stuff
This commit is contained in:
@@ -122,6 +122,10 @@
|
|||||||
|
|
||||||
# Media
|
# Media
|
||||||
vlc
|
vlc
|
||||||
|
|
||||||
|
# Network
|
||||||
|
wireguard-tools
|
||||||
|
|
||||||
];
|
];
|
||||||
|
|
||||||
# Some programs need SUID wrappers, can be configured further or are
|
# Some programs need SUID wrappers, can be configured further or are
|
||||||
|
|||||||
@@ -30,4 +30,20 @@ services.pcscd.enable = true;
|
|||||||
###### NTFS (3G) support ######
|
###### NTFS (3G) support ######
|
||||||
|
|
||||||
boot.supportedFilesystems = [ "ntfs" ];
|
boot.supportedFilesystems = [ "ntfs" ];
|
||||||
}
|
|
||||||
|
##### Let wiregurad thru firewall ##########
|
||||||
|
networking.firewall = {
|
||||||
|
# if packets are still dropped, they will show up in dmesg
|
||||||
|
logReversePathDrops = true;
|
||||||
|
# wireguard trips rpfilter up
|
||||||
|
extraCommands = ''
|
||||||
|
ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --sport 1637 -j RETURN
|
||||||
|
ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --dport 1637 -j RETURN
|
||||||
|
'';
|
||||||
|
extraStopCommands = ''
|
||||||
|
ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --sport 1637 -j RETURN || true
|
||||||
|
ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --dport 1637 -j RETURN || true
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
|
||||||
|
}
|
||||||
|
|||||||
@@ -37,6 +37,7 @@
|
|||||||
vscodium
|
vscodium
|
||||||
kicad
|
kicad
|
||||||
ansible
|
ansible
|
||||||
|
go
|
||||||
virtualenv
|
virtualenv
|
||||||
|
|
||||||
# security
|
# security
|
||||||
|
|||||||
Reference in New Issue
Block a user