From c997b03f4ffe85d149302597f3b39c0588b06c06 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Leonardo=20Eug=C3=AAnio?= <lelgenio@disroot.org>
Date: Wed, 2 Jul 2025 22:58:24 -0300
Subject: [PATCH 1/3] network: add fail2ban service

---
 system/network.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/system/network.nix b/system/network.nix
index e280ff5..a54e49e 100644
--- a/system/network.nix
+++ b/system/network.nix
@@ -26,6 +26,8 @@
     };
   };
 
+  services.fail2ban.enable = true;
+
   # Workaround for nm-wait-online hanging??
   # Ref: https://github.com/NixOS/nixpkgs/issues/180175
   systemd.services.NetworkManager-wait-online = {

From 76a88ae74ccddce5ef073794782e6c69d7116bc5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Leonardo=20Eug=C3=AAnio?= <lelgenio@disroot.org>
Date: Thu, 3 Jul 2025 12:57:59 -0300
Subject: [PATCH 2/3] gitlab-runner: set dockerPullPolicy

---
 system/gitlab-runner.nix          | 1 +
 system/monolith-gitlab-runner.nix | 1 +
 2 files changed, 2 insertions(+)

diff --git a/system/gitlab-runner.nix b/system/gitlab-runner.nix
index 8db526f..5650a52 100644
--- a/system/gitlab-runner.nix
+++ b/system/gitlab-runner.nix
@@ -34,6 +34,7 @@ in
     # `REGISTRATION_TOKEN`
     inherit authenticationTokenConfigFile; # 2
     dockerImage = "alpine:3.18.2";
+    dockerPullPolicy = "if-not-present";
     dockerVolumes = [
       "/etc/nix/nix.conf:/etc/nix/nix.conf:ro"
       "/nix/store:/nix/store:ro"
diff --git a/system/monolith-gitlab-runner.nix b/system/monolith-gitlab-runner.nix
index 6f1f7b3..023dc66 100644
--- a/system/monolith-gitlab-runner.nix
+++ b/system/monolith-gitlab-runner.nix
@@ -26,6 +26,7 @@ in
         # `CI_SERVER_TOKEN`
         authenticationTokenConfigFile = config.sops.secrets."gitlab-runners/docker-images-token".path;
         dockerImage = "debian:stable";
+        dockerPullPolicy = "if-not-present";
       };
     };
   };

From 9c7d41c8b1997e9b2383af193e150ca1f7e9aa94 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Leonardo=20Eug=C3=AAnio?= <lelgenio@disroot.org>
Date: Thu, 3 Jul 2025 12:58:11 -0300
Subject: [PATCH 3/3] mangohud: disable unused modules

---
 user/mangohud.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/user/mangohud.nix b/user/mangohud.nix
index fa0c8ff..639314a 100644
--- a/user/mangohud.nix
+++ b/user/mangohud.nix
@@ -17,6 +17,9 @@ in
       toggle_preset = "Control_R+F9";
       fps_metrics = "Control_R+F8";
 
+      media_player = false;
+      battery = false;
+
       # legacy_layout = "false";
       # gpu_stats = true;
       # gpu_temp = true;