more stuff

common/components/wifi-secrets.nix

@@ -37,7 +37,7 @@
 
           Isopropyl = {
             connection = {
-              id = "Isopropyl";
+              id = "Isopropyl_sec_notrack";
               type = "wifi";
             };
             ipv4 = {
@@ -49,7 +49,7 @@
             };
             wifi = {
               mode = "infrastructure";
-              ssid = "Isopropyl_notrack";
+              ssid = "Isopropyl_sec_notrack";
             };
             wifi-security = {
               key-mgmt = "wpa-psk";

common/services/usbguard.nix

@@ -34,6 +34,9 @@
 
       allow id 1050:0407 serial "" name "YubiKey OTP+FIDO+CCID"
       allow id 0bda:2838 serial "00000001" name "Blog V4"
+
+      # cave bluetooth
+      allow id 8087:0029 serial "" name "" hash "ATK8pCmQtUYaUnwqUVuYssrOMkW8pdCSdZO4OC6zEtg="
     '';
   };
 }

hosts/cave/configuration.nix

@@ -168,6 +168,16 @@ in {
     wrapperFeatures.gtk = true;
   };
 
+  # services.radicle.enable = true;
+  # services.radicle.privateKeyFile = /home/tasia/.radicle/keys/radicle;
+  # services.radicle.publicKey = /home/tasia/.radicle/keys/radicle.pub;
+  # services.radicle.settings = {
+  #   web.pinned.repositories = [
+  #     "rad:z3gqcJUoA1n9HaHKufZs5FCSGazv5" # heartwood
+  #     "rad:z3trNYnLWS11cJWC6BbxDs5niGo82" # rips
+  #   ];
+  # };
+
   hardware.rtl-sdr.enable = true;
   users.users.tasia.extraGroups = ["plugdev"];
 

hosts/vulpecula-vps/cryptpad.nix

@@ -0,0 +1,7 @@
+{config, ...}: {
+  # services.nginx.virtualHosts."wallabag.vulpecula.zone" = {
+  #   addSSL = true;
+  #   enableACME = true;
+  #   locations."/".proxyPass = "http://localhost:62106";
+  # };
+}

hosts/vulpecula-vps/vaultwarden.nix

@@ -0,0 +1,9 @@
+{inputs, ...}: {
+  services.nginx.virtualHosts."vault.vulpecula.zone" = {
+    addSSL = true;
+    enableACME = true;
+    # root = ;
+  };
+
+  services.vaultwarden.enable = true;
+}