diff options
Diffstat (limited to 'hosts/apocalypse')
| -rw-r--r-- | hosts/apocalypse/default.nix | 13 | ||||
| -rw-r--r-- | hosts/apocalypse/firewall.nix | 3 | ||||
| -rw-r--r-- | hosts/apocalypse/hardware-configuration.nix | 37 |
3 files changed, 29 insertions, 24 deletions
diff --git a/hosts/apocalypse/default.nix b/hosts/apocalypse/default.nix index 09aed91..587daaf 100644 --- a/hosts/apocalypse/default.nix +++ b/hosts/apocalypse/default.nix @@ -17,6 +17,7 @@ addons = { desktop.hyprland.enable = true; desktop.xfce.enable = true; + desktop.cosmic.enable = true; steam.enable = true; virtualisation.guest = false; @@ -27,7 +28,7 @@ gpg.enable = true; remote_builder = { - enable = true; + enable = false; allowedKeyFiles = [ ../../secrets/eli.pub ]; openFirewall = true; }; @@ -78,10 +79,12 @@ services.resolved = { enable = true; - dnssec = "false"; - domains = [ "~." ]; - fallbackDns = [ ]; - dnsovertls = "opportunistic"; + settings.Resolve = { + DNSSEC = "false"; + Domains = [ "~." ]; + FallbackDns = [ "8.8.8.8" ]; + DNSOverTLS = "opportunistic"; + }; }; networking.useDHCP = lib.mkDefault true; diff --git a/hosts/apocalypse/firewall.nix b/hosts/apocalypse/firewall.nix index 05feacf..f6220c5 100644 --- a/hosts/apocalypse/firewall.nix +++ b/hosts/apocalypse/firewall.nix @@ -42,9 +42,10 @@ let ]; in { + environment.etc.hosts.mode = "0700"; networking.nftables.enable = true; networking.firewall = { - enable = true; + enable = false; checkReversePath = false; allowedTCPPorts = baseTCP; allowedUDPPorts = baseUDP; diff --git a/hosts/apocalypse/hardware-configuration.nix b/hosts/apocalypse/hardware-configuration.nix index 74b1101..d007508 100644 --- a/hosts/apocalypse/hardware-configuration.nix +++ b/hosts/apocalypse/hardware-configuration.nix @@ -144,23 +144,24 @@ # Copied from nix wiki to save on battery life. services.tlp = { - enable = true; - settings = { - CPU_SCALING_GOVERNOR_ON_AC = "performance"; - CPU_SCALING_GOVERNOR_ON_BAT = "powersave"; - - CPU_ENERGY_PERF_POLICY_ON_BAT = "power"; - CPU_ENERGY_PERF_POLICY_ON_AC = "performance"; - - CPU_MIN_PERF_ON_AC = 0; - CPU_MAX_PERF_ON_AC = 100; - CPU_MIN_PERF_ON_BAT = 0; - CPU_MAX_PERF_ON_BAT = 20; - - #Optional helps save long term battery health - START_CHARGE_THRESH_BAT0 = 40; # 40 and below it starts to charge - STOP_CHARGE_THRESH_BAT0 = 80; # 80 and above it stops charging - - }; + enable = false; }; + # settings = { + # CPU_SCALING_GOVERNOR_ON_AC = "performance"; + # CPU_SCALING_GOVERNOR_ON_BAT = "powersave"; + # + # CPU_ENERGY_PERF_POLICY_ON_BAT = "power"; + # CPU_ENERGY_PERF_POLICY_ON_AC = "performance"; + # + # CPU_MIN_PERF_ON_AC = 0; + # CPU_MAX_PERF_ON_AC = 100; + # CPU_MIN_PERF_ON_BAT = 0; + # CPU_MAX_PERF_ON_BAT = 20; + # + # #Optional helps save long term battery health + # START_CHARGE_THRESH_BAT0 = 40; # 40 and below it starts to charge + # STOP_CHARGE_THRESH_BAT0 = 80; # 80 and above it stops charging + # + # }; + # }; } |
