dotfiles

commit 47fab45eb8d2af46fd4dcea5d21ee2c5bfa383a5
parent b4253c28a151c0598ca2ae374fd2fcd525e42e47
Author: maydayv7 <maydayv7@gmail.com>
Date:   Fri, 27 Oct 2023 21:29:44 +0530

feat: Update Security Settings

Also some file structure updates

Diffstat:

10 files changed, 24 insertions(+), 3 deletions(-)
diff --git a/.gitattributes b/.gitattributes
@@ -1 +1,2 @@
-*.secret binary
-\ No newline at end of file
+*.secret binary
+site/static/math/* linguist-vendored
diff --git a/README.md b/README.md
@@ -400,6 +400,7 @@ _Thanks a lot! ;)_
   - [lucasew](https://github.com/lucasew/nixcfg)
   - [nobbz](https://github.com/NobbZ/nixos-config)
   - [rasendubi](https://github.com/rasendubi/dotfiles)
+  - [sloodmy](https://github.com/sioodmy/dotfiles)
   - [tejing1](https://github.com/tejing1/nixos-config)
   - [vlaci](https://github.com/vlaci/nixos-config)
   - [wiltaylor](https://github.com/wiltaylor/dotfiles)
diff --git a/devices/.git-keep b/devices/.keep
diff --git a/files/archive/.git-keep b/files/archive/.keep
diff --git a/modules/hardware/filesystem.nix b/modules/hardware/filesystem.nix
@@ -64,6 +64,7 @@ in {
         ## Partitions ##
         # Common Partitions
         boot.supportedFilesystems = ["ntfs" "vfat"];
+        programs.fuse.userAllowOther = true;
         fileSystems = {
           # EFI System Partition
           "/boot" = {
diff --git a/modules/hardware/security.nix b/modules/hardware/security.nix
@@ -1,6 +1,7 @@
 {
   config,
   lib,
+  pkgs,
   ...
 }: let
   inherit (lib) mkEnableOption mkIf mkOverride;
@@ -21,7 +22,11 @@ in {
     programs.firejail.enable = true;
     security = {
       protectKernelImage = true;
-      apparmor.enable = true;
+      apparmor = {
+        enable = true;
+        killUnconfinedConfinables = true;
+        packages = [pkgs.apparmor-profiles];
+      };
     };
 
     boot = {
@@ -95,5 +100,18 @@ in {
         "ufs"
       ];
     };
+
+    ## Block Junk Sites
+    networking.extraHosts =
+      builtins.readFile (pkgs.fetchurl {
+        # Shady Sites
+        url = "https://raw.githubusercontent.com/shreyasminocha/shady-hosts/fc9cc4020e80b3f87024c96178cba0f766b95e7a/hosts";
+        sha256 = "jbsEiIcOjoglqLeptHhwWhvL/p0PI3DVMdGCzSXFgNA=";
+      })
+      + builtins.readFile (pkgs.fetchurl {
+        # Crypto Scams
+        url = "https://raw.githubusercontent.com/MetaMask/eth-phishing-detect/3be0b9594f0bc6e3e699ee30cb2e809618539597/src/hosts.txt";
+        sha256 = "b3HvaLxnUJZOANUL/p+XPNvu9Aod9YLHYYtCZT5Lan0=";
+      });
   };
 }
diff --git a/modules/user/passwords/.git-keep b/modules/user/passwords/.keep
diff --git a/packages/overlays/.git-keep b/packages/overlays/.keep
diff --git a/packages/wine/.git-keep b/packages/wine/.keep
diff --git a/scripts/nixos.nix b/scripts/nixos.nix
@@ -121,6 +121,7 @@ in
         "--boot")
           echo "Applying Configuration..."
           sudo nixos-rebuild boot --flake ${path.system}#
+          restart
         ;;
         "--check")
           echo "Checking Configuration..."