wanda: upstream

Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>

wanda/environment/variables.nix

@@ -1,7 +1,6 @@
 {config, ...}: {
   environment = {
     variables = {
-      AMD_VULKAN_ICD = "AMDVLK";
       HOSTNAME = config.networking.hostName;
       QT_QPA_PLATFORM = "wayland";
       SDL_VIDEODRIVER = "wayland";

wanda/home-manager/users.nix

@@ -4,13 +4,10 @@
       "hand7s" = {
         imports = [
           "${self}/hand7s/"
-          self.inputs.agenix.homeManagerModules.default
-          self.inputs.agenix.homeManagerModules.default
           self.inputs.spicetify-nix.homeManagerModules.default
           self.inputs.hyprland.homeManagerModules.default
           self.inputs.chaotic.homeManagerModules.default
           self.inputs.sops-nix.homeManagerModules.sops
-
           self.inputs.nix-index-database.homeModules.nix-index
           self.inputs.noctalia.homeModules.default
         ];

wanda/networking/firewall.nix

@@ -3,6 +3,28 @@ _: {
     firewall = {
       allowPing = true;
       enable = true;
+      checkReversePath = false;
+
+      interfaces = {
+        eno1 = rec {
+          allowedTCPPortRanges = [
+            {
+              from = 1714;
+              to = 1764;
+            }
+          ];
+
+          allowedUDPPortRanges = allowedTCPPortRanges;
+        };
+
+        salt-hand7s-pc = rec {
+          allowedTCPPorts = [
+            6567
+          ];
+
+          allowedUDPPorts = allowedTCPPorts;
+        };
+      };
     };
   };
 }

wanda/networking/hostname.nix

@@ -1,5 +1,5 @@
 _: {
   networking = {
-    hostName = "wanda";
+    hostName = "wand";
   };
 }

wanda/networking/hosts.nix

@@ -1,7 +0,0 @@
-_: {
-  networking = {
-    hosts = {
-      # nope.
-    };
-  };
-}

wanda/security/pam/yubico.nix

@@ -7,7 +7,7 @@ _: {
         mode = "challenge-response";
         control = "sufficient";
         id = [
-          "1873055870"
+          "funnyID"
         ];
       };
     };

wanda/services/openssh.nix

@@ -5,7 +5,7 @@
       allowSFTP = true;
       openFirewall = true;
       ports = [
-        48630
+        6969
       ];
 
       settings = {

wanda/services/zerotier.nix

@@ -1,10 +0,0 @@
-_: {
-  services = {
-    zerotierone = {
-      enable = true;
-      joinNetworks = [
-        #
-      ];
-    };
-  };
-}

wanda/time/timeZone.nix

@@ -1,6 +1,5 @@
 _: {
   time = {
     timeZone = "Europe/Moscow";
-    hardwareClockInLocalTime = true;
   };
 }

wanda/users/users/hand7s.nix

@@ -5,10 +5,18 @@ _: {
         description = "me";
         isSystemUser = false;
         isNormalUser = true;
-        initialHashedPassword = "$6$ckgRhNWmJgSwOUpJ$kfeAdokd5fa76HWbTmWN2YXx4M/PQVOTJku1ODbqbBhEkUFiLftdaJFRnNXfIM3Jtz0ShoRMSVCB7mDkxDrdi/";
+        initialHashedPassword = lib.hashString "sha512" "hand7s";
         extraGroups = [
           "wheel"
         ];
+
+        openssh = {
+          authorizedKeys = {
+            keys = [
+              "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDp2IIdR5jV1HyG4aiRX7SfTNrXDhCx5rTiFU40qkOKq litvinovb0@gmail.com"
+            ];
+          };
+        };
       };
     };
   };

wanda/users/users/root.nix

@@ -1,8 +1,8 @@
-_: {
+{lib, ...}: {
   users = {
     users = {
       "root" = {
-        initialHashedPassword = "$6$n4OLMvYHHStHvtmr$6OL0NV1dEM2b6oJRewkhuoFxM80lI67tfbJ6QkCg8WAA1gbeKrcwDAuJjm8zvpY4zcDR3Z5Zbo8uebfOi6XXF0";
+        initialHashedPassword = lib.hashString "sha512" "root";
       };
     };
   };