Compare commits

...

15 Commits

Author SHA1 Message Date
8e93931704 wildfire: 435 current 2025-07-15 21:37:14 25.05.20250708.88983d4 6.15.5 *
eza fix
2025-07-15 21:42:45 +02:00
a728e7db18 hurricane: 184 current 2025-07-14 14:31:08 25.05.20250708.88983d4 6.15.5 *
wireshark
hurricane: 184 current  2025-07-14 14:31:08  25.05.20250708.88983d4     6.15.5                          *

hurricane: 185 current  2025-07-14 14:38:12  25.05.20250708.88983d4     6.15.5                          *

hurricane: 186 current  2025-07-14 14:41:20  25.05.20250708.88983d4     6.15.5                          *
2025-07-14 14:43:30 +02:00
bcc74c81e4 hurricane: 183 current 2025-07-09 16:08:16 25.05.20250708.88983d4 6.15.5 *
logitech wireless support
2025-07-09 16:12:57 +02:00
a5a7c958f6 hurricane: 178 current 2025-07-09 14:21:17 25.05.20250708.88983d4 6.15.5 *
file user-dirs and bookmarks

hurricane: 180 current  2025-07-09 15:19:03  25.05.20250708.88983d4     6.15.5                          *

hurricane: 181 current  2025-07-09 15:23:45  25.05.20250708.88983d4     6.15.5                          *
2025-07-09 15:33:14 +02:00
d2a1cad978 hurricane: 177 current 2025-07-09 13:13:01 25.05.20250708.88983d4 6.15.5 *
FINALLY GOOD KERNEL

hurricane: 179 current  2025-07-09 15:03:40  25.05.20250708.88983d4     6.15.5                          *

update
2025-07-09 15:33:14 +02:00
ebc131de84 hurricane: 176 current 2025-07-09 10:58:44 25.05.20250705.29e2900 6.15.4 *
firefox settings
2025-07-09 11:08:07 +02:00
24034ab5fe hurricane: 175 current 2025-07-09 09:43:53 25.05.20250705.29e2900 6.15.4 *
mouse and keybord settings
2025-07-09 10:10:33 +02:00
0e34e1f6a3 wildfire: 431 current 2025-07-08 07:41:32 25.05.20250705.29e2900 6.15.4 *
update
wildfire: 432 current  2025-07-08 19:26:58  25.05.20250705.29e2900  6.15.4                          *

update

wildfire: 433 current  2025-07-09 08:42:44  25.05.20250705.29e2900  6.15.4                          *
2025-07-09 08:43:09 +02:00
dd04918131 hurricane: 174 current 2025-07-08 14:38:00 25.05.20250705.29e2900 6.15.4 *
fix ssh in ghostty
2025-07-08 19:36:56 +02:00
33ac2d0d6f hurricane: 173 current 2025-07-08 11:43:02 25.05.20250705.29e2900 6.15.4 *
Fix chsfg VPN
2025-07-08 19:36:54 +02:00
8440cb3fd8 wildfire: 429 current 2025-07-07 09:54:23 25.05.20250705.29e2900 6.15.4 *
change OpenWebUI port
2025-07-07 21:26:18 +02:00
2fbb1e5090 wildfire: 427 current 2025-07-06 13:16:38 25.05.20250703.7a732ed 6.15.4 *
still the kernel with ghostty bug, dont use

wildfire: 428 current  2025-07-07 09:25:11  25.05.20250705.29e2900  6.15.4                          *

same as before

wildfire: 430 current  2025-07-07 21:17:27  25.05.20250705.29e2900  6.15.4                          *
2025-07-07 21:26:18 +02:00
936fe86b14 wildfire: 426 current 2025-07-06 12:46:52 25.05.20250620.b2485d5 6.15.3 *
gruvbox GRUB theme
2025-07-06 12:51:29 +02:00
e0b3197cc6 wildfire: 425 current 2025-07-06 11:48:38 25.05.20250620.b2485d5 6.15.3 *
disable automatic upgrades
2025-07-06 11:49:46 +02:00
fdedb45591 wildfire: 424 current 2025-07-06 11:46:04 25.05.20250620.b2485d5 6.15.3 *
thunderbird policies
2025-07-06 11:49:34 +02:00
10 changed files with 156 additions and 75 deletions

66
flake.lock generated
View File

@@ -20,11 +20,11 @@
]
},
"locked": {
"lastModified": 1750372185,
"narHash": "sha256-lVBKxd9dsZOH1fA6kSE5WNnt8e+09fN+NL/Q3BjTWHY=",
"lastModified": 1751740947,
"narHash": "sha256-35040CHH7P3JGmhGVfEb2oJHL/A5mI2IXumhkxrBnao=",
"owner": "hyprwm",
"repo": "aquamarine",
"rev": "7cef49d261cbbe537e8cb662485e76d29ac4cbca",
"rev": "dfc1db15a08c4cd234288f66e1199c653495301f",
"type": "github"
},
"original": {
@@ -78,11 +78,11 @@
]
},
"locked": {
"lastModified": 1749154018,
"narHash": "sha256-gjN3j7joRvT3a8Zgcylnd4NFsnXeDBumqiu4HmY1RIg=",
"lastModified": 1751810233,
"narHash": "sha256-kllkNbIqQi3VplgTMeGzuh1t8Gk8TauvkTRt93Km+tQ=",
"owner": "nix-community",
"repo": "home-manager",
"rev": "7aae0ee71a17b19708b93b3ed448a1a0952bf111",
"rev": "9b0873b46c9f9e4b7aa01eb634952c206af53068",
"type": "github"
},
"original": {
@@ -137,11 +137,11 @@
]
},
"locked": {
"lastModified": 1750371717,
"narHash": "sha256-cNP+bVq8m5x2Rl6MTjwfQLCdwbVmKvTH7yqVc1SpiJM=",
"lastModified": 1751808145,
"narHash": "sha256-OXgL0XaKMmfX2rRQkt9SkJw+QNfv0jExlySt1D6O72g=",
"owner": "hyprwm",
"repo": "hyprgraphics",
"rev": "15c6f8f3a567fec9a0f732cd310a7ff456deef88",
"rev": "b841473a0bd4a1a74a0b64f1ec2ab199035c349f",
"type": "github"
},
"original": {
@@ -166,11 +166,11 @@
"xdph": "xdph"
},
"locked": {
"lastModified": 1750589353,
"narHash": "sha256-+3W7HI8ZzVqhjaws8++TFaUX8JP2eq9Uzn/KHA/qr0U=",
"lastModified": 1752064776,
"narHash": "sha256-vdvG6f7hWS8stxiN/uhxk777E7MI5RyWzcZ+WJ5KhoA=",
"owner": "hyprwm",
"repo": "hyprland",
"rev": "dd33128c2f127f39c30cca72addb1970b8936d07",
"rev": "c6497a719379e36c25df5f1980a5b2a1a78d3536",
"type": "github"
},
"original": {
@@ -313,11 +313,11 @@
]
},
"locked": {
"lastModified": 1750371096,
"narHash": "sha256-JB1IeJ41y7kWc/dPGV6RMcCUM0Xj2NEK26A2Ap7EM9c=",
"lastModified": 1751888065,
"narHash": "sha256-F2SV9WGqgtRsXIdUrl3sRe0wXlQD+kRRZcSfbepjPJY=",
"owner": "hyprwm",
"repo": "hyprutils",
"rev": "38f3a211657ce82a1123bf19402199b67a410f08",
"rev": "a8229739cf36d159001cfc203871917b83fdf917",
"type": "github"
},
"original": {
@@ -338,11 +338,11 @@
]
},
"locked": {
"lastModified": 1750371869,
"narHash": "sha256-lGk4gLjgZQ/rndUkzmPYcgbHr8gKU5u71vyrjnwfpB4=",
"lastModified": 1751881472,
"narHash": "sha256-meB0SnXbwIe2trD041MLKEv6R7NZ759QwBcVIhlSBfE=",
"owner": "hyprwm",
"repo": "hyprwayland-scanner",
"rev": "aa38edd6e3e277ae6a97ea83a69261a5c3aab9fd",
"rev": "8fb426b3e5452fd9169453fd6c10f8c14ca37120",
"type": "github"
},
"original": {
@@ -353,11 +353,11 @@
},
"nixpkgs": {
"locked": {
"lastModified": 1750365781,
"narHash": "sha256-XE/lFNhz5lsriMm/yjXkvSZz5DfvKJLUjsS6pP8EC50=",
"lastModified": 1751792365,
"narHash": "sha256-J1kI6oAj25IG4EdVlg2hQz8NZTBNYvIS0l4wpr9KcUo=",
"owner": "NixOS",
"repo": "nixpkgs",
"rev": "08f22084e6085d19bcfb4be30d1ca76ecb96fe54",
"rev": "1fd8bada0b6117e6c7eb54aad5813023eed37ccb",
"type": "github"
},
"original": {
@@ -369,11 +369,11 @@
},
"nixpkgs-unstable": {
"locked": {
"lastModified": 1750365781,
"narHash": "sha256-XE/lFNhz5lsriMm/yjXkvSZz5DfvKJLUjsS6pP8EC50=",
"lastModified": 1751792365,
"narHash": "sha256-J1kI6oAj25IG4EdVlg2hQz8NZTBNYvIS0l4wpr9KcUo=",
"owner": "NixOS",
"repo": "nixpkgs",
"rev": "08f22084e6085d19bcfb4be30d1ca76ecb96fe54",
"rev": "1fd8bada0b6117e6c7eb54aad5813023eed37ccb",
"type": "github"
},
"original": {
@@ -385,11 +385,11 @@
},
"nixpkgs_2": {
"locked": {
"lastModified": 1750400657,
"narHash": "sha256-3vkjFnxCOP6vm5Pm13wC/Zy6/VYgei/I/2DWgW4RFeA=",
"lastModified": 1751943650,
"narHash": "sha256-7orTnNqkGGru8Je6Un6mq1T8YVVU/O5kyW4+f9C1mZQ=",
"owner": "NixOS",
"repo": "nixpkgs",
"rev": "b2485d56967598da068b5a6946dadda8bfcbcd37",
"rev": "88983d4b665fb491861005137ce2b11a9f89f203",
"type": "github"
},
"original": {
@@ -409,11 +409,11 @@
]
},
"locked": {
"lastModified": 1749636823,
"narHash": "sha256-WUaIlOlPLyPgz9be7fqWJA5iG6rHcGRtLERSCfUDne4=",
"lastModified": 1750779888,
"narHash": "sha256-wibppH3g/E2lxU43ZQHC5yA/7kIKLGxVEnsnVK1BtRg=",
"owner": "cachix",
"repo": "git-hooks.nix",
"rev": "623c56286de5a3193aa38891a6991b28f9bab056",
"rev": "16ec914f6fb6f599ce988427d9d94efddf25fe6d",
"type": "github"
},
"original": {
@@ -473,11 +473,11 @@
]
},
"locked": {
"lastModified": 1750372504,
"narHash": "sha256-VBeZb1oqZM1cqCAZnFz/WyYhO8aF/ImagI7WWg/Z3Og=",
"lastModified": 1751300244,
"narHash": "sha256-PFuv1TZVYvQhha0ac53E3YgdtmLShrN0t4T6xqHl0jE=",
"owner": "hyprwm",
"repo": "xdg-desktop-portal-hyprland",
"rev": "400308fc4f9d12e0a93e483c2e7a649e12af1a92",
"rev": "6115f3fdcb2c1a57b4a80a69f3c797e47607b90a",
"type": "github"
},
"original": {

View File

@@ -35,7 +35,7 @@
{
publicKey = "h/BUyzXy0Xo4KJKS/U5V4C9rDJT3fWjjiZoy0I7P+H4=";
allowedIPs = ["10.0.0.0/8" "192.168.10.0/24" "2a02:9a0:300:fff0::/64"];
endpoint = "gw1.net.chsfg.se:51831";
endpoint = "gw1.net.chsfg.se:51821";
persistentKeepalive = 25;
}
];

View File

@@ -23,7 +23,9 @@
];
# Network security specific to host
networking.firewall.allowedTCPPorts = [3000];
networking.firewall.allowedTCPPorts = [
3773 # OpenWebUI
];
networking.firewall.allowedUDPPorts = [];
# host-specific packages

View File

@@ -35,7 +35,7 @@
# {
# publicKey = "h/BUyzXy0Xo4KJKS/U5V4C9rDJT3fWjjiZoy0I7P+H4=";
# allowedIPs = ["10.0.0.0/8" "192.168.10.0/24" "2a02:9a0:300:fff0::/48"];
# endpoint = "gw1.net.chsfg.se:51831";
# endpoint = "gw1.net.chsfg.se:51821";
# persistentKeepalive = 25;
# }
# ];

View File

@@ -48,6 +48,7 @@ in {
./hm/cava.nix # Audio visualizer config
./hm/fastfetch.nix # Fastfetch config
./hm/eza.nix # Eza config (ls alternative)
./hm/user-dirs.nix # XDG User directories config
];
};
@@ -59,7 +60,7 @@ in {
users.schulze = {
isNormalUser = true;
description = "Felix Schulze";
extraGroups = ["networkmanager" "wheel" "docker" "plugdev"];
extraGroups = ["networkmanager" "wheel" "docker" "plugdev" "wireshark"];
shell = pkgs.fish;
};
groups.libvirtd.members = ["schulze"];
@@ -83,8 +84,17 @@ in {
memtest86.enable = true; # Enable memtest86 for hardware testing
# Styling
backgroundColor = "${colors.gruvbox.bg0}";
#splashImage = "";
theme = pkgs.stdenv.mkDerivation {
pname = "nix-gruv-grub";
version = "1";
src = pkgs.fetchFromGitHub {
owner = "Atif-Mahmud";
repo = "nix-gruv-grub";
rev = "269507de98ecd4fd9c57aa06bf5d8132d6949a06";
hash = "sha256-UEPZxyT09Z0PiOka/Dh4m8VvqF4l+01eZVbRkPJduDk=";
};
installPhase = "cp -r tartarus/ $out";
};
};
};
# Always use the latest kernel for best hardware support
@@ -160,8 +170,19 @@ in {
blueman.enable = true;
};
# Bluetooth support
hardware.bluetooth.enable = true;
# ================================
# HARDWARE
# ================================
hardware = {
# Bluetooth support
bluetooth.enable = true;
# Logitech Unifying Receiver support
logitech.wireless = {
enable = true;
enableGraphical = true;
};
};
# power management tool which allows for managing hibernate and suspend states
powerManagement.enable = true;
@@ -199,22 +220,6 @@ in {
};
};
# ================================
# AUTOMATIC MAINTENANCE
# ================================
# Configure automatic system updates for security
system.autoUpgrade = {
enable = true;
flake = inputs.self.outPath; # Use this flake for updates
flags = [
"--update-input"
"nixpkgs" # Update nixpkgs input
"-L" # Print build logs for transparency
];
dates = "02:00"; # Run at 2 AM
randomizedDelaySec = "45min"; # Random delay to avoid server load
};
# ================================
# FONTS
# ================================

View File

@@ -1,7 +1,7 @@
{
programs.eza = {
enable = true;
icons = true;
icons = "auto";
git = true;
extraOptions = ["--group-directories-first"];
enableFishIntegration = true;

View File

@@ -15,7 +15,6 @@ in {
misc = {
disable_hyprland_logo = true; # disables the random Hyprland logo / anime girl background. :(
disable_splash_rendering = true;
focus_on_activate = true;
};
input = {
@@ -31,8 +30,8 @@ in {
sensitivity = 0;
accel_profile = "flat";
repeat_delay = 250;
repeat_rate = 40;
repeat_delay = 300;
repeat_rate = 30;
touchpad = {
natural_scroll = true;

View File

@@ -5,6 +5,12 @@
serverAliveCountMax = 2;
matchBlocks = {
"*" = {
sendEnv = ["TERM"];
setEnv = {
TERM = "xterm-256color"; # Fix ghostty issue
};
};
"d10.csb.brainmill.com" = {
forwardAgent = true;
};

18
modules/hm/user-dirs.nix Normal file
View File

@@ -0,0 +1,18 @@
{config, ...}: {
xdg.userDirs = {
enable = true;
desktop = "${config.home.homeDirectory}/Nextcloud/Home-sync/Desktop";
documents = "${config.home.homeDirectory}/Nextcloud/Home-sync/Documents";
download = "${config.home.homeDirectory}/Nextcloud/Home-sync/Downloads";
music = "${config.home.homeDirectory}/Nextcloud/Home-sync/Music";
pictures = "${config.home.homeDirectory}/Nextcloud/Home-sync/Pictures";
publicShare = "${config.home.homeDirectory}/Nextcloud/Home-sync/Public";
templates = "${config.home.homeDirectory}/Nextcloud/Home-sync/Templates";
videos = "${config.home.homeDirectory}/Nextcloud/Home-sync/Videos";
};
gtk.gtk3.bookmarks = [
"file://${config.home.homeDirectory}/Nextcloud/Home-sync/Downloads"
"file://${config.home.homeDirectory}/Nextcloud/Home-sync/Documents"
"file://${config.home.homeDirectory}/Nextcloud/Home-sync/Pictures"
];
}

View File

@@ -154,6 +154,7 @@ in {
enableFishIntegration = true;
};
# Cat replacement
bat = {
enable = true;
settings = {
@@ -192,7 +193,6 @@ in {
/*
---- POLICIES ----
*/
DisableTelemetry = true;
DisableFirefoxStudies = true;
EnableTrackingProtection = {
@@ -201,14 +201,45 @@ in {
Cryptomining = true;
Fingerprinting = true;
};
DisablePocket = true;
FirefoxHome = {
Snippets = false;
TopSites = false;
SponsoredTopSites = false;
SponsoredPocket = false;
};
HttpsOnlyMode = "force_enabled";
DNSOverHTTPS = {
Enabled = true;
ProviderURL = "https://dns.schulze.network/dns-query";
Locked = true;
Fallback = true;
};
PasswordManagerEnabled = false;
/*
---- PREFERENCES ----
*/
Preferences = {
"extensions.activeThemeID" = {
Value = "{21ab01a8-2464-4824-bccb-6db15659347e}";
Status = "locked";
};
"sidebar.animation.duration-ms" = {
Value = 50;
Status = "locked";
};
"sidebar.animation.expand-on-hover.duration-ms" = {
Value = 50;
Status = "locked";
};
"sidebar.verticalTabs" = lock-true;
"sidebar.position_start" = lock-false;
};
/*
---- EXTENSIONS ----
*/
# Check about:support for extension/add-on ID strings.
# Valid strings for installation_mode are "allowed", "blocked",
# "force_installed" and "normal_installed".
# Valid strings for installation_mode are "allowed", "blocked", "force_installed" and "normal_installed".
ExtensionSettings = {
"*".installation_mode = "normal_installed";
# uBlock Origin:
@@ -222,25 +253,45 @@ in {
installation_mode = "force_installed";
};
};
/*
---- PREFERENCES ----
*/
Preferences = {
"browser.newtabpage.activity-stream.showSponsoredTopSites" = lock-false;
"extensions.activeThemeID" = {
Value = "{21ab01a8-2464-4824-bccb-6db15659347e}";
Status = "locked";
};
};
thunderbird = {
enable = true;
policies = {
DisableTelemetry = true;
DisableFirefoxStudies = true;
DisablePocket = true;
DNSOverHTTPS = {
Enable = true;
Provider = "dns.schulze.network";
Locked = false;
Fallback = true;
};
ExtensionSettings = {
"cloud@johannes-endres.de" = {
installation_mode = "force_installed";
install_url = "https://addons.thunderbird.net/thunderbird/downloads/latest/filelink-nextcloud-owncloud/addon-987761-latest.xpi";
};
"dkim_verifier@pl" = {
installation_mode = "force_installed";
install_url = "https://addons.thunderbird.net/thunderbird/downloads/latest/dkim-verifier/addon-438634-latest.xpi";
};
"gruvbox-dark@calch.themes.thunderbird.net" = {
installation_mode = "force_installed";
install_url = "https://addons.thunderbird.net/thunderbird/downloads/latest/gruvbox-dark-thunderbird/addon-987835-latest.xpi";
};
};
};
};
thunderbird.enable = true;
steam = {
enable = true;
remotePlay.openFirewall = true;
dedicatedServer.openFirewall = true;
};
wireshark = {
enable = true;
package = pkgs.wireshark;
};
};
# enable and configure Docker