Merge branch 'main' of codeberg.org:muon/home

hosts/muon/configuration.nix

@@ -38,6 +38,7 @@ in {
   mods.desktop.wayland.enable = false;
   mods.desktop.gaming.enable = true;
   mods.boot.enable = true;
+  mods.clamav.enable = true;
 
   mods.theme.enable = true;
   mods.theme.scheme = "woodland";

hosts/muop/configuration.nix

@@ -1,12 +1,27 @@
 { config, lib, pkgs, inputs, system, ... }:
-let cfg = config.mods;
+let
+  cfg = config.mods;
 
+  keys = [
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKEio+Y5wBVD1wILaH2R3wV10FvVjiqy/4gGBWHOITTB muon@muon"
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKevYmkH7xvYoquBjnYZ7PJiVqf+GOh9fxAJBN6wZGBB gin4@hi.is"
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILmAOd9VbhyJeibt6Vrb101MNTk5W8+rh94Djv/C+pyu muon@muho"
+  ];
 in {
+  # Enable the OpenSSH daemon.
+  services.openssh.enable = true;
+  users.users.muon.openssh.authorizedKeys.keys = keys;
+  users.users.root.openssh.authorizedKeys.keys = keys;
+
   # Hardware
   imports = [ ./hardware-configuration.nix ];
 
-  environment.systemPackages = with inputs.nix-alien.packages.${system};
+  environment.systemPackages = with inputs.nix-alien.packages.${system}; [
-    [ nix-alien ];
+    nix-alien
+    pkgs.rustdesk-flutter
+    pkgs.motion
+    pkgs.inotify-tools
+  ];
 
   # System
   mods.user.name = "muon";

hosts/muop/hardware-configuration.nix

@@ -9,7 +9,7 @@
   boot.initrd.availableKernelModules =
     [ "xhci_pci" "ahci" "usbhid" "usb_storage" "sd_mod" "rtsx_pci_sdmmc" ];
   boot.initrd.kernelModules = [ ];
-  boot.kernelModules = [ ];
+  boot.kernelModules = [ "v4l2loopback" ];
   boot.extraModulePackages = [ ];
   boot.supportedFilesystems = [ "ntfs" "btrfs" ];
 

modules/nixos/default.nix

@@ -1,4 +1,8 @@
-{ pkgs, lib, ... }: {
+{
+  pkgs,
+  lib,
+  ...
+}: {
   imports = [
     ./core
     ./system
@@ -6,6 +10,7 @@
     ./theme
     ./server
     ./sops
+    ./security
 
     ./impermanence.nix
 

modules/nixos/security/clamav.nix

@@ -0,0 +1,18 @@
+{
+  pkgs,
+  lib,
+  config,
+  ...
+}:
+with lib; {
+  options.mods.clamav.enable = mkEnableOption "enables clamav";
+
+  config = mkIf config.mods.clamav.enable {
+    services.clamav = {
+      scanner.enable = true;
+      updater.enable = true;
+      fangfrisch.enable = true;
+      daemon.enable = true;
+    };
+  };
+}

modules/nixos/security/default.nix

@@ -0,0 +1,9 @@
+{
+  pkgs,
+  lib,
+  ...
+}: {
+  imports = [
+    ./clamav.nix
+  ];
+}