feat: scrutiny collectior desktop

hosts/desktopnix/default.nix

@@ -59,4 +59,5 @@
   ];
 
   services.netbird.enable = true;
+  nix.gc.automatic = lib.mkForce false;
 }

hosts/desktopnix/fs.nix

@@ -52,7 +52,7 @@
       enable = true;
       settings = {
         host.id = "desktopnix";
-        api.endpoint = nodes.elisabeth.config.wireguard.scrtiny-patrick.ipv4;
+        api.endpoint = "http://${nodes.elisabeth.config.wireguard.scrtiny-patrick.ipv4}:8080";
       };
     };
   };

hosts/elisabeth/fs.nix

@@ -129,6 +129,7 @@
     reservedAddresses = ["10.44.0.0/16" "fd00:1766::/112"];
     openFirewall = true;
   };
+  networking.nftables.firewall.zones.untrusted.interfaces = ["scrtiny-patrick"];
   services.scrutiny = {
     enable = true;
     openFirewall = true;

modules/config/system.nix

@@ -66,6 +66,7 @@
     unzip
     # fix pcscd
     pcscliteWithPolkit.out
+    wireguard-tools
   ];
 
   powerManagement.cpuFreqGovernor = lib.mkDefault "powersave";

modules/dev/default.nix

@@ -18,6 +18,7 @@ lib.optionalAttrs (!minimal) {
     enable = true;
     package = pkgs.wireshark;
   };
+
   services.nixseparatedebuginfod.enable = true;
   environment = {
     enableDebugInfo = true;