feat: add ollama and nftables

This commit is contained in:
Yadunand Prem 2025-08-08 15:32:51 +08:00
parent eda9a84cb7
commit 085bdaf84e
Signed by: yadunut
SSH Key Fingerprint: SHA256:mOIk45aRevEBf+VbljXnmFlCYEUmp4cFprML5FtFAHo
3 changed files with 58 additions and 29 deletions

View File

@ -8,11 +8,11 @@
"systems": "systems" "systems": "systems"
}, },
"locked": { "locked": {
"lastModified": 1750173260, "lastModified": 1754433428,
"narHash": "sha256-9P1FziAwl5+3edkfFcr5HeGtQUtrSdk/MksX39GieoA=", "narHash": "sha256-NA/FT2hVhKDftbHSwVnoRTFhes62+7dxZbxj5Gxvghs=",
"owner": "ryantm", "owner": "ryantm",
"repo": "agenix", "repo": "agenix",
"rev": "531beac616433bac6f9e2a19feb8e99a22a66baf", "rev": "9edb1787864c4f59ae5074ad498b6272b3ec308d",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -71,11 +71,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1753121425, "lastModified": 1754487366,
"narHash": "sha256-TVcTNvOeWWk1DXljFxVRp+E0tzG1LhrVjOGGoMHuXio=", "narHash": "sha256-pHYj8gUBapuUzKV/kN/tR3Zvqc7o6gdFB9XKXIp1SQ8=",
"owner": "hercules-ci", "owner": "hercules-ci",
"repo": "flake-parts", "repo": "flake-parts",
"rev": "644e0fc48951a860279da645ba77fe4a6e814c5e", "rev": "af66ad14b28a127c5c0f3bbb298218fc63528a18",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -166,11 +166,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1754085240, "lastModified": 1754613544,
"narHash": "sha256-kVHCrTWEe8B1thAhFag1bk4QPY0ZP45V9vPbrwPHoNo=", "narHash": "sha256-ueR1mGX4I4DWfDRRxxMphbKDNisDeMPMusN72VV1+cc=",
"owner": "nix-community", "owner": "nix-community",
"repo": "home-manager", "repo": "home-manager",
"rev": "e102920c1becb114645c6f92fe14edc0b05cc229", "rev": "cc2fa2331aebf9661d22bb507d362b39852ac73f",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -209,27 +209,27 @@
}, },
"nixpkgs": { "nixpkgs": {
"locked": { "locked": {
"lastModified": 1745391562, "lastModified": 1754028485,
"narHash": "sha256-sPwcCYuiEopaafePqlG826tBhctuJsLx/mhKKM5Fmjo=", "narHash": "sha256-IiiXB3BDTi6UqzAZcf2S797hWEPCRZOwyNThJIYhUfk=",
"owner": "NixOS", "owner": "NixOS",
"repo": "nixpkgs", "repo": "nixpkgs",
"rev": "8a2f738d9d1f1d986b5a4cd2fd2061a7127237d7", "rev": "59e69648d345d6e8fef86158c555730fa12af9de",
"type": "github" "type": "github"
}, },
"original": { "original": {
"owner": "NixOS", "owner": "NixOS",
"ref": "nixos-unstable", "ref": "nixos-25.05",
"repo": "nixpkgs", "repo": "nixpkgs",
"type": "github" "type": "github"
} }
}, },
"nixpkgs_2": { "nixpkgs_2": {
"locked": { "locked": {
"lastModified": 1753939845, "lastModified": 1754498491,
"narHash": "sha256-K2ViRJfdVGE8tpJejs8Qpvvejks1+A4GQej/lBk5y7I=", "narHash": "sha256-erbiH2agUTD0Z30xcVSFcDHzkRvkRXOQ3lb887bcVrs=",
"owner": "nixos", "owner": "nixos",
"repo": "nixpkgs", "repo": "nixpkgs",
"rev": "94def634a20494ee057c76998843c015909d6311", "rev": "c2ae88e026f9525daf89587f3cbee584b92b6134",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -265,11 +265,11 @@
"systems": "systems_4" "systems": "systems_4"
}, },
"locked": { "locked": {
"lastModified": 1753977315, "lastModified": 1754572513,
"narHash": "sha256-AM3CZh+Emk/cr5Gf6RUf2xzkWdRB+yewP1YWoRxUbYQ=", "narHash": "sha256-BN2a2Lft9BwdDPBplaWe8kYW2wLaaVLDwcWwMJeBw3I=",
"owner": "nix-community", "owner": "nix-community",
"repo": "nixvim", "repo": "nixvim",
"rev": "a16c89c175277309fd3dd065fb5bc4eab450ae07", "rev": "1db179502524f21fe4e3175e3348202ed0ef253f",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -288,11 +288,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1753450833, "lastModified": 1754301638,
"narHash": "sha256-Pmpke0JtLRzgdlwDC5a+aiLVZ11JPUO5Bcqkj0nHE/k=", "narHash": "sha256-aRgzcPDd2axHFOuMlPLuzmDptUM2JU8mUL3jfgbBeyc=",
"owner": "NuschtOS", "owner": "NuschtOS",
"repo": "search", "repo": "search",
"rev": "40987cc1a24feba378438d691f87c52819f7bd75", "rev": "a60091045273484c040a91f5c229ba298f8ecc27",
"type": "github" "type": "github"
}, },
"original": { "original": {

View File

@ -18,6 +18,13 @@
enable = true; enable = true;
}; };
networking.nftables.enable = true;
networking.firewall = {
enable = true;
allowedTCPPorts = [ 22 ];
trustedInterfaces = [ "tailscale0" ];
};
services.openssh = { services.openssh = {
enable = true; enable = true;
settings.PasswordAuthentication = false; settings.PasswordAuthentication = false;
@ -28,12 +35,18 @@
}; };
programs.zsh.enable = true; programs.zsh.enable = true;
nix.settings={
trusted-users = [ "root" "yadunut" ]; nix = {
experimental-features = [ optimise = {
"nix-command" automatic = true;
"flakes" };
]; settings = {
trusted-users = [ "root" "yadunut" ];
experimental-features = [
"nix-command"
"flakes"
];
};
}; };
services.tailscale.enable = true; services.tailscale.enable = true;
@ -58,7 +71,16 @@
services.blueman.enable = true; services.blueman.enable = true;
security.rtkit.enable = true; security.rtkit.enable = true;
nixpkgs.config.allowUnfree = true; nixpkgs.config = {
allowUnfree = true;
rocmSupport = true;
};
services.ollama = {
enable = true;
host = "0.0.0.0";
port = 11434;
};
programs.hyprland = { programs.hyprland = {
enable = true; enable = true;
@ -78,6 +100,7 @@
hyprpolkitagent hyprpolkitagent
nixd nixd
brightnessctl brightnessctl
open-webui
]; ];
services.sunshine = { services.sunshine = {

View File

@ -15,6 +15,12 @@
services.hyprpolkitagent.enable = true; services.hyprpolkitagent.enable = true;
services.cliphist.enable = true; services.cliphist.enable = true;
services.ollama = {
enable = true;
host = "0.0.0.0";
port = 11434;
};
imports = [ imports = [
(import ../modules/zsh.nix) (import ../modules/zsh.nix)
# (import ../modules/neovim.nix) # (import ../modules/neovim.nix)