Upload files to "/"

main
berkeley 2024-11-26 01:31:02 +00:00
parent d559668638
commit 1d3021727e
1 changed files with 94 additions and 281 deletions

View File

@ -2,12 +2,26 @@
(gnu) (gnu)
(guix store) (guix store)
(guix packages) (guix packages)
(gnu packages i2p)
(ajatt packages dictionaries)
(nongnu packages game-client)
(ajatt packages suckless)
(ajatt packages readers)
(ajatt packages audio)
(gnu packages zig-xyz)
(gnu packages databases) (gnu packages databases)
(gnu packages antivirus)
(rosenthal packages binaries) (rosenthal packages binaries)
(rosenthal packages emacs-xyz) (rosenthal packages emacs-xyz)
(gnu packages tor-browsers)
(small-guix packages mullvad)
(radix services admin)
(radix packages xdisorg)
(radix packages tex)
(radix packages image-viewers)
(saayix packages binaries)
(guix transformations) (guix transformations)
(gnu packages audio) (gnu packages audio)
(gnu packages librewolf)
(gnu packages sqlite) (gnu packages sqlite)
(gnu packages gdb) (gnu packages gdb)
(gnu packages graphics) (gnu packages graphics)
@ -78,6 +92,7 @@ commencement)
(gnu packages web-browsers) (gnu packages web-browsers)
(gnu services) (gnu services)
(gnu services vpn) (gnu services vpn)
(gnu services herd)
(gnu services dbus) (gnu services dbus)
(gnu services shepherd) (gnu services shepherd)
(gnu system shadow) (gnu system shadow)
@ -107,12 +122,10 @@ commencement)
(gnu packages gnupg) (gnu packages gnupg)
(gnu packages haskell-apps) (gnu packages haskell-apps)
(gnu packages imagemagick) (gnu packages imagemagick)
(gnu packages libreoffice)
(gnu packages linux) (gnu packages linux)
(gnu packages package-management) (gnu packages package-management)
(gnu packages rsync) (gnu packages rsync)
(gnu packages ssh) (gnu packages ssh)
(gnu packages telegram)
(gnu packages video) (gnu packages video)
(gnu packages wm) (gnu packages wm)
(gnu packages benchmark) (gnu packages benchmark)
@ -120,6 +133,8 @@ commencement)
(gnu packages xorg) (gnu packages xorg)
(gnu home services gnupg) (gnu home services gnupg)
(gnu home services xdg) (gnu home services xdg)
(gnu home-services wm)
(small-guix services mullvad)
(gnu packages lisp) (gnu packages lisp)
(gnu packages networking) (gnu packages networking)
(gnu packages security-token) (gnu packages security-token)
@ -129,17 +144,16 @@ commencement)
(nongnu packages linux) (nongnu packages linux)
(nongnu system linux-initrd)) (nongnu system linux-initrd))
(use-service-modules web security base certbot shepherd nix cups desktop networking ssh docker xorg linux virtualization) (use-service-modules web security networking base certbot shepherd nix cups desktop networking ssh docker xorg linux virtualization)
(use-package-modules package-management version-control gcc bash certs admin linux) (use-package-modules package-management version-control gcc bash certs admin linux)
;; general rules for doas
(define general
(list (permit (identity ":wheel")
(setenv
`(("GUILE_LOAD_PATH" . #t)
("GUILE_LOAD_COMPILED_PATH" . #t))))))
(define my-kernel linux) (define my-kernel linux)
(define xmonad-0.18.0
(package
(inherit xmonad)
(version "0.18.0")))
(define my-packages
(list
xmonad-0.18.0
))
(operating-system (operating-system
(kernel my-kernel) (kernel my-kernel)
@ -194,18 +208,18 @@ commencement)
;; under their own account: use 'guix search KEYWORD' to search ;; under their own account: use 'guix search KEYWORD' to search
;; for packages and 'guix install PACKAGE' to install a package. ;; for packages and 'guix install PACKAGE' to install a package.
(packages (append (list (packages (append (list
;emacs-org-roam
;emacs-org-roam-ui
postgresql
;foliate
polybar polybar
gstreamer gstreamer
gst-plugins-bad gst-plugins-bad
gst-plugins-good gst-plugins-good
nyxt nyxt
cmus
v4l-utils v4l-utils
fnott
ibus
swww
waybar
xdg-utils xdg-utils
fuzzel-lowercase wl-clipboard wlrctl wlsunset
curl curl
gthumb gthumb
mangohud mangohud
@ -217,7 +231,6 @@ commencement)
mpv mpv
kitty kitty
maim maim
;;
procps procps
scrot scrot
mupdf mupdf
@ -227,11 +240,8 @@ commencement)
go go
clisp clisp
fdm fdm
;;jami mullvad-vpn-desktop
;navidrome-bin
;mullvad-vpn
smartmontools smartmontools
;;
udevil udevil
samba samba
cifs-utils cifs-utils
@ -239,180 +249,37 @@ commencement)
parted parted
net-tools net-tools
ntfs-3g ntfs-3g
texlive-lua-uni-algos youtube-dl
texlive-csplain noisetorch
texlive-lua-uni-algos linux-firmware
texlive-pwebmac nix
texlive-olsak-misc dmidecode
texlive-pdfoverlay senpai
texlive-texosquery
texlive-pdfx
texlive-pdfprivacy
texlive-pdfcomment
texlive-iftex
texlive-tex
texlive-montex
texlive-pdfescape
texlive-texdef
texlive-pdfpages
extractpdfmark
texlive-csplain
poppler-qt5
poppler
texlive-pdf14
texlive-thumbpdf
texlive-pax
texlive-etex
texlive-axodraw2
texlive-repltext
texlive-luatex
texlive-hyperref
texlive-xetex
texlive-pdftexcmds
texlive-epstopdf
texlive-epsf-dvipdfmx
texlive-dvipdfmx
texlive-texsurgery
texlive-ptex2pdf
texlive-jadetex
texlive-texlogfilter
texlive-svg-inkscape
texlive-purifyeps
texlive-navigator
texlive-latex-uni8
texlive-biblatex
texlive-latex-make
texlive-pgf
texlive-pdftricks
texlive-pdflatexpicscale
texlive-pdfmanagement-testphase
texlive-pdflatexpicscale
texlive-pdfextra
texlive-tagpdf
texlive-pdfreview
texlive-pdfmsym
texlive-mptopdf
texlive-inter
texlive-pdftex-quiet
texlive-pdftex
texlive-knuth-pdf
texlive-xmltexconfig
texlive-pdfjam
texlive-luatex85
texlive-grayhints
texlive-fig4latex
texlive-tpic2pdftex
texlive-pst2pdf
texlive-pdfslide
texlive-minim-pdf
texlive-hvextern
texlive-flippdf
texlive-combinedgraphics
texlive-autopdf
texlive-xetex-pstricks
texlive-texonly
texlive-scikgtex
texlive-pdfsync
texlive-mathastext
texlive-luainputenc
texlive-pdfcomment
texlive-pdfprivacy
texlive-pdfoverlay
texlive-pdfpages
texlive-latexmk
texlive-hyperxmp
texlive-datetime2-en-fulltext
texlive-commonunicode
texlive-pict2e
texlive-intopdf
texlive-filemod
texlive-textcsc
texlive-texpower
texlive-texdoc
texlive-pst-pdf
texlive-pdfpc-movie
texlive-pdfmarginpar
texlive-pdfbook2
texlive-pdf-trans
texlive-lobster2
texlive-hitex
texlive-epstopdf-pkg
texlive-epspdfconversion
texlive-collection-luatex
texlive-bxpdfver
texlive-asmeconf
texlive-synctex
texlive-pdfcolmk
texlive-pdfcolfoot
texlive-lapdf
texlive-fixpdfmag
python-pdfminer-six
texlive-zhmetrics-uptex
texlive-xpdfopen
texlive-xcpdftips
texlive-quattrocento
texlive-pdfxup
texlive-pdfpc
texlive-pdfarticle
texlive-oswald
texlive-nunito
texlive-magra
texlive-librebaskerville
texlive-l3experimental
texlive-knuth-hint
texlive-forum
texlive-epspdf
texlive-dickimaw
texlive-convbkmk
texlive-changebar
texlive-cascadia-code
texlive-cabin
texlive-bitter
texlive-auto-pst-pdf-lua
texlive-arvo
texlive-archivo
texlive-sanitize-umlaut
texlive-protex
texlive-pdftricks2
texlive-pdflscape
texlive-ocg-p
texlive-minim-xmp
texlive-gregoriotex
texlive-docshots
texlive-biber
emacs-latex-preview-pane
texlive-pwebmac
texlive-olsak-misc
texlive-pdfoverlay
texlive-texosquery
texlive-pdfx
texlive-pdfprivacy
texlive-pdfcomment
texlive-iftex
texlive-tex
texlive-montex
texlive-pdfescape
texlive-texdef
texlive-pdfpages
texlive-twemoji-colr
texlive-noto-emoji
texlive-hwemoji
texlive-byo-twemojis
unicode-emoji
texlive-twemojis
texlive-emojicite
texlive-emoji
texlive-scheme-basic
texlive-cm-super
texlive-listings
texmaker texmaker
texlive-latexmk
texlive-bibtex
texlive-hyperref
texlive-pdfpages
texlive-biblatex
texlive-pgf texlive-pgf
texlive-beamer texlive-beamer
texlive-hyperref texlive-montex
texlive-pdftex
texlive-iftex
texlive-luatex
texlive-xetex
texlive-epstopdf
texlive-pdfcomment
texlive-luatex85
texlive-texdoc
texlive-dvipdfmx
texlive-pdfextra
python-pdfminer-six
texmaker
emacs-latex-preview-pane
alacritty alacritty
libxfont libxfont
libxft libxft
;;protonup-ng
wipe wipe
imagemagick imagemagick
unzip unzip
@ -420,12 +287,10 @@ emacs-latex-preview-pane
p7zip p7zip
gedit gedit
htop htop
btop
openjdk openjdk
;;element-desktop
;; bluetooth
bluez bluez
blueman blueman
;; ime
fcitx5 fcitx5
fcitx5-gtk fcitx5-gtk
fcitx5-qt fcitx5-qt
@ -435,29 +300,24 @@ emacs-latex-preview-pane
netdiscover netdiscover
fping fping
gparted gparted
texstudio
texlive-bibtex
bcachefs-tools bcachefs-tools
whois whois
python-pip python-pip
setxkbmap setxkbmap
xfe xfe
;;clamav clamav
libbluray libbluray
libaacs libaacs
libbdplus libbdplus
vim vim
neovim neovim
;emacs-telega
cmake cmake
neofetch neofetch
kleopatra kleopatra
flatpak flatpak
fuse
pfetch pfetch
icecat icecat
qutebrowser qutebrowser
;;mullvadbrowser
nftables nftables
git-lfs git-lfs
ghc-git-lfs ghc-git-lfs
@ -468,7 +328,6 @@ emacs-latex-preview-pane
openshot openshot
obs obs
go go
;ffmpeg-vvdec
lm-sensors lm-sensors
vlc vlc
virt-manager virt-manager
@ -476,16 +335,10 @@ emacs-latex-preview-pane
nsxiv nsxiv
git git
inxi inxi
tor
monero-gui monero-gui
; emacs-org-roam
torsocks
tor-client
privoxy privoxy
terminator
openvpn openvpn
kiwix-tools kiwix-tools
librewolf
pavucontrol pavucontrol
pavucontrol-qt pavucontrol-qt
emacs emacs
@ -494,6 +347,7 @@ emacs-latex-preview-pane
tcpdump tcpdump
nmap nmap
firejail firejail
radeontop
xf86-video-amdgpu xf86-video-amdgpu
asciinema asciinema
alsa-lib alsa-lib
@ -515,17 +369,10 @@ emacs-latex-preview-pane
xf86-input-libinput xf86-input-libinput
xf86-input-mouse xf86-input-mouse
xf86-input-synaptics xf86-input-synaptics
;;emacs-org-timeblock
xrandr xrandr
ungoogled-chromium
qbittorrent qbittorrent
macchanger macchanger
;ghc-ncurses
guile-ncurses guile-ncurses
;ncurses
;guile
;emacs-geiser
;emacs-geiser-guile
fontconfig fontconfig
picom picom
mpd mpd
@ -550,7 +397,6 @@ emacs-latex-preview-pane
nomacs nomacs
meson meson
ncurses ncurses
;;ueberzug++
;; lots of fonts from package fonts.scm ;; lots of fonts from package fonts.scm
font-adobe-source-code-pro font-adobe-source-han-sans font-adobe-source-code-pro font-adobe-source-han-sans
font-adobe-source-sans-pro font-adobe-source-serif-pro font-adobe-source-sans-pro font-adobe-source-serif-pro
@ -576,10 +422,8 @@ emacs-latex-preview-pane
ranger ranger
xmessage xmessage
xrdb xrdb
xmonad
sysbench sysbench
xmobar xmobar
ghc
ghc-xmonad-contrib ghc-xmonad-contrib
gcc gcc
gcc-toolchain gcc-toolchain
@ -588,53 +432,41 @@ emacs-latex-preview-pane
rofi rofi
emacs-emojify emacs-emojify
unicode-emoji unicode-emoji
;;rust-unic-emoji-char
r-emojifont r-emojifont
font-google-noto-emoji font-google-noto-emoji
;; font-apple-color-emoji
emacs-company-emoji emacs-company-emoji
font-openmoji font-openmoji
vim-characterize vim-characterize
extractpdfmark poppler-qt5
poppler-qt5 poppler
poppler lz4
python-pdfminer-six zstd
lz4
zstd
rust rust
blueman blueman
bluez bluez
bluez-alsa bluez-alsa
;goldendict-ng
;suckless-dictpopup
;;rust-version-check
;;rust-deunicode
nheko nheko
lf lf
fuse
;; lots of fonts from package xorg.scm ;; lots of fonts from package xorg.scm
font-adobe100dpi font-adobe75dpi font-cronyx-cyrillic font-dec-misc font-adobe100dpi font-adobe75dpi font-cronyx-cyrillic font-dec-misc
font-isas-misc font-micro-misc font-misc-cyrillic font-misc-ethiopic font-isas-misc font-micro-misc font-misc-cyrillic font-misc-ethiopic
font-misc-misc font-mutt-misc font-schumacher-misc font-misc-misc font-mutt-misc font-schumacher-misc
font-screen-cyrillic font-sony-misc font-sun-misc font-util font-screen-cyrillic font-sony-misc font-sun-misc font-util
font-winitzki-cyrillic font-xfree86-type1 font-winitzki-cyrillic font-xfree86-type1
youtube-dl (specification->package "xmonad")
noisetorch
linux-firmware
nix
dmidecode
(specification->package "i3-wm") (specification->package "i3-wm")
(specification->package "dmidecode") (specification->package "dmidecode")
(specification->package "i3status") (specification->package "i3status")
(specification->package "dmenu") (specification->package "dmenu")
(specification->package "st") (specification->package "kitty")
(specification->package "mullvad-vpn-desktop")
(specification->package "tor")
(specification->package "emacs") (specification->package "emacs")
(specification->package "jami") (specification->package "jami")
(specification->package "steam") (specification->package "steam")
(specification->package "protonup-ng")
(specification->package "texstudio") (specification->package "texstudio")
(specification->package "libreoffice")
(specification->package "qemu") (specification->package "qemu")
(specification->package "telegram-desktop")
(specification->package "alacritty") (specification->package "alacritty")
(specification->package "xkill") (specification->package "xkill")
(specification->package "guile") (specification->package "guile")
@ -643,6 +475,8 @@ zstd
(specification->package "fcitx5-qt") (specification->package "fcitx5-qt")
(specification->package "fcitx5-gtk") (specification->package "fcitx5-gtk")
(specification->package "torbrowser") (specification->package "torbrowser")
(specification->package "i2pd")
(specification->package "tor")
(specification->package "unrar") (specification->package "unrar")
(specification->package "nicotine+") (specification->package "nicotine+")
(specification->package "icecat") (specification->package "icecat")
@ -652,7 +486,7 @@ zstd
(specification->package "make") (specification->package "make")
(specification->package "element-desktop") (specification->package "element-desktop")
(specification->package "font-apple-color-emoji") (specification->package "font-apple-color-emoji")
(specification->package "xmonad") (specification->package "zen-browser-bin-generic")
(specification->package "xmobar") (specification->package "xmobar")
(specification->package "xmodmap") (specification->package "xmodmap")
(specification->package "rofi") (specification->package "rofi")
@ -660,6 +494,7 @@ zstd
(specification->package "bluez") (specification->package "bluez")
(specification->package "fuse") (specification->package "fuse")
(specification->package "blueman") (specification->package "blueman")
(specification->package "cmus")
(specification->package "navidrome-bin")) (specification->package "navidrome-bin"))
%base-packages)) %base-packages))
@ -678,31 +513,7 @@ zstd
(bluetooth-configuration (bluetooth-configuration
(auto-enable? #t))) (auto-enable? #t)))
(udev-rules-service 'fido2 libfido2 #:groups '("plugdev")) (udev-rules-service 'fido2 libfido2 #:groups '("plugdev"))
(service nftables-service-type)
(service iptables-service-type
(iptables-configuration
(ipv4-rules (plain-file "iptables.rules" "*filter
:INPUT DROP
:FORWARD DROP
:OUTPUT ACCEPT
-A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p tcp -s 127.0.0.1 -j ACCEPT
-A INPUT -p tcp --dport 631 -j REJECT --reject-with icmp-port-unreachable
-A INPUT -p udp --dport 631 -j REJECT --reject-with icmp-port-unreachable
-A INPUT -j REJECT --reject-with icmp-port-unreachable
-A FORWARD -m state --state INVALID -j DROP
-A OUTPUT -o lo -j ACCEPT
-A OUTPUT -o tun+ -j ACCEPT
-A OUTPUT -m owner --gid-owner openvpn -j ACCEPT
-A OUTPUT -m state --state INVALID -j DROP
-t nat -A OUTPUT -p tcp -m owner --uid-owner berkeley -m tcp -j REDIRECT --to-ports 9040
-t nat -A OUTPUT -p udp -m owner --uid-owner berkeley -m udp --dport 53 -j REDIRECT --to-ports 53
-t filter -A OUTPUT -p tcp -m owner --uid-owner berkeley -m tcp --dport 9040 -j ACCEPT
-t filter -A OUTPUT -p udp -m owner --uid-owner berkeley -m udp --dport 53 -j ACCEPT
-t filter -A OUTPUT -m owner --uid-owner berkeley -j DROP
COMMIT
"))))
(simple-service 'blueman dbus-root-service-type (list blueman)) (simple-service 'blueman dbus-root-service-type (list blueman))
(simple-service 'my-jp-ime-env session-environment-service-type (simple-service 'my-jp-ime-env session-environment-service-type
@ -713,22 +524,24 @@ COMMIT
("XMODIFIERS=@im=" . "fcitx") ("XMODIFIERS=@im=" . "fcitx")
("INPUT_METHOD" . "fcitx") ("INPUT_METHOD" . "fcitx")
("XIM_PROGRAM" . "fcitx") ("XIM_PROGRAM" . "fcitx")
("GLFW_IM_MODULE" . "ibus"))) ("GLFW_IM_MODULE" . "ibus")
;; this makes qt programs looks sharper
("QML_DISABLE_DISTANCEFIELD" . "1")
("QT_QUICK_CONTROLS_STYLE" . "Fusion")
("QT_ENABLE_HIGHDPI_SCALING" . "0")
("R600_TEX_ANISO" . "16")
))
(service mullvad-daemon-service-type)
(service docker-service-type) (service docker-service-type)
(service containerd-service-type) (service containerd-service-type)
(service nix-service-type) (service nix-service-type)
(service tor-service-type (service tor-service-type
(tor-configuration (tor-configuration
(config-file (plain-file "torrc" (config-file (plain-file "tor.conf" "
"HttpTunnelPort 9050\n\ Log stdout
VirtualAddrNetwork 10.192.0.0/10\n\ DataDirectory /var/lib/tor
AutomapHostsOnResolve 1\n\ SOCKSPort 9050
TransPort 9040\n\ ControlPort 9051"))))
DNSPort 53\n\
SOCKSPort 0\n\
ORPort 443\n\
BridgeRelay 1\n\
ExitRelay 0"))))
(service libvirt-service-type (service libvirt-service-type
(libvirt-configuration (libvirt-configuration
(unix-sock-group "libvirt") (unix-sock-group "libvirt")
@ -762,7 +575,7 @@ COMMIT
(targets (list "/dev/nvme0n1")) (targets (list "/dev/nvme0n1"))
(theme (grub-theme (theme (grub-theme
(resolution '(1920 . 1080)) (resolution '(1920 . 1080))
(image (local-file "/var/cache/wallpaper.png")))))) (image (local-file "/home/berkeley/grub.png"))))))
(swap-devices (list (swap-space (swap-devices (list (swap-space
(priority 50) (priority 50)
(target (uuid (target (uuid
@ -788,7 +601,7 @@ COMMIT
(type "ext4")) (type "ext4"))
(file-system (file-system
(mount-point "/var/cache") (mount-point "/steam/")
(device (uuid "9d009d01-d635-4d56-987a-ffc2699da9fb" 'ext4)) (device (uuid "9d009d01-d635-4d56-987a-ffc2699da9fb" 'ext4))
(type "ext4")) (type "ext4"))