lolcathost specific changes

homes/modules/hypr/hyprlock.nix

@@ -8,7 +8,7 @@
     settings = {
       background = {
         monitor = "";
-        path = "$HOME/downloads/wallpaper/kill-my-first/astronaut-pink-blue.png"; # only png supported for now
+        path = "$HOME/downloads/wallpaper/kill-my-firstborn/astronaut-pink-blue.png"; # only png supported for now
         # color = $color1
 
         # all these options are taken from hyprland, see https://wiki.hyprland.org/Configuring/Variables/#blur for explanations
@@ -81,7 +81,7 @@
           # Degrees
           monitor = "";
           # get temperature in Brisbane
-          text = ''cmd[update:18000000] echo "<b>Feels like<big> $(curl -s 'wttr.in/bne?format=%t' | tr -d '+') </big></b>"'';
+          text = ''cmd[update:18000000] echo "<b>Feels like $(curl -s 'wttr.in/bne?format=%t' | tr -d '+')</b>"'';
           color = "rgb(255, 255, 255, 1)";
           font_size = 18;
           font_family = "Geist Mono 10";
@@ -103,11 +103,11 @@
         dots_rouding = -1;
 
         rounding = 22;
-        outer_color = "rgb(255, 0, 0, 1)";
-        inner_color = "rgb(0, 255, 0, 1)";
-        font_color = "rgb(0, 0, 255, 1)";
+        outer_color = "rgb(0, 0, 0, 0)";
+        inner_color = "rgb(100, 114, 125, 0.1)";
+        font_color = "rgb(200, 200, 200)";
         fade_on_empty = true;
-        placeholder_text = "!!Super Secret!!"; # Text rendered in the input box when it's empty.
+        placeholder_text = "<i>Password...</i>"; # Text rendered in the input box when it's empty.
 
         position = "0, 120";
         halign = "center";

homes/modules/rio.nix

@@ -4,7 +4,6 @@
   ...
 }: {
   # The terminal I use
-  # TODO: this is dependent on nvim being installed
   # TODO: make this into a module with a configurable editor option
   programs.rio = {
     enable = true;
@@ -18,6 +17,11 @@
       padding-x = 10;
       padding-y = [15 10]; # top, left
 
+      window = {
+        width = 600;
+        height = 400;
+      };
+
       # lines = (accumulated scroll * multiplier / divider)
       scroll = {
         multiplier = 3.0;
@@ -60,7 +64,7 @@
       };
 
       renderer = {
-        performance = "High";
+        performance = "Low"; # High: for my PC, Low: for integrated GPUs
         backend = "Automatic"; # Vulkan
       };
     };

homes/modules/server/fail2ban.nix

@@ -0,0 +1,17 @@
+{...}: {
+  # simple fail2ban config (not production ready or anything though)
+  # refer to: https://nixos.wiki/wiki/Fail2Ban
+  services.fail2ban = {
+    enable = true;
+
+    maxretry = 5;
+    bantime = "10m"; # 10 minute ban
+    bantime-increment = {
+      enable = true;
+      formula = "ban.Time * math.exp(float(ban.Count+1)*banFactor)/math.exp(1*banFactor)";
+      multipliers = "1 2 4 8 16 32 64";
+      maxtime = "168h"; # dont ban for more than 1 week
+      overalljails = true;
+    };
+  };
+}

homes/modules/server/nginx.nix

@@ -0,0 +1,35 @@
+{...}: {
+  services = {
+    # use nginx as the reverse proxy
+    # (also will use certbot and Let's Encrypt)
+    # refer to: https://nixos.wiki/wiki/Nginx
+    nginx = {
+      enable = true;
+
+      recommendedProxySettings = true;
+      recommendedTlsSettings = true;
+      recommendedGzipSettings = true;
+      recommendedOptimisation = true;
+
+      # https://imbored.dev
+      virtualHosts = {
+        "imbored.dev" = {
+          forceSSL = true;
+          enableACME = true;
+          # config reverse proxy paths
+          locations = {
+            "/" = {
+              # TODO
+              proxyPass = "http://127.0.0.1:12345";
+            };
+          };
+        };
+      };
+    };
+  };
+
+  security.acme = {
+    acceptTerms = true;
+    defaults.email = "eclarkboman@gmail.com";
+  };
+}

homes/modules/server/ssh.nix

@@ -0,0 +1,13 @@
+{...}: {
+  services.openssh = {
+    enable = true;
+    ports = [22];
+    settings = {
+      PasswordAuthentication = true;
+      PermitRootLogin = "no";
+      AllowUsers = null; # allow all users by default
+      UseDns = true;
+      X11Forwarding = false;
+    };
+  };
+}