.sops.yaml

@@ -1,6 +1,8 @@
 keys:
   - &users
     - &notoh age1ckvmyqkwk69j64ev3fmckytz6k2dv79z4gn5qf6gxqyevp5yjfesdfkxmn
+  - &hosts
+    - &tsuki age19l9yutk47w8hdqyzy8p3ygxv7ql6dk42rswshxe7kj0kd28wxsyqxtscl7
 
 creation_rules:
   - path_regex: secrets/[^/]+\.yaml$

home/default.nix

@@ -86,10 +86,6 @@
       Host pve
         Hostname 100.115.234.69
         User root
-      Host truenas
-        Hostname 192.168.1.199
-        User root
-        IdentityFile ~/.ssh/truenas
     '';
   };
 

home/wayland/hyprland/default.nix

@@ -7,13 +7,4 @@ _: {
     systemdIntegration = true;
     xwayland.enable = true;
   };
-  services.wlsunset = {
-    enable = true;
-    latitude = "40.712776";
-    longitude = "-74.005974";
-    temperature = {
-      day = 6500;
-      night = 3200;
-    };
-  };
 }

hosts/haru/services/blocky.nix

@@ -71,7 +71,7 @@
         whiteLists = {
           default = [
             "https://raw.githubusercontent.com/anudeepND/whitelist/master/domains/whitelist.txt"
-            "https://raw.githubusercontent.com/anudeepND/whitelist/master/domains/optional-list.txt"
+            # "https://raw.githubusercontent.com/anudeepND/whitelist/master/domains/optional-list.txt"
           ];
         };
         clientGroupsBlock = {
@@ -109,7 +109,6 @@
           # misc
 
           "wallos.internal.flake.sh" = "192.168.1.36";
-          "synology.internal.flake.sh" = "192.168.1.71";
         };
       };
       redis = {

hosts/tsuki/default.nix

@@ -92,7 +92,7 @@
     nvidia = {
       powerManagement.enable = true;
       modesetting.enable = true;
-      package = config.boot.kernelPackages.nvidiaPackages.stable;
+      package = config.boot.kernelPackages.nvidiaPackages.production;
     };
     opengl = {
       enable = true;

modules/nix.nix

@@ -1,8 +1,9 @@
-{...}: {
+{inputs, ...}: {
   nixpkgs = {
     config = {
       allowUnfree = true;
     };
+    overlays = [inputs.prismlauncher.overlays.default];
   };
 
   nh = {
@@ -26,6 +27,7 @@
       substituters = [
         "https://hyprland.cachix.org"
         "https://cache.nixos.org"
+        "https://cache.garnix.io"
         "https://nix-gaming.cachix.org"
         "https://anyrun.cachix.org"
         "https://viperml.cachix.org"
@@ -33,6 +35,7 @@
       trusted-public-keys = [
         "hyprland.cachix.org-1:a7pgxzMz7+chwVL3/pzj6jIBMioiJM7ypFP8PwtkuGc="
         "cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY="
+        "cache.garnix.io:CTFPyKSLcx5RMJKfLo5EEPUObbA78b0YQ2DTCJXqr9g="
         "nix-gaming.cachix.org-1:nbjlureqMbRAxR1gJ/f3hxemL9svXaZF/Ees8vCUUs4="
         "anyrun.cachix.org-1:pqBobmOjI7nKlsUMV25u9QHa9btJK65/C8vnO3p346s="
         "viperml.cachix.org-1:qZhKBMTfmcLL+OG6fj/hzsMEedgKvZVFRRAhq7j8Vh8="

modules/system.nix

@@ -36,9 +36,6 @@
   boot.kernelPackages = pkgs.linuxPackages_latest;
 
   systemd.services.systemd-udevd.restartIfChanged = false;
-  systemd.extraConfig = ''
-    DefaultTimeoutStopSec=10s
-  '';
 
   system.autoUpgrade.enable = false;
   system.stateVersion = "23.05"; # no touchy

secrets/secrets.yaml

@@ -3,6 +3,7 @@ foundry-password: ENC[AES256_GCM,data:c6cO1vV/thC7U1ha/1FiVVzk0KtvUnTRgJ9ysyO35u
 cloudflare-api-key: ENC[AES256_GCM,data:ZEYzFht24xogGov/Dkk9MQm0CZ/GPHvVgC7manQ2hOp1ljUOPrlHlShnNZnXctkv0VSwkQUARddCFQbAno79bUM=,iv:V54QifTBvy+5Q5JErfv2IRW0wpBn7q9KozAogy94gwU=,tag:1tz/0lNHLUTiYOH4V1jkDA==,type:str]
 rusty-auth-token: ENC[AES256_GCM,data:FZ1bC6wijkHPII2AlYnDq9P6pFq2qWVo,iv:92ZH8N52sml8ZkvfuXf472Jj/JbnaWfy38AX6GTvszA=,tag:Suq7P86MhjUx0WmPuGpCUA==,type:str]
 restic-repo-pwd: ENC[AES256_GCM,data:wan4U/w6417NWnbTTe7ID4y6Dv+bs0D3Fvw9ur6gIdU=,iv:4B5ihL5/QiNObqZwLwo4Sd33zx4pqRWszdzdutvK6a0=,tag:KqU5sSpPG8n6qHxxJUpDTg==,type:str]
+attic-secret: ENC[AES256_GCM,data:RH5ZyG/FqMgWAdNnwMCeP11d/+LxQ//IjIWoGp+Pck2otuUq0TD+IQasonbiz+3tOtyJxmL7Kesov56R8FfKX1yp7OCvyrM+vNH/4lJKjXPtzQCGvmCAlTvWLFmVAu0Vxnfk4yGTnY48GycmlDeSU7ap13IbCqBLpFnyETqV5he7IJlmAS/+uXlo4FVn9T8gP6PRCIEYq7iaf18BV17itzG8XQgSA4nxKvPAqa4i64tmfm0HqZJ3y8XQNq/c32yMBQdrjUuUHklPqAAht0KRqp2UX9dk,iv:kziKIamP6UG0ohht1woqHOf3lIzqt9RC3iGq5N3gwvg=,tag:kFff64ddihlz9ilAB8nrUw==,type:str]
 gluetun: ENC[AES256_GCM,data:yL+LOPpwU+CAtbjc7YWbNUOTpDhq4mH3aJOl3hPYxgbFUba6NVJQ73mFt7BF+PXeqA/ilbZJW3GbCfAoXWLDP3qzFYqs9XeEV/FhHznkVHB88xdr+Fbv7cuCEa7PnnYbSiwr/R68EZLsGSr+u99+uu1TH6ABXG9nJna0bkwkTfx6ui/Yc2GndWS+Ew==,iv:rYdMasJS1LqMGvMYFyAdEkoTLtOHrZHGcfBOvbn63bg=,tag:YNcP/pvgKHPYNhAwVGdFHw==,type:str]
 authelia-jwt: ENC[AES256_GCM,data:cAn2uZeSGjG2FqTFgZkupcSutCZLvZXCNBsxuUQvGX4=,iv:1OTDQzQwaPTmnTEB4TfnxU6l8CdBAlHfqFThE8QZa6A=,tag:KJ6aYDczHFajhLJHemfIQw==,type:str]
 authelia-sek: ENC[AES256_GCM,data:yWhAvl1AuEcrUCFAv2vcz6A8BLEIMIz9sqbFRAriHpw=,iv:i887EZgqGtRfFs6mHHAJry0XfQzvrTaDliz8PRh7oLs=,tag:dmn2GSG8gZk9CVXMNmH1Dw==,type:str]
@@ -27,8 +28,8 @@ sops:
             YWNQcURKMSs2U0pOa3E0cTdCZ3RnalkKGayA7DBUQS+kn+6OYVBc6oTunF0qeZdt
             5b9DLHgh0HRWFm09XGSOog8K315d93Wzblw1My1/dXeEQX/ryinqUQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-12-06T00:16:16Z"
-    mac: ENC[AES256_GCM,data:sHJnXfEhkXBM9MmizO+cbg9Xa1UZZn9a856yXAcI74r3vCWlmtlKGyuO31FnHPKX01rg5OgIRUFF6V2xzYU5QE20T/ytbAJ/Dq5yVr1OZqTzs/47LwsfHhlQzcFTuLexOUVbWdInouZ+F8qPEfK1T6Z3mZLArDajlQ9jAol1R5s=,iv:Whva/XlZWFAdHQI+HIEPRdgW/Jm6y10zAkeIV9FblGY=,tag:KMiOwIEXKH6kKoiQ9F12kQ==,type:str]
+    lastmodified: "2023-11-30T15:51:55Z"
+    mac: ENC[AES256_GCM,data:ACaSo0nbReuQzTUXoxfq4mjOvu6izHabaD+76mlsMdDE+3+c2ZLM1v4ZfbsBjWR+IHBv3L3TI0dF0PaCDPQygygDm9Lrs9S4i0bKineH7jou17dIe2BSaCQlMZMJBhPI3h37FyCJ42Q6Pmes398tbZmIvcvKJ/gYhreLdjXyjdQ=,iv:sydAeuO3sQetLcv8Lpx0ojCzsbMiofDdnzYczTI9SsY=,tag:qGyhnnxYT/CViiezEOFU3w==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.8.1