From 827885b5b28a86336b0b15a971209cc3349d3b8e Mon Sep 17 00:00:00 2001
From: Tao Tien <29749622+taotien@users.noreply.github.com>
Date: Sun, 7 Jan 2024 13:32:33 -0800
Subject: [PATCH] tailscale exit node

---
 flake.lock             | 18 +++++++++---------
 systems/NOcomputer.nix |  8 +++++++-
 systems/NOlaptop.nix   |  4 +++-
 3 files changed, 19 insertions(+), 11 deletions(-)

diff --git a/flake.lock b/flake.lock
index 2c30960..9dae3d0 100644
--- a/flake.lock
+++ b/flake.lock
@@ -41,11 +41,11 @@
     },
     "nixos-hardware": {
       "locked": {
-        "lastModified": 1702453208,
-        "narHash": "sha256-0wRi9SposfE2wHqjuKt8WO2izKB/ASDOV91URunIqgo=",
+        "lastModified": 1703545041,
+        "narHash": "sha256-nvQA+k1rSszrf4kA4eK2i/SGbzoXyoKHzzyzq/Jca1w=",
         "owner": "NixOS",
         "repo": "nixos-hardware",
-        "rev": "7763c6fd1f299cb9361ff2abf755ed9619ef01d6",
+        "rev": "a15b6e525f5737a47b4ce28445c836996fb2ea8c",
         "type": "github"
       },
       "original": {
@@ -105,11 +105,11 @@
     },
     "nixpkgs-unstable": {
       "locked": {
-        "lastModified": 1702312524,
-        "narHash": "sha256-gkZJRDBUCpTPBvQk25G0B7vfbpEYM5s5OZqghkjZsnE=",
+        "lastModified": 1703255338,
+        "narHash": "sha256-Z6wfYJQKmDN9xciTwU3cOiOk+NElxdZwy/FiHctCzjU=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "a9bf124c46ef298113270b1f84a164865987a91c",
+        "rev": "6df37dc6a77654682fe9f071c62b4242b5342e04",
         "type": "github"
       },
       "original": {
@@ -120,11 +120,11 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1702221085,
-        "narHash": "sha256-Br3GCSkkvkmw46cT6wCz6ro2H1WgDMWbKE0qctbdtL0=",
+        "lastModified": 1703351344,
+        "narHash": "sha256-9FEelzftkE9UaJ5nqxidaJJPEhe9TPhbypLHmc2Mysc=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "c2786e7084cbad90b4f9472d5b5e35ecb57958af",
+        "rev": "7790e078f8979a9fcd543f9a47427eeaba38f268",
         "type": "github"
       },
       "original": {
diff --git a/systems/NOcomputer.nix b/systems/NOcomputer.nix
index 1a4ff15..1d81fc4 100644
--- a/systems/NOcomputer.nix
+++ b/systems/NOcomputer.nix
@@ -8,7 +8,7 @@
     [
       # egl-wayland
       # mesa
-      # nvidia-vaapi-driver
+      nvidia-vaapi-driver
       gwe
       liquidctl
       openrgb
@@ -18,6 +18,9 @@
   environment.sessionVariables = {
     # wayland chromium workaround
     NIXOS_OZONE_WL = "1";
+    # firefox nvidia-vaapi-driver
+    MOZ_DISABLE_RDD_SANDBOX = "1";
+    LIBVA_DRIVER_NAME = "nvidia";
   };
 
   fileSystems."/home" = {
@@ -81,8 +84,11 @@
   boot.kernelPackages = pkgs.unstable.linuxPackages_latest;
   boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "ahci" "usb_storage" "usbhid" "sd_mod" ];
   boot.kernelModules = [ "i2c-dev" "kvm-amd" ];
+  boot.kernelParams = [ "nvidia-drm.modeset=1" ];
   # boot.extraModulePackages = with config.boot.kernelPackages; [ zenpower ];
   # boot.blacklistedKernelModules = with config.boot.kernelPackages; [ k10temp ];
+  boot.kernel.sysctl."net.ipv4.ip_forward" = "1";
+  boot.kernel.sysctl."net.ipv6.conf.all.forwarding" = "1";
 
   hardware.opengl = {
     enable = true;
diff --git a/systems/NOlaptop.nix b/systems/NOlaptop.nix
index 521b81e..f7ad85b 100644
--- a/systems/NOlaptop.nix
+++ b/systems/NOlaptop.nix
@@ -65,7 +65,9 @@
   ];
   boot.kernelModules = [ "kvm-intel" ];
   powerManagement.cpuFreqGovernor = "powersave";
-  systemd.sleep.extraConfig = "HibernateDelaySec=60m";
+  systemd.sleep.extraConfig = "HibernateDelaySec=180m";
+  # boot.kernel.sysctl."net.ipv4.ip_forward" = "1";
+  # boot.kernel.sysctl."net.ipv6.conf.all.forwarding" = "1";
 
   services.pipewire.wireplumber.enable = true;
   environment.etc = {