soopy.moe / gensokyo
nixos config
fork atom

Compare changes

Choose any two refs to compare.

options
unified split
Changed files
+211 -171
.gitignore
flake.lock
flake.nix
global
gui
dm.nix
packages.nix
overlays
default.nix
programs
networking.nix
systems
koumakan
networking
firewall.nix
services
databases
postgresql.nix
proxies
default.nix
nginx-stream.nix
scm
forgejo.nix
renko
configuration.nix
+1
.gitignore 
···

       
1

       
1

       
 

       
# balls


     

       
2

       
2

       
 

       
result


     

       

       
3

       
+

       
result-*


     

       
3

       
4

       
 

       



     

       
4

       
5

       
 

       
.direnv/


     

       
5

       
6

       
 

       
*.qcow2
+102 -115
flake.lock 
···

       
25

       
25

       
 

       
        ]


     

       
26

       
26

       
 

       
      },


     

       
27

       
27

       
 

       
      "locked": {


     

       
28

       

       
-

       
        "lastModified": 1759632323,


     

       
29

       

       
-

       
        "narHash": "sha256-TzLTfXxhOkR/8oOoVEAYQWb81ADGHdKsQXGicC7kR+M=",


     

       

       
28

       
+

       
        "lastModified": 1765839957,


     

       

       
29

       
+

       
        "narHash": "sha256-c2k30kehMWLEQpO41OhyDruj1S7RsyBlgx4yHlXKVa4=",


     

       
30

       
30

       
 

       
        "owner": "hercules-ci",


     

       
31

       
31

       
 

       
        "repo": "arion",


     

       
32

       

       
-

       
        "rev": "24658a03be2d1a6e1e02c01524775d960a82309c",


     

       

       
32

       
+

       
        "rev": "9ff7acc2c00a40ecf24894592ea5019439bb9e13",


     

       
33

       
33

       
 

       
        "type": "github"


     

       
34

       
34

       
 

       
      },


     

       
35

       
35

       
 

       
      "original": {


     
···

       
59

       
59

       
 

       
    },


     

       
60

       
60

       
 

       
    "crane": {


     

       
61

       
61

       
 

       
      "locked": {


     

       
62

       

       
-

       
        "lastModified": 1754269165,


     

       
63

       

       
-

       
        "narHash": "sha256-0tcS8FHd4QjbCVoxN9jI+PjHgA4vc/IjkUSp+N3zy0U=",


     

       

       
62

       
+

       
        "lastModified": 1765145449,


     

       

       
63

       
+

       
        "narHash": "sha256-aBVHGWWRzSpfL++LubA0CwOOQ64WNLegrYHwsVuVN7A=",


     

       
64

       
64

       
 

       
        "owner": "ipetkov",


     

       
65

       
65

       
 

       
        "repo": "crane",


     

       
66

       

       
-

       
        "rev": "444e81206df3f7d92780680e45858e31d2f07a08",


     

       

       
66

       
+

       
        "rev": "69f538cdce5955fcd47abfed4395dc6d5194c1c5",


     

       
67

       
67

       
 

       
        "type": "github"


     

       
68

       
68

       
 

       
      },


     

       
69

       
69

       
 

       
      "original": {


     
···

       
75

       
75

       
 

       
    "flake-compat": {


     

       
76

       
76

       
 

       
      "flake": false,


     

       
77

       
77

       
 

       
      "locked": {


     

       
78

       

       
-

       
        "lastModified": 1747046372,


     

       
79

       

       
-

       
        "narHash": "sha256-CIVLLkVgvHYbgI2UpXvIIBJ12HWgX+fjA8Xf8PUmqCY=",


     

       

       
78

       
+

       
        "lastModified": 1761588595,


     

       

       
79

       
+

       
        "narHash": "sha256-XKUZz9zewJNUj46b4AJdiRZJAvSZ0Dqj2BNfXvFlJC4=",


     

       
80

       
80

       
 

       
        "owner": "edolstra",


     

       
81

       
81

       
 

       
        "repo": "flake-compat",


     

       
82

       

       
-

       
        "rev": "9100a0f413b0c601e0533d1d94ffd501ce2e7885",


     

       

       
82

       
+

       
        "rev": "f387cd2afec9419c8ee37694406ca490c3f34ee5",


     

       
83

       
83

       
 

       
        "type": "github"


     

       
84

       
84

       
 

       
      },


     

       
85

       
85

       
 

       
      "original": {


     
···

       
91

       
91

       
 

       
    "flake-compat_2": {


     

       
92

       
92

       
 

       
      "flake": false,


     

       
93

       
93

       
 

       
      "locked": {


     

       
94

       

       
-

       
        "lastModified": 1747046372,


     

       
95

       

       
-

       
        "narHash": "sha256-CIVLLkVgvHYbgI2UpXvIIBJ12HWgX+fjA8Xf8PUmqCY=",


     

       

       
94

       
+

       
        "lastModified": 1761588595,


     

       

       
95

       
+

       
        "narHash": "sha256-XKUZz9zewJNUj46b4AJdiRZJAvSZ0Dqj2BNfXvFlJC4=",


     

       
96

       
96

       
 

       
        "owner": "edolstra",


     

       
97

       
97

       
 

       
        "repo": "flake-compat",


     

       
98

       

       
-

       
        "rev": "9100a0f413b0c601e0533d1d94ffd501ce2e7885",


     

       

       
98

       
+

       
        "rev": "f387cd2afec9419c8ee37694406ca490c3f34ee5",


     

       
99

       
99

       
 

       
        "type": "github"


     

       
100

       
100

       
 

       
      },


     

       
101

       
101

       
 

       
      "original": {


     
···

       
142

       
142

       
 

       
        ]


     

       
143

       
143

       
 

       
      },


     

       
144

       
144

       
 

       
      "locked": {


     

       
145

       

       
-

       
        "lastModified": 1759362264,


     

       
146

       

       
-

       
        "narHash": "sha256-wfG0S7pltlYyZTM+qqlhJ7GMw2fTF4mLKCIVhLii/4M=",


     

       

       
145

       
+

       
        "lastModified": 1763759067,


     

       

       
146

       
+

       
        "narHash": "sha256-LlLt2Jo/gMNYAwOgdRQBrsRoOz7BPRkzvNaI/fzXi2Q=",


     

       
147

       
147

       
 

       
        "owner": "hercules-ci",


     

       
148

       
148

       
 

       
        "repo": "flake-parts",


     

       
149

       

       
-

       
        "rev": "758cf7296bee11f1706a574c77d072b8a7baa881",


     

       

       
149

       
+

       
        "rev": "2cccadc7357c0ba201788ae99c4dfa90728ef5e0",


     

       
150

       
150

       
 

       
        "type": "github"


     

       
151

       
151

       
 

       
      },


     

       
152

       
152

       
 

       
      "original": {


     
···

       
156

       
156

       
 

       
      }


     

       
157

       
157

       
 

       
    },


     

       
158

       
158

       
 

       
    "flake-parts_2": {


     

       
159

       

       
-

       
      "inputs": {


     

       
160

       

       
-

       
        "nixpkgs-lib": [


     

       
161

       

       
-

       
          "lanzaboote",


     

       
162

       

       
-

       
          "nixpkgs"


     

       
163

       

       
-

       
        ]


     

       
164

       

       
-

       
      },


     

       
165

       

       
-

       
      "locked": {


     

       
166

       

       
-

       
        "lastModified": 1754091436,


     

       
167

       

       
-

       
        "narHash": "sha256-XKqDMN1/Qj1DKivQvscI4vmHfDfvYR2pfuFOJiCeewM=",


     

       
168

       

       
-

       
        "owner": "hercules-ci",


     

       
169

       

       
-

       
        "repo": "flake-parts",


     

       
170

       

       
-

       
        "rev": "67df8c627c2c39c41dbec76a1f201929929ab0bd",


     

       
171

       

       
-

       
        "type": "github"


     

       
172

       

       
-

       
      },


     

       
173

       

       
-

       
      "original": {


     

       
174

       

       
-

       
        "owner": "hercules-ci",


     

       
175

       

       
-

       
        "repo": "flake-parts",


     

       
176

       

       
-

       
        "type": "github"


     

       
177

       

       
-

       
      }


     

       
178

       

       
-

       
    },


     

       
179

       

       
-

       
    "flake-parts_3": {


     

       
180

       
159

       
 

       
      "inputs": {


     

       
181

       
160

       
 

       
        "nixpkgs-lib": [


     

       
182

       
161

       
 

       
          "mystia",


     
···

       
221

       
200

       
 

       
        "systems": "systems_2"


     

       
222

       
201

       
 

       
      },


     

       
223

       
202

       
 

       
      "locked": {


     

       
224

       

       
-

       
        "lastModified": 1694529238,


     

       
225

       

       
-

       
        "narHash": "sha256-zsNZZGTGnMOf9YpHKJqMSsa0dXbfmxeoJ7xHlrt+xmY=",


     

       

       
203

       
+

       
        "lastModified": 1731533236,


     

       

       
204

       
+

       
        "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",


     

       
226

       
205

       
 

       
        "owner": "numtide",


     

       
227

       
206

       
 

       
        "repo": "flake-utils",


     

       
228

       

       
-

       
        "rev": "ff7b65b44d01cf9ba6a71320833626af21126384",


     

       

       
207

       
+

       
        "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",


     

       
229

       
208

       
 

       
        "type": "github"


     

       
230

       
209

       
 

       
      },


     

       
231

       
210

       
 

       
      "original": {


     
···

       
238

       
217

       
 

       
      "inputs": {


     

       
239

       
218

       
 

       
        "flake-compat": "flake-compat",


     

       
240

       
219

       
 

       
        "flake-utils": "flake-utils",


     

       

       
220

       
+

       
        "home-manager": "home-manager",


     

       
241

       
221

       
 

       
        "nixpkgs": "nixpkgs_2",


     

       
242

       
222

       
 

       
        "zig": "zig",


     

       
243

       
223

       
 

       
        "zon2nix": "zon2nix"


     

       
244

       
224

       
 

       
      },


     

       
245

       
225

       
 

       
      "locked": {


     

       
246

       

       
-

       
        "lastModified": 1765256324,


     

       
247

       

       
-

       
        "narHash": "sha256-LB4FO4xP9XlmaxEzruiW88S2n6SEYqALdzKE3oybGkI=",


     

       

       
226

       
+

       
        "lastModified": 1767049078,


     

       

       
227

       
+

       
        "narHash": "sha256-BZ62cvoAvq74l82PB3gqTgg+ltz47FViC0N3RbWYxys=",


     

       
248

       
228

       
 

       
        "owner": "ghostty-org",


     

       
249

       
229

       
 

       
        "repo": "ghostty",


     

       
250

       

       
-

       
        "rev": "cf06417b7dfbd0daeb58a9143f9b6ee194cbce26",


     

       

       
230

       
+

       
        "rev": "1fa6641a6adf3936f6c8c81e14b5821d2de1a81b",


     

       
251

       
231

       
 

       
        "type": "github"


     

       
252

       
232

       
 

       
      },


     

       
253

       
233

       
 

       
      "original": {


     
···

       
260

       
240

       
 

       
      "inputs": {


     

       
261

       
241

       
 

       
        "nixpkgs": [


     

       
262

       
242

       
 

       
          "lanzaboote",


     

       
263

       

       
-

       
          "pre-commit-hooks-nix",


     

       

       
243

       
+

       
          "pre-commit",


     

       
264

       
244

       
 

       
          "nixpkgs"


     

       
265

       
245

       
 

       
        ]


     

       
266

       
246

       
 

       
      },


     
···

       
287

       
267

       
 

       
        ]


     

       
288

       
268

       
 

       
      },


     

       
289

       
269

       
 

       
      "locked": {


     

       
290

       

       
-

       
        "lastModified": 1754078208,


     

       
291

       

       
-

       
        "narHash": "sha256-YVoIFDCDpYuU3riaDEJ3xiGdPOtsx4sR5eTzHTytPV8=",


     

       

       
270

       
+

       
        "lastModified": 1763982521,


     

       

       
271

       
+

       
        "narHash": "sha256-ur4QIAHwgFc0vXiaxn5No/FuZicxBr2p0gmT54xZkUQ=",


     

       
292

       
272

       
 

       
        "owner": "nix-community",


     

       
293

       
273

       
 

       
        "repo": "gomod2nix",


     

       
294

       

       
-

       
        "rev": "7f963246a71626c7fc70b431a315c4388a0c95cf",


     

       

       
274

       
+

       
        "rev": "02e63a239d6eabd595db56852535992c898eba72",


     

       
295

       
275

       
 

       
        "type": "github"


     

       
296

       
276

       
 

       
      },


     

       
297

       
277

       
 

       
      "original": {


     
···

       
319

       
299

       
 

       
    "home-manager": {


     

       
320

       
300

       
 

       
      "inputs": {


     

       
321

       
301

       
 

       
        "nixpkgs": [


     

       

       
302

       
+

       
          "ghostty",


     

       
322

       
303

       
 

       
          "nixpkgs"


     

       
323

       
304

       
 

       
        ]


     

       
324

       
305

       
 

       
      },


     

       
325

       
306

       
 

       
      "locked": {


     

       
326

       

       
-

       
        "lastModified": 1765170903,


     

       
327

       

       
-

       
        "narHash": "sha256-O8VTGey1xxiRW+Fpb+Ps9zU7ShmxUA1a7cMTcENCVNg=",


     

       

       
307

       
+

       
        "lastModified": 1755776884,


     

       

       
308

       
+

       
        "narHash": "sha256-CPM7zm6csUx7vSfKvzMDIjepEJv1u/usmaT7zydzbuI=",


     

       
328

       
309

       
 

       
        "owner": "nix-community",


     

       
329

       
310

       
 

       
        "repo": "home-manager",


     

       
330

       

       
-

       
        "rev": "20561be440a11ec57a89715480717baf19fe6343",


     

       

       
311

       
+

       
        "rev": "4fb695d10890e9fc6a19deadf85ff79ffb78da86",


     

       

       
312

       
+

       
        "type": "github"


     

       

       
313

       
+

       
      },


     

       

       
314

       
+

       
      "original": {


     

       

       
315

       
+

       
        "owner": "nix-community",


     

       

       
316

       
+

       
        "ref": "release-25.05",


     

       

       
317

       
+

       
        "repo": "home-manager",


     

       

       
318

       
+

       
        "type": "github"


     

       

       
319

       
+

       
      }


     

       

       
320

       
+

       
    },


     

       

       
321

       
+

       
    "home-manager_2": {


     

       

       
322

       
+

       
      "inputs": {


     

       

       
323

       
+

       
        "nixpkgs": [


     

       

       
324

       
+

       
          "nixpkgs"


     

       

       
325

       
+

       
        ]


     

       

       
326

       
+

       
      },


     

       

       
327

       
+

       
      "locked": {


     

       

       
328

       
+

       
        "lastModified": 1767024057,


     

       

       
329

       
+

       
        "narHash": "sha256-B1aycRjMRvb6QOGbnqDhiDzZwMebj5jxZ5qyJzaKvpI=",


     

       

       
330

       
+

       
        "owner": "nix-community",


     

       

       
331

       
+

       
        "repo": "home-manager",


     

       

       
332

       
+

       
        "rev": "34578a2fdfce4257ce5f5baf6e7efbd4e4e252b1",


     

       
331

       
333

       
 

       
        "type": "github"


     

       
332

       
334

       
 

       
      },


     

       
333

       
335

       
 

       
      "original": {


     
···

       
365

       
367

       
 

       
      "inputs": {


     

       
366

       
368

       
 

       
        "nix": "nix",


     

       
367

       
369

       
 

       
        "nix-eval-jobs": "nix-eval-jobs",


     

       
368

       

       
-

       
        "nixpkgs": "nixpkgs_4"


     

       

       
370

       
+

       
        "nixpkgs": "nixpkgs_3"


     

       
369

       
371

       
 

       
      },


     

       
370

       
372

       
 

       
      "locked": {


     

       
371

       
373

       
 

       
        "lastModified": 1764105837,


     
···

       
450

       
452

       
 

       
    "lanzaboote": {


     

       
451

       
453

       
 

       
      "inputs": {


     

       
452

       
454

       
 

       
        "crane": "crane",


     

       
453

       

       
-

       
        "flake-compat": "flake-compat_2",


     

       
454

       

       
-

       
        "flake-parts": "flake-parts_2",


     

       
455

       
455

       
 

       
        "nixpkgs": [


     

       
456

       
456

       
 

       
          "nixpkgs"


     

       
457

       
457

       
 

       
        ],


     

       
458

       

       
-

       
        "pre-commit-hooks-nix": "pre-commit-hooks-nix",


     

       

       
458

       
+

       
        "pre-commit": "pre-commit",


     

       
459

       
459

       
 

       
        "rust-overlay": "rust-overlay"


     

       
460

       
460

       
 

       
      },


     

       
461

       
461

       
 

       
      "locked": {


     

       
462

       

       
-

       
        "lastModified": 1762205063,


     

       
463

       

       
-

       
        "narHash": "sha256-If6vQ+KvtKs3ARBO9G3l+4wFSCYtRBrwX1z+I+B61wQ=",


     

       

       
462

       
+

       
        "lastModified": 1765382359,


     

       

       
463

       
+

       
        "narHash": "sha256-RJmgVDzjRI18BWVogG6wpsl1UCuV6ui8qr4DJ1LfWZ8=",


     

       
464

       
464

       
 

       
        "owner": "nix-community",


     

       
465

       
465

       
 

       
        "repo": "lanzaboote",


     

       
466

       

       
-

       
        "rev": "88b8a563ff5704f4e8d8e5118fb911fa2110ca05",


     

       

       
466

       
+

       
        "rev": "e8c096ade12ec9130ff931b0f0e25d2f1bc63607",


     

       
467

       
467

       
 

       
        "type": "github"


     

       
468

       
468

       
 

       
      },


     

       
469

       
469

       
 

       
      "original": {


     

       
470

       
470

       
 

       
        "owner": "nix-community",


     

       
471

       

       
-

       
        "ref": "v0.4.3",


     

       

       
471

       
+

       
        "ref": "v1.0.0",


     

       
472

       
472

       
 

       
        "repo": "lanzaboote",


     

       
473

       
473

       
 

       
        "type": "github"


     

       
474

       
474

       
 

       
      }


     
···

       
490

       
490

       
 

       
      "inputs": {


     

       
491

       
491

       
 

       
        "flake-compat": "flake-compat_3",


     

       
492

       
492

       
 

       
        "nix-update-soopy": "nix-update-soopy",


     

       
493

       

       
-

       
        "nixpkgs": "nixpkgs_5",


     

       

       
493

       
+

       
        "nixpkgs": "nixpkgs_4",


     

       
494

       
494

       
 

       
        "treefmt-nix": "treefmt-nix_2"


     

       
495

       
495

       
 

       
      },


     

       
496

       
496

       
 

       
      "locked": {


     

       
497

       

       
-

       
        "lastModified": 1764144136,


     

       
498

       

       
-

       
        "narHash": "sha256-EqViuxH+g4lo5GlcQ5UjkIIdIF3tjF3K9gdmyXWt9gQ=",


     

       

       
497

       
+

       
        "lastModified": 1765558006,


     

       

       
498

       
+

       
        "narHash": "sha256-8o8J6YJgx7ZLZJfXlKL/upDyGuRFoTOTKeaLT4ZgUHw=",


     

       
499

       
499

       
 

       
        "owner": "soopyc",


     

       
500

       
500

       
 

       
        "repo": "mystia",


     

       
501

       

       
-

       
        "rev": "ecf8e23ef3d0f4687043154a51056b1c5cba144e",


     

       

       
501

       
+

       
        "rev": "5b177c1b32e2f671c1b4b92f0d71ec2a6a55fa9a",


     

       
502

       
502

       
 

       
        "type": "github"


     

       
503

       
503

       
 

       
      },


     

       
504

       
504

       
 

       
      "original": {


     
···

       
563

       
563

       
 

       
    },


     

       
564

       
564

       
 

       
    "nix-update-soopy": {


     

       
565

       
565

       
 

       
      "inputs": {


     

       
566

       

       
-

       
        "flake-parts": "flake-parts_3",


     

       

       
566

       
+

       
        "flake-parts": "flake-parts_2",


     

       
567

       
567

       
 

       
        "nixpkgs": [


     

       
568

       
568

       
 

       
          "mystia",


     

       
569

       
569

       
 

       
          "nixpkgs"


     
···

       
586

       
586

       
 

       
    },


     

       
587

       
587

       
 

       
    "nixos-hardware": {


     

       
588

       
588

       
 

       
      "locked": {


     

       
589

       

       
-

       
        "lastModified": 1764729408,


     

       
590

       

       
-

       
        "narHash": "sha256-BnwVvpidFX9hPwRkHuHw2y5ZgJWNeoHKd2fj2qls9NM=",


     

       

       
589

       
+

       
        "lastModified": 1767105924,


     

       

       
590

       
+

       
        "narHash": "sha256-Sr2uqrc5VVFm5zIqJw87MtB2skLcIQGMywmtjFecWn0=",


     

       
591

       
591

       
 

       
        "owner": "soopyc",


     

       
592

       
592

       
 

       
        "repo": "nixos-hardware",


     

       
593

       

       
-

       
        "rev": "c45404cdfb6c4eb9d99f88e383c703db6e5db442",


     

       

       
593

       
+

       
        "rev": "cd2b93bdcf720c6b68522eafd5aa1347a25a41b0",


     

       
594

       
594

       
 

       
        "type": "github"


     

       
595

       
595

       
 

       
      },


     

       
596

       
596

       
 

       
      "original": {


     
···

       
618

       
618

       
 

       
    },


     

       
619

       
619

       
 

       
    "nixpkgs_2": {


     

       
620

       
620

       
 

       
      "locked": {


     

       
621

       

       
-

       
        "lastModified": 315532800,


     

       
622

       

       
-

       
        "narHash": "sha256-sV6pJNzFkiPc6j9Bi9JuHBnWdVhtKB/mHgVmMPvDFlk=",


     

       
623

       

       
-

       
        "rev": "82c2e0d6dde50b17ae366d2aa36f224dc19af469",


     

       

       
621

       
+

       
        "lastModified": 1763191728,


     

       

       
622

       
+

       
        "narHash": "sha256-gI9PpaoX4/f28HkjcTbFVpFhtOxSDtOEdFaHZrdETe0=",


     

       

       
623

       
+

       
        "rev": "1d4c88323ac36805d09657d13a5273aea1b34f0c",


     

       
624

       
624

       
 

       
        "type": "tarball",


     

       
625

       

       
-

       
        "url": "https://releases.nixos.org/nixpkgs/nixpkgs-25.11pre877938.82c2e0d6dde5/nixexprs.tar.xz"


     

       

       
625

       
+

       
        "url": "https://releases.nixos.org/nixpkgs/nixpkgs-25.11pre896415.1d4c88323ac3/nixexprs.tar.xz"


     

       
626

       
626

       
 

       
      },


     

       
627

       
627

       
 

       
      "original": {


     

       
628

       
628

       
 

       
        "type": "tarball",


     
···

       
631

       
631

       
 

       
    },


     

       
632

       
632

       
 

       
    "nixpkgs_3": {


     

       
633

       
633

       
 

       
      "locked": {


     

       
634

       

       
-

       
        "lastModified": 1758360447,


     

       
635

       

       
-

       
        "narHash": "sha256-XDY3A83bclygHDtesRoaRTafUd80Q30D/Daf9KSG6bs=",


     

       
636

       

       
-

       
        "rev": "8eaee110344796db060382e15d3af0a9fc396e0e",


     

       
637

       

       
-

       
        "type": "tarball",


     

       
638

       

       
-

       
        "url": "https://releases.nixos.org/nixos/unstable/nixos-25.11pre864002.8eaee1103447/nixexprs.tar.xz"


     

       
639

       

       
-

       
      },


     

       
640

       

       
-

       
      "original": {


     

       
641

       

       
-

       
        "type": "tarball",


     

       
642

       

       
-

       
        "url": "https://channels.nixos.org/nixos-unstable/nixexprs.tar.xz"


     

       
643

       

       
-

       
      }


     

       
644

       

       
-

       
    },


     

       
645

       

       
-

       
    "nixpkgs_4": {


     

       
646

       

       
-

       
      "locked": {


     

       
647

       
634

       
 

       
        "lastModified": 1764020296,


     

       
648

       
635

       
 

       
        "narHash": "sha256-6zddwDs2n+n01l+1TG6PlyokDdXzu/oBmEejcH5L5+A=",


     

       
649

       
636

       
 

       
        "owner": "NixOS",


     
···

       
658

       
645

       
 

       
        "type": "github"


     

       
659

       
646

       
 

       
      }


     

       
660

       
647

       
 

       
    },


     

       
661

       

       
-

       
    "nixpkgs_5": {


     

       

       
648

       
+

       
    "nixpkgs_4": {


     

       
662

       
649

       
 

       
      "locked": {


     

       
663

       
650

       
 

       
        "lastModified": 1763966396,


     

       
664

       
651

       
 

       
        "narHash": "sha256-6eeL1YPcY1MV3DDStIDIdy/zZCDKgHdkCmsrLJFiZf0=",


     
···

       
673

       
660

       
 

       
        "type": "indirect"


     

       
674

       
661

       
 

       
      }


     

       
675

       
662

       
 

       
    },


     

       
676

       

       
-

       
    "nixpkgs_6": {


     

       

       
663

       
+

       
    "nixpkgs_5": {


     

       
677

       
664

       
 

       
      "locked": {


     

       
678

       

       
-

       
        "lastModified": 1764983851,


     

       
679

       

       
-

       
        "narHash": "sha256-pyyfJp6Q80D0YhEuuP/qzasUZjoK3C3PrCp8BPWcDZE=",


     

       
680

       

       
-

       
        "rev": "d9bc5c7dceb30d8d6fafa10aeb6aa8a48c218454",


     

       

       
665

       
+

       
        "lastModified": 1766885793,


     

       

       
666

       
+

       
        "narHash": "sha256-3wE9FvGp15AXnwNsGH8gs+i/j/25EBvIoJapquYvB6I=",


     

       

       
667

       
+

       
        "rev": "9ef261221d1e72399f2036786498d78c38185c46",


     

       
681

       
668

       
 

       
        "type": "tarball",


     

       
682

       

       
-

       
        "url": "https://releases.nixos.org/nixos/25.11/nixos-25.11.1056.d9bc5c7dceb3/nixexprs.tar.xz"


     

       

       
669

       
+

       
        "url": "https://releases.nixos.org/nixos/25.11/nixos-25.11.2679.9ef261221d1e/nixexprs.tar.xz"


     

       
683

       
670

       
 

       
      },


     

       
684

       
671

       
 

       
      "original": {


     

       
685

       
672

       
 

       
        "type": "tarball",


     

       
686

       
673

       
 

       
        "url": "https://nixpkgs.dev/channel/nixos-25.11"


     

       
687

       
674

       
 

       
      }


     

       
688

       
675

       
 

       
    },


     

       
689

       

       
-

       
    "pre-commit-hooks-nix": {


     

       

       
676

       
+

       
    "pre-commit": {


     

       
690

       
677

       
 

       
      "inputs": {


     

       
691

       

       
-

       
        "flake-compat": [


     

       
692

       

       
-

       
          "lanzaboote",


     

       
693

       

       
-

       
          "flake-compat"


     

       
694

       

       
-

       
        ],


     

       

       
678

       
+

       
        "flake-compat": "flake-compat_2",


     

       
695

       
679

       
 

       
        "gitignore": "gitignore",


     

       
696

       
680

       
 

       
        "nixpkgs": [


     

       
697

       
681

       
 

       
          "lanzaboote",


     
···

       
699

       
683

       
 

       
        ]


     

       
700

       
684

       
 

       
      },


     

       
701

       
685

       
 

       
      "locked": {


     

       
702

       

       
-

       
        "lastModified": 1750779888,


     

       
703

       

       
-

       
        "narHash": "sha256-wibppH3g/E2lxU43ZQHC5yA/7kIKLGxVEnsnVK1BtRg=",


     

       

       
686

       
+

       
        "lastModified": 1765016596,


     

       

       
687

       
+

       
        "narHash": "sha256-rhSqPNxDVow7OQKi4qS5H8Au0P4S3AYbawBSmJNUtBQ=",


     

       
704

       
688

       
 

       
        "owner": "cachix",


     

       
705

       
689

       
 

       
        "repo": "pre-commit-hooks.nix",


     

       
706

       

       
-

       
        "rev": "16ec914f6fb6f599ce988427d9d94efddf25fe6d",


     

       

       
690

       
+

       
        "rev": "548fc44fca28a5e81c5d6b846e555e6b9c2a5a3c",


     

       
707

       
691

       
 

       
        "type": "github"


     

       
708

       
692

       
 

       
      },


     

       
709

       
693

       
 

       
      "original": {


     
···

       
717

       
701

       
 

       
        "arion": "arion",


     

       
718

       
702

       
 

       
        "catppuccin": "catppuccin",


     

       
719

       
703

       
 

       
        "ghostty": "ghostty",


     

       
720

       

       
-

       
        "home-manager": "home-manager",


     

       

       
704

       
+

       
        "home-manager": "home-manager_2",


     

       
721

       
705

       
 

       
        "hydra": "hydra",


     

       
722

       
706

       
 

       
        "knotserver-module": "knotserver-module",


     

       
723

       
707

       
 

       
        "lanzaboote": "lanzaboote",


     

       
724

       
708

       
 

       
        "mystia": "mystia",


     

       
725

       
709

       
 

       
        "nix-index-database": "nix-index-database",


     

       
726

       
710

       
 

       
        "nixos-hardware": "nixos-hardware",


     

       
727

       

       
-

       
        "nixpkgs": "nixpkgs_6",


     

       

       
711

       
+

       
        "nixpkgs": "nixpkgs_5",


     

       
728

       
712

       
 

       
        "sops-nix": "sops-nix",


     

       
729

       
713

       
 

       
        "tangled-core": "tangled-core",


     

       
730

       
714

       
 

       
        "treefmt-nix": "treefmt-nix_3",


     
···

       
739

       
723

       
 

       
        ]


     

       
740

       
724

       
 

       
      },


     

       
741

       
725

       
 

       
      "locked": {


     

       
742

       

       
-

       
        "lastModified": 1761791894,


     

       
743

       

       
-

       
        "narHash": "sha256-myRIDh+PxaREz+z9LzbqBJF+SnTFJwkthKDX9zMyddY=",


     

       

       
726

       
+

       
        "lastModified": 1765075567,


     

       

       
727

       
+

       
        "narHash": "sha256-KFDCdQcHJ0hE3Nt5Gm5enRIhmtEifAjpxgUQ3mzSJpA=",


     

       
744

       
728

       
 

       
        "owner": "oxalica",


     

       
745

       
729

       
 

       
        "repo": "rust-overlay",


     

       
746

       

       
-

       
        "rev": "59c45eb69d9222a4362673141e00ff77842cd219",


     

       

       
730

       
+

       
        "rev": "769156779b41e8787a46ca3d7d76443aaf68be6f",


     

       
747

       
731

       
 

       
        "type": "github"


     

       
748

       
732

       
 

       
      },


     

       
749

       
733

       
 

       
      "original": {


     
···

       
759

       
743

       
 

       
        ]


     

       
760

       
744

       
 

       
      },


     

       
761

       
745

       
 

       
      "locked": {


     

       
762

       

       
-

       
        "lastModified": 1765231718,


     

       
763

       

       
-

       
        "narHash": "sha256-qdBzo6puTgG4G2RHG0PkADg22ZnQo1JmSVFRxrD4QM4=",


     

       

       
746

       
+

       
        "lastModified": 1766894905,


     

       

       
747

       
+

       
        "narHash": "sha256-pn8AxxfajqyR/Dmr1wnZYdUXHgM3u6z9x0Z1Ijmz2UQ=",


     

       
764

       
748

       
 

       
        "owner": "Mic92",


     

       
765

       
749

       
 

       
        "repo": "sops-nix",


     

       
766

       

       
-

       
        "rev": "7fd1416aba1865eddcdec5bb11339b7222c2363e",


     

       

       
750

       
+

       
        "rev": "61b39c7b657081c2adc91b75dd3ad8a91d6f07a7",


     

       
767

       
751

       
 

       
        "type": "github"


     

       
768

       
752

       
 

       
      },


     

       
769

       
753

       
 

       
      "original": {


     
···

       
832

       
816

       
 

       
        "sqlite-lib-src": "sqlite-lib-src"


     

       
833

       
817

       
 

       
      },


     

       
834

       
818

       
 

       
      "locked": {


     

       
835

       

       
-

       
        "lastModified": 1765274502,


     

       
836

       

       
-

       
        "narHash": "sha256-bvn+7LjDKYloOw4n5wCXt2QvDxYrx1dF2xgebtm4w54=",


     

       

       
819

       
+

       
        "lastModified": 1767063361,


     

       

       
820

       
+

       
        "narHash": "sha256-MyxjxAfOw6LgPGbv/m/am5E080jtc+FunlYFu5HIVUU=",


     

       
837

       
821

       
 

       
        "ref": "refs/heads/master",


     

       
838

       

       
-

       
        "rev": "d2d6839612e37cdc52d0e25e1502459fc3dfda3f",


     

       
839

       

       
-

       
        "revCount": 1729,


     

       

       
822

       
+

       
        "rev": "4bdc9dfe9bb5ed8f5dfea30b9a45bc93b1430535",


     

       

       
823

       
+

       
        "revCount": 1779,


     

       
840

       
824

       
 

       
        "type": "git",


     

       
841

       
825

       
 

       
        "url": "https://tangled.org/@tangled.sh/core"


     

       
842

       
826

       
 

       
      },


     
···

       
895

       
879

       
 

       
        ]


     

       
896

       
880

       
 

       
      },


     

       
897

       
881

       
 

       
      "locked": {


     

       
898

       

       
-

       
        "lastModified": 1762938485,


     

       
899

       

       
-

       
        "narHash": "sha256-AlEObg0syDl+Spi4LsZIBrjw+snSVU4T8MOeuZJUJjM=",


     

       

       
882

       
+

       
        "lastModified": 1767086983,


     

       

       
883

       
+

       
        "narHash": "sha256-l4c8HQkgsB15BUZI1SHLAZHQ7822iIkJtOsdIuXIO4s=",


     

       
900

       
884

       
 

       
        "owner": "numtide",


     

       
901

       
885

       
 

       
        "repo": "treefmt-nix",


     

       
902

       

       
-

       
        "rev": "5b4ee75aeefd1e2d5a1cc43cf6ba65eba75e83e4",


     

       

       
886

       
+

       
        "rev": "c9eb5bb179067ddced348aca023a3fbf8b5832c5",


     

       
903

       
887

       
 

       
        "type": "github"


     

       
904

       
888

       
 

       
      },


     

       
905

       
889

       
 

       
      "original": {


     
···

       
942

       
926

       
 

       
        ]


     

       
943

       
927

       
 

       
      },


     

       
944

       
928

       
 

       
      "locked": {


     

       
945

       

       
-

       
        "lastModified": 1760401936,


     

       
946

       

       
-

       
        "narHash": "sha256-/zj5GYO5PKhBWGzbHbqT+ehY8EghuABdQ2WGfCwZpCQ=",


     

       

       
929

       
+

       
        "lastModified": 1763295135,


     

       

       
930

       
+

       
        "narHash": "sha256-sGv/NHCmEnJivguGwB5w8LRmVqr1P72OjS+NzcJsssE=",


     

       
947

       
931

       
 

       
        "owner": "mitchellh",


     

       
948

       
932

       
 

       
        "repo": "zig-overlay",


     

       
949

       

       
-

       
        "rev": "365085b6652259753b598d43b723858184980bbe",


     

       

       
933

       
+

       
        "rev": "64f8b42cfc615b2cf99144adf2b7728c7847c72a",


     

       
950

       
934

       
 

       
        "type": "github"


     

       
951

       
935

       
 

       
      },


     

       
952

       
936

       
 

       
      "original": {


     
···

       
957

       
941

       
 

       
    },


     

       
958

       
942

       
 

       
    "zon2nix": {


     

       
959

       
943

       
 

       
      "inputs": {


     

       
960

       

       
-

       
        "nixpkgs": "nixpkgs_3"


     

       

       
944

       
+

       
        "nixpkgs": [


     

       

       
945

       
+

       
          "ghostty",


     

       

       
946

       
+

       
          "nixpkgs"


     

       

       
947

       
+

       
        ]


     

       
961

       
948

       
 

       
      },


     

       
962

       
949

       
 

       
      "locked": {


     

       
963

       
950

       
 

       
        "lastModified": 1758405547,
+1 -1
flake.nix 
···

       
39

       
39

       
 

       
    };


     

       
40

       
40

       
 

       



     

       
41

       
41

       
 

       
    lanzaboote = {


     

       
42

       

       
-

       
      url = "github:nix-community/lanzaboote/v0.4.3";


     

       

       
42

       
+

       
      url = "github:nix-community/lanzaboote/v1.0.0";


     

       
43

       
43

       
 

       
      inputs.nixpkgs.follows = "nixpkgs";


     

       
44

       
44

       
 

       
    };


     

       
45

       
45
+7 -7
global/gui/dm.nix 
···

       
1

       
1

       
 

       
{


     

       
2

       
2

       
 

       
  config,


     

       
3

       
3

       
 

       
  lib,


     

       
4

       

       
-

       
  pkgs,


     

       

       
4

       
+

       
  # pkgs,


     

       
5

       
5

       
 

       
  ...


     

       
6

       
6

       
 

       
}:


     

       
7

       
7

       
 

       
lib.mkIf config.gensokyo.traits.gui {


     
···

       
9

       
9

       
 

       
    enable = true;


     

       
10

       
10

       
 

       
    autoNumlock = true;


     

       
11

       
11

       
 

       
    wayland.enable = true;


     

       
12

       

       
-

       
    theme = "catppuccin-frappe";


     

       

       
12

       
+

       
    # theme = "catppuccin-frappe";


     

       
13

       
13

       
 

       
  };


     

       
14

       
14

       
 

       



     

       
15

       

       
-

       
  environment.systemPackages = [


     

       
16

       

       
-

       
    (pkgs.catppuccin-sddm.override {


     

       
17

       

       
-

       
      flavor = "frappe";


     

       
18

       

       
-

       
    })


     

       
19

       

       
-

       
  ];


     

       

       
15

       
+

       
  # environment.systemPackages = [


     

       

       
16

       
+

       
  #   (pkgs.catppuccin-sddm.override {


     

       

       
17

       
+

       
  #     flavor = "frappe";


     

       

       
18

       
+

       
  #   })


     

       

       
19

       
+

       
  # ];


     

       
20

       
20

       
 

       
}
+6 -5
global/gui/packages.nix 
···

       
6

       
6

       
 

       
  ...


     

       
7

       
7

       
 

       
}:


     

       
8

       
8

       
 

       
lib.mkIf config.gensokyo.traits.gui {


     

       
9

       

       
-

       
  environment.systemPackages = [


     

       
10

       

       
-

       
    pkgs.vlc


     

       
11

       

       
-

       
    pkgs.flameshot


     

       
12

       

       
-

       
    pkgs.libnotify


     

       
13

       

       
-

       
    pkgs.thunderbird


     

       

       
9

       
+

       
  environment.systemPackages = with pkgs; [


     

       

       
10

       
+

       
    vlc


     

       

       
11

       
+

       
    flameshot


     

       

       
12

       
+

       
    libnotify


     

       

       
13

       
+

       
    thunderbird


     

       

       
14

       
+

       



     

       
14

       
15

       
 

       
    inputs.ghostty.packages.${pkgs.system}.default


     

       
15

       
16

       
 

       
  ];


     

       
16

       
17

       
 

       
}
+1 -1
global/overlays/default.nix 
···

       
1

       

       
-

       
_: []


     

       

       
1

       
+

       
_: [ ]


     

       
2

       
2

       
 

       
# inputs: [


     

       
3

       
3

       
 

       
#   # we can probably live without an overlay?


     

       
4

       
4

       
 

       
#   # inputs.mystia.overlays.default
+8
global/programs/networking.nix 
···

       
1

       
1

       
 

       
{


     

       
2

       
2

       
 

       
  lib,


     

       
3

       
3

       
 

       
  config,


     

       

       
4

       
+

       
  pkgs,


     

       
4

       
5

       
 

       
  ...


     

       
5

       
6

       
 

       
}:


     

       
6

       
7

       
 

       
lib.mkMerge [


     
···

       
31

       
32

       
 

       



     

       
32

       
33

       
 

       
  (lib.mkIf config.gensokyo.traits.portable {


     

       
33

       
34

       
 

       
    networking.networkmanager.wifi.backend = "wpa_supplicant";


     

       

       
35

       
+

       
  })


     

       

       
36

       
+

       



     

       

       
37

       
+

       
  # TODO: maybe we should move these to /global/gui?


     

       

       
38

       
+

       
  (lib.mkIf config.gensokyo.traits.gui {


     

       

       
39

       
+

       
    networking.networkmanager.plugins = with pkgs; [


     

       

       
40

       
+

       
      networkmanager-openconnect


     

       

       
41

       
+

       
    ];


     

       
34

       
42

       
 

       
  })


     

       
35

       
43

       
 

       



     

       
36

       
44

       
 

       
  (lib.mkIf (!config.gensokyo.traits.sensitive) {
+20
systems/koumakan/networking/firewall.nix 
···

       
16

       
16

       
 

       
        from = 50000;


     

       
17

       
17

       
 

       
        to = 50100;


     

       
18

       
18

       
 

       
      }


     

       

       
19

       
+

       



     

       

       
20

       
+

       
      # minecraft


     

       

       
21

       
+

       
      {


     

       

       
22

       
+

       
        from = 25560;


     

       

       
23

       
+

       
        to = 25599;


     

       

       
24

       
+

       
      }


     

       
19

       
25

       
 

       
    ];


     

       
20

       
26

       
 

       
    allowedUDPPorts = [


     

       
21

       
27

       
 

       
      443 # https over quic (http3)


     

       

       
28

       
+

       
    ];


     

       

       
29

       
+

       



     

       

       
30

       
+

       
    allowedUDPPortRanges = [


     

       

       
31

       
+

       
      # more minecraft


     

       

       
32

       
+

       
      {


     

       

       
33

       
+

       
        from = 25560;


     

       

       
34

       
+

       
        to = 25599;


     

       

       
35

       
+

       
      }


     

       

       
36

       
+

       



     

       

       
37

       
+

       
      # plasmo voice


     

       

       
38

       
+

       
      {


     

       

       
39

       
+

       
        from = 55111;


     

       

       
40

       
+

       
        to = 55199;


     

       

       
41

       
+

       
      }


     

       
22

       
42

       
 

       
    ];


     

       
23

       
43

       
 

       
  };


     

       
24

       
44
+16 -20
systems/koumakan/services/databases/postgresql.nix 
···

       
19

       
19

       
 

       
      host    all             all             ::1/128                 scram-sha-256


     

       
20

       
20

       
 

       
    '';


     

       
21

       
21

       
 

       



     

       
22

       

       
-

       
    settings =


     

       
23

       

       
-

       
      let


     

       
24

       

       
-

       
        credsDir = "/run/credentials/postgresql.service";


     

       
25

       

       
-

       
      in


     

       
26

       

       
-

       
      {


     

       
27

       

       
-

       
        listen_addresses = pkgs.lib.mkForce "*";


     

       
28

       

       
-

       
        max_connections = 200;


     

       
29

       

       
-

       
        password_encryption = "scram-sha-256";


     

       

       
22

       
+

       
    settings = {


     

       

       
23

       
+

       
      listen_addresses = pkgs.lib.mkForce "*";


     

       

       
24

       
+

       
      max_connections = 200;


     

       

       
25

       
+

       
      password_encryption = "scram-sha-256";


     

       
30

       
26

       
 

       



     

       
31

       

       
-

       
        log_line_prefix = "%m [%p] %h ";


     

       
32

       

       
-

       
        # ssl = "on";


     

       
33

       

       
-

       
        # ssl_cert_file = "${credsDir}/cert.pem";


     

       
34

       

       
-

       
        # ssl_key_file = "${credsDir}/key.pem";


     

       

       
27

       
+

       
      log_line_prefix = "%m [%p] %h ";


     

       

       
28

       
+

       
      # ssl = "on";


     

       

       
29

       
+

       
      # ssl_cert_file = "${credsDir}/cert.pem";


     

       

       
30

       
+

       
      # ssl_key_file = "${credsDir}/key.pem";


     

       
35

       
31

       
 

       



     

       
36

       

       
-

       
        log_hostname = true;


     

       
37

       

       
-

       
        datestyle = "iso, dmy";


     

       
38

       

       
-

       
        log_timezone = "Asia/Hong_Kong";


     

       
39

       

       
-

       
        timezone = "Asia/Hong_Kong";


     

       
40

       

       
-

       
        default_text_search_config = "pg_catalog.english";


     

       

       
32

       
+

       
      log_hostname = true;


     

       

       
33

       
+

       
      datestyle = "iso, dmy";


     

       

       
34

       
+

       
      log_timezone = "Asia/Hong_Kong";


     

       

       
35

       
+

       
      timezone = "Asia/Hong_Kong";


     

       

       
36

       
+

       
      default_text_search_config = "pg_catalog.english";


     

       
41

       
37

       
 

       



     

       
42

       

       
-

       
        max_wal_size = "2GB";


     

       
43

       

       
-

       
        min_wal_size = "80MB";


     

       
44

       

       
-

       
      };


     

       

       
38

       
+

       
      max_wal_size = "2GB";


     

       

       
39

       
+

       
      min_wal_size = "80MB";


     

       

       
40

       
+

       
    };


     

       
45

       
41

       
 

       
  };


     

       
46

       
42

       
 

       



     

       
47

       
43

       
 

       
  users.users.postgres.useDefaultShell = lib.mkForce false;
+1 -1
systems/koumakan/services/proxies/default.nix 
···

       
1

       

       
-

       
{ ... }:


     

       
2

       
1

       
 

       
{


     

       
3

       
2

       
 

       
  imports = [


     

       
4

       
3

       
 

       
    ./nitter.nix


     

       
5

       
4

       
 

       
    ./searxng.nix


     

       
6

       
5

       
 

       
    ./minio.nix


     

       

       
6

       
+

       
    ./nginx-stream.nix


     

       
7

       
7

       
 

       
  ];


     

       
8

       
8

       
 

       
}
+44
systems/koumakan/services/proxies/nginx-stream.nix 
···

       

       
1

       
+

       
{


     

       

       
2

       
+

       
  systemd.tmpfiles.settings."nginx-stream-log"."/var/log/nginx/stream"."d" = {


     

       

       
3

       
+

       
    user = "nginx";


     

       

       
4

       
+

       
    group = "nginx";


     

       

       
5

       
+

       
    mode = "0750";


     

       

       
6

       
+

       
  };


     

       

       
7

       
+

       
  # NOTE: this doesn't work properly atm, we cba setting up routing stuff right now.


     

       

       
8

       
+

       
  # systemd.services.nginx.serviceConfig = {


     

       

       
9

       
+

       
  #   # needed for transparent proxying


     

       

       
10

       
+

       
  #   CapabilityBoundingSet = ["CAP_NET_RAW"];


     

       

       
11

       
+

       
  #   AmbientCapabilities = ["CAP_NET_RAW"];


     

       

       
12

       
+

       
  # };


     

       

       
13

       
+

       



     

       

       
14

       
+

       
  services.nginx.streamConfig = ''


     

       

       
15

       
+

       
    resolver 100.100.100.100;


     

       

       
16

       
+

       
    # proxy_bind $remote_addr transparent;


     

       

       
17

       
+

       
    proxy_connect_timeout 1s;


     

       

       
18

       
+

       
    proxy_timeout 30s;


     

       

       
19

       
+

       



     

       

       
20

       
+

       
    log_format basic_stream '$remote_addr [$time_local] '


     

       

       
21

       
+

       
                            '$protocol $status $bytes_sent $bytes_received '


     

       

       
22

       
+

       
                            '$session_time';


     

       

       
23

       
+

       



     

       

       
24

       
+

       
    error_log /var/log/nginx/stream/error.log;


     

       

       
25

       
+

       
    access_log /var/log/nginx/stream/access.log basic_stream;


     

       

       
26

       
+

       



     

       

       
27

       
+

       
    # data


     

       

       
28

       
+

       
    server {


     

       

       
29

       
+

       
      listen 25565-25599 reuseport;


     

       

       
30

       
+

       
      proxy_pass renko.mist-nessie.ts.net:$server_port;


     

       

       
31

       
+

       
    }


     

       

       
32

       
+

       



     

       

       
33

       
+

       
    # query sockets


     

       

       
34

       
+

       
    server {


     

       

       
35

       
+

       
      listen 25565-25599 udp reuseport;


     

       

       
36

       
+

       
      proxy_pass renko.mist-nessie.ts.net:$server_port;


     

       

       
37

       
+

       
    }


     

       

       
38

       
+

       
    # voice


     

       

       
39

       
+

       
    server {


     

       

       
40

       
+

       
      listen 55111-55199 udp reuseport;


     

       

       
41

       
+

       
      proxy_pass renko.mist-nessie.ts.net:$server_port;


     

       

       
42

       
+

       
    }


     

       

       
43

       
+

       
  '';


     

       

       
44

       
+

       
}
+3 -2
systems/koumakan/services/scm/forgejo.nix 
···

       
79

       
79

       
 

       
        ENABLE_NOTIFY_MAIL = true;


     

       
80

       
80

       
 

       
        REGISTER_EMAIL_CONFIRM = true;


     

       
81

       
81

       
 

       



     

       
82

       

       
-

       
        DISABLE_REGISTRATION = false;


     

       

       
82

       
+

       
        DISABLE_REGISTRATION = false; # need to be false to enable any sort of reg.


     

       

       
83

       
+

       
        ENABLE_INTERNAL_SIGNIN = true; # we have gatekeeper setup now and working, this can be turned off.


     

       
83

       
84

       
 

       
        ALLOW_ONLY_EXTERNAL_REGISTRATION = true;


     

       
84

       
85

       
 

       



     

       
85

       
86

       
 

       
        ENABLE_CAPTCHA = true;


     
···

       
161

       
162

       
 

       
      # Logging {{{


     

       
162

       
163

       
 

       
      log = {


     

       
163

       
164

       
 

       
        ROOT_PATH = "/var/log/forgejo/";


     

       
164

       

       
-

       
        "logger.router.MODE" = "";


     

       

       
165

       
+

       
        LOGGER_ROUTER_MODE = "";


     

       
165

       
166

       
 

       
      };


     

       
166

       
167

       
 

       
      # }}}


     

       
167

       
168
+1 -19
systems/renko/configuration.nix 
···

       
43

       
43

       
 

       
  ];


     

       
44

       
44

       
 

       



     

       
45

       
45

       
 

       
  networking.firewall = {


     

       
46

       

       
-

       
    allowedTCPPorts = [ 59153 ];


     

       
47

       

       
-

       
    allowedTCPPortRanges = [


     

       
48

       

       
-

       
      {


     

       
49

       

       
-

       
        from = 25560;


     

       
50

       

       
-

       
        to = 25570;


     

       
51

       

       
-

       
      }


     

       
52

       

       
-

       
    ];


     

       
53

       

       
-

       
    allowedUDPPortRanges = [


     

       
54

       

       
-

       
      {


     

       
55

       

       
-

       
        from = 25560;


     

       
56

       

       
-

       
        to = 25570;


     

       
57

       

       
-

       
      }


     

       
58

       

       
-

       



     

       
59

       

       
-

       
      # plasmo voice


     

       
60

       

       
-

       
      {


     

       
61

       

       
-

       
        from = 55111;


     

       
62

       

       
-

       
        to = 55199;


     

       
63

       

       
-

       
      }


     

       
64

       

       
-

       
    ];


     

       

       
46

       
+

       
    allowedTCPPorts = [ 59153 5515 ];


     

       
65

       
47

       
 

       
  };


     

       
66

       
48

       
 

       



     

       
67

       
49

       
 

       
  # muh unfree software!!!!!!!!!!!!!!!!!!