amdgpu: update fan controller

OBS was causing gpu panics

flake.lock

@@ -166,9 +166,7 @@
         "advisory-db": "advisory-db",
         "crane": "crane",
         "flake-utils": "flake-utils_2",
-        "nixpkgs": [
+        "nixpkgs": "nixpkgs"
-          "nixpkgs"
-        ]
       },
       "locked": {
         "lastModified": 1693509848,
@@ -188,9 +186,7 @@
       "inputs": {
         "fenix": "fenix",
         "flake-utils": "flake-utils_3",
-        "nixpkgs": [
+        "nixpkgs": "nixpkgs_2"
-          "nixpkgs"
-        ]
       },
       "locked": {
         "lastModified": 1659395338,
@@ -213,11 +209,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1730190761,
+        "lastModified": 1736199437,
-        "narHash": "sha256-o5m5WzvY6cGIDupuOvjgNSS8AN6yP2iI9MtUC6q/uos=",
+        "narHash": "sha256-TdU0a/x8048rbbJmkKWzSY1CtsbbGKNkIJcMdr8Zf4Q=",
         "owner": "nix-community",
         "repo": "disko",
-        "rev": "3979285062d6781525cded0f6c4ff92e71376b55",
+        "rev": "49f8aa791f81ff2402039b3efe0c35b9386c4bcf",
         "type": "github"
       },
       "original": {
@@ -228,16 +224,14 @@
     },
     "dzgui-nix": {
       "inputs": {
-        "nixpkgs": [
+        "nixpkgs": "nixpkgs_3"
-          "nixpkgs"
-        ]
       },
       "locked": {
-        "lastModified": 1727831626,
+        "lastModified": 1735940463,
-        "narHash": "sha256-Gvt5lapgNRRTL95gFH8vm48f8gjsk7GYM4Qo5aUOzzo=",
+        "narHash": "sha256-qrjv3UrlcFQf8zFjV4lMDmcBnlow/sqyyjGFAXp8mLk=",
         "owner": "lelgenio",
         "repo": "dzgui-nix",
-        "rev": "38cf2b507d75cc36ec127b21fc5a4144fc821525",
+        "rev": "fccedf1386f484375570e0195c7a08d7687b1df6",
         "type": "github"
       },
       "original": {
@@ -371,7 +365,7 @@
     },
     "flake-utils_5": {
       "inputs": {
-        "systems": "systems_6"
+        "systems": "systems_5"
       },
       "locked": {
         "lastModified": 1681202837,
@@ -389,7 +383,7 @@
     },
     "flake-utils_6": {
       "inputs": {
-        "systems": "systems_7"
+        "systems": "systems_6"
       },
       "locked": {
         "lastModified": 1681202837,
@@ -407,7 +401,7 @@
     },
     "flake-utils_7": {
       "inputs": {
-        "systems": "systems_8"
+        "systems": "systems_7"
       },
       "locked": {
         "lastModified": 1710146030,
@@ -446,16 +440,16 @@
         ]
       },
       "locked": {
-        "lastModified": 1726989464,
+        "lastModified": 1735344290,
-        "narHash": "sha256-Vl+WVTJwutXkimwGprnEtXc/s/s8sMuXzqXaspIGlwM=",
+        "narHash": "sha256-oJDtWPH1oJT34RJK1FSWjwX4qcGOBRkcNQPD0EbSfNM=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "2f23fa308a7c067e52dfcc30a0758f47043ec176",
+        "rev": "613691f285dad87694c2ba1c9e6298d04736292d",
         "type": "github"
       },
       "original": {
         "owner": "nix-community",
-        "ref": "release-24.05",
+        "ref": "release-24.11",
         "repo": "home-manager",
         "type": "github"
       }
@@ -464,9 +458,7 @@
       "inputs": {
         "crane": "crane_2",
         "flake-utils": "flake-utils_4",
-        "nixpkgs": [
+        "nixpkgs": "nixpkgs_4"
-          "nixpkgs"
-        ]
       },
       "locked": {
         "lastModified": 1728159958,
@@ -489,11 +481,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1729999765,
+        "lastModified": 1736047960,
-        "narHash": "sha256-LYsavZXitFjjyETZoij8usXjTa7fa9AIF3Sk3MJSX+Y=",
+        "narHash": "sha256-hutd85FA1jUJhhqBRRJ+u7UHO9oFGD/RVm2x5w8WjVQ=",
         "owner": "Mic92",
         "repo": "nix-index-database",
-        "rev": "0e3a8778c2ee218eff8de6aacf3d2fa6c33b2d4f",
+        "rev": "816a6ae88774ba7e74314830546c29e134e0dffb",
         "type": "github"
       },
       "original": {
@@ -509,48 +501,61 @@
         "nixpkgs": [
           "nixpkgs"
         ],
-        "nixpkgs-24_05": [
+        "nixpkgs-24_11": "nixpkgs-24_11"
-          "nixpkgs"
-        ],
-        "utils": "utils"
       },
       "locked": {
-        "lastModified": 1718084203,
+        "lastModified": 1735230346,
-        "narHash": "sha256-Cx1xoVfSMv1XDLgKg08CUd1EoTYWB45VmB9XIQzhmzI=",
+        "narHash": "sha256-zgR8NTiNDPVNrfaiOlB9yHSmCqFDo7Ks2IavaJ2dZo4=",
         "owner": "simple-nixos-mailserver",
         "repo": "nixos-mailserver",
-        "rev": "29916981e7b3b5782dc5085ad18490113f8ff63b",
+        "rev": "dc0569066e79ae96184541da6fa28f35a33fbf7b",
         "type": "gitlab"
       },
       "original": {
         "owner": "simple-nixos-mailserver",
-        "ref": "nixos-24.05",
+        "ref": "master",
         "repo": "nixos-mailserver",
         "type": "gitlab"
       }
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1730137625,
+        "lastModified": 1684425776,
-        "narHash": "sha256-9z8oOgFZiaguj+bbi3k4QhAD6JabWrnv7fscC/mt0KE=",
+        "narHash": "sha256-eXzSIXkzXa9EecoDF9xCsoim0vd++8dvYU7QOuQMO8A=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "64b80bfb316b57cdb8919a9110ef63393d74382a",
+        "rev": "8dc174d8b768893172eb3e52008f10f48dfbd5cf",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "release-22.11",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs-24_11": {
+      "locked": {
+        "lastModified": 1734083684,
+        "narHash": "sha256-5fNndbndxSx5d+C/D0p/VF32xDiJCJzyOqorOYW4JEo=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "314e12ba369ccdb9b352a4db26ff419f7c49fa84",
         "type": "github"
       },
       "original": {
         "id": "nixpkgs",
-        "ref": "nixos-24.05",
+        "ref": "nixos-24.11",
         "type": "indirect"
       }
     },
     "nixpkgs-unstable": {
       "locked": {
-        "lastModified": 1729880355,
+        "lastModified": 1736012469,
-        "narHash": "sha256-RP+OQ6koQQLX5nw0NmcDrzvGL8HDLnyXt/jHhL1jwjM=",
+        "narHash": "sha256-/qlNWm/IEVVH7GfgAIyP6EsVZI6zjAx1cV5zNyrs+rI=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "18536bf04cd71abd345f9579158841376fdd0c5a",
+        "rev": "8f3e1f807051e32d8c95cd12b9b421623850a34d",
         "type": "github"
       },
       "original": {
@@ -559,6 +564,99 @@
         "type": "indirect"
       }
     },
+    "nixpkgs_2": {
+      "locked": {
+        "lastModified": 1659219666,
+        "narHash": "sha256-pzYr5fokQPHv7CmUXioOhhzDy/XyWOIXP4LZvv/T7Mk=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "7b9be38c7250b22d829ab6effdee90d5e40c6e5c",
+        "type": "github"
+      },
+      "original": {
+        "id": "nixpkgs",
+        "ref": "nixos-unstable",
+        "type": "indirect"
+      }
+    },
+    "nixpkgs_3": {
+      "locked": {
+        "lastModified": 1732812356,
+        "narHash": "sha256-LNcgjOLArRlx2W6XSi0yc0xwLjrK3KF9LxAMqUgFDgw=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "581d7e4d23b91daf2afa0005a5d3d01d6a8884fe",
+        "type": "github"
+      },
+      "original": {
+        "id": "nixpkgs",
+        "ref": "nixpkgs-unstable",
+        "type": "indirect"
+      }
+    },
+    "nixpkgs_4": {
+      "locked": {
+        "lastModified": 1719010183,
+        "narHash": "sha256-8HMWaqpyjbVeEsmy/A2H6VFtW/Wr71vkPLnpTiAXu+8=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "0f620ca71fa69abb411a6c78739a9b171a0a95a6",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "release-24.05",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs_5": {
+      "locked": {
+        "lastModified": 1736061677,
+        "narHash": "sha256-DjkQPnkAfd7eB522PwnkGhOMuT9QVCZspDpJJYyOj60=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "cbd8ec4de4469333c82ff40d057350c30e9f7d36",
+        "type": "github"
+      },
+      "original": {
+        "id": "nixpkgs",
+        "ref": "nixos-24.11",
+        "type": "indirect"
+      }
+    },
+    "nixpkgs_6": {
+      "locked": {
+        "lastModified": 1719010183,
+        "narHash": "sha256-8HMWaqpyjbVeEsmy/A2H6VFtW/Wr71vkPLnpTiAXu+8=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "0f620ca71fa69abb411a6c78739a9b171a0a95a6",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "release-24.05",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs_7": {
+      "locked": {
+        "lastModified": 1714091391,
+        "narHash": "sha256-68n3GBvlm1MIeJXadPzQ3v8Y9sIW3zmv8gI5w5sliC8=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "4c86138ce486d601d956a165e2f7a0fc029a03c1",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixpkgs-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
     "plymouth-themes": {
       "flake": false,
       "locked": {
@@ -578,11 +676,11 @@
     "ranger-icons": {
       "flake": false,
       "locked": {
-        "lastModified": 1713564482,
+        "lastModified": 1732436707,
-        "narHash": "sha256-sijO9leDXgnjgcVlh5fKYalhjOupwFMRyH0xh2g/rEQ=",
+        "narHash": "sha256-sqqsWU5/zBwIpyJKEBiCfosqKNvISWCw8cFgzLcNjUY=",
         "owner": "alexanderjeurissen",
         "repo": "ranger_devicons",
-        "rev": "a8d626485ca83719e1d8d5e32289cd96a097c861",
+        "rev": "84db73d0a50a8c6085b3ec63f834c781b603e83e",
         "type": "github"
       },
       "original": {
@@ -604,7 +702,7 @@
         "made-you-look": "made-you-look",
         "nix-index-database": "nix-index-database",
         "nixos-mailserver": "nixos-mailserver",
-        "nixpkgs": "nixpkgs",
+        "nixpkgs": "nixpkgs_5",
         "nixpkgs-unstable": "nixpkgs-unstable",
         "plymouth-themes": "plymouth-themes",
         "ranger-icons": "ranger-icons",
@@ -765,21 +863,6 @@
         "type": "github"
       }
     },
-    "systems_8": {
-      "locked": {
-        "lastModified": 1681028828,
-        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
-        "owner": "nix-systems",
-        "repo": "default",
-        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nix-systems",
-        "repo": "default",
-        "type": "github"
-      }
-    },
     "tlauncher": {
       "inputs": {
         "flake-utils": "flake-utils_5",
@@ -788,11 +871,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1684504342,
+        "lastModified": 1734044605,
-        "narHash": "sha256-rJ0eH7BuPizvXPc+LjVtovse4gWEuxP2WiyNdXjPNL4=",
+        "narHash": "sha256-CeCYv3JFJIySSf2eX9ceEOF1FqNGeJnzEuO5f+OvioQ=",
         "ref": "refs/heads/main",
-        "rev": "add4df7220bd0b85177a1938c02b60c966c5eb71",
+        "rev": "6a68f2cda0aa2fbb399a4c43b445e8c1a2df0634",
-        "revCount": 3,
+        "revCount": 4,
         "type": "git",
         "url": "https://git.lelgenio.xyz/lelgenio/tlauncher-nix"
       },
@@ -817,31 +900,13 @@
         "url": "https://git.lelgenio.com/lelgenio/tomater"
       }
     },
-    "utils": {
-      "inputs": {
-        "systems": "systems_5"
-      },
-      "locked": {
-        "lastModified": 1709126324,
-        "narHash": "sha256-q6EQdSeUZOG26WelxqkmR7kArjgWCdw5sfJVHPH/7j8=",
-        "owner": "numtide",
-        "repo": "flake-utils",
-        "rev": "d465f4819400de7c8d874d50b982301f28a84605",
-        "type": "github"
-      },
-      "original": {
-        "owner": "numtide",
-        "repo": "flake-utils",
-        "type": "github"
-      }
-    },
     "vpsadminos": {
       "locked": {
-        "lastModified": 1730290190,
+        "lastModified": 1734458258,
-        "narHash": "sha256-a+op2lnWrCytuEhLOE24SKR/irRfjwDEHkpLyAL5P90=",
+        "narHash": "sha256-xZEbuwAAbxwujrGtuydDNBjzMLnE9YOcuLv3hdudZe4=",
         "owner": "vpsfreecz",
         "repo": "vpsadminos",
-        "rev": "63ac771b9667b45ab2ea87363f69ca7f85668e9b",
+        "rev": "83ddccf4462f155f12596af773e9291d7ebc37a3",
         "type": "github"
       },
       "original": {
@@ -854,9 +919,7 @@
       "inputs": {
         "crane": "crane_3",
         "flake-utils": "flake-utils_6",
-        "nixpkgs": [
+        "nixpkgs": "nixpkgs_6"
-          "nixpkgs"
-        ]
       },
       "locked": {
         "lastModified": 1719076817,
@@ -875,9 +938,7 @@
     "wl-crosshair": {
       "inputs": {
         "flake-utils": "flake-utils_7",
-        "nixpkgs": [
+        "nixpkgs": "nixpkgs_7"
-          "nixpkgs"
-        ]
       },
       "locked": {
         "lastModified": 1715216838,

flake.nix

@@ -1,10 +1,10 @@
 {
   description = "My system config";
   inputs = {
-    nixpkgs.url = "nixpkgs/nixos-24.05";
+    nixpkgs.url = "nixpkgs/nixos-24.11";
     nixpkgs-unstable.url = "nixpkgs/nixos-unstable";
 
-    home-manager.url = "github:nix-community/home-manager/release-24.05";
+    home-manager.url = "github:nix-community/home-manager/release-24.11";
     home-manager.inputs.nixpkgs.follows = "nixpkgs";
 
     vpsadminos.url = "github:vpsfreecz/vpsadminos";
@@ -27,45 +27,28 @@
     };
 
     nixos-mailserver = {
-      url = "gitlab:simple-nixos-mailserver/nixos-mailserver/nixos-24.05";
+      url = "gitlab:simple-nixos-mailserver/nixos-mailserver/master";
       inputs.nixpkgs.follows = "nixpkgs";
-      inputs.nixpkgs-24_05.follows = "nixpkgs";
     };
 
-    dzgui-nix = {
+    dzgui-nix.url = "github:lelgenio/dzgui-nix";
-      url = "github:lelgenio/dzgui-nix";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
 
     tlauncher = {
       url = "git+https://git.lelgenio.xyz/lelgenio/tlauncher-nix";
       inputs.nixpkgs.follows = "nixpkgs";
     };
 
-    disko.url = "github:nix-community/disko";
+    disko = {
-    disko.inputs.nixpkgs.follows = "nixpkgs";
+      url = "github:nix-community/disko";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
 
     # my stuff
-    dhist = {
+    dhist.url = "github:lelgenio/dhist";
-      url = "github:lelgenio/dhist";
+    demoji.url = "github:lelgenio/demoji";
-      inputs.nixpkgs.follows = "nixpkgs";
+    wl-crosshair.url = "github:lelgenio/wl-crosshair";
-    };
+    warthunder-leak-counter.url = "git+https://git.lelgenio.com/lelgenio/warthunder-leak-counter";
-    demoji = {
+    made-you-look.url = "git+https://git.lelgenio.com/lelgenio/made-you-look";
-      url = "github:lelgenio/demoji";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
-    wl-crosshair = {
-      url = "github:lelgenio/wl-crosshair";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
-    warthunder-leak-counter = {
-      url = "git+https://git.lelgenio.com/lelgenio/warthunder-leak-counter";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
-    made-you-look = {
-      url = "git+https://git.lelgenio.com/lelgenio/made-you-look";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
     catboy-spinner = {
       url = "git+https://git.lelgenio.com/lelgenio/catboy-spinner";
       flake = false;
@@ -115,7 +98,6 @@
           { login-manager.greetd.enable = desktop == "sway"; }
 
           inputs.agenix.nixosModules.default
-          inputs.dzgui-nix.nixosModules.default
           inputs.home-manager.nixosModules.home-manager
           inputs.disko.nixosModules.disko
           {

hosts/double-rainbow.nix

@@ -37,7 +37,8 @@ in
     options = [ "subvol=@" ] ++ btrfs_options ++ btrfs_ssd;
   };
 
-  boot.initrd.luks.devices."luks-d6573cf8-25f0-4ffc-8046-ac3a4db1e964".device = "/dev/disk/by-uuid/d6573cf8-25f0-4ffc-8046-ac3a4db1e964";
+  boot.initrd.luks.devices."luks-d6573cf8-25f0-4ffc-8046-ac3a4db1e964".device =
+    "/dev/disk/by-uuid/d6573cf8-25f0-4ffc-8046-ac3a4db1e964";
 
   fileSystems."/boot" = {
     device = "/dev/disk/by-uuid/97EB-7DB5";

hosts/monolith/amdgpu.nix

@@ -13,7 +13,6 @@ in
 {
   boot.initrd.kernelModules = [ "amdgpu" ];
   boot.kernelParams = [
-    "amdgpu.dcdebugmask=0x10" # amdgpu undervolting bug
     "video=DP-1:1920x1080@144"
     "amdgpu.ppfeaturemask=0xfffd7fff" # enable undervolting
   ];
@@ -22,20 +21,17 @@ in
     script = ''
       ${lib.getExe pkgs.amd-fan-control} /sys/class/drm/card1/device 60 85
     '';
+    serviceConfig = {
+      Restart = "always";
+      RestartSec = 10;
+    };
     wantedBy = [ "multi-user.target" ];
   };
 
-  hardware.opengl.driSupport = true;
+  hardware.graphics.enable32Bit = true;
-  # # For 32 bit applications
-  hardware.opengl.driSupport32Bit = true;
 
-  hardware.opengl.extraPackages = with pkgs; [
+  hardware.graphics.extraPackages = with pkgs; [
     libva
-    libvdpau
-    vaapiVdpau
-    rocm-opencl-icd
-    rocm-opencl-runtime
-    rocmPackages.rocm-smi
   ];
 
   services.udev.extraRules = ''

hosts/monolith/default.nix

@@ -35,9 +35,11 @@ in
     "sd_mod"
   ];
 
-  hardware.opentabletdriver.enable = true;
+  hardware.opentabletdriver = {
-
+    enable = true;
-  boot.kernelPackages = pkgs.linuxPackages_latest;
+    # TODO: remove this once otd gets updated
+    package = pkgs.unstable.opentabletdriver;
+  };
 
   boot.extraModulePackages = with config.boot.kernelPackages; [ zenpower ];
 

hosts/monolith/factorio-server.nix

@@ -10,6 +10,11 @@
     extraSettingsFile = config.age.secrets.factorio-settings.path;
   };
 
+  systemd.services.factorio = {
+    after = [ "network-online.target" ];
+    wants = [ "network-online.target" ];
+  };
+
   age.secrets.factorio-settings = {
     file = ../../secrets/factorio-settings.age;
     mode = "777";

hosts/phantom/default.nix

@@ -11,6 +11,7 @@
     ../../system/nix.nix
     ./hardware-config.nix
     ./mastodon.nix
+    ./lemmy.nix
     ./nextcloud.nix
     ./nginx.nix
     ./syncthing.nix

hosts/phantom/hardware-config.nix

@@ -1,15 +1,14 @@
-{
-  config,
-  pkgs,
-  inputs,
-  ...
-}:
 {
   fileSystems."/var/lib/syncthing-data" = {
     device = "172.16.130.7:/nas/5749/syncthinng_data";
     fsType = "nfs";
     options = [ "nofail" ];
   };
+  fileSystems."/var/lib/mastodon" = {
+    device = "172.16.130.7:/nas/5749/mastodon";
+    fsType = "nfs";
+    options = [ "nofail" ];
+  };
 
   swapDevices = [
     {

hosts/phantom/lemmy.nix

@@ -0,0 +1,18 @@
+{ pkgs, ... }:
+{
+  services.lemmy = {
+    enable = true;
+    settings = {
+      hostname = "lemmy.lelgenio.com";
+    };
+    database.createLocally = true;
+    nginx.enable = true;
+  };
+
+  services.pict-rs.package = pkgs.pict-rs;
+
+  services.nginx.virtualHosts."lemmy.lelgenio.com" = {
+    enableACME = true;
+    forceSSL = true;
+  };
+}

hosts/phantom/nextcloud.nix

@@ -7,7 +7,7 @@
 {
   services.nextcloud = {
     enable = true;
-    package = pkgs.nextcloud29;
+    package = pkgs.nextcloud30;
     hostName = "cloud.lelgenio.com";
     https = true;
     config = {

pkgs/factorio-headless/default.nix

@@ -1,10 +1,10 @@
 { factorio-headless, pkgs }:
 
 factorio-headless.overrideAttrs (_: rec {
-  version = "2.0.23";
+  version = "2.0.28";
   src = pkgs.fetchurl {
     name = "factorio_headless_x64-${version}.tar.xz";
     url = "https://www.factorio.com/get-download/${version}/headless/linux64";
-    hash = "sha256-6Bn8mtbfBhv51L/8kZiN0Y0OOYLIscIsBSXXi9o+8hY=";
+    hash = "sha256-6pk3tq3HoY4XpOHmSZLsOJQHSXs25oKAuxT83UyITdM=";
   };
 })

pkgs/gnome-pass-search-provider.nix

@@ -5,7 +5,6 @@
   wrapGAppsHook,
   gtk3,
   gobject-introspection,
-  gnome,
 }:
 
 let

scripts/_docker-block-external-connections

@@ -0,0 +1,33 @@
+#!/bin/sh
+
+# Create the DOCKER-USER chain if it doesn't exist
+iptables -N DOCKER-USER || true
+
+# Flush existing rules in the DOCKER-USER chain
+iptables -F DOCKER-USER
+
+# Get all external network interfaces
+interfaces=$(
+    ip -o -f inet addr show |
+    awk '{print $2}' |
+    grep -E '^(enp|eth|wlan|wlp)' |
+    sort -u
+)
+
+for iface in $interfaces; do
+    # Allow traffic from LAN
+    iptables -A DOCKER-USER -i "$iface" -s 127.0.0.1 -j ACCEPT
+    iptables -A DOCKER-USER -i "$iface" -s 10.0.0.0/8 -j ACCEPT
+    iptables -A DOCKER-USER -i "$iface" -s 192.168.0.0/16 -j ACCEPT
+
+    # Allow established and related connections
+    iptables -A DOCKER-USER -i "$iface" -m state --state RELATED,ESTABLISHED -j ACCEPT
+
+    # Drop all other traffic
+    iptables -A DOCKER-USER -i "$iface" -j DROP
+
+    echo "iptables rules have been set up for interface: $iface"
+done
+
+# Return to the previous chain
+iptables -A DOCKER-USER -j RETURN

scripts/amd-fan-control

@@ -18,7 +18,7 @@ bail() {
     exit 1
 }
 
-if ! [ -d $HWMON ]; then
+if ! [ -d "$HWMON" ]; then
     bail "Invalid HWMON"
 fi
 
@@ -28,20 +28,31 @@ if ! [ -f $TEMP_INPUT ]; then
     bail "Invalid TEMP_INPUT"
 fi
 
-MIN="$2"
+TEMP_MIN="$2"
-MAX="$3"
+TEMP_MAX="$3"
+
+if [ -z "$TEMP_MIN" ];then
+  bail "No minimum temperature provided"
+fi
+
+if [ -z "$TEMP_MAX" ];then
+  bail "No maximum temperature provided"
+fi
+
+PWM_MIN=0
+PWM_MAX=255
 
 echo "Running..." >&2
 while true; do
     TEMPERATURE_RAW=$(cat "$TEMP_INPUT")
     TEMPERATURE="$(( $TEMPERATURE_RAW / 1000 ))"
     # Remap from a number between 60_000..90_000 to 0..255
-    PWM=$(( ($TEMPERATURE - $MIN) * 255 / ($MAX - $MIN) ))
+    PWM=$(( ($TEMPERATURE - $TEMP_MIN) * $PWM_MAX / ($TEMP_MAX - $TEMP_MIN) ))
 
-    if [ "$PWM" -gt 255 ]; then
+    if [ "$PWM" -gt $PWM_MAX ]; then
-        PWM=255
+        PWM=$PWM_MAX
-    elif [ "$PWM" -lt 0 ]; then
+    elif [ "$PWM" -lt $PWM_MIN ]; then
-        PWM=0
+        PWM=$PWM_MIN
     fi
 
     echo 1 > "$HWMON/pwm1_enable"

scripts/default.nix

@@ -125,6 +125,12 @@
       zbar
       wl-clipboard
     ];
+    git_clean_remote_deleted = [
+      git
+      gnugrep
+      gawk
+      findutils
+    ];
     pint-fmt = [ ];
     powerplay-led-idle = [
       bash
@@ -133,6 +139,12 @@
     ];
     vrr-fullscreen = [ ];
     controller-battery = [ ];
+    _docker-block-external-connections = [
+      iptables
+      gawk
+      gnugrep
+      iproute2
+    ];
   }
   // lib.mapAttrs importScript {
     wdmenu = ./wdmenu.nix;

scripts/git_clean_remote_deleted

@@ -0,0 +1,6 @@
+#!/bin/sh
+
+git branch -vv \
+| grep ': gone]' \
+| awk '{print $1}' \
+| xargs git branch -D

system/configuration.nix

@@ -43,7 +43,7 @@
     glib # gsettings
     usbutils
     # dracula-theme # gtk theme
-    gnome3.adwaita-icon-theme # default gnome cursors
+    adwaita-icon-theme # default gnome cursors
   ];
 
   services.geoclue2.enable = true;

system/containers.nix

@@ -1,4 +1,4 @@
-{ pkgs, ... }:
+{ pkgs, lib, ... }:
 {
   services.flatpak.enable = true;
 
@@ -22,6 +22,8 @@
     };
   };
 
+  networking.firewall.extraCommands = lib.getExe pkgs._docker-block-external-connections;
+
   programs.extra-container.enable = true;
 
   programs.firejail.enable = true;

system/fonts.nix

@@ -3,7 +3,7 @@
   fonts.enableDefaultPackages = true;
   fonts.packages = with pkgs; [
     noto-fonts
-    noto-fonts-cjk
+    noto-fonts-cjk-sans
     noto-fonts-emoji
     nerdfonts_fira_hack
   ];

system/nix.nix

@@ -44,7 +44,7 @@ in
       ];
     };
     extraOptions = ''
-      experimental-features = nix-command flakes repl-flake
+      experimental-features = nix-command flakes
     '';
   };
 }

system/sound.nix

@@ -1,6 +1,5 @@
 { pkgs, ... }:
 {
-  sound.enable = true;
   hardware.pulseaudio.enable = false;
   services.pipewire = {
     enable = true;

system/steam.nix

@@ -31,7 +31,6 @@
   environment.systemPackages = with pkgs; [
     protontricks
     bottles
+    inputs.dzgui-nix.packages.${pkgs.system}.default
   ];
-
-  programs.dzgui.enable = true;
 }

user/chat.nix

@@ -9,15 +9,15 @@
   wayland.windowManager.sway = {
     extraConfig = ''
       exec thunderbird
-      exec vesktop
+      exec discordcanary
       exec telegram-desktop
     '';
   };
 
   home.packages = with pkgs; [
     tdesktop
-    vesktop
+    discord-canary
     thunderbird
-    element-desktop-wayland
+    element-desktop
   ];
 }

user/firefox.nix

@@ -61,11 +61,6 @@ in
             hash = "sha256-ApCc+MNmW9Wd/5seV6npePQVEaszT/rhD9EB7HGiUb8=";
           })
 
-          (pkgs.fetchFirefoxAddon {
-            name = "mastodon_simplified_federation";
-            url = "https://addons.mozilla.org/firefox/downloads/file/4215691/mastodon_simplified_federation-2.2.xpi";
-            hash = "sha256-4iU25chpjsdsMTPaa0yQOTWc9V9q1qFz6YV0lYtNjLA=";
-          })
           (pkgs.fetchFirefoxAddon {
             name = "substitoot";
             url = "https://addons.mozilla.org/firefox/downloads/file/4236602/substitoot-0.7.2.0.xpi";
@@ -128,6 +123,7 @@ in
             if desktop == "sway" then
               ''
                 #titlebar { display: none !important; }
+                #TabsToolbar { display: none !important; }
                 #sidebar-header { display: none !important; }
               ''
             else

user/git.nix

@@ -36,8 +36,13 @@ in
         alias = {
           graph = "log --graph --oneline --branches";
           root = "rev-parse --show-toplevel";
+          clean-deleted-remotes = "!" + (lib.getExe pkgs.git_clean_remote_deleted);
         };
       };
     };
+
+    home.packages = with pkgs; [
+      git_clean_remote_deleted
+    ];
   };
 }

user/gnome.nix

@@ -10,7 +10,7 @@ lib.mkIf (config.my.desktop == "gnome") {
   home.pointerCursor = {
     name = "Adwaita";
     size = 24;
-    package = pkgs.gnome.adwaita-icon-theme;
+    package = pkgs.adwaita-icon-theme;
     gtk.enable = true;
   };
 
@@ -42,7 +42,7 @@ lib.mkIf (config.my.desktop == "gnome") {
     qt6Packages.qtstyleplugin-kvantum
   ];
 
-  services.gpg-agent.pinentryPackage = pkgs.pinentry-gnome3;
+  services.gpg-agent.pinentryPackage = pkgs.pinentry-gnome;
 
   xdg.defaultApplications = {
     enable = lib.mkForce false;

user/kakoune/default.nix

@@ -127,7 +127,7 @@ in
       ranger
       bmenu
       kak-lsp
-      unstable.kak-tree-sitter
+      kak-tree-sitter
       kak-pager
       kak-man-pager
 

user/sway/open-tablet-driver.json

@@ -76,7 +76,7 @@
             "Settings": [
               {
                 "Property": "Keys",
-                "Value": "Control+O"
+                "Value": "Control+Shift+Z"
               }
             ],
             "Enable": true
@@ -111,4 +111,4 @@
   "LockUsableAreaDisplay": true,
   "LockUsableAreaTablet": true,
   "Tools": []
-}
+}

user/sway/sway-assigns.nix

@@ -58,7 +58,6 @@ in
         { app_id = "wdisplays"; }
         { app_id = "pavucontrol"; }
         { app_id = ".*[Hh]elvum.*"; }
-        { workspace = "9"; }
       ];
     };
   };

user/sway/sway-binds.nix

@@ -166,7 +166,8 @@ let
   other_binds = {
     "${mod}+p" = "exec ${pkgs.wpass}/bin/wpass";
     "${mod}+s" = "exec ${menu}";
-    "${mod}+g" = "exec ${pkgs.demoji}/bin/demoji --lang pt --fallback --copy -- ${pkgs.wdmenu}/bin/wdmenu";
+    "${mod}+g" =
+      "exec ${pkgs.demoji}/bin/demoji --lang pt --fallback --copy -- ${pkgs.wdmenu}/bin/wdmenu";
     "${mod}+c" = "exec ${pkgs.color_picker}/bin/color_picker";
     "${mod}+Return" = "exec ${terminal}";
     "${mod}+Ctrl+Return" = "exec thunar";

user/vscode/default.nix

@@ -12,8 +12,11 @@
   };
 
   home.file = {
-    "${config.home.homeDirectory}/.config/VSCodium/User/keybindings.json".source = config.lib.file.mkOutOfStoreSymlink "${config.home.homeDirectory}/projects/nixos-config/user/vscode/keybindings.json";
+    "${config.home.homeDirectory}/.config/VSCodium/User/keybindings.json".source =
-    "${config.home.homeDirectory}/.config/VSCodium/User/settings.json".source = config.lib.file.mkOutOfStoreSymlink "${config.home.homeDirectory}/projects/nixos-config/user/vscode/settings.json";
+      config.lib.file.mkOutOfStoreSymlink "${config.home.homeDirectory}/projects/nixos-config/user/vscode/keybindings.json";
-    "${config.home.homeDirectory}/.config/VSCodium/product.json".source = config.lib.file.mkOutOfStoreSymlink "${config.home.homeDirectory}/projects/nixos-config/user/vscode/product.json";
+    "${config.home.homeDirectory}/.config/VSCodium/User/settings.json".source =
+      config.lib.file.mkOutOfStoreSymlink "${config.home.homeDirectory}/projects/nixos-config/user/vscode/settings.json";
+    "${config.home.homeDirectory}/.config/VSCodium/product.json".source =
+      config.lib.file.mkOutOfStoreSymlink "${config.home.homeDirectory}/projects/nixos-config/user/vscode/product.json";
   };
 }