Added various things, returned Aphelion back to functional state now

with zfs

Note: this is probably the first commit with coq-nvim working again,
don't remove uder any circumstances
This commit is contained in:
yaroslav
2025-07-27 16:18:35 +03:00
parent 7ceaa8e748
commit 7850408607
13 changed files with 70 additions and 37 deletions
+2 -5
View File
@@ -29,8 +29,8 @@
# networking
networking.networkmanager.enable = true;
networking.firewall.allowedTCPPorts = [ 22 3240 2049 ];
networking.firewall.allowedUDPPorts = [ 38401 ];
networking.firewall.allowedTCPPorts = [ 22 3240 2049 25565 ];
networking.firewall.allowedUDPPorts = [ 38401 25565 ];
networking.nftables.enable = true;
networking.hosts = {
"192.168.1.116" = [ "Clank" ];
@@ -38,9 +38,6 @@
"192.168.1.94" = [ "Qwark" ];
};
# mailing
services.exim.enable = true;
# locales
i18n.extraLocales = [ "en_US.UTF-8/UTF-8" "C.UTF-8/UTF-8" "ru_RU.UTF-8/UTF-8" ];
+3
View File
@@ -17,6 +17,9 @@
".config/VSCodium"
".config/libreoffice"
".config/chromium"
".config/kdeconnect"
".config/plasma-org.kde.plasma.desktop-appletsrc"
".config/kwinoutputconfig"
".vscode"
".vscode-oss"
".mozilla"
+2
View File
@@ -9,6 +9,8 @@
"/var/lib/systemd/coredump"
"/var/lib/systemd/timers"
"/var/lib/fprint"
"/var/lib/libvirt"
"/var/lib/teamspeak3-server"
"/etc/NetworkManager"
"/var/lib/sddm"
"/etc/ssh"
+9 -2
View File
@@ -34,7 +34,14 @@
# Required for containers under podman-compose to be able to talk to each other.
defaultNetwork.settings.dns_enabled = true;
};
incus = {
enable = true;
ui.enable = true;
};
};
};
networking.firewall.interfaces.incusbr0.allowedTCPPorts = [ 53 67 ];
networking.firewall.interfaces.incusbr0.allowedUDPPorts = [ 53 67 ];
networking.firewall.interfaces.virbr0.allowedTCPPorts = [ 53 67 ];
networking.firewall.interfaces.virbr0.allowedUDPPorts = [ 53 67 ];
}
+6 -4
View File
@@ -4,10 +4,12 @@
enable = true;
configureFirewall = false;
params = [
"--filter-tcp=80 --dpi-desync=fake,multisplit --dpi-desync-split-pos=method+2 --dpi-desync-fooling=md5sig --new"
"--filter-tcp=443 --dpi-desync=fake,multidisorder --dpi-desync-split-pos=1,midsld --dpi-desync-fooling=badseq,md5sig --new"
"--filter-udp=443 --dpi-desync=fake --dpi-desync-repeats=6"
"--filter-udp=50000-50100 --filter-l7=discord,stun --dpi-desync=fake --dpi-desync-repeats=6 --new"
''--filter-udp=443 --dpi-desync=fake --dpi-desync-repeats=6 --new''
''--filter-udp=50000-50100 --filter-l7=discord,stun --dpi-desync=fake --dpi-desync-repeats=6 --new''
''--filter-tcp=80 --dpi-desync=fake,multisplit --dpi-desync-autottl=2 --dpi-desync-fooling=md5sig --new''
''--filter-tcp=443 --dpi-desync=multisplit --dpi-desync-split-seqovl=652 --dpi-desync-split-pos=2 --new''
''--filter-udp=443 --dpi-desync=fake --dpi-desync-repeats=6 --new''
''--filter-tcp=80 --dpi-desync=fake,multisplit --dpi-desync-autottl=2 --dpi-desync-fooling=md5sig --new''
];
};