From 4b66009b033e3f6de8c542e106f87405989cd9fa Mon Sep 17 00:00:00 2001
From: Patrick <patrick@failmail.dev>
Date: Mon, 1 Apr 2024 15:01:59 +0200
Subject: [PATCH] feat: scrutiny collectior desktop

---
 hosts/desktopnix/default.nix | 1 +
 hosts/desktopnix/fs.nix      | 2 +-
 hosts/elisabeth/fs.nix       | 1 +
 modules/config/system.nix    | 1 +
 modules/dev/default.nix      | 1 +
 5 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/hosts/desktopnix/default.nix b/hosts/desktopnix/default.nix
index 0866843..d2d7344 100644
--- a/hosts/desktopnix/default.nix
+++ b/hosts/desktopnix/default.nix
@@ -59,4 +59,5 @@
   ];
 
   services.netbird.enable = true;
+  nix.gc.automatic = lib.mkForce false;
 }
diff --git a/hosts/desktopnix/fs.nix b/hosts/desktopnix/fs.nix
index 89a5d79..6bcbb82 100644
--- a/hosts/desktopnix/fs.nix
+++ b/hosts/desktopnix/fs.nix
@@ -52,7 +52,7 @@
       enable = true;
       settings = {
         host.id = "desktopnix";
-        api.endpoint = nodes.elisabeth.config.wireguard.scrtiny-patrick.ipv4;
+        api.endpoint = "http://${nodes.elisabeth.config.wireguard.scrtiny-patrick.ipv4}:8080";
       };
     };
   };
diff --git a/hosts/elisabeth/fs.nix b/hosts/elisabeth/fs.nix
index 3abaac0..d9e8a3d 100644
--- a/hosts/elisabeth/fs.nix
+++ b/hosts/elisabeth/fs.nix
@@ -129,6 +129,7 @@
     reservedAddresses = ["10.44.0.0/16" "fd00:1766::/112"];
     openFirewall = true;
   };
+  networking.nftables.firewall.zones.untrusted.interfaces = ["scrtiny-patrick"];
   services.scrutiny = {
     enable = true;
     openFirewall = true;
diff --git a/modules/config/system.nix b/modules/config/system.nix
index 7e3222f..c36aae0 100644
--- a/modules/config/system.nix
+++ b/modules/config/system.nix
@@ -66,6 +66,7 @@
     unzip
     # fix pcscd
     pcscliteWithPolkit.out
+    wireguard-tools
   ];
 
   powerManagement.cpuFreqGovernor = lib.mkDefault "powersave";
diff --git a/modules/dev/default.nix b/modules/dev/default.nix
index a19f1aa..ba4e824 100644
--- a/modules/dev/default.nix
+++ b/modules/dev/default.nix
@@ -18,6 +18,7 @@ lib.optionalAttrs (!minimal) {
     enable = true;
     package = pkgs.wireshark;
   };
+
   services.nixseparatedebuginfod.enable = true;
   environment = {
     enableDebugInfo = true;