summaryrefslogtreecommitdiff
path: root/hosts
diff options
context:
space:
mode:
Diffstat (limited to 'hosts')
-rw-r--r--hosts/apocalypse/default.nix13
-rw-r--r--hosts/apocalypse/firewall.nix3
-rw-r--r--hosts/apocalypse/hardware-configuration.nix37
3 files changed, 29 insertions, 24 deletions
diff --git a/hosts/apocalypse/default.nix b/hosts/apocalypse/default.nix
index 09aed91..587daaf 100644
--- a/hosts/apocalypse/default.nix
+++ b/hosts/apocalypse/default.nix
@@ -17,6 +17,7 @@
addons = {
desktop.hyprland.enable = true;
desktop.xfce.enable = true;
+ desktop.cosmic.enable = true;
steam.enable = true;
virtualisation.guest = false;
@@ -27,7 +28,7 @@
gpg.enable = true;
remote_builder = {
- enable = true;
+ enable = false;
allowedKeyFiles = [ ../../secrets/eli.pub ];
openFirewall = true;
};
@@ -78,10 +79,12 @@
services.resolved = {
enable = true;
- dnssec = "false";
- domains = [ "~." ];
- fallbackDns = [ ];
- dnsovertls = "opportunistic";
+ settings.Resolve = {
+ DNSSEC = "false";
+ Domains = [ "~." ];
+ FallbackDns = [ "8.8.8.8" ];
+ DNSOverTLS = "opportunistic";
+ };
};
networking.useDHCP = lib.mkDefault true;
diff --git a/hosts/apocalypse/firewall.nix b/hosts/apocalypse/firewall.nix
index 05feacf..f6220c5 100644
--- a/hosts/apocalypse/firewall.nix
+++ b/hosts/apocalypse/firewall.nix
@@ -42,9 +42,10 @@ let
];
in
{
+ environment.etc.hosts.mode = "0700";
networking.nftables.enable = true;
networking.firewall = {
- enable = true;
+ enable = false;
checkReversePath = false;
allowedTCPPorts = baseTCP;
allowedUDPPorts = baseUDP;
diff --git a/hosts/apocalypse/hardware-configuration.nix b/hosts/apocalypse/hardware-configuration.nix
index 74b1101..d007508 100644
--- a/hosts/apocalypse/hardware-configuration.nix
+++ b/hosts/apocalypse/hardware-configuration.nix
@@ -144,23 +144,24 @@
# Copied from nix wiki to save on battery life.
services.tlp = {
- enable = true;
- settings = {
- CPU_SCALING_GOVERNOR_ON_AC = "performance";
- CPU_SCALING_GOVERNOR_ON_BAT = "powersave";
-
- CPU_ENERGY_PERF_POLICY_ON_BAT = "power";
- CPU_ENERGY_PERF_POLICY_ON_AC = "performance";
-
- CPU_MIN_PERF_ON_AC = 0;
- CPU_MAX_PERF_ON_AC = 100;
- CPU_MIN_PERF_ON_BAT = 0;
- CPU_MAX_PERF_ON_BAT = 20;
-
- #Optional helps save long term battery health
- START_CHARGE_THRESH_BAT0 = 40; # 40 and below it starts to charge
- STOP_CHARGE_THRESH_BAT0 = 80; # 80 and above it stops charging
-
- };
+ enable = false;
};
+ # settings = {
+ # CPU_SCALING_GOVERNOR_ON_AC = "performance";
+ # CPU_SCALING_GOVERNOR_ON_BAT = "powersave";
+ #
+ # CPU_ENERGY_PERF_POLICY_ON_BAT = "power";
+ # CPU_ENERGY_PERF_POLICY_ON_AC = "performance";
+ #
+ # CPU_MIN_PERF_ON_AC = 0;
+ # CPU_MAX_PERF_ON_AC = 100;
+ # CPU_MIN_PERF_ON_BAT = 0;
+ # CPU_MAX_PERF_ON_BAT = 20;
+ #
+ # #Optional helps save long term battery health
+ # START_CHARGE_THRESH_BAT0 = 40; # 40 and below it starts to charge
+ # STOP_CHARGE_THRESH_BAT0 = 80; # 80 and above it stops charging
+ #
+ # };
+ # };
}