lots of stuff

common/nixos/common.nix

@@ -35,16 +35,15 @@
       substituters = [
         # "https://cache.gwg313.xyz/mycache?priority=5"
         "https://cache.nixos.org?priority=10"
+
         "https://hyprland.cachix.org"
         "https://nix-community.cachix.org"
-        "https://cache.garnix.io"
         "https://numtide.cachix.org"
       ];
       trusted-public-keys = [
         # "mycache:ovUjiiyQNUGjK8yZA4dPV1f8tIfCZrGIubdWvWpdvtc="
         "hyprland.cachix.org-1:a7pgxzMz7+chwVL3/pzj6jIBMioiJM7ypFP8PwtkuGc="
         "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
-        "cache.garnix.io:CTFPyKSLcx5RMJKfLo5EEPUObbA78b0YQ2DTCJXqr9g="
         "numtide.cachix.org-1:2ps1kLBUWjxIneOy1Ik6cQjb41X0iXVXeHigGmycPPE="
       ];
       experimental-features = [
@@ -52,6 +51,7 @@
         "flakes"
       ];
       auto-optimise-store = true;
+      download-buffer-size = 262144000; # 250 MB (250 * 1024 * 1024)
       trusted-users = [ "${user}" ];
     };
     optimise.automatic = true;

common/nixos/restic.nix

@@ -24,10 +24,11 @@
           "/home/${user}/repos"
           "/home/${user}/Documents"
           "/home/${user}/.local/share/password-store"
+          "/home/${user}/zettelkasten"
         ];
         # extraBackupArgs = [ "--exclude-file=/home/gwg313/Documents/Celsus" ];
         timerConfig = {
-          OnCalendar = "06:40";
+          OnCalendar = "12:40";
         };
       };
     };

common/nixos/ssh/ssh.nix

@@ -22,14 +22,14 @@
         # prevent TCP ports from being forwarded over SSH tunnels
         # **please be aware that disabling TCP forwarding does not prevent port forwarding**
         # any user with an interactive login shell can spin up his/her own instance of sshd
-        AllowTcpForwarding = false;
+        AllowTcpForwarding = true;
 
         # prevent StreamLocal (Unix-domain socket) forwarding
         AllowStreamLocalForwarding = false;
 
         # disables all forwarding features
         # overrides all other forwarding switches
-        DisableForwarding = true;
+        DisableForwarding = false;
 
         # disallow remote hosts from connecting to forwarded ports
         # i.e. forwarded ports are forced to bind to 127.0.0.1 instad of 0.0.0.0

common/nixos/sysctl/networking/net.nix

@@ -1,8 +1,4 @@
-{
-  config,
-  pkgs,
-  ...
-}: {
+_: {
   boot.kernel.sysctl = {
     # increase the maximum length of processor input queues
     "net.core.netdev_max_backlog" = 250000;