Enabled `forceSSL` for the RustDesk nginx configuration to ensure secure connections. Replaced `proxyPass` with detailed `extraConfig` to include necessary headers and support for WebSocket connections.
Moved rustdesk-server settings from `default.nix` to a dedicated module `rustdesk.nix`. This improves configuration structure and ensures better modularity for maintainability.
Added `relayHosts` configuration to rustdesk-server to specify the relay host `mx.surfsite.org`. This ensures proper routing and connectivity for the RustDesk service.
- Enabled LLMNR to allow link-local name resolution.
- Enabled MulticastDNS to support service discovery and hostname resolution within local networks.
- Enabled LLMNR to allow link-local name resolution.
- Enabled MulticastDNS to support service discovery and hostname resolution within local networks.
- Enable systemd-resolved and configure DNSSEC with downgrade option.
- Add extra configuration to allow resolving unicast single-label names.
This improves DNS handling and ensures compatibility for SGX setup.
Set idle I/O and CPU scheduling policies for the Nix daemon to improve GUI responsiveness. Adjusted scheduling class, priority, and policy to optimize background tasks.
Added btop to the default package list in NixOS services. This change ensures btop is available by default for system monitoring and resource management. No impact on existing configurations is expected.
Introduces a new XKB configuration for typing the ellipsis symbol. Updates dconf settings and XDG config files to enable and map the custom "mod:ellipsis" option.
Previously, the `insecureSkipHostcheck` option was incorrectly placed under `settings.options`. This update moves it to the correct path under `settings.gui` to ensure proper configuration behavior.
Adjusts the `insecureSkipHostcheck` setting to align with the proper configuration structure. This resolves a misconfiguration issue in the SGX fileserver Nix file.
Added `insecureSkipHostcheck` option to Syncthing configuration to bypass host verification for the GUI. This can simplify local testing but may introduce security risks if used improperly.
Replaced `proxyWebsockets` with `recommendedProxySettings` for enhanced configurability and alignment with best practices. This improves maintainability and future compatibility of the nginx configuration.
Added Syncthing support with proxy and SSL in nginx and updated ACME certs configuration. Adjusted Syncthing GUI to bind to localhost for improved security.
Enabled `proxyWebsockets` for the nginx reverse proxy configuration to support websocket connections. This ensures compatibility with services requiring websocket communication.
Updated the base URL to align with the current local network setup. This ensures proper connectivity and functionality within the specified environment.
Added EasyEffects to the system packages and its preset selector GNOME extension to improve audio management capabilities. This enhances user control over audio processing and customization options.
Changed the API base URL from "m4.fritz.box" to "m4.local" for consistency and compatibility within the local network. This ensures better alignment with standard local domain naming practices.
- Added `libvirt`, `dnsmasq`, `virt-manager`, and `qemu` to the `pkgs` list.
- These tools enhance virtualization capabilities on aarch64-darwin systems.
Replaced the bash indicator icon in the Starship configuration to ensure consistency with the updated icon set. This improves visual alignment with the theme and enhances readability.
Replaced fish indicator emoji and added new indicators for bash and unknown shells. These changes improve visual clarity and consistency across different shell environments.
Added Remmina to the list of default GUI service packages for better remote desktop support. This enhances usability for remote connections out of the box.
- Updated `nix-darwin` to version `nix-darwin-24.11` with new revision.
- Updated several locked dependencies (`disko`, `homebrew`, `sops-nix`, `nixpkgs`) for newer versions.
- Ensured compatibility with upstream changes and improved dependency freshness.
- Commented out default SSH service enablement in common suite.
- Updated SSH agent configuration to use dynamic user paths.
- Removed outdated SSH keys and added missing key descriptions.
Moved default SSH keys to a shared `common.nix` module for better reusability and maintainability. Updated references in both NixOS and Darwin user modules to use the centralized keys. This reduces redundancy and improves consistency across modules.
Added a `.keep` file to the `git` directory to ensure its presence in the user's home structure. This aligns with the convention of maintaining stub files for empty directories.
Introduced hardware and system configurations for the aarch64 NixOS system. Includes hardware setup, base system packages, and enabling key services such as Docker and Podman. This establishes the foundation for managing ARM-based systems.
Updated ACME and nginx configurations to replace "internal.hoyer.world" with "openwebui.hoyer.world". This ensures correct routing and certificate management for the updated domain.
