fpletz

    services.tinc.networks.foo = {
      name = lib.replaceChars ["." "-"] ["_" "_"] config.networking.hostName;
      ed25519PrivateKeyFile = secrets.ed25519PrivateKeyFile;
      interfaceType = "tap";
      debugLevel = 2;
      extraConfig = ''
        Mode = switch
        AutoConnect = yes
        PingInterval = 15
      '';

fpletz

{
  hardware.pulseaudio = {
    enable = true;
    systemWide = true;
    package = pkgs.pulseaudioFull;
    zeroconf.discovery.enable = false;
    zeroconf.publish.enable = true;
    tcp.enable = true;
    tcp.anonymousClients.allowAll = true;
  };

fpletz

{
  networking.firewall = {
    allowedTCPPorts = [ 80 4001 ];
  };
  services.ipfs = {
    enable = true;
    emptyRepo = true;
    gatewayAddress = "/ip6/::1/tcp/8080";
    apiAddress = "/ip6/::1/tcp/5001";
  };

fpletz

{
  require = [ ./hardware-x250.nix ];

  boot = {
    initrd.luks.devices = [
      { name = "boot";
        device = "/dev/sda2";
        allowDiscards = true;
      }
      { name = "tank";

fpletz

{ system ? "x86_64-linux" }:

let

  buildAzureImage = params: (import <nixpkgs/nixos> {
    inherit system;
    configuration = import ./test.nix params;
  }).config.system.build.azureImage;

in

fpletz

{
  services = {

    rspamd.enable = true;

    rmilter =
      { enable = true;
        rspamd.enable = true;
        postfix.enable = true;
      };

fpletz

  security.pki.certificateFiles = [
    (pkgs.fetchurl {
      url    = "https://www.cacert.org/certs/class3.crt";
      sha256 = "0kzq3gvili5mpjkz7p3mf46d14175id4b4ll188mph0wvajxmfpm";
    })
  ];

fpletz

services.xserver.displayManager.slim = {
  enable = true;
  defaultUser = "fpletz";
  theme = pkgs.fetchurl {
    url = "https://github.com/rnhmjoj/nix-slim/archive/0.3.0.tar.gz";
    sha256 = "0qhha3pggh444s5ba4kcgdxv6d2fmrc7cvvii44c779vinb5wis6";
  };
};

fpletz

#!/bin/sh

case "$1" in
  dock)
    xrandr --output DP2-1 --auto
    xrandr --output eDP1 --off
    xrandr --output DP2-2 --auto
    xrandr --output DP2-1 --left-of DP2-2
    ;;
  pro*)

fpletz

{
  nix = {
    binaryCachePublicKeys = [ "hydra.mayflower.de:9knPU2SJ2xyI0KTJjtUKOGUVdR2/3cOB4VNDQThcfaY= " ];
    binaryCaches = [ "https://hydra.mayflower.de/" ];
  };
}