my-guix/etc/23-06-config.scm

635 lines
22 KiB
Scheme
Raw Normal View History

2024-02-21 16:04:37 +00:00
;;MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMWWNNXK00OOOOOOOOOOO00KXNNWWMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMWN0kdlc;,'..... .....',;:ldx0NWMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMMMMXxc'. .':xXWMMMMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMMMW0: cXMMMMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMMMMNKxc,. lNMMMMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMMMMKocoddol:;,... .xWMMMMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMMMMNo. ..',;;;;,'... ,0MMMMMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMMMMMO' lNMMMMMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMMMMMXc .xWMMMMMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMMMMMWx. ;KMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMMMMMM0, lNMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMNl .xWMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMWx. ,KMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMO' cXMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMWNXKKXXXO, c0K00KKKXNWMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMNOocll:::::;'. ...........,cxKWMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMKc.';'. .l0kdc;'.. ..,cok0x. ,OWMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMNo..:' .xWMMMWNKOxdolc:;;,,;;:cloxk0XWWMMMX: cNMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMNl .:. 'OMMMMMMMMMMMMMWWWWWWWWMMMMMMMMMMMMNl :XMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMWk..;, 'OWMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMX: .dWMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMNo..;, 'lkKNWMMMMMMMMMMMMMMMMMMMMMMMMWX0d;. .cXMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMNd..,;. .';cloxkkO0000000000OOkxdlc;'. .oXMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMW0c..,,'. ........... .:OWMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMW0o,.',,'. .'lONMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMWNOo:,''...... .;lkXWMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMMMMWWXkoc;,,......... .....dKNMMMMMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMWWX0kxoc:;,,'''....... .,:codolddl;oXMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMMWNNWMMMMMMMMMMMWWNNXXXXXXXXKl,xNWNKOkkk0Xo,kWNNWMMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMWXXWMMMMMMMMMMMMMMMMMMMMMMMMWd;xWXO0OO0NMNo,OMWXXWMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMKOXMMMMMMMMMMMMMMMMMMMMMMMMMMKc;kXNWNWMWXd;oNMMN0KMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMM0kNMMMMMMMMMMMMMMMMMMMMMMMMMMMXd:ldkOOkoc:xNMMMWOOWMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMOdKMMMMMMMMMMMMMMMMMMMMMMMMMMMMWXOdooodx0NMMMMMNxkWMMMMMMMMMMMMMMMMMMMMMMMM
;MMMMMMMMMMMMMMMMMMMMMMMMMXoxNMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMWkoKMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMW0ldXMMMMMMMMMMMMMMWWNXXWWNXNWWMMMMMMMMMMMMMMNxlOWMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMMWKocd0NWMMMMMWNKkoc;'.;dx:.';cok0NWMMMMMWNKxcl0WMMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMMMMNOocccllool:,. .;oo:.. .':looollcclONMMMMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMWNKkxocc::::cloxOKXNNNKOxdlc:::::codk0NWMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMWWWMMMMMMMMMMMMMMMMMMWMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM
;;MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM
;;
(use-modules
(gnu)
(guix store)
(guix packages)
2024-02-19 01:03:56 +00:00
(gnu packages pdf)
(gnu packages cran)
2024-02-12 23:20:54 +00:00
(gnu packages kde)
2024-02-19 01:03:56 +00:00
(gnu packages tex)
(gnu packages unicode)
(gnu packages python-build)
(gnu packages glib)
2024-02-19 01:03:56 +00:00
(gnu packages haskell-xyz)
2024-02-12 23:20:54 +00:00
(gnu packages kde-pim)
2024-02-04 23:54:29 +00:00
(gnu packages guile-xyz)
(gnu packages python-xyz)
2024-02-04 07:36:54 +00:00
(gnu packages pulseaudio)
(gnu packages texinfo)
2024-02-12 23:20:54 +00:00
(gnu packages cmake)
(gnu packages disk)
(gnu packages freedesktop)
(gnu packages gnuzilla)
(gnu packages image)
(gnu packages image-viewers)
2024-02-04 07:36:54 +00:00
(gnu packages messaging)
2024-02-12 23:20:54 +00:00
(gnu packages vim)
(gnu packages gstreamer)
(gnu packages virtualization)
(gnu packages web-browsers)
(gnu services)
2024-02-04 07:36:54 +00:00
(gnu services vpn)
(gnu services dbus)
(gnu services shepherd)
(gnu system shadow)
(gnu services configuration)
(gnu packages build-tools)
(gnu packages admin)
2024-02-04 23:54:29 +00:00
(gnu packages qt)
(gnu packages lxde)
(gnu packages python)
(gnu packages bittorrent)
(gnu packages chromium)
(gnu packages compression)
(gnu packages tor)
(gnu packages ncurses)
(gnu packages web)
(gnu packages fonts)
(gnu packages vpn)
(gnu packages curl)
(gnu packages password-utils)
(gnu packages emacs)
2024-02-04 23:54:29 +00:00
(gnu packages node)
(gnu packages emacs-xyz)
(gnu packages engineering)
(gnu packages fontutils)
(gnu packages gimp)
(gnu packages gnome)
(gnu packages gnome-xyz)
(gnu packages gnupg)
(gnu packages haskell-apps)
(gnu packages imagemagick)
(gnu packages java)
(gnu packages libreoffice)
(gnu packages linux)
(gnu packages mpd)
(gnu packages package-management)
(gnu packages rsync)
(gnu packages ssh)
(gnu packages telegram)
(gnu packages video)
(gnu packages wm)
(gnu packages xdisorg)
(gnu packages xorg)
(gnu home services gnupg)
(gnu home services xdg)
(gnu packages terminals)
(gnu packages music)
(gnu packages compton)
(gnu packages version-control)
(gnu packages lxqt)
(gnu packages file-systems)
(gnu packages lisp)
(gnu packages networking)
(gnu home services gnupg)
(gnu home services xdg)
(gnu packages security-token)
2024-02-04 07:36:54 +00:00
(gnu packages tls)
2024-02-12 23:20:54 +00:00
(gnu packages graphics)
(nongnu packages compression)
(nongnu packages clojure)
(nongnu packages linux)
(nongnu system linux-initrd))
(use-service-modules base cups desktop networking ssh xorg linux virtualization)
(use-package-modules linux )
(define my-kernel linux-6.7)
2024-02-04 07:36:54 +00:00
(define-public bitmask-service-type
(service-type
(name 'bitmask)
(description "Setup the @uref{https://bitmask.net, Bitmask} VPN
application.")
(default-value bitmask)
(extensions
(list
;; To configure polkit policy of bitmask.
(service-extension polkit-service-type list)
;; To add bitmask to the system profile.
(service-extension profile-service-type list)))))
(operating-system
(kernel my-kernel)
(initrd microcode-initrd)
(firmware (list linux-firmware))
(locale "en_US.utf8")
(timezone "America/Sao_Paulo")
(keyboard-layout (keyboard-layout "br"))
(host-name "lisp")
;; The list of user accounts ('root' is implicit).
(users (cons* (user-account
(name "berkeley")
(comment "Berkeley")
(group "users")
(home-directory "/home/berkeley")
(supplementary-groups '("wheel" "netdev" "audio" "video" "plugdev")))
2024-02-04 07:36:54 +00:00
(user-account
(name "leti")
(comment "Letícia")
(group "users")
(home-directory "/home/leti")
(supplementary-groups '("wheel" "netdev" "audio" "video" "plugdev")))
%base-user-accounts))
;; Packages installed system-wide. Users can also install packages
;; under their own account: use 'guix search KEYWORD' to search
;; for packages and 'guix install PACKAGE' to install a package.
(packages (append (list
2024-02-19 01:03:56 +00:00
;emacs-org-roam
;emacs-org-roam-ui
2024-02-04 07:36:54 +00:00
gstreamer
gst-plugins-bad
gst-plugins-good
nyxt
2024-02-04 23:54:29 +00:00
cmus
2024-02-12 23:20:54 +00:00
xdg-utils
2024-02-04 23:54:29 +00:00
curl
2024-02-12 23:20:54 +00:00
gthumb
mangohud
2024-02-04 23:54:29 +00:00
qtsolutions
2024-02-04 07:36:54 +00:00
glances
zstd
mpv
kitty
maim
procps
2024-02-04 07:36:54 +00:00
scrot
2024-02-21 16:04:37 +00:00
mupdf
zathura
2024-02-19 01:03:56 +00:00
texlive-scheme-basic
texlive-listings
texmaker
texlive-pgf
texlive-beamer
texlive-hyperref
alacritty
wipe
2024-02-12 23:20:54 +00:00
imagemagick
2024-02-04 07:36:54 +00:00
unzip
compton
p7zip
gedit
htop
netdiscover
fping
gparted
2024-02-19 01:03:56 +00:00
texstudio
texlive-bibtex
bcachefs-tools
whois
2024-02-12 23:20:54 +00:00
python-pip
setxkbmap
2024-02-12 23:20:54 +00:00
xfe
libbluray
libaacs
libbdplus
vim
neovim
2024-02-19 01:03:56 +00:00
;emacs-telega
2024-02-12 23:20:54 +00:00
cmake
2024-02-04 07:36:54 +00:00
neofetch
2024-02-12 23:20:54 +00:00
kleopatra
krita
flatpak
2024-02-04 07:36:54 +00:00
pfetch
icecat
hashcat
2024-02-04 23:54:29 +00:00
haunt
2024-02-04 07:36:54 +00:00
openssl
flameshot
2024-02-04 07:36:54 +00:00
openshot
obs
ffmpeg
2024-02-04 07:36:54 +00:00
lm-sensors
vlc
2024-02-04 23:54:29 +00:00
virt-manager
2024-02-04 07:36:54 +00:00
guix
nsxiv
git
inxi
tor
2024-02-19 01:03:56 +00:00
; emacs-org-roam
torsocks
tor-client
2024-02-04 07:36:54 +00:00
privoxy
terminator
openvpn
pavucontrol
pavucontrol-qt
emacs
keepassxc
wireshark
tcpdump
nmap
firejail
2024-02-04 07:36:54 +00:00
bitmask
;;
xf86-video-amdgpu
2024-02-21 16:04:37 +00:00
asciinema
2024-02-04 07:36:54 +00:00
alsa-lib
alsa-utils
binutils
dbus
xset
lxrandr
dosfstools
elogind
2024-02-04 07:36:54 +00:00
qtox
exfat-utils
exfatprogs
fuse-exfat
gnupg
libinput
texinfo
xf86-input-keyboard
xf86-input-libinput
xf86-input-mouse
xf86-input-synaptics
2024-02-04 07:36:54 +00:00
;;emacs-org-timeblock
xrandr
ungoogled-chromium
qbittorrent
macchanger
2024-02-19 01:03:56 +00:00
;guile
;emacs-geiser
;emacs-geiser-guile
fontconfig
2024-02-04 07:36:54 +00:00
picom
feh
gimp
fzf
2024-02-04 07:36:54 +00:00
xmodmap
rofi
coreutils
qemu
2024-02-04 07:36:54 +00:00
xwininfo
xprop
xpra
libfido2
grep
iptables
2024-02-04 23:54:29 +00:00
node
jq
python
sed
nomacs
meson
ncurses
;; lots of fonts from package fonts.scm
font-adobe-source-code-pro font-adobe-source-han-sans
font-adobe-source-sans-pro font-adobe-source-serif-pro
font-anonymous-pro font-anonymous-pro-minus font-awesome
font-cns11643 font-cns11643-swjz font-comic-neue font-culmus
font-dejavu font-dosis font-dseg font-fantasque-sans font-fira-code
font-fira-mono font-fira-sans font-fontna-yasashisa-antique
font-google-material-design-icons font-google-noto font-google-roboto
font-hack font-hermit font-ibm-plex font-inconsolata font-iosevka
font-iosevka-aile font-iosevka-etoile font-iosevka-slab
font-iosevka-term font-iosevka-term-slab
font-ipa-mj-mincho font-jetbrains-mono font-lato font-liberation
font-linuxlibertine font-lohit font-meera-inimai font-mononoki
font-mplus-testflight
font-public-sans font-rachana font-sarasa-gothic font-sil-andika
font-sil-charis font-sil-gentium font-tamzen font-terminus
font-tex-gyre font-un font-vazir font-wqy-microhei
font-wqy-zenhei
2024-02-19 01:03:56 +00:00
python-emoji
ghc-emojis
texlive-emoji
emacs-emojify
texlive-twemoji-colr
texlive-noto-emoji
texlive-hwemoji
texlive-byo-twemojis
unicode-emoji
texlive-twemojis
texlive-emojicite
;;rust-unic-emoji-char
r-emojifont
font-google-noto-emoji
;; font-apple-color-emoji
emacs-company-emoji
font-openmoji
vim-characterize
texlive-lua-uni-algos
texlive-pwebmac
texlive-olsak-misc
texlive-pdfoverlay
texlive-texosquery
texlive-pdfx
texlive-pdfprivacy
texlive-pdfcomment
texlive-iftex
texlive-tex
texlive-montex
texlive-pdfescape
texlive-texdef
texlive-pdfpages
extractpdfmark
texlive-csplain
poppler-qt5
poppler
texlive-pdf14
texlive-thumbpdf
texlive-pax
texlive-etex
texlive-axodraw2
texlive-repltext
texlive-luatex
texlive-hyperref
texlive-xetex
texlive-pdftexcmds
texlive-epstopdf
texlive-epsf-dvipdfmx
texlive-dvipdfmx
texlive-texsurgery
texlive-ptex2pdf
texlive-jadetex
texlive-texlogfilter
texlive-svg-inkscape
texlive-purifyeps
texlive-navigator
texlive-latex-uni8
texlive-biblatex
texlive-latex-make
texlive-pgf
texlive-pdftricks
texlive-pdflatexpicscale
texlive-pdfmanagement-testphase
texlive-pdflatexpicscale
texlive-pdfextra
texlive-tagpdf
texlive-pdfreview
texlive-pdfmsym
texlive-mptopdf
texlive-inter
texlive-pdftex-quiet
texlive-pdftex
texlive-knuth-pdf
texlive-xmltexconfig
texlive-pdfjam
texlive-luatex85
texlive-grayhints
texlive-fig4latex
texlive-tpic2pdftex
texlive-pst2pdf
texlive-pdfslide
texlive-minim-pdf
texlive-hvextern
texlive-flippdf
texlive-combinedgraphics
texlive-autopdf
texlive-xetex-pstricks
texlive-texonly
texlive-scikgtex
texlive-pdfsync
texlive-mathastext
texlive-luainputenc
texlive-latexmk
texlive-hyperxmp
texlive-datetime2-en-fulltext
texlive-commonunicode
texlive-pict2e
texlive-intopdf
texlive-filemod
texlive-textcsc
texlive-texpower
texlive-texdoc
texlive-pst-pdf
texlive-pdfpc-movie
texlive-pdfmarginpar
texlive-pdfbook2
texlive-pdf-trans
texlive-lobster2
texlive-hitex
texlive-epstopdf-pkg
texlive-epspdfconversion
texlive-collection-luatex
texlive-bxpdfver
texlive-asmeconf
texlive-synctex
texlive-pdfcolmk
texlive-pdfcolfoot
texlive-lapdf
texlive-fixpdfmag
python-pdfminer-six
texlive-zhmetrics-uptex
texlive-xpdfopen
texlive-xcpdftips
texlive-quattrocento
texlive-pdfxup
texlive-pdfpc
texlive-pdfarticle
texlive-oswald
texlive-nunito
texlive-magra
texlive-librebaskerville
texlive-l3experimental
texlive-knuth-hint
texlive-forum
texlive-epspdf
texlive-dickimaw
texlive-convbkmk
texlive-changebar
texlive-cascadia-code
texlive-cabin
texlive-bitter
texlive-auto-pst-pdf-lua
texlive-arvo
texlive-archivo
texlive-sanitize-umlaut
texlive-protex
texlive-pdftricks2
texlive-pdflscape
texlive-ocg-p
texlive-minim-xmp
texlive-gregoriotex
texlive-docshots
emacs-latex-preview-pane
;;rust-deunicode
nheko
;; lots of fonts from package xorg.scm
font-adobe100dpi font-adobe75dpi font-cronyx-cyrillic font-dec-misc
font-isas-misc font-micro-misc font-misc-cyrillic font-misc-ethiopic
font-misc-misc font-mutt-misc font-schumacher-misc
font-screen-cyrillic font-sony-misc font-sun-misc font-util
font-winitzki-cyrillic font-xfree86-type1
2024-02-04 07:36:54 +00:00
sbcl-stumpwm-swm-gaps
sbcl-stumpwm-pamixer
sbcl-stumpwm-screenshot
sbcl-stumpwm-disk
sbcl-stumpwm-ttf-fonts
stumpwm `(,stumpwm "lib")
sbcl-stumpwm-mem
sbcl-stumpwm-cpu
sbcl-stumpwm-net
2024-02-19 01:03:56 +00:00
;emacs-stumpwm-mode
2024-02-04 07:36:54 +00:00
stumpish
youtube-dl
linux-firmware
(specification->package "i3-wm")
(specification->package "i3status")
(specification->package "dmenu")
(specification->package "st")
(specification->package "emacs")
(specification->package "emacs-exwm")
(specification->package
"emacs-desktop-environment")
(specification->package "nss-certs"))
%base-packages))
;; Below is the list of system services. To search for available
;; services, run 'guix system search KEYWORD' in a terminal.
;;(home-environment (packages (cons* anki ))) ;; figure out how to install it from here
;;(home-environment (packages (cons* anki ))) ;; figure out how to install it from here
;; Below is the list of system services. To search for available
;; services, run 'guix system search KEYWORD' in a terminal.
(services
(append (list
2024-02-04 07:36:54 +00:00
(udev-rules-service 'fido2 libfido2 #:groups '("plugdev"))
2024-02-04 07:36:54 +00:00
(service iptables-service-type
(iptables-configuration
(ipv4-rules (plain-file "iptables.rules" "*filter
:INPUT DROP
:FORWARD ACCEPT
:OUTPUT ACCEPT
-A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-port-unreachable
-A FORWARD -m state --state INVALID -j DROP
-A OUTPUT -m state --state INVALID -j DROP
-A OUTPUT -o lo -j ACCEPT
-A OUTPUT -o tun+ -j ACCEPT
-A OUTPUT -m owner --gid-owner openvpn -j ACCEPT
2024-02-04 07:36:54 +00:00
;-t nat -A OUTPUT -p tcp -m owner --uid-owner berkeley -m tcp -j REDIRECT --to-ports 9040
;-t nat -A OUTPUT -p udp -m owner --uid-owner berkeley -m udp --dport 53 -j REDIRECT --to-ports 53
;-t filter -A OUTPUT -p tcp -m owner --uid-owner berkeley -m tcp --dport 9040 -j ACCEPT
;-t filter -A OUTPUT -p udp -m owner --uid-owner berkeley -m udp --dport 53 -j ACCEPT
;-t filter -A OUTPUT -m owner --uid-owner berkeley -j DROP
COMMIT
"))
(ipv6-rules (plain-file "ip6tables.rules" "*filter
:INPUT DROP
:FORWARD DROP
:OUTPUT DROP
-A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
-A INPUT -j REJECT --reject-with icmp6-port-unreachable
COMMIT
"))))
2024-02-04 07:36:54 +00:00
(service tor-service-type
(tor-configuration
(config-file (plain-file "tor-config"
"HttpTunnelPort 9050"
; "VirtualAddrNetwork 10.192.0.0/10
; AutomapHostsOnResolve 1
; TransPort 9040
; DNSPort 53
; SOCKSPort 0
; ORPort 443
; BridgeRelay 1
; ExitRelay 0"
))))
2024-02-19 01:03:56 +00:00
(service libvirt-service-type
(libvirt-configuration
(unix-sock-group "libvirt")
(tls-port "16555")))
(service zram-device-service-type
(zram-device-configuration
(size (* 2 (expt 2 30)))
(compression-algorithm 'zstd)
(priority 100)))
(set-xorg-configuration
(xorg-configuration
(keyboard-layout keyboard-layout))))
%desktop-services))
(bootloader (bootloader-configuration
(bootloader grub-bootloader)
(targets (list "/dev/nvme0n1"))
(keyboard-layout keyboard-layout)))
(swap-devices (list (swap-space
(priority 50)
(target (uuid
"85b7b3d8-657a-443c-b010-52d224bc4483")))))
;; The list of file systems that get "mounted". The unique
;; file system identifiers there ("UUIDs") can be obtained
;; by running 'blkid' in a terminal.
(file-systems (cons* (file-system
(mount-point "/boot/efi")
(device (uuid "02E2-0AB2"
'fat32))
(type "vfat"))
(file-system
(mount-point "/")
(device (uuid
"38467002-a282-4387-8319-cff6d93cd23b"
'ext4))
(type "ext4"))
(file-system
(mount-point "/files")
(device (uuid
"7b2cbf88-bc71-49ad-b2fa-a4bbdb71f886"
'ext4))
(type "ext4"))
(file-system
(mount-point "/virt")
(device (uuid
"9d009d01-d635-4d56-987a-ffc2699da9fb"
'ext4))
(type "ext4"))
%base-file-systems)))