From 72a532244594a370f597babf700fb013123d8c17 Mon Sep 17 00:00:00 2001
From: Jakub Stachurski <j.stachurski@student.utwente.nl>
Date: Wed, 5 Nov 2025 01:29:41 +0100
Subject: Secrets via nixos-sops, caldav and fixed virt

---
 hosts/apocalypse/default.nix  |  8 --------
 hosts/apocalypse/firewall.nix |  9 ++++++++-
 hosts/test_vm/default.nix     | 11 ++++++++---
 3 files changed, 16 insertions(+), 12 deletions(-)

(limited to 'hosts')

diff --git a/hosts/apocalypse/default.nix b/hosts/apocalypse/default.nix
index d199263..c4bffbf 100644
--- a/hosts/apocalypse/default.nix
+++ b/hosts/apocalypse/default.nix
@@ -61,7 +61,6 @@
 
   programs.nix-ld.enable = true;
   services.printing.enable = true;
-  # nix.config.allowUnfree = true; 
 
 
 	services.resolved = {
@@ -96,13 +95,6 @@
       PrintMotd = true;
     }; 
   };
-
-   # Winbox setup.
-  programs.winbox = {
-    enable = true;
-    openFirewall = true;
-    package = pkgs.winbox;
-  };
 }
 
 
diff --git a/hosts/apocalypse/firewall.nix b/hosts/apocalypse/firewall.nix
index c63e556..26097af 100644
--- a/hosts/apocalypse/firewall.nix
+++ b/hosts/apocalypse/firewall.nix
@@ -33,8 +33,10 @@ let
   ]; 
 in 
 {
+    networking.nftables.enable = false; 
     networking.firewall = {
-        enable = false; 
+        enable = false;
+        checkReversePath = false; 
         allowedTCPPorts = baseTCP; 
         allowedUDPPorts = baseUDP; 
           allowedUDPPortRanges = baseUDPRanges;
@@ -47,6 +49,11 @@ in
             allowedTCPPortRanges = secureTCPRanges;
           };
        };
+       trustedInterfaces = [
+          "docker0" 
+          "br-*" 
+          "veth*"
+       ];
     };
 }
 
diff --git a/hosts/test_vm/default.nix b/hosts/test_vm/default.nix
index 280cb9a..06998c6 100644
--- a/hosts/test_vm/default.nix
+++ b/hosts/test_vm/default.nix
@@ -1,9 +1,14 @@
-{pkgs, lib, ...}: {
-  
+{pkgs, lib, inputs,...}: {
   boot.loader.systemd-boot.enable = true; 
   boot.loader.efi.canTouchEfiVariables = true;
+  imports = ["${inputs.nixpkgs}/nixos/modules/virtualisation/libvirtd.nix"];
 
-  addons.desktop.hyprland.enable = true; 
+  networking.hostName = "cookie_vm"; # Define your hostname.
+  networking.networkmanager.enable = true; 
+  programs.nix-ld.enable = true;
+
+
+  addons.desktop.hyprland.enable = false; 
   addons.desktop.xfce.enable = true; 
   addons.virtualisation.guest = true; 
   virtualisation.vmVariant = {
-- 
cgit v1.3.1