causalhonk/dots
1
0
Fork 0
forked from nico/dots
Code Pull requests Activity

chore: organise modules

Browse source 
Organise modules in a significantly better way with categories.
This commit is contained in:
Nico 2025-05-03 16:16:03 +10:00
parent 7444260d7d
commit 3660ef23f1
33 changed files with 77 additions and 76 deletions
Download patch file Download diff file Expand all files Collapse all files

8
modules/network/avahi.nix Normal file
View file

@ -0,0 +1,8 @@
{ config, lib, pkgs, ...}:
{
services.avahi = {
enable = true;
nssmdns = true;
};
}

127
modules/network/firewall/opensnitch.nix Normal file
View file

@ -0,0 +1,127 @@
{ config, lib, pkgs, ... }:
{
services.opensnitch = {
enable = true;
settings = {
DefaultAction = "allow";
LogLevel = 2;
Stats.MaxEvents = 3;
};
rules = {
"systemd-timesyncd" = {
"name" = "systemd-timesyncd";
"enabled" = true;
"action" = "allow";
"duration" = "always";
"operator" = {
"type" = "simple";
"sensitive" = false;
"operand" = "process.path";
"data" = "${pkgs.systemd}/lib/systemd/systemd-timesyncd";
};
};
"nsncd" = {
"name" = "nsncd";
"enabled" = true;
"action" = "allow";
"duration" = "always";
"operator" = {
"type" = "simple";
"sensitive" = false;
"operand" = "process.path";
"data" = "${pkgs.nsncd}/bin/nsncd";
};
};
"firefox" = {
"name" = "firefox";
"enabled" = true;
"action" = "allow";
"duration" = "always";
"operator" = {
"type" = "simple";
"sensitive" = false;
"operand" = "process.path";
"data" = "${pkgs.firefox}/bin/firefox";
};
};
"firefox-regexp" = {
"name" = "firefox2";
"enabled" = true;
"action" = "allow";
"duration" = "always";
"operator" = {
"type" = "regexp";
"sensitive" = false;
"operand" = "process.path";
"data" = "/nix/store/[aA0-zZ9]*-firefox-.*/.*"; # im too lazy smh
};
};
"nix" = {
"name" = "nix";
"enabled" = true;
"action" = "allow";
"duration" = "always";
"operator" = {
"type" = "simple";
"sensitive" = false;
"operand" = "process.path";
"data" = "${pkgs.nix}/bin/nix";
};
};
"steam" = {
"name" = "steam";
"enabled" = true;
"action" = "allow";
"duration" = "always";
"operator" = {
"type" = "regexp";
"sensitive" = false;
"operand" = "process.path";
"data" = "^/home/[aA0-zZ9]*/.local/share/Steam/(ubuntu12_[0-9][0-9]|linux[0-9][0-9])/steam.*";
};
};
"electron" = {
"name" = "electron";
"enabled" = true;
"action" = "allow";
"duration" = "always";
"operator" = {
"type" = "simple";
"sensitive" = false;
"operand" = "process.path";
"data" = "${pkgs.electron}/libexec/electron/electron";
};
};
"prismlauncher" = {
"name" = "prismlauncher";
"enabled" = true;
"action" = "allow";
"duration" = "always";
"operator" = {
"type" = "simple";
"sensitive" = false;
"operand" = "process.path";
"data" = "${pkgs.prismlauncher-unwrapped}/bin/prismlauncher";
};
};
"speech-dispatcher" = {
"name" = "speech-dispatcher";
"enabled" = true;
"action" = "block";
"duration" = "always";
"operator" = {
"type" = "simple";
"sensitive" = false;
"operand" = "process.path";
"data" = "${pkgs.speechd}/bin/speech-dispatcher";
};
};
};
};
environment.systemPackages = [
pkgs.opensnitch-ui
];
}

5
modules/network/vpn/tailscale.nix Normal file
View file

@ -0,0 +1,5 @@
{ config, lib, pkgs, ... }:
{
services.tailscale.enable = true;
}