     

       51
       51
       +
               };

     

       47
       52
        
             };

     

       48
       53
        
           };

     

       49
       54
        
         };