jory
cba6b18914
- caddy: security headers (X-Content-Type-Options/X-XSS-Protection/ X-Frame-Options) on all vhosts + baseline CSP; strip SnappyMail upstream copies via header_down on mail.severijnse.eu - tlsa-updater: compute TLSA 3 1 1 from cert SPKI (SHA-256), sync _25/_465/_993, fail-safe placeholders; coredns zone updated - pre-commit: wire cachix/git-hooks.nix (alejandra, statix, actionlint, ...); CI pre-commit job over x86_64 + aarch64 matrix - gitea: enable Gitea Actions + self-hosted runner (native:host, aarch64 via binfmt); add .gitea/workflows/ci.yml and local hook - fix statix warnings (merge repeated systemd/database/configFile keys, inherit, bool-compare guards); add missing trailing newlines
49 lines
628 B
Nix
49 lines
628 B
Nix
{pkgs, ...}: {
|
|
users.users.someone.packages = with pkgs; [
|
|
# screenshot
|
|
grim
|
|
slurp
|
|
satty
|
|
swappy
|
|
|
|
# editor
|
|
neovim
|
|
|
|
#messaging
|
|
telegram-desktop
|
|
vesktop
|
|
|
|
# misc
|
|
pciutils
|
|
copyq
|
|
nixos-icons
|
|
ffmpegthumbnailer
|
|
imagemagick
|
|
bun
|
|
fastfetch
|
|
act
|
|
proton-vpn
|
|
|
|
wl-mirror
|
|
pavucontrol
|
|
thunderbird
|
|
croc
|
|
qbittorrent
|
|
weathr
|
|
distrobox
|
|
ffmpeg
|
|
|
|
## DEV ##
|
|
# javascript
|
|
elmPackages.nodejs
|
|
# python
|
|
python314
|
|
uv
|
|
# gnome
|
|
dconf-editor
|
|
(papers.override {supportNautilus = true;})
|
|
awww
|
|
openvpn
|
|
];
|
|
}
|