commit e70f6be11860c86c3391b9b946024d9c21c85553 · aylac.top/nixcfg-own-knot

+40 -19

flake.lock

···

       67
       67
        
               "type": "github"

     

       68
       68
        
             }

     

       69
       69
        
           },

     

       70
       70
       +
           "aylapkgs": {

     

       71
       71
       +
             "inputs": {

     

       72
       72
       +
               "nixpkgs": [

     

       73
       73
       +
                 "nixpkgs"

     

       74
       74
       +
               ]

     

       75
       75
       +
             },

     

       76
       76
       +
             "locked": {

     

       77
       77
       +
               "lastModified": 1757109107,

     

       78
       78
       +
               "narHash": "sha256-EiwgbwyzQs7ntOV4w+3L39CIVHBur0IGSWSMsPLeYkY=",

     

       79
       79
       +
               "owner": "ayla6",

     

       80
       80
       +
               "repo": "pkgs",

     

       81
       81
       +
               "rev": "3b3adb4d52381b68277bbd2f8afa30b5e3250280",

     

       82
       82
       +
               "type": "github"

     

       83
       83
       +
             },

     

       84
       84
       +
             "original": {

     

       85
       85
       +
               "owner": "ayla6",

     

       86
       86
       +
               "repo": "pkgs",

     

       87
       87
       +
               "type": "github"

     

       88
       88
       +
             }

     

       89
       89
       +
           },

     

       70
       90
        
           "copyparty": {

     

       71
       91
        
             "inputs": {

     

       72
       92
        
               "flake-utils": "flake-utils",

     

       73
       93
        
               "nixpkgs": "nixpkgs"

     

       74
       94
        
             },

     

       75
       95
        
             "locked": {

     

       76
       76
       -
               "lastModified": 1756936507,

     

       77
       77
       -
               "narHash": "sha256-OhXMy1+YuYlK8d394AImAS+EihDsKzdu8o5NEPyOzOg=",

     

       96
       96
       +
               "lastModified": 1757108613,

     

       97
       97
       +
               "narHash": "sha256-okw03yWTUT9bmcxs0HOC/hJ8Ui1Qk6zmZyA1i0n2ics=",

     

       78
       98
        
               "owner": "9001",

     

       79
       99
        
               "repo": "copyparty",

     

       80
       80
       -
               "rev": "e6755aa8a1fe85daf81ac5ba462f96c26ff505ba",

     

       100
       100
       +
               "rev": "aaeec11f81740b1068ae952ce2e8795e60d5673a",

     

       81
       101
        
               "type": "github"

     

       82
       102
        
             },

     

       83
       103
        
             "original": {

     
···

       659
       679
        
               ]

     

       660
       680
        
             },

     

       661
       681
        
             "locked": {

     

       662
       662
       -
               "lastModified": 1756903364,

     

       663
       663
       -
               "narHash": "sha256-vZh/YH2D7oDFek10r0TbGn3qJrqGv69sSP+oF8PFDqQ=",

     

       682
       682
       +
               "lastModified": 1757075491,

     

       683
       683
       +
               "narHash": "sha256-a+NMGl5tcvm+hyfSG2DlVPa8nZLpsumuRj1FfcKb2mQ=",

     

       664
       684
        
               "owner": "nix-community",

     

       665
       685
        
               "repo": "home-manager",

     

       666
       666
       -
               "rev": "6159629d05a0e92bb7fb7211e74106ae1d552401",

     

       686
       686
       +
               "rev": "f56bf065f9abedc7bc15e1f2454aa5c8edabaacf",

     

       667
       687
        
               "type": "github"

     

       668
       688
        
             },

     

       669
       689
        
             "original": {

     
···

       879
       899
        
           },

     

       880
       900
        
           "nixpkgs-unstable": {

     

       881
       901
        
             "locked": {

     

       882
       882
       -
               "lastModified": 1756819007,

     

       883
       883
       -
               "narHash": "sha256-12V64nKG/O/guxSYnr5/nq1EfqwJCdD2+cIGmhz3nrE=",

     

       902
       902
       +
               "lastModified": 1756911493,

     

       903
       903
       +
               "narHash": "sha256-6n/n1GZQ/vi+LhFXMSyoseKdNfc2QQaSBXJdgamrbkE=",

     

       884
       904
        
               "owner": "NixOS",

     

       885
       905
        
               "repo": "nixpkgs",

     

       886
       886
       -
               "rev": "aaff8c16d7fc04991cac6245bee1baa31f72b1e1",

     

       906
       906
       +
               "rev": "c6a788f552b7b7af703b1a29802a7233c0067908",

     

       887
       907
        
               "type": "github"

     

       888
       908
        
             },

     

       889
       909
        
             "original": {

     
···

       947
       967
        
               "nixpkgs": "nixpkgs_4"

     

       948
       968
        
             },

     

       949
       969
        
             "locked": {

     

       950
       950
       -
               "lastModified": 1756943002,

     

       951
       951
       -
               "narHash": "sha256-EjCUp4JcSeTzPCDwwaJZCmAV8dejVYCH+uRaWzJDDnU=",

     

       970
       970
       +
               "lastModified": 1757105782,

     

       971
       971
       +
               "narHash": "sha256-t6ysDkG1ISWe4XE/M/o8msGguTTPKRpZJugfkLsvMLs=",

     

       952
       972
        
               "owner": "nix-community",

     

       953
       973
        
               "repo": "NUR",

     

       954
       954
       -
               "rev": "849e949d461b5b1ac83450254f71b47d429e4923",

     

       974
       974
       +
               "rev": "3f0eeedfbb93e70a080e84b3689725ebe2051969",

     

       955
       975
        
               "type": "github"

     

       956
       976
        
             },

     

       957
       977
        
             "original": {

     
···

       991
       1011
        
             "inputs": {

     

       992
       1012
        
               "actions-nix": "actions-nix",

     

       993
       1013
        
               "agenix": "agenix",

     

       1014
       1014
       +
               "aylapkgs": "aylapkgs",

     

       994
       1015
        
               "copyparty": "copyparty",

     

       995
       1016
        
               "disko": "disko",

     

       996
       1017
        
               "files": "files",

     
···

       1104
       1125
        
               "sqlite-lib-src": "sqlite-lib-src"

     

       1105
       1126
        
             },

     

       1106
       1127
        
             "locked": {

     

       1107
       1107
       -
               "lastModified": 1756905886,

     

       1108
       1108
       -
               "narHash": "sha256-zaC6EmDpvM7j0LxPA0NBldYlOjmQd7Durtm39/5ePew=",

     

       1128
       1128
       +
               "lastModified": 1757078979,

     

       1129
       1129
       +
               "narHash": "sha256-3ax8YuYp3MIUYIdov8l2cmXIwO/TSGsc1TUv3r1yIAg=",

     

       1109
       1130
        
               "ref": "refs/heads/master",

     

       1110
       1110
       -
               "rev": "bcb8dc65dac5c0e6c167642b46da52419044261f",

     

       1111
       1111
       -
               "revCount": 1287,

     

       1131
       1131
       +
               "rev": "02b54de9c4f391f75eb8287e3857ecda30d483a4",

     

       1132
       1132
       +
               "revCount": 1291,

     

       1112
       1133
        
               "type": "git",

     

       1113
       1134
        
               "url": "https://tangled.sh/@tangled.sh/core"

     

       1114
       1135
        
             },

     
···

       1124
       1145
        
               ]

     

       1125
       1146
        
             },

     

       1126
       1147
        
             "locked": {

     

       1127
       1127
       -
               "lastModified": 1756975169,

     

       1128
       1128
       -
               "narHash": "sha256-WGmLn8/KWBCXvQHv0qDtWaXEIsY7IJd0crAkebY1CDE=",

     

       1148
       1148
       +
               "lastModified": 1757033007,

     

       1149
       1149
       +
               "narHash": "sha256-350uP++nULHwpkDITAgPalMkzprp4TBWHQinNVBi+Hk=",

     

       1129
       1150
        
               "owner": "tgirlcloud",

     

       1130
       1151
        
               "repo": "pkgs",

     

       1131
       1131
       -
               "rev": "e37520861e648c76ee63ffad2d560bd45326bf92",

     

       1152
       1152
       +
               "rev": "5b7f9185cd99fa8f01a56f2cd5ae0e056f00ed8c",

     

       1132
       1153
        
               "type": "github"

     

       1133
       1154
        
             },

     

       1134
       1155
        
             "original": {

flake.nix

···

       52
       52
        
             inputs.nixpkgs.follows = "nixpkgs";

     

       53
       53
        
           };

     

       54
       54
        
       

     

       55
       55
       +
           aylapkgs = {

     

       56
       56
       +
             url = "github:ayla6/pkgs";

     

       57
       57
       +
             inputs.nixpkgs.follows = "nixpkgs";

     

       58
       58
       +
           };

     

       59
       59
       +
       

     

       55
       60
        
           nur.url = "github:nix-community/NUR";

     

       56
       61
        
       

     

       57
       62
        
           tangled-core = {

modules/flake/nixos.nix

···

       55
       55
        
                         overlays = [

     

       56
       56
        
                           self.inputs.nur.overlays.default

     

       57
       57
        
                           self.inputs.copyparty.overlays.default

     

       58
       58
       +
                           self.inputs.aylapkgs.overlays.default

     

       58
       59
        
                         ];

     

       59
       60
        
                         config.allowUnfree = true;

     

       60
       61
        
                       };

+37 -93

modules/home/programs/chromium/default.nix

···

       8
       8
        
         inherit

     

       9
       9
        
           (lib)

     

       10
       10
        
           concatLists

     

       11
       11
       -
           concatMapStrings

     

       12
       11
        
           enableFeature

     

       13
       12
        
           ;

     

       14
       13
        
       in {

     
···

       18
       17
        
           programs.chromium = {

     

       19
       18
        
             enable = true;

     

       20
       19
        
       

     

       21
       21
       -
             package = pkgs.ungoogled-chromium.override {

     

       22
       22
       -
               enableWideVine = true;

     

       20
       20
       +
             # unfortunately the extensions thing doesn't work here, i should probably make an actual module for helium

     

       21
       21
       +
             #extensions = [

     

       22
       22
       +
             #  {id = "mdjildafknihdffpkfmmpnpoiajfjnjd";} # consent-o-matic

     

       23
       23
       +
             #  {id = "clngdbkpkpeebahjckkjfobafhncgmne";} # stylus

     

       24
       24
       +
             #  {id = "jinjaccalgkegednnccohejagnlnfdag";} # violentmonkey

     

       25
       25
       +
             #  {id = "nngceckbapebfimnlniiiahkandclblb";} # bitwarden

     

       26
       26
       +
             #

     

       27
       27
       +
             #  rec {

     

       28
       28
       +
             #    id = "oladmjdebphlnjjcnomfhhbfdldiimaf"; # libredirect

     

       29
       29
       +
             #    version = "3.2.0";

     

       30
       30
       +
             #

     

       31
       31
       +
             #    crxPath = pkgs.fetchurl {

     

       32
       32
       +
             #      url = "https://github.com/libredirect/browser_extension/releases/download/v${version}/libredirect-${version}.crx";

     

       33
       33
       +
             #      sha256 = "sha256-Neja0pJ7rMV+riINeMcWxU2SzZ+ZETp6bV1MaYLHz1Y=";

     

       34
       34
       +
             #    };

     

       35
       35
       +
             #  }

     

       36
       36
       +
             #

     

       37
       37
       +
             #  rec {

     

       38
       38
       +
             #    id = "lkbebcjgcmobigpeffafkodonchffocl"; # bypass-paywalls-clean

     

       39
       39
       +
             #    version = "4.1.8.0";

     

       40
       40
       +
             #

     

       41
       41
       +
             #    crxPath = pkgs.fetchurl {

     

       42
       42
       +
             #      url = #"https://gitflic.ru/project/magnolia1234/bpc_uploads/blob/raw?file=bypass-paywalls-chrome-clean-${version}.crx";

     

       43
       43
       +
             #      sha256 = "sha256-BRpwrV8AN1eOG2IXfk24gyEd8OzwK1BJqDdoxlgX8o4=";

     

       44
       44
       +
             #    };

     

       45
       45
       +
             #  }

     

       46
       46
       +
             #];

     

       23
       47
        
       

     

       48
       48
       +
             package = pkgs.helium.override {

     

       24
       49
        
               # https://github.com/secureblue/hardened-chromium

     

       25
       50
        
               # https://github.com/secureblue/secureblue/blob/e500f078efc5748d5033a881bbbcdcd2de95a813/files/system/usr/etc/chromium/chromium.conf.md

     

       26
       51
        
               commandLineArgs = concatLists [

     
···

       35
       60
        
                   "--enable-features=UseOzonePlatform"

     

       36
       61
        
                 ]

     

       37
       62
        
       

     

       63
       63
       +
                 # Performance

     

       64
       64
       +
                 [

     

       65
       65
       +
                   (enableFeature true "gpu-rasterization")

     

       66
       66
       +
                   (enableFeature true "oop-rasterization")

     

       67
       67
       +
                   (enableFeature true "zero-copy")

     

       68
       68
       +
                   "--ignore-gpu-blocklist"

     

       69
       69
       +
                 ]

     

       70
       70
       +
       

     

       38
       71
        
                 # Etc

     

       39
       72
        
                 [

     

       40
       73
        
                   "--disk-cache=$XDG_RUNTIME_DIR/chromium-cache"

     
···

       42
       75
        
                   "--no-first-run"

     

       43
       76
        
                   "--disable-wake-on-wifi"

     

       44
       77
        
                   "--disable-breakpad"

     

       45
       45
       -
       

     

       46
       46
       -
                   # please stop asking me to be the default browser

     

       47
       78
        
                   "--no-default-browser-check"

     

       48
       48
       -
       

     

       49
       49
       -
                   # I don't need these, thus I disable them

     

       50
       50
       -
                   (enableFeature false "speech-api")

     

       51
       51
       -
                   (enableFeature false "speech-synthesis-api")

     

       52
       52
       -
                 ]

     

       53
       53
       -
       

     

       54
       54
       -
                 # Security

     

       55
       55
       -
                 [

     

       56
       56
       -
                   # Disable pings

     

       57
       57
       -
                   "--no-pings"

     

       58
       58
       -
                   # Require HTTPS for component updater

     

       59
       59
       -
                   "--component-updater=require_encryption"

     

       60
       60
       -
                   # Disable crash upload

     

       61
       61
       -
                   "--no-crash-upload"

     

       62
       62
       -
                   # don't run things without asking

     

       63
       63
       -
                   "--no-service-autorun"

     

       64
       64
       -
                   # Disable sync

     

       65
       65
       -
                   "--disable-sync"

     

       66
       66
       -
       

     

       67
       67
       -
                   (

     

       68
       68
       -
                     "--enable-features="

     

       69
       69
       -
                     + concatMapStrings (x: x + ",") [

     

       70
       70
       -
                       # Enable visited link database partitioning

     

       71
       71
       -
                       "PartitionVisitedLinkDatabase"

     

       72
       72
       -
                       # Enable prefetch privacy changes

     

       73
       73
       -
                       "PrefetchPrivacyChanges"

     

       74
       74
       -
                       # Enable split cache

     

       75
       75
       -
                       "SplitCacheByNetworkIsolationKey"

     

       76
       76
       -
                       "SplitCodeCacheByNetworkIsolationKey"

     

       77
       77
       -
                       # Enable partitioning connections

     

       78
       78
       -
                       "EnableCrossSiteFlagNetworkIsolationKey"

     

       79
       79
       -
                       "HttpCacheKeyingExperimentControlGroup"

     

       80
       80
       -
                       "PartitionConnectionsByNetworkIsolationKey"

     

       81
       81
       -
                       # Enable strict origin isolation

     

       82
       82
       -
                       "StrictOriginIsolation"

     

       83
       83
       -
                       # Enable reduce accept language header

     

       84
       84
       -
                       "ReduceAcceptLanguage"

     

       85
       85
       -
                       # Enable content settings partitioning

     

       86
       86
       -
                       "ContentSettingsPartitioning"

     

       87
       87
       -
                       # i like moving pages with my touchpad...

     

       88
       88
       -
                       "TouchpadOverscrollHistoryNavigation"

     

       89
       89
       -
                     ]

     

       90
       90
       -
                   )

     

       91
       91
       -
       

     

       92
       92
       -
                   (

     

       93
       93
       -
                     "--disable-features="

     

       94
       94
       -
                     + concatMapStrings (x: x + ",") [

     

       95
       95
       -
                       # Disable autofill

     

       96
       96
       -
                       "AutofillPaymentCardBenefits"

     

       97
       97
       -
                       "AutofillPaymentCvcStorage"

     

       98
       98
       -
                       "AutofillPaymentCardBenefits"

     

       99
       99
       -
                       # Disable third-party cookie deprecation bypasses

     

       100
       100
       -
                       "TpcdHeuristicsGrants"

     

       101
       101
       -
                       "TpcdMetadataGrants"

     

       102
       102
       -
                       # Disable hyperlink auditing

     

       103
       103
       -
                       "EnableHyperlinkAuditing"

     

       104
       104
       -
                       # Disable showing popular sites

     

       105
       105
       -
                       "NTPPopularSitesBakedInContent"

     

       106
       106
       -
                       "UsePopularSitesSuggestions"

     

       107
       107
       -
                       # Disable article suggestions

     

       108
       108
       -
                       "EnableSnippets"

     

       109
       109
       -
                       "ArticlesListVisible"

     

       110
       110
       -
                       "EnableSnippetsByDse"

     

       111
       111
       -
                       # Disable content feed suggestions

     

       112
       112
       -
                       "InterestFeedV2"

     

       113
       113
       -
                       # Disable media DRM preprovisioning

     

       114
       114
       -
                       "MediaDrmPreprovisioning"

     

       115
       115
       -
                       # Disable autofill server communication

     

       116
       116
       -
                       "AutofillServerCommunication"

     

       117
       117
       -
                       # Disable new privacy sandbox features

     

       118
       118
       -
                       "PrivacySandboxSettings4"

     

       119
       119
       -
                       "BrowsingTopics"

     

       120
       120
       -
                       "BrowsingTopicsDocumentAPI"

     

       121
       121
       -
                       "BrowsingTopicsParameters"

     

       122
       122
       -
                       # Disable translate button

     

       123
       123
       -
                       "AdaptiveButtonInTopToolbarTranslate"

     

       124
       124
       -
                       # Disable detailed language settings

     

       125
       125
       -
                       "DetailedLanguageSettings"

     

       126
       126
       -
                       # Disable fetching optimization guides

     

       127
       127
       -
                       "OptimizationHintsFetching"

     

       128
       128
       -
                       # Partition third-party storage

     

       129
       129
       -
                       "DisableThirdPartyStoragePartitioningDeprecationTrial2"

     

       130
       130
       -
       

     

       131
       131
       -
                       # Disable media engagement

     

       132
       132
       -
                       "PreloadMediaEngagementData"

     

       133
       133
       -
                       "MediaEngagementBypassAutoplayPolicies"

     

       134
       134
       -
                     ]

     

       135
       135
       -
                   )

     

       79
       79
       +
                   "--enable-features=TouchpadOverscrollHistoryNavigation"

     

       136
       80
        
                 ]

     

       137
       81
        
               ];

     

       138
       82
        
             };