summaryrefslogtreecommitdiff
path: root/hosts
diff options
context:
space:
mode:
authorJakub Stachurski <j.stachurski@student.utwente.nl>2025-09-25 18:39:49 +0200
committerJakub Stachurski <j.stachurski@student.utwente.nl>2025-09-25 18:39:49 +0200
commit0a389da154f6e4901b60c86f39e883cb9cf05a11 (patch)
tree65642476697942c629ebf6456e744bb2389c307f /hosts
parentff442b6e9e6011874b52d3a86422a6e72a0a62f9 (diff)
Whatever
Diffstat (limited to 'hosts')
-rw-r--r--hosts/apocalypse/default.nix9
-rw-r--r--hosts/apocalypse/firewall.nix4
-rw-r--r--hosts/apocalypse/hardware-configuration.nix4
3 files changed, 15 insertions, 2 deletions
diff --git a/hosts/apocalypse/default.nix b/hosts/apocalypse/default.nix
index 8993dc2..c20c609 100644
--- a/hosts/apocalypse/default.nix
+++ b/hosts/apocalypse/default.nix
@@ -1,4 +1,4 @@
- {lib, ...}:
+ {lib, pkgs, ...}:
{
imports = [
./hardware-configuration.nix
@@ -94,6 +94,13 @@
PrintMotd = true;
};
};
+
+ # Winbox setup.
+ programs.winbox = {
+ enable = true;
+ openFirewall = true;
+ package = pkgs.winbox;
+ };
}
diff --git a/hosts/apocalypse/firewall.nix b/hosts/apocalypse/firewall.nix
index 5c73966..93a9d54 100644
--- a/hosts/apocalypse/firewall.nix
+++ b/hosts/apocalypse/firewall.nix
@@ -2,11 +2,13 @@
let
baseTCP = [
22000 # Syncthng
+ 5352 # Zeroconf for spotifyd
];
baseUDP = [
22000 # Syncthing
22027 # Syncthing
16555 # Wireguard
+ 5353 # Mdns (Spotify)
];
baseTCPRanges = [
{ from = 1714; to = 1764; } # KDE-CONNECT
@@ -32,7 +34,7 @@ let
in
{
networking.firewall = {
- enable = false;
+ enable = true;
allowedTCPPorts = baseTCP;
allowedUDPPorts = baseUDP;
allowedUDPPortRanges = baseUDPRanges;
diff --git a/hosts/apocalypse/hardware-configuration.nix b/hosts/apocalypse/hardware-configuration.nix
index d8ae434..a3bd75f 100644
--- a/hosts/apocalypse/hardware-configuration.nix
+++ b/hosts/apocalypse/hardware-configuration.nix
@@ -19,6 +19,10 @@ menuentry 'UEFI Firmware' $menuentry_id_option 'uefi-firmware' {
fwsetup
}
'';
+
+ boot.extraModprobeConfig = ''
+ options thinkpad_acpi fan_control=1
+ '';
boot.initrd.luks.devices = {
"cryptroot".device = "/dev/disk/by-uuid/d2c3c197-3d75-4da2-a098-207030a91b62";