unexplrd
ab6611a231
hosts/dunamis/services.nix: disable scx because module.sig_enforce and/or lockdown=confidentiality break it Signed-off-by: unexplrd <unexplrd@linerds.us>
36 lines
776 B
Nix
36 lines
776 B
Nix
{
|
|
services = {
|
|
# hardware.openrgb.enable = true;
|
|
flatpak.enable = true;
|
|
fstrim.enable = true;
|
|
fwupd.enable = true;
|
|
openssh.enable = true;
|
|
syncthing.openDefaultPorts = true;
|
|
dnscrypt-proxy2 = {
|
|
enable = true;
|
|
settings = {
|
|
require_dnssec = true;
|
|
server_names = ["mullvad-doh"];
|
|
bootstrap_resolvers = ["9.9.9.11:53" "9.9.9.9:53"];
|
|
};
|
|
};
|
|
opensnitch = {
|
|
enable = false;
|
|
settings = {
|
|
DefaultAaction = "deny";
|
|
Firewall = "iptables";
|
|
InterceptUnknown = true;
|
|
ProcMonitorMethod = "ebpf";
|
|
};
|
|
};
|
|
scx = {
|
|
enable = false;
|
|
scheduler = "scx_flash";
|
|
};
|
|
logind = {
|
|
lidSwitch = "ignore";
|
|
powerKey = "suspend";
|
|
};
|
|
};
|
|
}
|