meow

2025-09-10 15:33:48 +02:00 · 2025-09-10 15:33:48 +02:00 · 35c8ebb56a
commit 35c8ebb56a
parent c999ed6520
20 changed files with 670 additions and 405 deletions
--- a/instances/ds9/default.nix
+++ b/instances/ds9/default.nix
@ -5,7 +5,7 @@
  publicHostname = "ds9.hailsatan.eu";
  prometheusServer = true;
  wg = {
-    pubKey = "";
+    pubKey = "aZvSeAhKG3B5I2My5IqQoSlntMzbCHM6OU92WEScohc=";
    # server = true;
    # v4 = "10.13.12.1";
  };
--- a/instances/ds9/secrets/wg.yaml
+++ b/instances/ds9/secrets/wg.yaml
@ -0,0 +1,57 @@
+wg:
+    privkey: ENC[AES256_GCM,data:b7wB43mIt64PLb4ig80/TwjEDvHldH+g1cMg4y0t45xD5moCIyTQQMYW8XI=,iv:c6YJzKnSqbG2A7tp9I8CGqo8jPtNh14oHlrTI8/gVrA=,tag:hhfzSb5ubiMFcQu0FdGmzg==,type:str]
+sops:
+    lastmodified: "2025-09-06T23:31:51Z"
+    mac: ENC[AES256_GCM,data:dp1W5HM1NjubonM1Cxa21gTGozYzZLQgjcBmAnDxnK7GEec3lHgWFXkQ6KALmuisIFpvR7SkVjCu4gyZzmh0IuGpqtpHpluzny1uHBUCQer7ojsdNkcp5kETUk8VwiZZja6Gj0kDtXfEf103bpT0T0Z+UOVMrWKoWGQbv4brVaQ=,iv:FfcsqVdd7YVkQmCplzLTv/sHDSNAEHjcP4OxOZA7g28=,tag:/43cCFLF6cgX1iNfGk+ohw==,type:str]
+    pgp:
+        - created_at: "2025-09-06T23:31:32Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hL4DAAAAAAAAAAASBAMEQwLDACmQv4ORHq85U/BoynySfEpqqyUtzPZOiFR4Hj2s
+            eF5hblqTIMcdiRkIVeF+Lg1Oor4tui8MgKwKA7kfq54MQysMFtpRWIu2AMrneC9E
+            wJ+FnhKTaRrqiH7v41OLtjX1twZxOWUvHo+kOhEN29UhwdiaA12f5BnN4a7qzz4w
+            Y0cl6YKlE6XKn345TVvl3GXB/+/4VUrReDmAjxJhZ/gdmLBQ1Pjz6/Nvp/gu3BZP
+            0l4BXwEklaJ/2ILKbGmdzyH9XAl2BW768+B7ygawHtPOnlMtyoJG8/3FMWv/ZbcP
+            Ar38mIH2+rbQMgTwe3WAbaQ0QPwZrw0bZFvqcWdGpBU8qQDmpr67A0gH2TfXTIhY
+            =E1SN
+            -----END PGP MESSAGE-----
+          fp: 0D98D5964AC8BB1CA034CE4EC456133700066642
+        - created_at: "2025-09-06T23:31:32Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQGMAwAAAAAAAAAAAQv/dOE7FqGma8ic/QIX01yqNL4si2Dq/QNnHWfGeHdIwUtb
+            bERaEk92TgixAopOvGiXNoxNMORaFmbbt93ikVIEO4omYQjyrMgM1iv+UtRgom3i
+            Cdo2esCcNzVsktpM611JopoEZWMetoZ9arQUZkpR1lS7oa/yvSVDavv6WWe2/Uug
+            pisC4btLdQW1yy8fvH1TUolBXOHI28Ms5AMTh8wqHIFOv5szVJU+nD+8jiL63Wmw
+            q94HwU4B5/o3KazpbpPv4b7EtLr+aki2n0NYsgKNI9e8in4Hl4fmcnGNWhkryg/5
+            7iY2y50aG8vJyd7KnVmsgv08cN9Cdb5YSljE4V4Lh4cgISVEHJCyfaITAH+kozyL
+            wNskdIkFABpMotNPKXvTEFIqxHhosCKZjcmJiK7VI1cSKO7UujUpgJspia4gvd2f
+            aAgyVVLaJjO2xA5fAa6hJWolib0jJdFc7OjfMV1lneEQrDI8KGC6kkwAkYRDTECn
+            9n1B6s3607KSVTLux69L0lgBY2l9TErn/JygNrGsOhxrL8HdEHbT8vM/ys0Ty0sp
+            6IkhEP3WAruWafBlI+Ih3Vfeo/Ixb6s1f+v721Ft0CtoZEah57xKEpqthrkqYt6q
+            v/GJ8XdboDBZ
+            =7YJl
+            -----END PGP MESSAGE-----
+          fp: fada7e7be28e186e463ad745a38d17f36849d8a7
+        - created_at: "2025-09-06T23:31:32Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQGLAwAAAAAAAAAAAQv1HZzh5kRuqrRm/ZEk5zhzjs1ijDOWvkAdFexm77xWGKFo
+            geaixzxqq7y9wz9DowXJGAf5PETFJK08BCW9eJFesX+Qbnbb8baxaK/L1O0bJfw9
+            fdcUeA5cZ8soBUqKFFi5XYGYKHh2HbKyXHvSrgZq7aG+9OTa2Qhw8XbbPu6TeeqS
+            jRpsmVD2K/60zVrwV9ZtNe1lBdl8S9BHFJEceCtFDuBi4Or+OkLBXatTzxUSu1Qv
+            atdQX0gliUOrlytafuGwbcKrMuMPX7WXbaAPblewuDUPemBr4YBLJOn1hIhJy9vb
+            Yz9JtP9VZgH5OWh0icsEuCAgxzh8LW/cZ5FUmx30m19949AROHjlemtSlrvgkU5c
+            FwoN9wZCeVncWzWcRVlWBHbp4aqOCZXTDKnZEK0pX+jPaUgIVwXwV0L66dfb265E
+            PLA2xe+HcIvuCsdctgywuoO/9czJw3wt63FBAq66BzUITdd619o4CkqbuBnm/5Of
+            +SY7jScWxnzlQttwBbfSWAHOJFkVS4hczvhzsAoYFMJjN6f9yEWsoXen85JnUJoM
+            WhjGOJkCF+AoX/Z0SA9WibgALjIPqvLLfrLSMPoWFrbysc2p+17RqaqlQSSVk5uB
+            epnIJRWjUTU=
+            =zxBa
+            -----END PGP MESSAGE-----
+          fp: b730b2bf54eb792a14bfd3e68c14c08894376c5f
+    unencrypted_suffix: _unencrypted
+    version: 3.10.2
--- a/instances/picard/default.nix
+++ b/instances/picard/default.nix
@ -5,7 +5,7 @@
  publicHostname = "xyno.space";
  # prometheusServer = true;
  wg = {
-    pubKey = "";
+    pubKey = "7JcdTbWfsyGWhJM1Rk9Y4xZVLPHcTmoG/Ne/AFCYKFs=";
    server = true;
    v4 = "10.13.12.1";
  };
--- a/instances/picard/secrets/wg.yaml
+++ b/instances/picard/secrets/wg.yaml
@ -0,0 +1,57 @@
+wg:
+    privkey: ENC[AES256_GCM,data:DI5T9OXnCt73WUfTFqgLA2Y/OkBZTp+i0kxpiUKWmN4Kyd6bf6HF3vg7htE=,iv:ziWU6P9SxQUaTs4VOtIcDg9Dq+a250nO6W42WASCFa8=,tag:cyfe6XWcsQL8W0ofoY/rEw==,type:str]
+sops:
+    lastmodified: "2025-09-06T23:32:40Z"
+    mac: ENC[AES256_GCM,data:kgS8W00EhWjW9tb4YSaURdfhcsQB+XnUZvxTkG1ZCWNXbiZiGB+86lW4xrPxurIIMqF05XQwJdYY/ozo5Pd5WG5KDO8pL9gC1m2Y6NC7VwKmgnb9YZIZt1DXhUEKp18xpWmXOxt/ngNw5Md4157TEh7Mg1+bMfb+csEXhSEKoaY=,iv:V2TrHF3ArAo/thVmOTn74qk/z1OQLcQndv/8Zel/cPY=,tag:cp3nOmytYNW5+d1jfR5gpA==,type:str]
+    pgp:
+        - created_at: "2025-09-06T23:32:32Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hL4DAAAAAAAAAAASBAMEOWDso+44YL1Yjk4aH4+VjZuLsF5POF3Rx+GDkSXG7Yzt
+            KuZo4xwbjPI/fi/xIL3bcctEPk4/8hlWcr40noUnIlNlaCgYtJBMKsC+DPH3nnup
+            i9AlSOCgHIVK6xG6MTH8Uu1xw1MmkIHirqJWJbwe8t8SkGg5mOJQ7B2rRHgGabQw
+            UYynNAum+34V0GFF5/qqfvEmPsQaL243mxwmv9OV5gtgNginqgsSUt96mGAhosbF
+            0l4BjnH1+z9a28AetL7mnYxnp7HI5MhBsYdbZ4MEdO1gm3WoJMRdo782s7eLMPm0
+            n9lk+uQaue/7i1h18RsBX2ZI7/2tjlUT1Y0SedGqwcavTHIRvZxfxniuJwTak7AW
+            =HRzI
+            -----END PGP MESSAGE-----
+          fp: 0D98D5964AC8BB1CA034CE4EC456133700066642
+        - created_at: "2025-09-06T23:32:32Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQGMAwAAAAAAAAAAAQv/W+Kq5oUP8N23z1P5ziOBd229k5zAv9jnafbd4PbelYWC
+            mDuhJRX2XuA54kPiKaw7T9etCCcMySMmAt28xqmX0vhIOgv2iYFlEPKS9kKELdxJ
+            65sU3AOwGhfS0B8NiqRtqY4X6i6mhQg4kpkCRBt3R18tBghptTY1BvdqWWqN4bvF
+            U8U7iROLyXujAelNb16nlY52WF3PI9NKyyf3lKDs37KfWeQxqm6y/quOQiArAkxY
+            wlcVR1/n7rgcTCk4FKT1ZqGbxAS9a0AewEhVPFKj/V7LbRPivREVeKjF58G86JjR
+            JUkV6ArT7Ga4a8vyu/261MzJH0y4THEvyn5+b/8TPPuQ1YRxTxXThgTdGHu1pdne
+            22GUntDWZAh4kToVn/C4LI7lUK0Z6h3c7vJX/ZpxRu85+geTpCoFB72fL7bN3MQ4
+            rpIfyEbziHZS6lKn3xqt6rEd6LNrii/QSiNvpoCZuceLhNy69q+WOzyTLPXeu2qQ
+            3JQzbhH1gju41ftJsRsK0lgBcvdzEffwPxL0fluuRR/EEUjPB+wIy7o4PzbNK8ke
+            /gPdEDjZjbS70Ou2i0bOQ7bG+MmiwtOX97xRyADOVfvfFTiBM60n8pQZirJBKtUP
+            rAdiwCNBZZso
+            =cySR
+            -----END PGP MESSAGE-----
+          fp: fada7e7be28e186e463ad745a38d17f36849d8a7
+        - created_at: "2025-09-06T23:32:32Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQGMAwAAAAAAAAAAAQwArQg7nleMnXFrZv8Z8PKdudWCP4dt2Yy9aD2jkTQeExJD
+            u/BeVG9pmDmyFsgcU3077/GLReo7OVDFBDwPQnWPQc7ycEeCRzJ6Jg99+QiGNI38
+            cMU/es3gIc51UiUQZgicaDLU1pHAg1nhbucRcPgzQSz78Jh1kfjwU0Ll4bc5nIXU
+            kCLBQfMsZMw5ct7lPc/MmvUCXvXd/dvub22vBBFg3mX/NYuMY83ASsOa2sHDr9Dt
+            dBWHzglU/xNN/HBZmjAFviCibZRNoFMSO5WiJSZN34CbXcasPPv57k6dA5lzvXru
+            GHoz6XDFmri2QdwjYeqCv1SUrBp3ViDFpfAcnx0fu8h1I3v6oqMJoJ+vJuyLsS2M
+            XFm2CUa5xaFus5CW3iuXjhZQjDw83xRjZEhAKaTf5y+XjnmOzhF16AMb22vXFeUf
+            8HUx6QZ/kd0TuI3+XCiQSEY6n2B94dzN8NsEJdCEICwURJN9dwzoiqt6lhPyvp1n
+            VgkNO8TiwtmSNhU6xGWW0lgB914CeDHRrF+Q/slRJWt/ow+OHcFGk61yneHLLJlE
+            Ab8/4ajiV/jEFVpXpLaw6fAaFZxCGiVCEMaiczq+Q8lKkM+SGkoP6WVLMy4MS7k5
+            2oZM8qxFf4WU
+            =xPB1
+            -----END PGP MESSAGE-----
+          fp: b730b2bf54eb792a14bfd3e68c14c08894376c5f
+    unencrypted_suffix: _unencrypted
+    version: 3.10.2
--- a/instances/theseus/configuration.nix
+++ b/instances/theseus/configuration.nix
@ -13,42 +13,15 @@
  home-manager.users.${config.xyno.system.user.name} = (
    { ... }:
    {
-      xyno.git.enable = true;
      xyno.borgmatic.enable = true;
-      home.packages = [
-        # work
-        # (pkgs.unstable.jetbrains.rider.override { jdk = pkgs.unstable.openjdk21; })
-        pkgs.unstable.jetbrains.rider
-        pkgs.android-studio
-        # (pkgs.unstable.android-studio.override { jdk = pkgs.unstable.openjdk21; })
-        (pkgs.firefox-devedition.overrideAttrs (super: self: { meta.priority = 1; }))
-      ];
-      services.flatpak.update.auto.enable = true;
-      services.flatpak = {
-        enable = true;
-        packages = [
-          "com.unicornsonlsd.finamp"
-          # "io.github.softfever.OrcaSlicer"
-          "io.anytype.anytype"
-          "org.bionus.Grabber"
-          "org.getmonero.Monero"
-          {
-            appId = "org.gimp.GIMP";
-            origin = "flathub-beta";
-          }
-          "org.kicad.KiCad"
-          "org.pencil2d.Pencil2D"
-        ];
-      };
    }
  );
  nixpkgs.config.permittedInsecurePackages = [
    "olm-3.2.16"
  ];
-  virtualisation.podman.enable = true;
  services.vsmartcard-vpcd.enable = true;
  hardware.gpgSmartcards.enable = true;
-  networking.firewall.interfaces."tailscale0".allowedTCPPorts = [ 35963 ] ;
+  networking.firewall.interfaces."tailscale0".allowedTCPPorts = [ 35963 ];

  environment.systemPackages = with pkgs; [
    aerc
@ -65,38 +38,15 @@
    supersonic
    nheko
    anki-bin
-    nixpkgs-manual
-    nixpkgs-manual.lib-docs
-    (
-      let
-        helpScript = pkgs.writeShellScriptBin "nixpkgs-help" ''
-          exec xdg-open ${pkgs.nixpkgs-manual}/share/doc/nixpkgs/index.html
-        '';
-        desktopItem = pkgs.makeDesktopItem {
-          name = "nixpkgs-manual";
-          desktopName = "nixpkgs Manual";
-          genericName = "System Manual";
-          comment = "View nixpkgs documentation in a web browser";
-          icon = "nix-snowflake";
-          exec = "nixpkgs-help";
-          categories = [ "System" ];
-        };
-
-      in
-      pkgs.symlinkJoin {
-        name = "nixpkgs-help";
-        paths = [
-          helpScript
-          desktopItem
-        ];
-
-      }
-    )
-    # (nheko.overrideAttrs (
-    #   super: self: {
-    #     src = inputs.nheko;
-    #   }
-    # ))
+    gimp3
+    anytype
+    monero-gui
+    orca-slicer
+    kicad
+    dune3d
+    pencil2d
+    python311Packages.brother-ql
+    ptouch-print
  ];

  time.timeZone = "Europe/Berlin";
@ -116,8 +66,10 @@
  xyno.hardware.kmonad.enable = true;
  xyno.presets.cli.enable = true;
  xyno.presets.gui.enable = true;
+  xyno.presets.development.enable = true;
  xyno.presets.home-manager.enable = true;
  xyno.system.user.enable = true;
+  services.openssh.enable = true;
  xyno.user-services.syncthing = {
    enable = true;
    tray = true;
@ -132,7 +84,6 @@
  services.blueman.enable = true;
  services.power-profiles-daemon.enable = true;
  programs.kdeconnect.enable = true;
-  services.flatpak.enable = true;

  system.stateVersion = "24.11";
 }