minor fixes
This commit is contained in:
parent
7267de08d6
commit
c75d2092f6
2
TODO.md
2
TODO.md
@ -1,5 +1,7 @@
|
|||||||
# TODO
|
# TODO
|
||||||
|
|
||||||
|
* move nginx config to respective profiles
|
||||||
|
* ocis confid and metadata backup (take zfs snapshot and backup it)
|
||||||
* grafana for all services
|
* grafana for all services
|
||||||
* move some profiles to modules (like vpn.nix)
|
* move some profiles to modules (like vpn.nix)
|
||||||
* use sops for all occurrences of hashedPassword
|
* use sops for all occurrences of hashedPassword
|
||||||
|
@ -10,7 +10,6 @@
|
|||||||
customModules.devices
|
customModules.devices
|
||||||
customModules.libvirt-guests
|
customModules.libvirt-guests
|
||||||
customModules.persist
|
customModules.persist
|
||||||
customModules.rustic
|
|
||||||
customModules.users
|
customModules.users
|
||||||
|
|
||||||
customProfiles.hardened
|
customProfiles.hardened
|
||||||
|
@ -6,6 +6,7 @@ let
|
|||||||
nginx-conf = config.sops.secrets."nginx.conf".path;
|
nginx-conf = config.sops.secrets."nginx.conf".path;
|
||||||
marzban-env = config.sops.secrets.marzban.path;
|
marzban-env = config.sops.secrets.marzban.path;
|
||||||
in {
|
in {
|
||||||
|
imports = [ inputs.ataraxiasjel-nur.nixosModules.ocis ];
|
||||||
networking.firewall.allowedTCPPorts = [ 80 443 ];
|
networking.firewall.allowedTCPPorts = [ 80 443 ];
|
||||||
|
|
||||||
sops.secrets = let
|
sops.secrets = let
|
||||||
|
@ -277,6 +277,7 @@ in with config.deviceSpecific; with lib; {
|
|||||||
windowrule=opaque,virt-manager
|
windowrule=opaque,virt-manager
|
||||||
windowrulev2=opaque,class:^(.*winbox64.exe)$
|
windowrulev2=opaque,class:^(.*winbox64.exe)$
|
||||||
windowrulev2=tile,class:^(.*winbox64.exe)$
|
windowrulev2=tile,class:^(.*winbox64.exe)$
|
||||||
|
windowrulev2=tile,class:^(starrail.exe)$
|
||||||
|
|
||||||
windowrule=opaque,.*jellyfin.*
|
windowrule=opaque,.*jellyfin.*
|
||||||
'' ''
|
'' ''
|
||||||
|
@ -15,6 +15,7 @@ with config.deviceSpecific; {
|
|||||||
services.gvfs.enable = !isServer;
|
services.gvfs.enable = !isServer;
|
||||||
services.upower.enable = isLaptop;
|
services.upower.enable = isLaptop;
|
||||||
xdg.portal.enable = true;
|
xdg.portal.enable = true;
|
||||||
|
xdg.portal.config.common.default = "*";
|
||||||
xdg.portal.xdgOpenUsePortal = true;
|
xdg.portal.xdgOpenUsePortal = true;
|
||||||
|
|
||||||
home-manager.users.${config.mainuser} = {
|
home-manager.users.${config.mainuser} = {
|
||||||
|
Loading…
x
Reference in New Issue
Block a user