Merge branch 'master' of github.com:starr-dusT/dotfiles

home/private_dot_wireguard/bulwark.pub

@@ -0,0 +1 @@
+CDoy/XI8FRQV/ySHigLWG2tpWVw8hgEZXRQCEE3qYHQ=

home/private_dot_wireguard/bulwark.tmpl

@@ -0,0 +1 @@
+{{ (secret "Wireguard - Bulwark Secret" "NOTES") }}

provision/nixos/hosts/bulwark/configuration.nix

@@ -53,8 +53,7 @@
   # Define user account.
   users.users.${user} = {
     isNormalUser = true;
-    extraGroups = [ "wheel" "docker" ]; # Enable ‘sudo’ for the user.
-    shell = pkgs.zsh;
+    extraGroups = [ "dialout" "wheel" "docker" "libvirtd" ]; # Enable ‘sudo’ for the user.
   };
 
   # List packages installed in system profile.
@@ -68,28 +67,34 @@
   # Enable modules
   modules = {
     desktop = {
-      #sway.enable = true;
+      sway.enable = false;
     };
     devel = {
-      #engineering.enable = true;
+      engineering.enable = false;
       notes.enable = true;
-      #python.enable = true;
-      #tooling.enable = true;
+      python.enable = false;
+      tooling.enable = false;
     };
     gaming = {
       steam.enable = true;
     };
     services = {
-      #jellyfin.enable = true;
-      #peripherals.enable = true;
+      jellyfin.enable = false;
+      peripherals.enable = false;
       samba-client.enable = true;
-      #samba-server.enable = true;
       syncthing.enable = true;
-      #virt-manager.enable = true;
+      virt-manager.enable = false;
     };
     system = {
       ssh.enable = true;
       terminal.enable = true;
+      wireguard-client = {
+        enable = true;
+        privateKeyFile = "/home/${user}/.wireguard/bulwark";
+        address = [ "192.168.2.4/24" ];
+        publicKey = "bd7bbZOngl/FTdBlnbIhgCLNf6yx5X8WjiRB7E1NEQQ=";
+        endpoint = "66.218.43.87";
+      };
     };
   };
   # Did you read the comment?

provision/nixos/hosts/bulwark/steam-deck.nix

@@ -37,7 +37,11 @@
         screen-keyboard-enabled = true;
       };
       "org/gnome/shell" = {
-        favorite-apps = ["steam.desktop"];
+        favorite-apps = [
+          "steam.desktop"
+          "org.gnome.Console.desktop"
+          "chromium-browser.desktop"
+        ];
       };
     };
   };

provision/nixos/hosts/torus/samba-server.nix

@@ -7,7 +7,7 @@
       server string = smbnix
       netbios name = smbnix
       security = user 
-      hosts allow = 192.168.1. 127.0.0.1 localhost
+      hosts allow = 192.168.2. 192.168.1. 127.0.0.1 localhost
       hosts deny = 0.0.0.0/0
       guest account = nobody
       map to guest = bad user

provision/nixos/modules/devel/notes.nix

@@ -13,6 +13,7 @@ in {
       zk
       # for zk
         bat
+        fzf
     ];
   };
 }