diff --git a/config/hosts/imxyy-nix-x16/home.nix b/config/hosts/imxyy-nix-x16/home.nix index a2931e9..2d34c9e 100644 --- a/config/hosts/imxyy-nix-x16/home.nix +++ b/config/hosts/imxyy-nix-x16/home.nix @@ -41,7 +41,7 @@ programs.niri.settings = { environment.STEAM_FORCE_DESKTOPUI_SCALING = "1.25"; outputs = { - DP-2 = { + eDP-1 = { enable = true; mode = { width = 1920; @@ -59,6 +59,7 @@ cli.all.enable = true; coding.all.enable = true; desktop.all.enable = true; + virt.moonlight.enable = true; desktop.browser.librewolf.enable = lib.mkForce false; diff --git a/config/hosts/imxyy-nix-x16/net.nix b/config/hosts/imxyy-nix-x16/net.nix index b12a6ea..fc5eb42 100644 --- a/config/hosts/imxyy-nix-x16/net.nix +++ b/config/hosts/imxyy-nix-x16/net.nix @@ -1,6 +1,5 @@ { config, - lib, pkgs, sopsRoot, ... @@ -10,7 +9,48 @@ "biosdevname=0" "net.ifnames=0" ]; - networking.networkmanager.enable = true; + networking = { + networkmanager.enable = true; + firewall.enable = false; + nftables = { + enable = true; + flushRuleset = true; + ruleset = '' + table inet firewall { + set LANv4 { + type ipv4_addr + flags interval + + elements = { 10.0.0.0/8, 100.64.0.0/10, 172.16.0.0/12, 192.168.0.0/16, 169.254.0.0/16 } + } + set LANv6 { + type ipv6_addr + flags interval + + elements = { fd00::/8, fe80::/10 } + } + + chain output { + type filter hook output priority 100; policy accept; + } + + chain input { + type filter hook input priority 0; policy drop; + iif lo accept + ct state invalid drop + ct state established,related accept + + ip saddr @LANv4 accept + ip6 saddr @LANv6 accept + } + + chain forward { + type filter hook forward priority 0; policy drop; + } + } + ''; + }; + }; sops.secrets.dae-imxyy-nix-x16 = { sopsFile = sopsRoot + /dae-imxyy-nix-x16.dae; diff --git a/modules/xdg.nix b/modules/xdg.nix index 5ea041b..ab53d86 100644 --- a/modules/xdg.nix +++ b/modules/xdg.nix @@ -53,10 +53,6 @@ in "file://${homedir}/Videos 视频" "file://${homedir}/Music 音乐" "file://${homedir}/workspace 工作空间" - "file://${homedir}/Documents/%E7%8F%AD%E7%BA%A7%E4%BA%8B%E5%8A%A1 班级事务" - "file://${homedir}/NAS NAS" - "file://${homedir}/NAS/imxyy_soope_ NAS imxyy_soope_" - "file://${homedir}/NAS/imxyy_soope_/OS NAS OS" ]; }; };