sync

Arcanyx-org · Jan 6, 2025 · be247f7 · be247f7
1 parent 268e606
commit be247f7
Show file tree

Hide file tree

Showing 39 changed files with 952 additions and 629 deletions.
diff --git a/flake.lock b/flake.lock
diff --git a/src/nixos/machines/flexy/config/security.nix b/src/nixos/machines/flexy/config/security.nix
@@ -0,0 +1,44 @@
+{ lib, config, pkgs, ... }:
+
+# Security management of FLEXY
+
+# SECURITY(Krey): For some reason it's not pulling the latest microcode during testing, investigate this more once it has NiXium deployed on it
+#   * CPU microcode is the latest known available version:  NO  (latest version is 0x860010c dated 2023/10/07 according to builtin firmwares DB v296+i20240514+988c)
+
+let
+	inherit (lib) mkMerge mkForce mkDefault mkIf;
+in {
+	config = mkMerge [
+		{
+			security.allowSimultaneousMultithreading = mkForce false; # Disable Simultaneous Multi-Threading as on this system it exposes unwanted attack vectors
+
+			# NOTE(Krey): Breaks USB
+			security.lockKernelModules = false;
+
+			# NOTE(Krey): Breaks hibernation
+			security.protectKernelImage = false;
+
+			# SECURITY(Krey): Some packages run in electron (vscodium) which requires this, in process of managing it
+			security.unprivilegedUsernsClone = true;
+
+			# Kernel
+				boot.kernelPackages = mkForce pkgs.linuxPackages_hardened; # Always use the Hardened Kernel
+
+				boot.kernelParams = mkForce [
+					"tsx=auto" # Let Linux Developers determine if the mitigation is needed
+					"tsx_async_abort=full,nosmt" # Enforce Full Mitigation if the management is needed
+					"mds=off" # Paranoid enforcement, shouldn't be needed..
+				];
+
+			# Necessary Evil to keep the CPU microcode up-to-date, such is all i686 and amd64 architecture systems
+			hardware.enableRedistributableFirmware = true;
+			hardware.cpu.amd.updateMicrocode = mkDefault config.hardware.enableRedistributableFirmware;
+		}
+
+		# # Enforce to use the Tor Proxy
+		# (mkIf config.services.tor.enable {
+		# 	networking.proxy.default = mkDefault "socks5://127.0.0.1:9050";
+		# 	networking.proxy.noProxy = mkDefault "127.0.0.1,localhost";
+		# })
+	];
+}
diff --git a/src/nixos/machines/morph/default.nix b/src/nixos/machines/morph/default.nix
@@ -14,7 +14,8 @@
 			# self.nixosModules.machine-tupac
 
 			# Users
-			# self.nixosModules.users-kreyren
+			self.nixosModules.users-kreyren
+			self.homeManagerModules."kreyren@morph"
 
 			# Files
 			./config/bootloader.nix

diff --git a/src/nixos/machines/morph/services/sunshine/default.nix b/src/nixos/machines/morph/services/sunshine/default.nix
@@ -4,104 +4,105 @@
 
 let
 	inherit (lib) mkIf;
+
+	akl-scripts = pkgs.kodi.packages.buildKodiAddon rec {
+		pname = "akl.scripts";
+		namespace = "script.module.akl";
+		version = "1.1.2";
+
+		src = pkgs.fetchzip {
+			url = "https://github.com/chrisism/repository.chrisism.dev/raw/refs/heads/main/matrix/script.module.akl/script.module.akl-1.1.2.zip";
+			hash = "sha256-lS04rfGBgr+42JBkw1TKIfwI5x1MKHA2/9/r42yqSwY=";
+		};
+
+		propagatedBuildInputs = with pkgs.kodi.packages; [
+			six
+			xbmcswift2
+			routing
+			requests
+		];
+
+		passthru = {
+			pythonPath = "lib";
+		};
+
+		meta = with lib; {
+			homepage = "https://github.com/chrisism/repository.chrisism.dev/blob/main/matrix/plugin.program.akl";
+			description = "Advanced Kodi Launcher";
+			# maintainers = teams.kodi.members;
+		};
+	};
+
+	# FIXME(Krey): Requires resources/scheme.sql installed in $USER/.kodi/addons/plugins.program.aki/resources/scheme.sql otherwise the addon will fail to deploy
+	akl = pkgs.kodi.packages.buildKodiAddon rec {
+		pname = "akl";
+		namespace = "plugin.program.akl";
+		version = "1.5.1";
+
+		src = pkgs.fetchzip {
+			url = "https://github.com/chrisism/repository.chrisism.dev/raw/refs/heads/main/matrix/plugin.program.akl/plugin.program.akl-1.5.1.zip";
+			hash = "sha256-RK+DHt5LxGMPHV3i3HEZ8PSe7ukIa3wlN2yzuZnj/tc=";
+		};
+
+		propagatedBuildInputs = with pkgs.kodi.packages; [
+			six
+			xbmcswift2
+			routing
+			akl-scripts
+		];
+
+		passthru = {
+			pythonPath = "resources/lib";
+		};
+
+		meta = with lib; {
+			homepage = "https://github.com/chrisism/repository.chrisism.dev/blob/main/matrix/plugin.program.akl";
+			description = "Advanced Kodi Launcher";
+			# maintainers = teams.kodi.members;
+		};
+	};
 in mkIf config.services.sunshine.enable {
 	services.sunshine.capSysAdmin = true; # Assign CAP_SYS_ADMIN for DRM/KMS screen capture
 
 	services.sunshine.openFirewall = true; # Open Firewall for local network
 
-	# Create the session
-		# Set Up The Sunshine User
-		users.users.sunshine = {
-			description = "Sunshine User";
-			# uid = 1000; # Do we care for declarative UID for this user?
-			# password = "000000";
-			isNormalUser = true;
-			createHome = true;
-			extraGroups = [
-				"video" # Allow access to the video devices e.g. GPU
-			];
-			packages = [
-				self.inputs.aagl.packages.x86_64-linux.anime-game-launcher
-			];
-		};
-		# Enable Auto-Login
-		services.displayManager.autoLogin.enable = true;
-		services.displayManager.autoLogin.user = "sunshine";
+	# Enable Auto-Login
+	# FIXME-SECURITY(Krey): Require that the user is logged-in and out remotely
+	services.displayManager.autoLogin.enable = true;
+	services.displayManager.autoLogin.user = "kreyren";
 
 	# Desktop Environment - Kodi
+		# FIXME(Krey): Struggling to figure out a way to add and play linux games through kodi rn
+		# services.xserver.enable = true;
+		# services.xserver.desktopManager.kodi.enable = true;
+		# services.xserver.displayManager.lightdm.greeter.enable = false;
+		# 	# System-wide plugins - https://github.com/NixOS/nixpkgs/tree/nixos-24.05/pkgs/applications/video/kodi/addons
+		# 	services.xserver.desktopManager.kodi.package = pkgs.kodi.withPackages (p: with p; [
+		# 		# osmc-skin
+		# 		# sponsorblock
+		# 		# youtube
+		# 		# akl
+		# 		# akl-scripts
+		# 	]);
+
+	# Desktop Environment - GNOME (Backup UI)
 	services.xserver.enable = true;
-	services.xserver.desktopManager.kodi.enable = true;
-	services.xserver.displayManager.lightdm.greeter.enable = false;
-		# Plugins
-		services.xserver.desktopManager.kodi.package = pkgs.kodi.withPackages (p: with p; [
-			# osmc-skin
-			# sponsorblock
-			# youtube
-			(pkgs.kodi.packages.buildKodiAddon rec {
-				pname = "akl";
-				namespace = "plugin.program.akl";
-				version = "1.5.1";
-
-				src = pkgs.fetchzip {
-					url = "https://github.com/chrisism/repository.chrisism.dev/raw/refs/heads/main/matrix/plugin.program.akl/plugin.program.akl-1.5.1.zip";
-					hash = "sha256-RK+DHt5LxGMPHV3i3HEZ8PSe7ukIa3wlN2yzuZnj/tc=";
-				};
-
-				propagatedBuildInputs = with pkgs.kodi.packages; [
-					xbmcswift2
-					routing
-					# (pkgs.kodi.packages.buildKodiAddon rec {
-					# 	pname = "akl.scripts";
-					# 	namespace = "script.module.akl";
-					# 	version = "1.1.2";
-
-					# 	src = pkgs.fetchzip {
-					# 		url = "https://github.com/chrisism/repository.chrisism.dev/raw/refs/heads/main/matrix/script.module.akl/script.module.akl-1.1.2.zip";
-					# 		hash = "sha256-lS04rfGBgr+42JBkw1TKIfwI5x1MKHA2/9/r42yqSwY=";
-					# 	};
-
-					# 	propagatedBuildInputs = with pkgs.kodi.packages; [
-					# 		xbmcswift2
-					# 		routing
-					# 		requests
-					# 	];
-
-					# 	passthru = {
-					# 		pythonPath = "lib";
-					# 	};
-
-					# 	meta = with lib; {
-					# 		homepage = "https://github.com/chrisism/repository.chrisism.dev/blob/main/matrix/plugin.program.akl";
-					# 		description = "Advanced Kodi Launcher";
-					# 		# maintainers = teams.kodi.members;
-					# 	};
-					# })
-				];
-
-				passthru = {
-					pythonPath = "resources/lib";
-				};
-
-				meta = with lib; {
-					homepage = "https://github.com/chrisism/repository.chrisism.dev/blob/main/matrix/plugin.program.akl";
-					description = "Advanced Kodi Launcher";
-					# maintainers = teams.kodi.members;
-				};
-			})
-		]);
+	services.xserver.displayManager.gdm.enable = true;
+	services.xserver.desktopManager.gnome.enable = true;
+		programs.dconf.enable = true; # Needed for home-manager to not fail deployment (https://github.com/nix-community/home-manager/issues/3113)
 
 	# Tor Access to The Web UI
 	services.tor.relay.onionServices."sunshine".map = mkIf config.services.tor.enable [{ port = 80; target = { port = 47990; }; }]; # Provide the admin panel over onions to make it accessible
 
-	# Declare the expected applications
+	# Broadcasted Applications
 	services.sunshine.applications = {
 		apps = [
 			{
 				name = "Desktop";
 				image-path =  "desktop.png";
 			}
 			{
-				name = "Genshin Impact";
+				name = "That Anime Game";
 				image-path = "${./images/sunshine-aagl-cover.png}";
 				# FIXME-QA(Krey): This doesn't work to open the anime-game
 				detached = [ "${self.inputs.aagl.packages.x86_64-linux.anime-game-launcher}/bin/anime-game-launcher" ];

diff --git a/src/nixos/machines/mracek/secrets/mracek-builder-ssh-ed25519-private.age b/src/nixos/machines/mracek/secrets/mracek-builder-ssh-ed25519-private.age
@@ -1,21 +1,20 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IHdlK3M2dyBFV0lP
-Tlo0M0dkcExHemxDbHYyZ3ZxczhndEx1L0VUWVlwbFdpQ2RwQmprCkR6K0tjSjY1
-R1owdVNPZGhCVHJ5bC96bVNVY1g0b1pqb2xOblhnaUJnSW8KLT4gc3NoLWVkMjU1
-MTkgU0t3L3p3IGJheTN2SXcybUgzZzRtWndXcWJOTjc5ck5KWGdCcThPYnFPMXVu
-a280QlUKSHozZjFvTk5IV2NnaDJ3cUh3QkpnK2tmMzhWWHl1SEpEckdmYjQxZzZN
-WQotPiBYIzMiLWdyZWFzZSBdIC41eCsmXkooCkhYdDhIRlpqZnZjb0FZai9HWEJN
-aDZpeUcxUjZ1WEJxZENqWjdmb1N6S3Z6ZHU3SnlybzczcWxIMnU5RlFrZ2MKNzFp
-MkpyblhqUFhCcExMbDhKUjBxdjBwRHp5dXlTNUo1dWJ2QmFjSlgwODlCRUVERHI3
-amcyeVBOL2J5VHcKLS0tIHgvMDJhSE9iYmxyMDF3RmVQVWNuYWQwNGYvTzlkK1JT
-cGxqdVpUTnFyQW8KiTEWBP9QE6aD0tSNdfXyvmkKk08w7JgGZOt5re11AExJa3zd
-b7HaaQe7I5zPCw94Es5IZMTYzVibQmRmwItxULEaS0rKDJrD/Ujwv0omg+XV3Ngg
-ppXKLHWCK1Tqw0xpVZ0yOZCH/jU62mGLQHjFJzFlxhsZPGtHJxgJqc+QCgr1zDDK
-BySk53T63VoI746yi3luVHTI0lSIxgjCq+6Ed5n7i4jeaMH575WSrnMmxJu+0qN3
-e+2gNk1N/crCwsqyWjRgycdrDujr2SW4mar+N7dcKflYUMe5vQM64ZMVP/rnn3yt
-up/+qX3IDsL+54Hc10p7y4jJgWo8n45lijzOtgLvD/r0mSWRoHVh2vPublr6ebnI
-9CVBkYIcfti5bz4MbDbG6ErX7E0mrBldYyR726mQRqtaJJaIaAGbZ8Wv3mbDb1dr
-w6pV6MSj6KKaoEBz6bK/Pr/zvF5Q/K3LvW3m+eegIbsI2f/6QILmONVBmbtsTNZe
-BYk+m0HJoqm+OPJTyXTgzoW1U9jLAMh+ZPhrhpBQ86HbNgAVH5v/72hSSmi1gpBi
-pm9b0t9B8u2xNYaLnfwPmfYpqgNP7BE=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 -----END AGE ENCRYPTED FILE-----
diff --git a/src/nixos/machines/mracek/secrets/mracek-disks-password.age b/src/nixos/machines/mracek/secrets/mracek-disks-password.age
@@ -1,13 +1,12 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IHdlK3M2dyA3YzNQ
-NUhTR1piaG43VUlZZ25iTHZ1UHNIVDBCcjFWMVdyalBUek1vRHpvClN4a0RGMkFE
-QjRJaHl2YWtCZC9oWXlnTzVZempkU3dOM2o2Zkt4Uno3K0UKLT4gc3NoLWVkMjU1
-MTkgU0t3L3p3IGRZZml4eWgwdjQ3ZnpuVzN4RWFJclNtM1IxSURxN0c5RW13a0NT
-R0MvbnMKVDJtUi83QUxXaURvVzZoalFyY1Z1RzJVSmszN0hKNExUZGxrdjI3d0JY
-cwotPiAwaE4tZ3JlYXNlIFp9UTAKNForU0cwZ2NhOUVkazMrT3J2THB1TEhjODNC
-cnlWUXlTWUtIcWhXUTd3Z0hsb2k2ZmZ2MjU5Q1VUV2RBdjVTbApJZU8zMDhEVnpr
-L0RPdGg1ODlydy9HYzhNR05XYWFCVFJqMlYxTnF3K2lpbEVzNGtRTHArNzd6bENk
-ZWpVZUYrCmJBCi0tLSBSR1BPcUNqMzFzK002TlJCbUI4N3o4Z1BjclFGWTBLYnp4
-bDUxenE3aFVZCp9axWwR7NELN19dbL5hWMY5gZOQ6nM92bF7nM/gLfwbSTIwVKkE
-VA==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 -----END AGE ENCRYPTED FILE-----
diff --git a/src/nixos/machines/mracek/secrets/mracek-gitea-onion.age b/src/nixos/machines/mracek/secrets/mracek-gitea-onion.age
@@ -1,23 +1,26 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IHdlK3M2dyBjRWV6
-ZjgzQkQ5OWJCQkR4UEFDWHNsZ2pQZU5PVmZrUmZLZk5hc3N3WkFvCk94UXBVeXZu
-TGF0L24vb2lRcVMxOGMvWURYVFpMcTU1bEgzU2gxc0VtZDgKLT4gc3NoLWVkMjU1
-MTkgcm9BdXJnIDNXZTRlcGpNbUdodTZzeS8zeXVhNnRWbWh4bkxTaVpoOTN6Ylhr
-eEZxMWcKZTVEZldBSTFuS2xPNG40eUdMcHRGTzg3Y0JqR0grazNQakxoeHBvZ3Jl
-MAotPiBzc2gtZWQyNTUxOSByVzhDR2cgRlIxZ3FhcTRLZ3hNZ2tJWlFweGpzTm9m
-bjRxR1Y5Z0lsV0s3NjFBc2tHTQoyRGJEM0p1UTdzNlZQZ1FENUF2a09mMGhNVGxB
-QnBvQnVzWU53ZEh5N1FzCi0+IHNzaC1lZDI1NTE5IFNLdy96dyAyR0hBazFxWEMy
-aW5VaHZzRy9zVXp0UDA3M2ZuS01QVHJob093dCtHNUNvCjRTdmhMNjM3UkRLVFFI
-bHpWd0luOXFhOEVicjIxY25CWkFYay9PR1dBWTAKLT4gc3NoLWVkMjU1MTkgMUtj
-U2RBIGk3VENCWEZXQzBXNm1ERkV3RkFRUDQ4Z1VlZ2JOa1NnVWlwd3hLQkN1M2cK
-K1VSb2VRODZSNm5rQmNxYWE0dG5oWEhseUgybExUMVRNYjlwalk2eTg4cwotPiBz
-c2gtZWQyNTUxOSBDd1FJbncgbWFRSjJQajNzT09MalhjU3dIYWUyMWhWbkg2ZWlm
-ZTBGd2tJcnJlSFdodwplTXVab1U0S0JGWFdYVERCYmt3VDNPSkM0dzQ3enY4TGtU
-czRXQ1k1SWI0Ci0+IC8tZ3JlYXNlIEM0LkQpVCBaWlE7bFdLJCBrOHkkCnUxUG1i
-Y0J1MDlvSHJMVVJNYy9QazBNZXR2anZldVBRYVpnSmV5cU9OTkFZczRRCi0tLSBG
-M1pzUFdRQzhmQVlmdi8xdU9wVWZoVFpkYlBhbytNZjNjQ05tQVlYU29vCtmo7qee
-Q/gwkEUdmUeCKb8bvp0u2SfXcJKu4Mhuf2+Oac5BtyLS9/Ix1QMtZkwYzN6/qeQ6
-tV/FKg4DND0dgzDp9iaSe8pqod6WOQRsdg6anwmAn75fRb7NJbKGE1HoqYqp9YSY
-icvx+M/xmWcJP1XrsLtaBuBX+6ufgj9Df4JyPo2EyHdxx98QqP64Z5h9Ont6AmVY
-C1yVszR56IJVHZD3LXf3xg==
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IHdlK3M2dyBzZVdO
+MzBwdVJCVlYyVGdtUEg3dkZZT3FOMGV0NmFPUy9NYnZ1WjZCZkdjCms5dEVDK3hN
+dVJjblR3Sy9DS1RHWEJ1ZkRDc0hvWGlDVVllbUYwdzRuWGMKLT4gc3NoLWVkMjU1
+MTkgclc4Q0dnIFBueCtZak1Xd1Yxc2x2QnJqeUpWb2plZVVzaTQ0ZmwxL3JGU0Zy
+bzVlVmsKM3FMbC93WG94U1J2aUdna2xrU2NVcmJqc0V1UUdOckdhbmV3dlpDUWhz
+cwotPiBzc2gtZWQyNTUxOSBTS3cvencgN1cyUThNckZWRG5HTGpUZSszU3JSQ3NF
+bmNJOGxHbU94UmdKNEZWUkNUYwpEYThKWVNwa1BqV2Q2MmhTdFJZRDlkNmg2emlT
+VjFuNUVUUDFIOHJ2Wm93Ci0+IHNzaC1lZDI1NTE5IHBpSW9kQSA4bkZyYWxKckxP
+dFJBMlhvOEJDQkdKbDFxNjF1VDU5M05OamkvdFZWU0U4Ck9ycHZHUWxMUk5oK1kw
+YXp2WHpCRVgxNlJwbURhNzJYb0VxNllVV1FlNVUKLT4gc3NoLWVkMjU1MTkgMUtj
+U2RBIFNheUdMZFBhY01RRHJqNlA1MytDVnRlM1M0eUN0Z0JJdmM5eVZKYmZBMEEK
+TmZPWnR1T0U2ODF5bnZBS0M4S0lzbDUxMDN5NUtpNWtVbm4wOHcyWmhnOAotPiBz
+c2gtZWQyNTUxOSBCYTdxNncgOEFJZWdhZDdBejlQWkZrWUhIZElpUDY1L3B3eG5l
+dnRLd3BVdFRzTTZDMApDeW4yaFZyRUdianh4OTVPSHAzbFpMN2F2bTYvNXdtUC9L
+eXhFWjVOYTdzCi0+IHNzaC1lZDI1NTE5IEN3UUludyA0dDQ3NkluTFBIWGVGQjZ1
+TWkya21RZkJUY1MwZFJraUpxcmdvQTRHVnkwClF5NXNKQVA3Ujk1UkdYYXluQWtw
+bDlhNWxCN045ZTFSb2l3S2Q5MldnV2MKLT4gTzotZ3JlYXNlICJ5QCBgeSA4ZDFT
+SFIgeCZhcXtgCmlQaGZTV2NWWFY4SnlBODh2c1RxVkZBYU90U2tBdmhkeVozVWNE
+WHdOQkhnS3VFTXRBTnBYVUsrbmo0cVNEcnkKYzAyaW83YUFRdnA1V2xxRTFhRjFt
+YUtyL2RGcXU5NlhXT2ZPCi0tLSBreEpWSVVyVGVrbTQ1ZmhLbk5BaWdSY2RpZjJv
+ZU90Z2RScDlRZ21zdGw0CqhBPlG7uL7FKG+58dhHqO7Xaw1Rbcdq109d1Dsfp3wS
+BjKGMM+7xCLOp1miC1MmQbjmM7UPNLZMisPRW0e4amS1e0DkGfcx6aOabT6o8OZS
+Z4HeR5quJ8EATi4wkUGx/SodyLAtILF4cqlvDjvrU+qVw9vlTpyxLMtfhRtBZ1od
+kZOQBic0rkfCZTskKxSn2Aog2B1Lr3zCoDDUWJQX2eiXwYsdjQ==
 -----END AGE ENCRYPTED FILE-----