aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
Diffstat
-rw-r--r--flake.lock393
-rw-r--r--hosts/jupiter/config.nix1
-rw-r--r--modules/services/nixos/tailscale.nix5
3 files changed, 398 insertions, 1 deletions
diff --git a/flake.lock b/flake.lock
new file mode 100644
index 0000000..c9d8011
--- /dev/null
+++ b/flake.lock
@@ -0,0 +1,393 @@
+{
+ "nodes": {
+ "crane": {
+ "locked": {
+ "lastModified": 1765739568,
+ "narHash": "sha256-gQYx35Of4UDKUjAYvmxjUEh/DdszYeTtT6MDin4loGE=",
+ "owner": "ipetkov",
+ "repo": "crane",
+ "rev": "67d2baff0f9f677af35db61b32b5df6863bcc075",
+ "type": "github"
+ },
+ "original": {
+ "owner": "ipetkov",
+ "repo": "crane",
+ "type": "github"
+ }
+ },
+ "disko": {
+ "inputs": {
+ "nixpkgs": [
+ "nixpkgs"
+ ]
+ },
+ "locked": {
+ "lastModified": 1766150702,
+ "narHash": "sha256-P0kM+5o+DKnB6raXgFEk3azw8Wqg5FL6wyl9jD+G5a4=",
+ "owner": "nix-community",
+ "repo": "disko",
+ "rev": "916506443ecd0d0b4a0f4cf9d40a3c22ce39b378",
+ "type": "github"
+ },
+ "original": {
+ "owner": "nix-community",
+ "repo": "disko",
+ "type": "github"
+ }
+ },
+ "firefox-csshacks": {
+ "flake": false,
+ "locked": {
+ "lastModified": 1762974384,
+ "narHash": "sha256-aAwiI6+QWPQuEGdz0Ey57RFMakM7XuBYiUJuANxECgM=",
+ "owner": "MrOtherGuy",
+ "repo": "firefox-csshacks",
+ "rev": "2f30a2283ba09c5934f474110a8be462482eb272",
+ "type": "github"
+ },
+ "original": {
+ "owner": "MrOtherGuy",
+ "repo": "firefox-csshacks",
+ "type": "github"
+ }
+ },
+ "flake-compat": {
+ "flake": false,
+ "locked": {
+ "lastModified": 1761588595,
+ "narHash": "sha256-XKUZz9zewJNUj46b4AJdiRZJAvSZ0Dqj2BNfXvFlJC4=",
+ "owner": "edolstra",
+ "repo": "flake-compat",
+ "rev": "f387cd2afec9419c8ee37694406ca490c3f34ee5",
+ "type": "github"
+ },
+ "original": {
+ "owner": "edolstra",
+ "repo": "flake-compat",
+ "type": "github"
+ }
+ },
+ "flake-utils": {
+ "inputs": {
+ "systems": "systems_2"
+ },
+ "locked": {
+ "lastModified": 1701680307,
+ "narHash": "sha256-kAuep2h5ajznlPMD9rnQyffWG8EM/C73lejGofXvdM8=",
+ "owner": "numtide",
+ "repo": "flake-utils",
+ "rev": "4022d587cbbfd70fe950c1e2083a02621806a725",
+ "type": "github"
+ },
+ "original": {
+ "owner": "numtide",
+ "repo": "flake-utils",
+ "type": "github"
+ }
+ },
+ "gitignore": {
+ "inputs": {
+ "nixpkgs": [
+ "lanzaboote",
+ "pre-commit",
+ "nixpkgs"
+ ]
+ },
+ "locked": {
+ "lastModified": 1709087332,
+ "narHash": "sha256-HG2cCnktfHsKV0s4XW83gU3F57gaTljL9KNSuG6bnQs=",
+ "owner": "hercules-ci",
+ "repo": "gitignore.nix",
+ "rev": "637db329424fd7e46cf4185293b9cc8c88c95394",
+ "type": "github"
+ },
+ "original": {
+ "owner": "hercules-ci",
+ "repo": "gitignore.nix",
+ "type": "github"
+ }
+ },
+ "hjem": {
+ "inputs": {
+ "nixpkgs": [
+ "nixpkgs"
+ ],
+ "smfh": "smfh"
+ },
+ "locked": {
+ "lastModified": 1765522723,
+ "narHash": "sha256-/RSFdpON1oyd6Ha6ckOKcO8NiwZMO6tH3UCOq1r+zEE=",
+ "owner": "feel-co",
+ "repo": "hjem",
+ "rev": "85bdffaf424c027ac7f098d67854c10d384a63df",
+ "type": "github"
+ },
+ "original": {
+ "owner": "feel-co",
+ "repo": "hjem",
+ "type": "github"
+ }
+ },
+ "lanzaboote": {
+ "inputs": {
+ "crane": "crane",
+ "nixpkgs": [
+ "nixpkgs"
+ ],
+ "pre-commit": "pre-commit",
+ "rust-overlay": "rust-overlay_2"
+ },
+ "locked": {
+ "lastModified": 1766146127,
+ "narHash": "sha256-6bA+9FNE7bWOUanW6Mujcbzhm9A74dCTUBX5/bA0RVQ=",
+ "owner": "nix-community",
+ "repo": "lanzaboote",
+ "rev": "b8c5ab2bd227f840bc8e1944631fe718b19c3336",
+ "type": "github"
+ },
+ "original": {
+ "owner": "nix-community",
+ "repo": "lanzaboote",
+ "type": "github"
+ }
+ },
+ "nix-std": {
+ "locked": {
+ "lastModified": 1710870712,
+ "narHash": "sha256-e+7MJF2gsgTBuOWv4mCimSP0D9+naeFSw9a7N3yEmv4=",
+ "owner": "chessai",
+ "repo": "nix-std",
+ "rev": "31bbc925750cc9d8f828fe55cee1a2bd985e0c00",
+ "type": "github"
+ },
+ "original": {
+ "owner": "chessai",
+ "repo": "nix-std",
+ "type": "github"
+ }
+ },
+ "nixos-facter-modules": {
+ "locked": {
+ "lastModified": 1765442039,
+ "narHash": "sha256-k3lYQ+A1F7aTz8HnlU++bd9t/x/NP2A4v9+x6opcVg0=",
+ "owner": "numtide",
+ "repo": "nixos-facter-modules",
+ "rev": "9dd775ee92de63f14edd021d59416e18ac2c00f1",
+ "type": "github"
+ },
+ "original": {
+ "owner": "numtide",
+ "repo": "nixos-facter-modules",
+ "type": "github"
+ }
+ },
+ "nixpkgs": {
+ "locked": {
+ "lastModified": 1765779637,
+ "narHash": "sha256-KJ2wa/BLSrTqDjbfyNx70ov/HdgNBCBBSQP3BIzKnv4=",
+ "owner": "NixOS",
+ "repo": "nixpkgs",
+ "rev": "1306659b587dc277866c7b69eb97e5f07864d8c4",
+ "type": "github"
+ },
+ "original": {
+ "owner": "NixOS",
+ "ref": "nixos-unstable",
+ "repo": "nixpkgs",
+ "type": "github"
+ }
+ },
+ "nocargo": {
+ "inputs": {
+ "flake-utils": "flake-utils",
+ "nixpkgs": [
+ "nixpkgs"
+ ],
+ "registry-crates-io": "registry-crates-io"
+ },
+ "locked": {
+ "lastModified": 1745995660,
+ "narHash": "sha256-Cca7/uDRwfo4UnPhZX31+vQ7chKr9nJsMvwykGllDVA=",
+ "owner": "oxalica",
+ "repo": "nocargo",
+ "rev": "089f487c2c123454c8b9a381a99999b63c53d1d6",
+ "type": "github"
+ },
+ "original": {
+ "owner": "oxalica",
+ "repo": "nocargo",
+ "type": "github"
+ }
+ },
+ "pre-commit": {
+ "inputs": {
+ "flake-compat": "flake-compat",
+ "gitignore": "gitignore",
+ "nixpkgs": [
+ "lanzaboote",
+ "nixpkgs"
+ ]
+ },
+ "locked": {
+ "lastModified": 1765464257,
+ "narHash": "sha256-dixPWKiHzh80PtD0aLuxYNQ0xP+843dfXG/yM3OzaYQ=",
+ "owner": "cachix",
+ "repo": "pre-commit-hooks.nix",
+ "rev": "09e45f2598e1a8499c3594fe11ec2943f34fe509",
+ "type": "github"
+ },
+ "original": {
+ "owner": "cachix",
+ "repo": "pre-commit-hooks.nix",
+ "type": "github"
+ }
+ },
+ "registry-crates-io": {
+ "flake": false,
+ "locked": {
+ "lastModified": 1704732624,
+ "narHash": "sha256-FWX5JX33ievm6JuIEp1lI5EPndYt8s6anU+fQBYuFKc=",
+ "owner": "rust-lang",
+ "repo": "crates.io-index",
+ "rev": "4445fa0011e6ff9989985651bec57eb4cbefcadd",
+ "type": "github"
+ },
+ "original": {
+ "owner": "rust-lang",
+ "repo": "crates.io-index",
+ "type": "github"
+ }
+ },
+ "root": {
+ "inputs": {
+ "disko": "disko",
+ "firefox-csshacks": "firefox-csshacks",
+ "hjem": "hjem",
+ "lanzaboote": "lanzaboote",
+ "nixos-facter-modules": "nixos-facter-modules",
+ "nixpkgs": "nixpkgs",
+ "nocargo": "nocargo",
+ "tmux-tsunami": "tmux-tsunami"
+ }
+ },
+ "rust-overlay": {
+ "inputs": {
+ "nixpkgs": [
+ "hjem",
+ "smfh",
+ "nixpkgs"
+ ]
+ },
+ "locked": {
+ "lastModified": 1759113356,
+ "narHash": "sha256-xm4kEUcV2jk6u15aHazFP4YsMwhq+PczA+Ul/4FDKWI=",
+ "owner": "oxalica",
+ "repo": "rust-overlay",
+ "rev": "be3b8843a2be2411500f6c052876119485e957a2",
+ "type": "github"
+ },
+ "original": {
+ "owner": "oxalica",
+ "repo": "rust-overlay",
+ "type": "github"
+ }
+ },
+ "rust-overlay_2": {
+ "inputs": {
+ "nixpkgs": [
+ "lanzaboote",
+ "nixpkgs"
+ ]
+ },
+ "locked": {
+ "lastModified": 1765680428,
+ "narHash": "sha256-fyPmRof9SZeI14ChPk5rVPOm7ISiiGkwGCunkhM+eUg=",
+ "owner": "oxalica",
+ "repo": "rust-overlay",
+ "rev": "eb3898d8ef143d4bf0f7f2229105fc51c7731b2f",
+ "type": "github"
+ },
+ "original": {
+ "owner": "oxalica",
+ "repo": "rust-overlay",
+ "type": "github"
+ }
+ },
+ "smfh": {
+ "inputs": {
+ "nixpkgs": [
+ "hjem",
+ "nixpkgs"
+ ],
+ "rust-overlay": "rust-overlay",
+ "systems": "systems"
+ },
+ "locked": {
+ "lastModified": 1760525934,
+ "narHash": "sha256-1HtxuA45R/jExzE9iuimuECHWbV2c+CBdJmr/RtluaI=",
+ "owner": "feel-co",
+ "repo": "smfh",
+ "rev": "7123a00cc3c3e90ba703a37ca8d997be95c62d99",
+ "type": "github"
+ },
+ "original": {
+ "owner": "feel-co",
+ "repo": "smfh",
+ "type": "github"
+ }
+ },
+ "systems": {
+ "locked": {
+ "lastModified": 1681028828,
+ "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+ "owner": "nix-systems",
+ "repo": "default",
+ "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+ "type": "github"
+ },
+ "original": {
+ "owner": "nix-systems",
+ "repo": "default",
+ "type": "github"
+ }
+ },
+ "systems_2": {
+ "locked": {
+ "lastModified": 1681028828,
+ "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+ "owner": "nix-systems",
+ "repo": "default",
+ "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+ "type": "github"
+ },
+ "original": {
+ "owner": "nix-systems",
+ "repo": "default",
+ "type": "github"
+ }
+ },
+ "tmux-tsunami": {
+ "inputs": {
+ "nix-std": "nix-std",
+ "nixpkgs": [
+ "nixpkgs"
+ ]
+ },
+ "locked": {
+ "lastModified": 1764704796,
+ "narHash": "sha256-ul2+03ZvvSap1pPjWkHtan0juHzre6Qm6efCuGqENro=",
+ "owner": "bluedragon1221",
+ "repo": "tmux-tsunami",
+ "rev": "89703f8732291e2373d485932952448b0e5ee475",
+ "type": "github"
+ },
+ "original": {
+ "owner": "bluedragon1221",
+ "repo": "tmux-tsunami",
+ "type": "github"
+ }
+ }
+ },
+ "root": "root",
+ "version": 7
+}
diff --git a/hosts/jupiter/config.nix b/hosts/jupiter/config.nix
index ea33143..bc76142 100644
--- a/hosts/jupiter/config.nix
+++ b/hosts/jupiter/config.nix
@@ -30,7 +30,6 @@
};
helix = {
- theme = "adwaita";
enable = true;
hardMode = false;
};
diff --git a/modules/services/nixos/tailscale.nix b/modules/services/nixos/tailscale.nix
index 3fbd691..7b6cf08 100644
--- a/modules/services/nixos/tailscale.nix
+++ b/modules/services/nixos/tailscale.nix
@@ -11,5 +11,10 @@ in
enable = true;
useRoutingFeatures = "both";
};
+ networking.firewall = {
+ checkReversePath = "loose";
+ trustedInterfaces = ["tailscale0"];
+ allowedUDPPorts = [config.services.tailscale.port];
+ };
environment.systemPackages = [pkgs.tailscale];
}