workstation | formating + override for widevine-cdm

This commit is contained in:
Don Harper 2025-05-14 20:27:07 -05:00
parent 7a189929c2
commit e6f4313991
2 changed files with 11 additions and 22 deletions

View file

@ -17,6 +17,8 @@ in {
./sway.nix ./sway.nix
./terminals.nix ./terminals.nix
]; ];
# pkgs.config.allowUnfreePredicate = pkg:
# builtins.elem (lib.getName pkg) [ "widevine-cdm" ];
fonts = { fontconfig = { enable = true; }; }; fonts = { fontconfig = { enable = true; }; };
nixpkgs.overlays = [ nixpkgs.overlays = [
(final: prev: { (final: prev: {

View file

@ -44,28 +44,12 @@ in {
networking = { networking = {
networkmanager.enable = true; networkmanager.enable = true;
enableIPv6 = true; enableIPv6 = true;
networkmanager = { networkmanager = { wifi = { powersave = true; }; };
wifi = {
powersave = true;
};
};
useDHCP = false; useDHCP = false;
wireless = {
iwd = {
enable = true;
settings = {
IPv6 = {
Enabled = true;
};
Settings = {
AutoConnect = true;
};
};
};
};
firewall = { firewall = {
enable = true; enable = true;
trustedInterfaces = [ "tailscale0" ]; # always allow traffic from your Tailscale network trustedInterfaces =
[ "tailscale0" ]; # always allow traffic from your Tailscale network
checkReversePath = "loose"; checkReversePath = "loose";
allowedUDPPorts = [ config.services.tailscale.port ]; allowedUDPPorts = [ config.services.tailscale.port ];
allowedTCPPortRanges = [{ allowedTCPPortRanges = [{
@ -79,7 +63,7 @@ in {
allowedTCPPorts = [ 22 ]; allowedTCPPorts = [ 22 ];
interfaces = { interfaces = {
"tailscale0" = { "tailscale0" = {
allowedTCPPorts = [ 22 8080 8443 ]; allowedTCPPorts = [ 22 8080 8443 8384 ];
allowedTCPPortRanges = [{ allowedTCPPortRanges = [{
from = 1714; from = 1714;
to = 1764; to = 1764;
@ -93,7 +77,6 @@ in {
}; };
}; };
# Set your time zone. # Set your time zone.
time = { time = {
timeZone = "America/Chicago"; timeZone = "America/Chicago";
@ -245,7 +228,10 @@ in {
# Allow unfree packages # Allow unfree packages
nixpkgs.config.allowUnfree = true; nixpkgs.config.allowUnfree = true;
nixpkgs.config.permittedInsecurePackages = [ "electron-25.9.0" ]; nixpkgs.config.allowUnfreePredicate = true;
# pkg:
# builtins.elem (lib.getName pkg) [ "widevine-cdm" ];
nixpkgs.config.permittedInsecurePackages = [ "electron-33.4.11" ];
fonts.packages = with pkgs; [ fonts.packages = with pkgs; [
anonymousPro anonymousPro
@ -302,6 +288,7 @@ in {
pulseaudio pulseaudio
ruby ruby
sops sops
termsonic
toot toot
udiskie udiskie
wireplumber wireplumber