s0melapt0p-nix -> isla: rename

Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>

isla/services/fprintd.nix

@@ -0,0 +1,11 @@
+{...}: {
+  services = {
+    fprintd = {
+      enable = true;
+      tod = {
+        enable = false;
+        # driver = pkgs.
+      };
+    };
+  };
+}

isla/services/greetd.nix

@@ -0,0 +1,18 @@
+{
+  pkgs,
+  lib,
+  ...
+}: {
+  services = {
+    greetd = {
+      enable = true;
+      restart = false;
+      settings = {
+        default_session = {
+          command = "${lib.getExe pkgs.tuigreet} -r -t -c ${lib.getExe pkgs.sway}";
+          user = "greeter";
+        };
+      };
+    };
+  };
+}

isla/services/libinput.nix

@@ -0,0 +1,23 @@
+{...}: {
+  services = {
+    libinput = {
+      enable = true;
+      mouse = {
+        accelProfile = "flat";
+        accelSpeed = "-1.0";
+        buttonMapping = "1 2 3 4 5 6 7 8 9";
+        horizontalScrolling = true;
+        leftHanded = false;
+        naturalScrolling = true;
+      };
+
+      touchpad = {
+        accelProfile = "adaptive";
+        accelSpeed = "-1.0";
+        buttonMapping = "1 2 3 4 5 6 7 8 9";
+        clickMethod = "clickfinger";
+        leftHanded = false;
+      };
+    };
+  };
+}

isla/services/netbird.nix

@@ -0,0 +1,7 @@
+{...}: {
+  services = {
+    netbird = {
+      enable = true;
+    };
+  };
+}

isla/services/openssh.nix

@@ -0,0 +1,22 @@
+{config, ...}: {
+  services = {
+    openssh = {
+      enable = true;
+      allowSFTP = true;
+      openFirewall = true;
+      ports = [
+        6969
+      ];
+
+      settings = {
+        PrintMotd = false;
+        PermitRootLogin = "no";
+        PasswordAuthentication = false;
+      };
+
+      authorizedKeysFiles = [
+        config.sops.secrets.sshKey.path
+      ];
+    };
+  };
+}

isla/services/pipewire.nix

@@ -0,0 +1,65 @@
+{...}: {
+  services = {
+    pipewire = {
+      enable = true;
+      alsa = {
+        enable = true;
+        support32Bit = true;
+      };
+
+      audio = {
+        enable = true;
+      };
+
+      pulse = {
+        enable = true;
+      };
+
+      jack = {
+        enable = true;
+      };
+
+      wireplumber = {
+        enable = true;
+      };
+
+      extraConfig = {
+        pipewire = {
+          "92-low-latency" = {
+            "context.properties" = {
+              "default.clock.rate" = 48000;
+              "default.clock.allowed-rates" = [
+                44100
+                48000
+                88200
+                96000
+              ];
+
+              "default.clock.min-quantum" = 512;
+              "default.clock.quantum" = 4096;
+              "default.clock.max-quantum" = 8192;
+            };
+          };
+
+          "93-no-resampling" = {
+            "context.properties" = {
+              "default.clock.rate" = 48000;
+              "default.clock.allowed-rates" = [
+                44100
+                48000
+                96000
+                192000
+              ];
+            };
+          };
+
+          "94-no-upmixing" = {
+            "stream.properties" = {
+              "channelmix.upmix" = false;
+            };
+          };
+        };
+      };
+    };
+  };
+}

isla/services/qmk.nix

@@ -0,0 +1,9 @@
+{pkgs, ...}: {
+  services = {
+    udev = {
+      packages = with pkgs; [
+        qmk-udev-rules
+      ];
+    };
+  };
+}

isla/services/thinkfan.nix

@@ -0,0 +1,8 @@
+{...}: {
+  services = {
+    thinkfan = {
+      enable = true;
+      smartSupport = true;
+    };
+  };
+}

isla/services/usbmuxd.nix

@@ -0,0 +1,8 @@
+{pkgs, ...}: {
+  services = {
+    usbmuxd = {
+      enable = true;
+      package = pkgs.usbmuxd2;
+    };
+  };
+}

isla/services/xserver.nix

@@ -0,0 +1,26 @@
+{
+  lib,
+  pkgs,
+  ...
+}: {
+  services = {
+    xserver = {
+      display = lib.mkForce 0;
+      enable = true;
+
+      excludePackages = with pkgs; [
+        xterm
+      ];
+
+      videoDrivers = [
+        "i915"
+      ];
+
+      xkb = {
+        layout = "us, ru";
+        variant = "";
+        options = "grp:caps_toggle";
+      };
+    };
+  };
+}

isla/services/yggdrasil.nix

@@ -0,0 +1,46 @@
+{config, ...}: {
+  services = {
+    yggdrasil = {
+      enable = true;
+      persistentKeys = false;
+      settings = {
+        PrivateKey = config.sops.secrets.yggKeyLT.path;
+
+        Peers = [
+          # only 1W+ peers (some exeptions are possible)
+
+          # Russia
+          "tls://yggno.de:18227"
+          "tcp://yggno.de:18226"
+
+          "tcp://kzn1.neonxp.ru:7991"
+          "tls://kzn1.neonxp.ru:7992"
+          "ws://kzn1.neonxp.ru:7993"
+          "quic://kzn1.neonxp.ru:7994"
+        ];
+
+        Listen = [
+          #
+        ];
+
+        MulticastInterfaces = [
+          {
+            Regex = ".*";
+            Beacon = true;
+            Listen = false;
+            Password = "";
+          }
+        ];
+
+        AllowedPublicKeys = [
+          #
+        ];
+
+        IfName = "auto";
+
+        IfMTU = 65535;
+        NodeInfoPrivacy = false;
+      };
+    };
+  };
+}

isla/services/yubikey-agent.nix

@@ -0,0 +1,8 @@
+{pkgs, ...}: {
+  services = {
+    yubikey-agent = {
+      package = pkgs.yubikey-agent;
+      enable = true;
+    };
+  };
+}

isla/services/zapret.nix

@@ -0,0 +1,145 @@
+{...}: {
+  services = {
+    zapret = {
+      enable = true;
+      configureFirewall = true;
+      qnum = 350;
+      params = [
+        "--wssize 1:6"
+
+        "--filter-tcp=80"
+        "--dpi-desync=multisplit"
+        "--dpi-desync-split-pos=10"
+        "--dpi-desync-repeats=6"
+        "--new"
+
+        "--filter-tcp=443"
+        "--dpi-desync=multidisorder"
+        "--dpi-desync-split-pos=1,midsld"
+        "--new"
+
+        "--filter-tcp=443"
+        "--dpi-desync=syndata"
+        "--dpi-desync-fake-syndata=0x00000000"
+        "--dpi-desync-ttl=10"
+        "--new"
+
+        "--filter-udp=443"
+        "--dpi-desync=fake"
+        "--dpi-desync-repeats=6"
+        "--dpi-desync-fake-quic=0x00000000"
+        "--new"
+
+        "--filter-udp=443"
+        "--dpi-desync=fake,udplen"
+        "--dpi-desync-udplen-increment=5"
+        "--dpi-desync-fake-tls=0x00000000"
+        "--dpi-desync-cutoff=n3"
+        "--dpi-desync-repeats=2"
+        "--new"
+
+        "--filter-tcp=443"
+        "--dpi-desync=split"
+        "--dpi-desync-fooling=md5sig,badseq"
+        "--dpi-desync-fake-tls=0x00000000"
+        "--dpi-desync-split-pos=1"
+        "--dpi-desync-repeats=10"
+        "--new"
+
+        "--filter-tcp=443"
+        "--dpi-desync=fake,split2"
+        "--dpi-desync-fooling=md5sig"
+        "--dpi-desync-fake-tls=0x00000000"
+        "--dpi-desync-split-seqovl=2"
+        "--dpi-desync-split-pos=2"
+
+        "--dpi-desync-autottl"
+        "--new"
+        "--filter-tcp=443"
+        "--dpi-desync=fake,split2"
+        "--dpi-desync-fooling=md5sig"
+        "--dpi-desync-fake-tls=0x00000000"
+        "--dpi-desync-split-seqovl=2"
+        "--dpi-desync-split-pos=2"
+        "--dpi-desync-autottl"
+        "--new"
+
+        "--filter-tcp=80"
+        "--dpi-desync=fake,split2"
+        "--dpi-desync-fooling=md5sig"
+        "--dpi-desync-fake-tls=0x00000000"
+        "--dpi-desync-autottl"
+        "--new"
+
+        "--filter-tcp=80"
+        "--dpi-desync-ttl=1"
+        "--dpi-desync-autottl=2"
+        "--dpi-desync-fake-tls=0x00000000"
+        "--dpi-desync-split-pos=1"
+        "--dpi-desync=fake,split2"
+        "--dpi-desync-repeats=6"
+        "--dpi-desync-fooling=md5sig"
+        "--new"
+      ];
+
+      whitelist = [
+        "googlevideo.com"
+        "youtu.be"
+        "youtube.com"
+        "youtubei.googleapis.com"
+        "googlevideo.com"
+        "youtu.be"
+        "youtube.com"
+        "youtubei.googleapis.com"
+        "youtubeembeddedplayer.googleapis.com"
+        "ytimg.l.google.com"
+        "ytimg.com"
+        "jnn-pa.googleapis.com"
+        "youtube-nocookie.com"
+        "youtube-ui.l.google.com"
+        "yt-video-upload.l.google.com"
+        "wide-youtube.l.google.com"
+        "youtubekids.com"
+        "ggpht.com"
+        "music.youtube.com"
+        "test.googlevideo.com"
+        "discord.com"
+        "gateway.discord.gg"
+        "cdn.discordapp.com"
+        "discordapp.net"
+        "discordapp.com"
+        "discord.gg"
+        "media.discordapp.net"
+        "images-ext-1.discordapp.net"
+        "discord.app"
+        "discord.media"
+        "discordcdn.com"
+        "discord.dev"
+        "discord.new"
+        "discord.gift"
+        "discordstatus.com"
+        "dis.gd"
+        "discord.co"
+        "discord-attachments-uploads-prd.storage.googleapis.com"
+        "7tv.app"
+        "7tv.io"
+        "10tv.app"
+        "x.com"
+        "t.co"
+        "ads-twitter.com"
+        "twimg.com"
+        "twitter.com"
+        "pscp.tv"
+        "twtrdns.net"
+        "twttr.com"
+        "periscope.tv"
+        "tweetdeck.com"
+        "twitpic.com"
+        "twitter.co"
+        "twitterinc.com"
+        "twitteroauth.com"
+        "twitterstat.us"
+      ];
+    };
+  };
+}

isla/services/zerotier.nix

@@ -0,0 +1,10 @@
+{...}: {
+  services = {
+    zerotierone = {
+      enable = true;
+      joinNetworks = [
+        # nope
+      ];
+    };
+  };
+}