soft installs

apps/apps-list.nix

@@ -6,6 +6,10 @@
   # Allow unfree packages
   nixpkgs.config.allowUnfree = true;
 
+  nixpkgs.config.permittedInsecurePackages = [
+    "beekeeper-studio-5.3.4"
+  ];
+
   environment.systemPackages = with pkgs; [
     ddcutil
     nix-search-cli
@@ -16,8 +20,10 @@
     neovim
     ripgrep
     gnumake
+    freecad
     dconf-editor
     git
+    beekeeper-studio # db client gui
     pstree
     jq
     nixd
@@ -39,7 +45,6 @@
     inkscape
     flameshot
     thunderbird
-    vscode-fhs
     gcc
     python312
     python312Packages.nsz

apps/sunshine.nix

@@ -0,0 +1,12 @@
+{ config, pkgs, lib, ... }:
+{
+  services.sunshine = {
+    enable = true;
+    autoStart = true;
+    capSysAdmin = true; # only needed for Wayland -- omit this when using with Xorg
+    openFirewall = true;
+  };
+  environment.systemPackages = [
+    pkgs.gnome-randr
+  ];
+}

apps/vscode.nix

@@ -0,0 +1,28 @@
+{ config, pkgs, lib, ... }:
+{
+  environment.systemPackages = with pkgs; [
+    (vscode-with-extensions.override {
+      vscodeExtensions = with vscode-extensions; [
+        # bbenoist.nix
+        ms-python.python
+        ms-azuretools.vscode-docker
+        ms-vscode-remote.remote-ssh
+        vscode-extensions.ms-vscode-remote.remote-containers
+      ] ++ pkgs.vscode-utils.extensionsFromVscodeMarketplace [
+        {
+          name = "claude-dev";
+          publisher = "saoudrizwan";
+          version = "3.71.0";
+          sha256 = "TzEydphPZ/OmIRJYslFJuk26f97mcIukPDS0WUxMOt4=";
+        }
+        {
+          name = "vscode-mysql-client2";
+          publisher = "cweijan";
+          version = "8.4.5";
+          sha256 = "ypb0TeG5vVEeQIfEUfXYa3VTmP6Dqg7dQispajTBP94=";
+        }
+      ];
+    })
+  ];
+}
+

defaults/default.nix

@@ -42,6 +42,10 @@
     LC_TIME = "ru_RU.UTF-8";
   };
 
+  networking.hosts = {
+    "127.0.0.1" = [ "dev.tolma.ch" ];
+  };
+
   # Enable the X11 windowing system.
   services.xserver.enable = true;
 
@@ -80,6 +84,18 @@
     configDir = "/home/venya/.config/syncthing";   # Folder for Syncthing's settings and keys
   };
 
+  services.openssh = {
+    enable = true;
+    ports = [ 222 ];
+    settings = {
+      PasswordAuthentication = true;
+      AllowUsers = null; # Allows all users by default. Can be [ "user1" "user2" ]
+      UseDns = true;
+      X11Forwarding = false;
+      PermitRootLogin = "prohibit-password"; # "yes", "without-password", "prohibit-password", "forced-commands-only", "no"
+    };
+  };
+
 
   fonts = {
     # https://www.programmingfonts.org/#roboto to check fonts visually

desktop-environments/gnome.nix

@@ -24,7 +24,7 @@
           ];
         };
         "org/gnome/settings-daemon/plugins/media-keys" = {
-          volume-step = lib.gvariant.mkInt32 2;
+          volume-step = lib.gvariant.mkInt32 3;
         };
         "org/gnome/desktop/wm/preferences" = {
           num-workspaces = lib.gvariant.mkInt32 5;

hosts/djamba.nix

@@ -12,6 +12,8 @@
       ../apps/apps-list.nix
       ../apps/firefox.nix
       ../apps/flameshot.nix
+      ../apps/sunshine.nix
+      ../apps/vscode.nix
       ../desktop-environments/gnome.nix
     ];
 
@@ -30,13 +32,6 @@
     NIXOS_OZONE_WL = 1;
   };
 
-  services.sunshine = {
-    enable = true;
-    autoStart = true;
-    capSysAdmin = true; # only needed for Wayland -- omit this when using with Xorg
-    openFirewall = true;
-  };
-
   # Enable touchpad support (enabled default in most desktopManager).
   # services.xserver.libinput.enable = true;
 

hosts/stitch.nix

@@ -29,9 +29,6 @@
   boot.supportedFilesystems = ["ntfs"];
 
   networking.hostName = "nixos"; # Define your hostname.
-  networking.hosts = {
-    "127.0.0.1" = [ "dev.tolma.ch" ];
-  };
 
   networking.networkmanager.enable = true;