added firewall rule for tang

added tang to jeeves
adding muninn
2026-04-21 06:39:09 -04:00 · 2024-11-11 12:41:04 -05:00 · 2024-11-11 12:18:49 -05:00 · 2024-11-10 10:57:25 -05:00
8 changed files with 43 additions and 60 deletions
--- a/.vscode/settings.json
+++ b/.vscode/settings.json
@@ -31,7 +31,6 @@
    "captivedetect",
    "cgroupdriver",
    "charliermarsh",
-    "cleves",
    "cloudflared",
    "codezombiech",
    "compactmode",
@@ -72,7 +71,6 @@
    "formfill",
    "foxundermoon",
    "FULLSCREEN",
-    "fwupd",
    "fxaccounts",
    "gamemode",
    "gamescope",
--- a/common/global/default.nix
+++ b/common/global/default.nix
@@ -36,9 +36,10 @@
    };
  };

-  services.fwupd.enable = true;
-
-  programs.zsh.enable = true;
+  programs = {
+    zsh.enable = true;
+    fish.enable = true;
+  };

  security.auditd.enable = lib.mkDefault true;

--- a/common/optional/desktop.nix
+++ b/common/optional/desktop.nix
@@ -1,8 +1,8 @@
 { lib, pkgs, ... }:
 {
  boot = {
-    kernelPackages = lib.mkDefault pkgs.linuxPackages_zen;
-    zfs.package = pkgs.zfs_unstable;
+    kernelPackages = lib.mkDefault pkgs.master.linuxPackages_zen;
+    zfs.package = pkgs.master.zfs_unstable;
  };
  services = {
    desktopManager.plasma6.enable = true;
--- a/flake.lock
+++ b/flake.lock
@@ -9,11 +9,11 @@
      },
      "locked": {
        "dir": "pkgs/firefox-addons",
-        "lastModified": 1731643390,
-        "narHash": "sha256-ckIrZY5i+b7UrxolO54pSRO9dKW7GnMYQ1uQLeWEBsU=",
+        "lastModified": 1730520198,
+        "narHash": "sha256-0G4QIsCmQyfwdWUws7UDZQYcCn5l9m42AE9c3Ak0+DY=",
        "owner": "rycee",
        "repo": "nur-expressions",
-        "rev": "f0fa120121e9ea5c16c7b2c578fbebe37fbcab55",
+        "rev": "ca0f5e3fd8a37605a6960fee549f6b79d3f83c28",
        "type": "gitlab"
      },
      "original": {
@@ -79,11 +79,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1731604581,
-        "narHash": "sha256-Qq2YZZaDTB3FZLWU/Hgh1uuWlUBl3cMLGB99bm7rFUM=",
+        "lastModified": 1730490306,
+        "narHash": "sha256-AvCVDswOUM9D368HxYD25RsSKp+5o0L0/JHADjLoD38=",
        "owner": "nix-community",
        "repo": "home-manager",
-        "rev": "1d0862ee2d7c6f6cd720d6f32213fa425004be10",
+        "rev": "1743615b61c7285976f85b303a36cdf88a556503",
        "type": "github"
      },
      "original": {
@@ -124,11 +124,11 @@
        "rust-overlay": "rust-overlay"
      },
      "locked": {
-        "lastModified": 1731712317,
-        "narHash": "sha256-NpkSAwLFTFRZx+C2yL0JCBnjnZQRs8PsWRqZ0S08Bc8=",
+        "lastModified": 1730511796,
+        "narHash": "sha256-+ZBaUiJWig7LumIKi1fOExUke8XubkKJUlcrEa+UN+M=",
        "owner": "lilyinstarlight",
        "repo": "nixos-cosmic",
-        "rev": "0b0e62252fb3b4e6b0a763190413513be499c026",
+        "rev": "1d5a818e3b5188f6aa106eed5f66e454787c5d70",
        "type": "github"
      },
      "original": {
@@ -139,11 +139,11 @@
    },
    "nixos-hardware": {
      "locked": {
-        "lastModified": 1731403644,
-        "narHash": "sha256-T9V7CTucjRZ4Qc6pUEV/kpgNGzQbHWfGcfK6JJLfUeI=",
+        "lastModified": 1730537918,
+        "narHash": "sha256-GJB1/aaTnAtt9sso/EQ77TAGJ/rt6uvlP0RqZFnWue8=",
        "owner": "nixos",
        "repo": "nixos-hardware",
-        "rev": "f6581f1c3b137086e42a08a906bdada63045f991",
+        "rev": "f6e0cd5c47d150c4718199084e5764f968f1b560",
        "type": "github"
      },
      "original": {
@@ -155,11 +155,11 @@
    },
    "nixpkgs": {
      "locked": {
-        "lastModified": 1731319897,
-        "narHash": "sha256-PbABj4tnbWFMfBp6OcUK5iGy1QY+/Z96ZcLpooIbuEI=",
+        "lastModified": 1730200266,
+        "narHash": "sha256-l253w0XMT8nWHGXuXqyiIC/bMvh1VRszGXgdpQlfhvU=",
        "owner": "nixos",
        "repo": "nixpkgs",
-        "rev": "dc460ec76cbff0e66e269457d7b728432263166c",
+        "rev": "807e9154dcb16384b1b765ebe9cd2bba2ac287fd",
        "type": "github"
      },
      "original": {
@@ -171,11 +171,11 @@
    },
    "nixpkgs-master": {
      "locked": {
-        "lastModified": 1731716707,
-        "narHash": "sha256-ykrD4v5e/i2eweFAnamAXXkk/jzhNNwPiDc9yu4MbZs=",
+        "lastModified": 1730587346,
+        "narHash": "sha256-YAzfNPNFtztrOYe1Nhi6cTiT7kedRwmlfpijA9T2uuk=",
        "owner": "nixos",
        "repo": "nixpkgs",
-        "rev": "3af4d5583961833ab0439b64626190951839c0bc",
+        "rev": "a8ffc2295c358629bc1bda569bf8b3bbb21aa1be",
        "type": "github"
      },
      "original": {
@@ -187,11 +187,11 @@
    },
    "nixpkgs-stable": {
      "locked": {
-        "lastModified": 1731386116,
-        "narHash": "sha256-lKA770aUmjPHdTaJWnP3yQ9OI1TigenUqVC3wweqZuI=",
+        "lastModified": 1730327045,
+        "narHash": "sha256-xKel5kd1AbExymxoIfQ7pgcX6hjw9jCgbiBjiUfSVJ8=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "689fed12a013f56d4c4d3f612489634267d86529",
+        "rev": "080166c15633801df010977d9d7474b4a6c549d7",
        "type": "github"
      },
      "original": {
@@ -203,11 +203,11 @@
    },
    "nixpkgs-stable_2": {
      "locked": {
-        "lastModified": 1731386116,
-        "narHash": "sha256-lKA770aUmjPHdTaJWnP3yQ9OI1TigenUqVC3wweqZuI=",
+        "lastModified": 1730327045,
+        "narHash": "sha256-xKel5kd1AbExymxoIfQ7pgcX6hjw9jCgbiBjiUfSVJ8=",
        "owner": "nixos",
        "repo": "nixpkgs",
-        "rev": "689fed12a013f56d4c4d3f612489634267d86529",
+        "rev": "080166c15633801df010977d9d7474b4a6c549d7",
        "type": "github"
      },
      "original": {
@@ -266,11 +266,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1731551344,
-        "narHash": "sha256-wr8OOqgw7M1pWfe4W7WA5lErzOVMg3zvrrxx/dy/nPo=",
+        "lastModified": 1730428392,
+        "narHash": "sha256-2aRfq1P0usr+TlW9LUCoefqqpPum873ac0TgZzXYHKI=",
        "owner": "oxalica",
        "repo": "rust-overlay",
-        "rev": "27570abfd3461875f11fc07c9b01c141a6332b4f",
+        "rev": "17eda17f5596a84e92ba94160139eb70f3c3e734",
        "type": "github"
      },
      "original": {
--- a/systems/jeeves/default.nix
+++ b/systems/jeeves/default.nix
@@ -24,6 +24,8 @@ in
    "torrenting"
  ];

+  networking.firewall.allowedTCPPorts = [ 7654 ];
+
  services = {
    openssh.ports = [ 629 ];

@@ -39,6 +41,14 @@ in
      openFirewall = true;
    };

+    tang = {
+      enable = true;
+      ipAddressAllow = [
+        "192.168.98.1/24"
+        "192.168.95.1/24"
+      ];
+    };
+
    smartd.enable = true;

    snapshot_manager = {
--- a/systems/muninn/hardware.nix
+++ b/systems/muninn/hardware.nix
@@ -12,10 +12,6 @@
        "usb_storage"
        "sd_mod"
      ];
-      clevis = {
-        enable = true;
-        devices."luks-root-pool-nvme-INTEL_SSDPEKKW256G7_BTPY63820XBH256D-part2".secretFile = /root/key.jwe;
-      };
      kernelModules = [ ];
      luks.devices."luks-root-pool-nvme-INTEL_SSDPEKKW256G7_BTPY63820XBH256D-part2" = {
        device = "/dev/disk/by-id/nvme-INTEL_SSDPEKKW256G7_BTPY63820XBH256D-part2";
--- a/users/richie/home/gui/firefox/github.svg
+++ b/users/richie/home/gui/firefox/github.svg
@@ -1,3 +0,0 @@
-<svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg">
-<path fill-rule="evenodd" clip-rule="evenodd" d="M16 0C7.16 0 0 7.16 0 16C0 23.08 4.58 29.06 10.94 31.18C11.74 31.32 12.04 30.84 12.04 30.42C12.04 30.04 12.02 28.78 12.02 27.44C8 28.18 6.96 26.46 6.64 25.56C6.46 25.1 5.68 23.68 5 23.3C4.44 23 3.64 22.26 4.98 22.24C6.24 22.22 7.14 23.4 7.44 23.88C8.88 26.3 11.18 25.62 12.1 25.2C12.24 24.16 12.66 23.46 13.12 23.06C9.56 22.66 5.84 21.28 5.84 15.16C5.84 13.42 6.46 11.98 7.48 10.86C7.32 10.46 6.76 8.82 7.64 6.62C7.64 6.62 8.98 6.2 12.04 8.26C13.32 7.9 14.68 7.72 16.04 7.72C17.4 7.72 18.76 7.9 20.04 8.26C23.1 6.18 24.44 6.62 24.44 6.62C25.32 8.82 24.76 10.46 24.6 10.86C25.62 11.98 26.24 13.4 26.24 15.16C26.24 21.3 22.5 22.66 18.94 23.06C19.52 23.56 20.02 24.52 20.02 26.02C20.02 28.16 20 29.88 20 30.42C20 30.84 20.3 31.34 21.1 31.18C27.42 29.06 32 23.06 32 16C32 7.16 24.84 0 16 0V0Z" fill="white"/>
-</svg>
--- a/users/richie/home/gui/firefox/search_engines.nix
+++ b/users/richie/home/gui/firefox/search_engines.nix
@@ -61,24 +61,5 @@
      ];
      icon = ./kagi.png;
    };
-    github = {
-      urls = [
-        {
-          template = "https://github.com/search?";
-          params = [
-            {
-              name = "q";
-              value = "{searchTerms}";
-            }
-            {
-              name = "type";
-              value = "code";
-            }
-          ];
-        }
-      ];
-      icon = ./github.svg;
-      definedAliases = [ "@n" ];
-    };
  };
 }
Author	SHA1	Message	Date
Richie Cahill	28a48a3889	added firewall rule for tang	2024-11-11 12:41:04 -05:00
Richie Cahill	6d9334d343	added tang to jeeves	2024-11-11 12:18:49 -05:00
Richie Cahill	ecd25820b3	adding muninn	2024-11-10 10:57:25 -05:00