Simon Bruder
816004e80b
This implements a crude mechanism for signalling my router to add the packets to its own qdisc. The way in which this is implemented with nftables is hacky because of NixOS’ limitations on build-time checking (which obviously can’t know about the existence of cgroups on the target).
75 lines
1.5 KiB
Nix
75 lines
1.5 KiB
Nix
{ pkgs, ... }:
|
|
|
|
{
|
|
imports = [
|
|
./hardware-configuration.nix
|
|
../../modules
|
|
../../users/simon
|
|
];
|
|
|
|
sbruder = {
|
|
games = {
|
|
enable = true;
|
|
performanceIndex = 8;
|
|
};
|
|
gui.enable = true;
|
|
media-proxy.enable = true;
|
|
mullvad.enable = true;
|
|
restic.system = {
|
|
enable = true;
|
|
qos = true;
|
|
};
|
|
unfree.allowSoftware = true;
|
|
wireguard.home.enable = true;
|
|
};
|
|
|
|
virtualisation.libvirtd = {
|
|
enable = true;
|
|
qemu.package = pkgs.qemu_kvm;
|
|
};
|
|
|
|
services.samba = {
|
|
enable = true;
|
|
securityType = "user";
|
|
extraConfig = ''
|
|
interfaces = 192.168.122.1
|
|
bind interfaces only = yes
|
|
map to guest = bad user
|
|
load printers = no
|
|
printing = bsd
|
|
disable spoolss = yes
|
|
usershare max shares = 0
|
|
acl allow execute always = True
|
|
'';
|
|
shares = {
|
|
qemu = {
|
|
path = "/home/simon/.cache/vm-share";
|
|
browseable = "yes";
|
|
"read only" = "no";
|
|
"guest ok" = "yes";
|
|
"force user" = "simon";
|
|
};
|
|
};
|
|
};
|
|
networking.firewall.trustedInterfaces = [ "virbr0" ];
|
|
systemd.services.samba-nmbd = {
|
|
wants = [ "libvirtd.service" ];
|
|
after = [ "libvirtd.service" ];
|
|
};
|
|
|
|
services.tor = {
|
|
enable = true;
|
|
client.enable = true;
|
|
};
|
|
services.privoxy = {
|
|
enable = true;
|
|
enableTor = true;
|
|
};
|
|
|
|
networking.hostName = "mayushii";
|
|
|
|
system.stateVersion = "21.05";
|
|
|
|
boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
|
|
}
|