From 1fc7efa1cbecf161235d5ba68ad85a2d0272e533 Mon Sep 17 00:00:00 2001
From: jopejoe1 <johannes@joens.email>
Date: Wed, 1 May 2024 09:58:21 +0200
Subject: [PATCH] update system config benzaiten

---
 systems/benzaiten/default.nix | 67 +++++++++++++++++++++++++++++++++--
 1 file changed, 65 insertions(+), 2 deletions(-)

diff --git a/systems/benzaiten/default.nix b/systems/benzaiten/default.nix
index 07bafad..8cc4164 100644
--- a/systems/benzaiten/default.nix
+++ b/systems/benzaiten/default.nix
@@ -4,7 +4,7 @@
   imports = [
     ./hardware-configuration.nix
     nixos-hardware.nixosModules.common-cpu-intel
-    nixos-hardware.nixosModules.common-gpu-nvidia
+    #nixos-hardware.nixosModules.common-gpu-nvidia
     nixos-hardware.nixosModules.common-pc-laptop
     nixos-hardware.nixosModules.common-pc-laptop-hdd
   ];
@@ -25,6 +25,8 @@
       enable = true;
       layout = "de";
     };
+    gui.enable = true;
+    zerotierone.enable = true;
   };
 
   hardware.nvidia.prime = {
@@ -32,7 +34,17 @@
     intelBusId = "PCI:00:02:0";
   };
 
-  hardware.nvidia.package = config.boot.kernelPackages.nvidiaPackages.legacy_470;
+  networking.nftables.enable = true;
+
+  networking.firewall = {
+    enable = true;
+    allowedTCPPorts = [ 53 ];
+    allowedUDPPorts = [ 53 ];
+  };
+
+  networking.nat.enable = true;
+
+  #hardware.nvidia.package = config.boot.kernelPackages.nvidiaPackages.legacy_470;
 
   boot.loader.grub.device = "/dev/sda";
   boot.loader.grub.enable = true;
@@ -42,4 +54,55 @@
   time.timeZone = "Europe/Berlin";
 
   boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
+
+  services.suwayomi-server = {
+    enable = true;
+    settings = {
+      server = {
+        systemTrayEnabled = true;
+        extensionRepos = [
+          "https://raw.githubusercontent.com/keiyoushi/extensions/repo/index.min.json"
+        ];
+        webUIEnabled = true;
+        initialOpenInBrowserEnabled = true;
+        webUIInterface = "browser";
+        webUIFlavor = "WebUI";
+      };
+    };
+  };
+
+  services.freshrss = {
+    enable = true;
+    virtualHost = "rss.local";
+    authType = "none";
+    baseUrl = "http://rss.local";
+  };
+
+  services.nginx = {
+    enable = true;
+    virtualHosts = {
+      "manga.local" = {
+        locations."/" = {
+          proxyPass = "http://localhost:8080/";
+        };
+      };
+    };
+  };
+
+  services.avahi = {
+    enable = true;
+    nssmdns4 = true;
+    nssmdns6 = true;
+    ipv6 = true;
+  };
+
+  services.ivpn.enable = true;
+
+  programs.kclock.enable = true;
+
+  networking.hosts = {
+    "192.168.88.251" = [ "wiki.it3" ];
+    "192.168.88.252" = [ "pi400" ];
+    "127.0.0.1" = [ "local" "rss.local" "manga.local" ];
+  };
 }