updated private

gridlock.nix

@@ -34,6 +34,11 @@
     ROC_ENABLE_PRE_VEGA = "1";
   };
   hardware.opengl.driSupport = true;
+
+
+  programs.sway.enable = true;
+  services.xserver.displayManager.defaultSession = lib.mkForce "sway";
+  services.xserver.windowManager.i3.enable = lib.mkForce false;
   # Configure network proxy if necessary
   # networking.proxy.default = "http://user:password@proxy:port/";
   # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";

junk.nix

@@ -32,31 +32,49 @@
   };
   
 
-  containers."jumphost" = {
+  containers = {
-    autoStart = true;
+    "jumphost" = {
-    privateNetwork = true;
+      autoStart = false;
-    hostBridge = "br0";
+      privateNetwork = true;
-    config = {config, pkgs, lib, ... }: {
+      hostBridge = "br0";
-      networking.useDHCP = lib.mkForce true;
+      config = {config, pkgs, lib, ... }: {
-      services.endlessh = {
+        networking.useDHCP = lib.mkForce true;
-        enable = true;
+        services.endlessh = {
-        port = 22;
+          enable = true;
-        openFirewall = true;
+          port = 22;
+          openFirewall = true;
+        };
+        services.openssh = {
+          enable = true;
+          ports = [ 2022 ];
+          settings.PasswordAuthentication = false;
+        };
+        users.users."jump" = {
+          name = "jump";
+          isNormalUser = true;
+        };
+        services.fail2ban.enable = true;
       };
-      services.openssh = {
+    };
-        enable = true;
+    "nextcloud" = {
-        ports = [ 2022 ];
+      autoStart = true;
-        settings.PasswordAuthentication = false;
+      privateNetwork = true;
+      hostBridge = "br0";
+      config = {config, lib, pkgs, ... }: {
+        networking.useDHCP = lib.mkForce true;
       };
-      users.users."jump" = {
+    };
-        name = "jump";
+    "gnunet" = {
-        isNormalUser = true;
+      autoStart = true;
+      privateNetwork = true;
+      hostBridge = "br0";
+      config = {config, lib, pkgs, ...}: {
+        networking.useDHCP = lib.mkForce true;
+        services.gnunet.enable = true;
       };
-      services.fail2ban.enable = true;
     };
   };
 
-
   # Open ports in the firewall.
   networking.firewall.allowedTCPPorts = [ 53589 ];
   networking.firewall.allowedUDPPorts = [ 9200 ];

workstation.nix

@@ -1,6 +1,11 @@
 { config, lib, pkgs, ... }:
 
 {
+
+  imports = [
+    private/workstation.nix
+  ];
+
   fileSystems = {
     "/home".options = [ "compress=lzo" ];
     "/etc/nixos" = {
@@ -65,7 +70,6 @@
     nerdfonts
   ];
 
-  #programs.sway.enable = true;
 
   services.gnome.gnome-keyring.enable = true;
   services.pipewire.enable = true;
@@ -84,5 +88,20 @@
     htop
     bindfs
     vivaldi
+    signal-desktop
   ];
+  networking.firewall = {
+    allowedUDPPortRanges = [
+      {
+        from = 1714;
+        to = 1764;
+      }
+    ];
+    allowedTCPPortRanges = [
+      {
+        from = 1714;
+        to = 1764;
+      }
+    ];
+  };
 }

x230.nix

@@ -5,7 +5,6 @@
     [ # Include the results of the hardware scan.
       <nixos-hardware/lenovo/thinkpad/x230>
       ./workstation.nix
-      private/x230.nix
     ];
 
   # Use the GRUB 2 boot loader.
@@ -34,8 +33,8 @@
         CPU_ENERGY_PERF_POLICY_ON_BAT = "power";
         CPU_ENERGY_PERF_POLICY_ON_AC = "performance";
 
-        START_CHARGE_THRESH_BAT0 = "90"; 
+        START_CHARGE_THRESH_BAT0 = "75"; 
-        STOP_CHARGE_THRESH_BAT0 = "95";
+        STOP_CHARGE_THRESH_BAT0 = "90";
       };
   };
   powerManagement.powertop.enable = true;
@@ -48,4 +47,8 @@
   services.logind.lidSwitch = "suspend-then-hibernate";
   systemd.sleep.extraConfig = "HibernateDelaySec=1h";
 #  services.upower.enable = true;
+#  fileSystems."nas".options = [ "noauto" ];
+  programs.sway.enable = true;
+  services.xserver.displayManager.defaultSession = lib.mkForce "sway";
+  services.xserver.windowManager.i3.enable = lib.mkForce false;
 }