From 6847f0d420b319e6be6a75bd3f27b1a78b48e004 Mon Sep 17 00:00:00 2001 From: Patrick Date: Mon, 9 Oct 2023 15:07:30 +0200 Subject: [PATCH] chore: last computer got secureboot --- README.md | 14 ++-- flake.lock | 84 ++++++++++---------- hosts/desktopnix/default.nix | 1 + hosts/desktopnix/secrets/secureboot.tar.age | Bin 0 -> 31217 bytes modules/config/nix.nix | 2 + secrets/smb.cred.age | 23 +++--- users/patrick/default.nix | 2 +- users/patrick/firefox.nix | 2 + 8 files changed, 69 insertions(+), 59 deletions(-) create mode 100644 hosts/desktopnix/secrets/secureboot.tar.age diff --git a/README.md b/README.md index bc0ab48..7873b41 100644 --- a/README.md +++ b/README.md @@ -82,15 +82,17 @@ 5. Deploy system ### Add secureboot to new systems -1. generate keys with `sbct create-keys' -1. tar the resulting folder using `tar cvf secureboot.tar -C /etc/secureboot` +1. generate keys with `sbct create-keys` +1. tar the resulting folder using `tar cvf secureboot.tar -C /etc/secureboot .` 1. Copy the tar to local using scp and encrypt it using rage + - `rage -e -R ./secrets/recipients.txt secureboot.tar -o /secrets/secureboot.tar.age` 1. safe the encrypted archive to `hosts//secrets/secureboot.tar.age` 1. *DO NOT* forget to delete the unecrypted archives -1. link `/run/secureboot` to `/etc/secureboot` -1. This is necesarry since for your next apply the rekeyed keys are not yet available but needed for signing the boot files +1. Deploy your system with lanzaboote enabled + - link `/run/secureboot` to `/etc/secureboot` + - This is necesarry since for your this apply the rekeyed keys are not yet available but already needed for signing the boot files 1. ensure the boot files are signed using `sbctl verify` -1. Now reboot the computer into BIOS and enable secureboot +1. Now reboot the computer into BIOS and enable secureboot, this may include removing any existing old keys 1. bootctl should now read `Secure Boot: disabled (setup)` 1. you can now enroll your secureboot keys using @@ -98,7 +100,7 @@ If you want to be able to boot microsoft signed images append `--microsoft` 1. Time to reboot and pray -TPM keys +### Add luks encryption TPM keys `systemd-cryptenroll --tpm2-pcrs=7+8+9 --tpm2-with-pin={yes/no} --tpm2-device=auto ` diff --git a/flake.lock b/flake.lock index 9872da2..f02f85e 100644 --- a/flake.lock +++ b/flake.lock @@ -11,11 +11,11 @@ ] }, "locked": { - "lastModified": 1695384796, + "lastModified": 1696775529, "narHash": "sha256-TYlE4B0ktPtlJJF9IFxTWrEeq+XKG8Ny0gc2FGEAdj0=", "owner": "ryantm", "repo": "agenix", - "rev": "1f677b3e161d3bdbfd08a939e8f25de2568e0ef4", + "rev": "daf42cb35b2dc614d1551e37f96406e4c4a2d3e4", "type": "github" }, "original": { @@ -174,11 +174,11 @@ ] }, "locked": { - "lastModified": 1696266752, - "narHash": "sha256-wJnMDFM21+xXdsXSs6pXMElbv4YfqmQslcPApRuaYKs=", + "lastModified": 1696814493, + "narHash": "sha256-1qArVsJGG2RHbV2iKFpAmM5os3myvwpXMOdFy5nh54M=", "owner": "nix-community", "repo": "disko", - "rev": "646ee25c25fffee122a66282861f5f56ad3e0fd9", + "rev": "32ce057c183506cecb0b84950e4eaf39f37e8c75", "type": "github" }, "original": { @@ -296,11 +296,11 @@ ] }, "locked": { - "lastModified": 1696203690, - "narHash": "sha256-774XMEL7VHSTLDYVkqrbl5GCdmkVKsjMs+KLM4N4t7k=", + "lastModified": 1696343447, + "narHash": "sha256-B2xAZKLkkeRFG5XcHHSXXcP7To9Xzr59KXeZiRf4vdQ=", "owner": "hercules-ci", "repo": "flake-parts", - "rev": "21928e6758af0a258002647d14363d5ffc85545b", + "rev": "c9afaba3dfa4085dbd2ccb38dfade5141e33d9d4", "type": "github" }, "original": { @@ -471,11 +471,11 @@ ] }, "locked": { - "lastModified": 1696409884, - "narHash": "sha256-hz3i4wFJHoTIAEI19oF1fiPn6TpV+VuTSOrSHUoJMgs=", + "lastModified": 1696737557, + "narHash": "sha256-YD/pjDjj/BNmisEvRdM/vspkCU3xyyeGVAUWhvVSi5Y=", "owner": "nix-community", "repo": "home-manager", - "rev": "8aef005d44ee726911e9f793495bb40f2fbf5a05", + "rev": "3c1d8758ac3f55ab96dcaf4d271c39da4b6e836d", "type": "github" }, "original": { @@ -553,11 +553,11 @@ "nixpkgs-lib": "nixpkgs-lib" }, "locked": { - "lastModified": 1696162106, - "narHash": "sha256-72gAqduG8CpBFWchiO4DxZClux5HAti4frrrYGr/5xo=", + "lastModified": 1696766909, + "narHash": "sha256-lU1BmCWpQ9cx64YnJKc89lMg9cx4pCokXIbh5J//2t0=", "owner": "nix-community", "repo": "lib-aggregate", - "rev": "273cc814826475216b2a8aa008697b939e784514", + "rev": "9f495e4feea66426589cbb59ac8b972993b5d872", "type": "github" }, "original": { @@ -573,11 +573,11 @@ "treefmt-nix": "treefmt-nix" }, "locked": { - "lastModified": 1696208796, - "narHash": "sha256-dGhlQ0TeiJhbtEk40ddbJ9Fz4kDa/JfU22F34iYJwu8=", + "lastModified": 1696813662, + "narHash": "sha256-dQTBtvjdzKa7+ViWiDdnBpdtDS4FD+gWuJJrfIrxSkc=", "owner": "nix-community", "repo": "nix-eval-jobs", - "rev": "82cede4edd01989095040b55d0212d61a65fc5fd", + "rev": "7cdbfd5ffe59fe54fd5c44be96f58c45e25d5b62", "type": "github" }, "original": { @@ -593,11 +593,11 @@ ] }, "locked": { - "lastModified": 1696131323, - "narHash": "sha256-Y47r8Jo+9rs+XUWHcDPZtkQs6wFeZ24L4CQTfVwE+vY=", + "lastModified": 1696736548, + "narHash": "sha256-Dg0gJ9xVXud55sAbXspMapFYZOpVAldQQo7MFp91Vb0=", "owner": "nix-community", "repo": "nix-index-database", - "rev": "031d4b22505fdea47bd53bfafad517cd03c26a4f", + "rev": "2902dc66f64f733bfb45754e984e958e9fe7faf9", "type": "github" }, "original": { @@ -644,11 +644,11 @@ }, "nixos-hardware": { "locked": { - "lastModified": 1696161939, - "narHash": "sha256-HI1DxS//s46/qv9dcW06TzXaBjxL2DVTQP8R1QsnHzM=", + "lastModified": 1696614066, + "narHash": "sha256-nAyYhO7TCr1tikacP37O9FnGr2USOsVBD3IgvndUYjM=", "owner": "nixos", "repo": "nixos-hardware", - "rev": "0ab3ee718e964fb42dc57ace6170f19cb0b66532", + "rev": "bb2db418b616fea536b1be7f6ee72fb45c11afe0", "type": "github" }, "original": { @@ -659,11 +659,11 @@ }, "nixpkgs": { "locked": { - "lastModified": 1696193975, - "narHash": "sha256-mnQjUcYgp9Guu3RNVAB2Srr1TqKcPpRXmJf4LJk6KRY=", + "lastModified": 1696604326, + "narHash": "sha256-YXUNI0kLEcI5g8lqGMb0nh67fY9f2YoJsILafh6zlMo=", "owner": "NixOS", "repo": "nixpkgs", - "rev": "fdd898f8f79e8d2f99ed2ab6b3751811ef683242", + "rev": "87828a0e03d1418e848d3dd3f3014a632e4a4f64", "type": "github" }, "original": { @@ -675,11 +675,11 @@ }, "nixpkgs-lib": { "locked": { - "lastModified": 1696121361, - "narHash": "sha256-sstnEW0Qwqo3MHmy1In/hJHjypfsSDlnhegNKw5eplk=", + "lastModified": 1696726172, + "narHash": "sha256-89yxFXzTA7JRyWo6hg7SD4DlS/ejYt8Y8IvGZHbSWsg=", "owner": "nix-community", "repo": "nixpkgs.lib", - "rev": "56992d3dfd3b8cee5c5b5674c1a477446839b6ad", + "rev": "59da6ac0c02c48aa92dee37057f978412797db2a", "type": "github" }, "original": { @@ -746,11 +746,11 @@ ] }, "locked": { - "lastModified": 1696436453, - "narHash": "sha256-S/lyJ9ZrCSJML6m8jiIrYBaFhjl+Rmm4lqd1fGVYjM0=", + "lastModified": 1696843042, + "narHash": "sha256-2ykZDYtBaFXWc4zHUEknecBSIOM0e7CUKqMHNZPKlbU=", "owner": "nix-community", "repo": "nixpkgs-wayland", - "rev": "c2621389c63551781ea31d08d20e5f11dc2ef3fd", + "rev": "4c7744c36f1f53a42da3c303ebdd05a668269a18", "type": "github" }, "original": { @@ -761,11 +761,11 @@ }, "nixpkgs_2": { "locked": { - "lastModified": 1696207572, - "narHash": "sha256-w24NTSMrc7bMIQP5Y8BFsKbpYjbRh/+ptf/9gCEFrKo=", + "lastModified": 1696810678, + "narHash": "sha256-XAw8D1ZEbdqwhSvn8RsgeeNrDktx4YSikTb5V4ArsrA=", "owner": "NixOS", "repo": "nixpkgs", - "rev": "fe0b3b663e98c85db7f08ab3a4ac318c523c0684", + "rev": "35c640b19a189ce3a86698ce2fdcd87d085a339b", "type": "github" }, "original": { @@ -898,11 +898,11 @@ "nixpkgs-stable": "nixpkgs-stable_3" }, "locked": { - "lastModified": 1696158581, - "narHash": "sha256-h0vY4E7Lx95lpYQbG2w4QH4yG5wCYOvPJzK93wVQbT0=", + "lastModified": 1696846637, + "narHash": "sha256-0hv4kbXxci2+pxhuXlVgftj/Jq79VSmtAyvfabCCtYk=", "owner": "cachix", "repo": "pre-commit-hooks.nix", - "rev": "033453f85064ccac434dfd957f95d8457901ecd6", + "rev": "42e1b6095ef80a51f79595d9951eb38e91c4e6ca", "type": "github" }, "original": { @@ -1056,11 +1056,11 @@ }, "templates": { "locked": { - "lastModified": 1685790891, - "narHash": "sha256-ch0Q6JVV0Dfsd7FMGVrxR+r657pnI535jEuHfO6S1Go=", + "lastModified": 1696855554, + "narHash": "sha256-9VYXESOCqGGZ8HHl4LN51k+74Kf5Nf9czoqqIN7IEo0=", "ref": "refs/heads/main", - "rev": "6702d07d398f1fd676a15b8f727845fb8fe45cfb", - "revCount": 6, + "rev": "a6c35c2af9f26599e81002630329054b99efbe79", + "revCount": 11, "type": "git", "url": "https://git.lel.lol/patrick/nix-templates.git" }, diff --git a/hosts/desktopnix/default.nix b/hosts/desktopnix/default.nix index bef283b..d960a6b 100644 --- a/hosts/desktopnix/default.nix +++ b/hosts/desktopnix/default.nix @@ -10,6 +10,7 @@ ../../modules/graphical ../../modules/optional/xserver.nix + ../../modules/optional/secureboot.nix ../../modules/hardware/bluetooth.nix ../../modules/hardware/intel.nix diff --git a/hosts/desktopnix/secrets/secureboot.tar.age b/hosts/desktopnix/secrets/secureboot.tar.age new file mode 100644 index 0000000000000000000000000000000000000000..67e9ea891559bb78458421762b35f1f044a78168 GIT binary patch literal 31217 zcmV(;K-<4zXJsvAZewzJaCB*JZZ2WY7X>$rwR$)|bZa7R;bVOGtkT48cQXk=t!cvW>UO>1{IS91ziIeIWpRBl9WVRmsdQ#dPP zV{mLVMp;2>Y*$%JcXBW@W@tinWiLuESa%97J|J*ub}eu+H8vnxMrUbBcOXG}Y-)2_ zWqCJ5XJ$oEVO2>+Lq;`edUjz-Hf>W-WLQ=*d01pmR8KW8PdEx|bvQ9aP*+k-Xi8{G zZb*4jc2_rZS!rogVKG@nctTKEQf^5^LPknfXhjMwJ|H12XL4m>b7de)AXX)IXCO{f zYe@=HaalA|-{u;$uPCOO8r zhzyU0@t=848>yJ>UJj$wH)%9{o7wymeBElOk4v0-X6K{URGtX@VlCs&kr&Bvq#*?S z9?FpERdrLN@_sX2Q^J?sRQnJ4BF;4;^Fr6s9rXccJjBls`mFO8n2%)|Bh{=LF18aT3j8_+Kz#0FVESSjqPkHT6Lwo~c~o*q`A?S(D2#vd{lS5| z-S}OcV8@|B%xsl_J-@Tck7^~WzL6UGk91bYCvJ_rlgRIBfz;VYIpw<@8X4~AKn<)0 zdtN9BqVWF8dA$v1ZE?iV{P99(&IkT(Az#N5P|)8?+V$#o zpRbW9c5g78g_~$^old%;a5GylLNprMC%hYiyLE&smOp|%!hgh{Y6y=Hv2$4QqjAq) z@yuVEK3OO8Hxd#rzc+dV@VHxU9zaJr{=?`AI3y1vIE@5^fff#6s6UAwpS?DxF0m7# zOg5R7THFlYkJUIMVZ;Ve4OwiNln(&N*VZ$WsB7L=75>L9y&{P2rhh;8<4`0L*twGM6qjUmv2NQONNbzrbB*b7qe^7wpHTnZgfbr&`cT>|ncmje7ZOpGaYN!~bD~2{s1*Mto zTrb5DSLK+ccHE^T2Gz{YzIhuTf41zZ>dAsKK$x-{Ngk{D>4Q2tb+>z6Q6IAUR>F;0 z@?TXe_YK!x6+{BnQ2`haQGi$Z7js?4TVdYvZ<|SR%oEPw_o-M`^bPv+%9jMSx!JBL zs}?^!Otc>$Yt}`+_SN(pN!~abrnf%ul`8`&Hfw>e_Lw<-8<@$~%-|x&?MhUf88CHZ z1K3CBB2`|TeZ|xhm9wTa+!$Hp?CV8F?J%DJy&ar3>=#j^!W1OFRw2MR5})5mEHG&@ z?fY0{qBXU=UkyEwQl2a>Ybp<${Yb;T>0;gT8-Viy|6&rx6Rm2#hZEvMzvtj02$6sl zdC{@C^Y)^8J-Wb&ec|?ySM4y<*SR?E(KkSC`M*P?009GtFs8lbSAazvzwx|lF>A3~ zLg&AH)xs;4yvs9h(BsuYB|A&VxWIw0V0<(-sW10as4%}A7^1$M7MAH_PWOk9LBj2J;EDdn~y zV4uvhuLiE_vlfvJ)wGD87iE_h_O49G$|5qqL_^)}Jv~F{f1(E8bRABpIl}5*=%|+V8t&MEa4@ z_tu!QKN3qB2GyP*7Bwdc%)vYqN8-lQ>bKfmsRH_SPdH9CPryDam7tpN_<6$q%#5RL zxb@{aOxP1#YGH`vcr-DzyfyFVC_~F`=5OgC*tLoNut!4|D7Fwre7@d6z1C29y9I&#}u* z>1w2V3Y1aA>FssT!mD|j7Bk9dUPg7a#nv!bkifHRE?QQ3g0>e?iIRKC>hG&Qf_UBd z%-#q&E=i|}_IkxfIckB9(i7d~_}i(HSH*jxePTK#YkU4Vx9DSs@j2CIUp}R~q2a6@ zcL1*9EIJqos`K`HVNBTYX5w(=|PL+*^z>RcuWdh=T5ZsiB z^3O1FW56E!*_mgMy85{T)6!$dxPSP%+M+rzFElE|hNB^U?p_XCzvPCE8^CjJ zXCAZ~iUpJ*m5bFR@KC#C%4_^c^b+{ecz2Z4c){QtJ`N;09|Uu+#A$M1ucB-TY^f;0g|-ub zpZR0CTCo_he5&}-p!*eNc9}duhQ&d!*6xbtx zhLDv6`HdSuO&Q8kVfgd6hA-a7A;2W5JTr1n-JPcg^o^Xl9Rw>Z<43`9h9tcx`uIoU zN;=c{(te=##8{4yJ_kg}p_e{`-888+OtEV19n#u&8GY{L>QwjC5H0zc_GMOza5=7y zjVbJ=*G{!nUA+i$GRzZV`6yW(Uv3rdvh5uxwC@hX*cNT?kb$pd?l*^K;#y|C>i3EN ziFEhO@b0k~25uV2@wLM8kz0uRtnhL=C5o+344o$q`h-sx^g`??xJS2!_rrl9cAdc; zkA{FLUn_kp>;*Gt)eHoHXa5p8wRO*N-dgi2|;|ifQb<`9d z_t4chVE+&iox2;Kau{`US^7WS({-N%cr}t}_o!Z}EQ`j5X>!fMBKbVL)-VWTBIuDOmOBd7z~)|32^JoGFEKg`t5h zac=4Q1c$7^0-*kouX)*Cjq*cYL;kl{SFEO4cj;Wt{J-p?t)N!?u2o?au`e?rb49)P z=Py~|(T@}G$tWUxO`UqBmNpTt`{+i(RQI+DmjXJPDlHV! zeDDxSk*2B?B~DfB&KgLj_;?q$a1xj!XitT_BtI;p4@(l z>(`&5IF3+3*(OJA^*~E?S=G{jzKAr+CAu9$&VGD<5~*}Lmy4^XyLV+u*QLp!h}|Dx zt#Y@MUH5HJ6j&%p(V-~cq4~Q>iG%_8Z(qvq0g`*DG1z{tUn)pkGg)eK&I=)`j{3{g z{0?D6G*Dz_HH6W;e{HesJ_$(VS)DO33Th6%a_|!N6g$jG9I#2teKZRDuJtNqI$dWL z^*CyQgb{e3x-zxWN@GM7?VV6!qS`Z2iosA`gBv3C!#TiX6Wg`6d3|0j*@gwF6$80C zP$VZ^s%Z-Qv80Vo5<${H-u9QT_05-!6y8+jMl-X-tDD`Pg_rvT?;2MdTCoqN4kSMt zX-Kh7gmJBT+X6=(vBtqscBlcX9G%Y~CvO+%LR+U&BwO ztZd87q;H)y%K8YVqr&AX0zE9X5MXl@F*8UJX_)@;H7E{QWmA!_^%Ab0n+M@(9~=ATEne`&CH9D*16@`*NlT<%fXjfRLufXRi<|~5dnxr#e zdG!%}^}ZmSGFCs-x?ZPqekB&=%=4Jn5`sTs_DT%`m5`zEf_DUr{*~M*366$u9v+aO zCg)s5l;ZBPeEbJ}cqXICHC@$BrmZ&h0B6pE;{a~xQ1xi@1XLPh*|=kyR332z~)X|?iZQS0~b@IVnM~vZUAi_WzWKy9q&|Lv!%<>t2&es9LAPtXP`%c zrr*A~AglrL+n~+I2k8-LrTNN|Wx^(uk^Q_7vfaZ+H9a)XKeCLhqymIE*c#@7X5k%6 zky!HoVr)47Wg7uiF%v5PXnZZs=LxKu2j}F8wbJPX0MzY2UMS$nU3rvA)~~+~q&BxM zv_BM?+3e==K@(Yehr(QL$ywO)gW>BGW^m^(hGN!8% zi{R;f6fudI5cTSI5Cxjl@&+ZKqyw1_1mYBXvq8X5)rtPq=YbkdXS^33|Y{~ZjyT}}~#Hyq9ktZKc~o5xvyF})e3TJbGo zNNq7PSU8@+bslS|SO7V3bdLj%KJZ~n>mBf}K2%Lb!)amT#VwPcd>tsWbqs;Uo%!gE zkhywi-dJloT*i*prpM;o13IS4EFw#D8FSi4%TvIRl~hMeuLGtt#%en_Y@h34Cc;GI zjwI6TPHS%-9grqJbTMXa<bab~m$Rl)9hruc)m)*Mhvp>|y41DR=a9W0NwgQiC_07SRk6C)&q44`!D@!Uf z2}kqn96kDJdkYDQ*;Iw_K{t&av!D0&IL{4SRsPPWyM3K{v3rgVW_`4gs^wxWg5A<> zy^2&sg%`T68|h9ecq|wAO&=on7idhjT#pc9w|f)B*A`Oz^_Z&4^oib1jzI*6l4pZ%!O<&C|yb1Q?78$Vb7bV{9;-g;yF4!DP zI}97L zKNQr2#D`)%>@2w@sVV(k=K0Cdh}R}*mXcHqIP%+=xEpQ96B!R%22TQO%ULgKDAt35 zCccyoGN;Q!mSkYTSf)62Ioc(G_;JO6ATOvDYUVp5#L%S0+h+16pp)I(VVOA ziB@rl5ujYY>SUwIHTKnch(?gbKrT?is`e+W(ekgi@s)b@rHOoHt(?WTWUC2O`}k{7 z5zCvGRqy!XEfgQ)woUnl7UR_(T8NG#)}ZLT-U)QQSx62{Xa$qig1O7vJM!4M7pIC2 zgGnvJp2;v6vaOXpC0PaHTIUB#_LL>Ha0jZmVWD~0D;SekPIU^_@5CJ6EfsbNjfLp4 z-Eqi=_89b-qe-z7tuH}M32&dzrykZOQxzg=<%rgPy-o}1eD2)mU}Oy;8gWpf{kkKt7|o}*D(nE~`V9l97aASYJnj48A{e&ZgU zGUJ_ac)C=k@wT0ut0eS7C`+#KG;$a2Y9hA%5+N%pAndf^wKz;A%3%<#{RqGO`2FSI# zX?q?H34f}LtwZzj*rO!8TG7C2EVPZo^~sW=?RhZx&xmF=98DjF;Vi>Nb^&hvCh{?@qFuN+3w5tNP8tl4RuSiBt z%u|2KY%~eWISdE|APRj7p!x^#tmjT?m;uFO^mbE+OoBTRB^~%Ey9oTTPA17z#jPO+ z2V9PT3#g*>`a!fQbOG^|4JvPSA9(ZlES}KVDCf=clE26NCtVKM7 z5xCsF={8a0LhzqG!}5aJKA*OzDF#DZwJLH5(9nlxg}#G#6|jeRtoF5dMh(|9Akm(# z%Q=ETUf~kdMyi)Z%8-;U^J#*CaEw<8o_TlHvYuf<`1!>k%OB)xq{Na{wG37az3=Ou z_{49__3J$ULcftFHcE=yIL+FfsCrnJr0SXC7H%-y{;|5M8h;Hpjsk2qgI<3%U_dB; zFMc_&4L1teo^;;kAadt$a7J{N56|UY?vCcH=nILhho@t#;QbDwe^2rqOYwVCLEm|8 zn|Q^~8Lde-Wh)S8I{o)iYdZ6QeK>VqTaVN0)d?_~W3DeRFB|GxxM66;sVoej0sZpT7fUYAX@eq8qr*Wn4_|3|5_Z~S$_FfWNNjfV2B3kg8?bJa>u|zhxKsnom4 zRgGAHQ&tW<41IJ`q?a}52mAI%T-f!F1-}FDJK|Vh@t7oT9=glr8;}MTolO%) zYn94`56_%fS1LP7XOyLbEW2{8iH#4rj5&WXP;0aHcuqBryw4MVPov9!xyJv0E@#B|#02C`|gR#+Br zHlW@-sj7XUvTUZKL%MD7d(bDdXi$6+B5J-JLvghZjXGo345`1~?RXs4SkL!Zr$GQ>C4<-hHx4u&<;`$yyUuXoE{E(2cQsTS}oL=bG7jM zf(9X*ddmf~3k9*LVYZW9PXQAR29EX!9i6Ozjk5V6a1wzO7+b^17whtEW|<-XG}3d1 zgl(xwWKvzy971150JYb>+{;}&|9xe@USTrz8 z>FUvB+M2BC0ycW$ohb7mG`UP~oQB@CDS3rcSQQZ&2N35hrfpRW#31bBBe-3iQVDxp z_vrr_~=l(3OW7Z+ytd1F8~mVSK}xu^Z7kR_#bLVGs(VkT}YusvzK>m zdwcu70tc2=tf{xjoi}F%!KVY4*tg55QGzRJ4CF7dsr#6fTPxW%Cg`Kgsql7-lfI6V z1@uJGG;Q+-zMJw&KOzR|lZ{tA8+*2RS+3-}-cE*qc#R3BqwsRjo7{65SlWbkGOlLV z>pUt5fyDJHt7ztw4hXa3_sRmA*vG9vu`SDT!XwR`scLOvZMlxIH!}6+o>dJ4h1GmgCyF z1c5L$k64|}OgI@17p+yo*+AZY3i*^Edq?%c4ruviVAtSn4%cLiPqN6hdMHwn7)a)W z?Cpw9_o1w&J3j}Nh|Jr1_f0#iEwdQnjPp77hr!8hfj%Yl1BK>u2IwI?gz;Z2ALwx0 z*?$F6vu{g9?Wx>ganZJe)OVfx2jI~P`UQ%`5VZF0MnM)doRaJRgT||XoHyQT{4_vC_|n5n3C3&U{o4WHg( zwIz&Cy{e4*-$YO2+k2a(O|uMh^E7|PDqAz9v;p03DhK=J8qEgru@u}wPbS@9$?*=> zqD~7nvE@g_xmikBDbI1PJUA$XJW&i{A$TEES?4h?dw%M^(T}WdCAv&;sjq=1Dw4;I z0mk8g`ij|>^Cn-7m`Y|Tnq?+O31Zgy5vVIn3p8RLokE8dTEEC3FKe}cj@#TjJ(2=> z+C|yn&+X`R#E*Ltwt`vOavJ3-i};Pbo4b7ON#$hxz(<+aTKzzY-p=a$5vSbUElzfb zBo9JAt{&ApE48Ezx>zT?wTDo(rlg0A2L;$Nj>PKFA-3>7*YfLJmUCdsouQv*KiwB% zzj&|B`T5BO-9##|AhRg4@`)NU5G{*D(5nez>0jNvpG_T*y`)s@>`!kwgK z^b6JE*`)bByXZ?%X{9g(1GXYeVj z{+1euIn@e=9fylIKD2Fu{8w3SSGZg_@@el`?o)4THfd5sJy9YE;`uVN7NTeorWeln z23_fg;j$@UOv3&tMnv_(vMKzb(~PCemFI_fzcA2_(4A?8Wc1M}kg4>F`WXci*LGtP zR-ZwdJ5c&t?}((IBMWG*Hul{f3ft}#>GTPsH$bK23n|q&*sjT*G3Nl%)v>l|&1)G!Cr+2Q9`olZ} zNdr@tu2rGNQoEk3i94g%pq=9_Jr876=3B4_2kT?yu0Rf4(_S$8zlePr6O878_{#8; z!II@HopnF|g|zd6*YUTZUm%d(igCr+2nL_om`J};nlSG8wbT-9 zq;H_`6CIe8mDtqPokX$sx-j76!Ee#dq$M9-E?gO;Pu(gGY%o}zMx-_M$8yCxxfr+% zyu?ms-a?tsOx^+M24L7mU}cs}$3YdDu^cNlpC1z(6C?jdo>-m_;2*Kv{xJ~c^I=Ow zO#HLp+;2uF(aD|rzW7EBU=y-m{rY167CHy^zPdUxX@TV2r9P@|TplyGkw4kYp`-J2 zLFk)-6End9@fh9k-|)q(G~z4c^yu?j2Z65Jsi$}6q2GFf~(7kRfbQjdkEYgQMcbe_sV2R*e?gwP@+ut4=CS=_OHAZvhucf98vyA zi6F(I1aUMk9W?Qp`3Fl33;jB@O`n}>OmZCZ?glLKOHidhP?a;c;Y_w|05z%g1FsUupxg_ zx=rH0j87CPIyAl>F=DR_&mUy;OVDE(n)o$|YlTv#k-=88`=meZBUkkOJ%WW_ zU-&JWp~zC3Ks+~z))wk!E5TOd=2CH5hX=&C*zKXqgpssm^Vov!^`1__fi5psKjTh7b<>V3P%K%x>2>ST?mQ7(>=i2uF=Gm-aF5#*8Rvey2S(`3ZAG8mn zT#RJ{BrVZGY1(}Q!_UgOKnS;RAo67L+e8QNGAd$Z znA=Dx)}M*50xO-h^j84r?A2U-Ps2C`fbCf%crqLGR)?x@rTqSog7KcZ!#2#+l!^phkhDixw@>-tE z`3h;80!=?`<4{rEw~j{IdX)6d-_aYFK|FZj=YS*`c0}cE+g4wRJDq8B$kq?tzx5Fi zb|*$CMz~g3G7+IaQ<6K<>)hbZ6tpF8%EPp8|~X27)Kt1T3j1aGlhjb zpw^#0FNe976o%gMpdRL(pYwv>tKk#ot$r{A{~~C6Y-0{Q1PO^6z<>YMEM{S=5URm= zX#RlF-v2Q_ccGtW{>*`Rw`Cm`f+hy?BjWJlVQky$JoEVkB{7G+GqulQ)?4Sh_&S-O z=bGesiRplkin!=Ljf>EnS|iO5)hKVqp}D#e^q9rq~L*(vh z1g}`}AUGhMrBAGn(S?EkH~TuVJ?w!N!X18Jz$eW?u5CSn)*IIoP;phFUT4z_(v$tr zitu$%>xpo0n}N|@O-xVXM9vA&j)j>jq#vZ&^UQ_g5|Sp)Zi!_IwM~VpPgC7fomv;u z8s{u%5BU`dwSO!DpzA?`=$ipg zFT(7?@_xbYRefyVZ5=|6m9x>MJ>zrf)asZ|A3>Q6NXCBl4j3CIyIMgc+W8}bnLWH# zCyEAp;QuzJ$YjhR8YM*_y z2Uc!OUa&Q_BSDz|!gg9;ZK6m;7}(U$>hc%{#{)Ndb%uNTTPVSSKjb*(tz%F82**AD z;1b+MFA@5=^n5{onYl~4Sd>Sk#OT2avDB!LhMINOAQk)t42@1n$nEWI?y{HRng#B7 zudk}#x{!!m_%6S~9KE)}@h)60_OtJjNE&roDrc%=Ror1bueM_pS2pS=fffF%o?RvV z0e0ZLaUr1%{uKmr{|w^LUoG#fy8h3+2(nr?XLK$AYbhD$%ajxG_K?iqZLeo#DNmj} zjX~IdaXqBFJ-IBhQpO&{7~E#z3~4;C>R>!U4+vX9S}n)trkHm-SM2YrRlk=GZvZ*D zUiG&N0&apAktS{ZU_u)U3oW~2*kuwWdPX)t(Na@rgDx`}P;7_508Q`zC!QSl z#BiC&>0%6)Npcq+Qbf8SeouB{u3aJba_qyI0VFFyaPbl7gNby4sKbt-qqCI;+&L%J z_|!qDP!n?=vTdW^85R-a&NwDB5_)M?^0aT1Xr>+Har;5`Gq~?UiM*#)E-HdKaoH+~ zFyLY!bx^-{e#2u%?xJSAuXL^ylJc`Y(=N;WL)V>sPbbUlRsh;mA!3y z>BAndrBSI6r>QOv#@VtZE>~9;ayH>GSlNvK%oB8?gh3n)rrj@-TZPOUILMjNdMgJ5 zXyH>1r_Z@aH|;ASOaRRHQ`J=U(jngI);;^e_dTC;OX%yHX=v$Aixm5$c9O?Cl8^T6 zyWmJ(+c==TZyhvI8si!FiZ{D&arT5vAKH$^(?xVua=Emzye2)0f`$gv*t*8o!yo)j za_28wJoiUzozUv-H#_9|vSH+li~Td@->wLCSsy5E7*c=NrVDO;u@td--~L+`6ulJ8 z#s*xy=eyU2lU1sa({y-w8Gn7J`|^JlU?jXeID%vQ?aFq58e}7&80;*mc(Xg0@BxUmGcu~8Gc(r_Dq|lEpu;T8GdLcyaw_8)+T+{qalm`UN4^nd?2Ks zP}LzkFe*BMdkUx=4xoh|!=j1O+(2 z1xRL(B6y3<@1O2%Q)8sxgUr_~h#kmGW8bp1tHrQDo8ZH0yHgxonCv~Txp=i8CQVLj z4%CN3l3HX%?bT^SnC(5Ti2)nrZC7`TAfQyz)*X@oB1hDv_YMZQRaFkWboJ3zHxfpO zf{LHt%r(e?A)jho+rYmanMK%oRRxahejxIPJ-9+GU$hl64`c|p2W z6W-wH&Z`r}PdUyQsVEvjN)$1uM<*x}+#FCO)-61m(+gaB(+0*~X%SNO#XNEUAxf6n z>wnsL{xY)j=c-_Ek|l~~evQL-n?Xv9?Xux79lYI==hvw$<9SS8%&~S7o499diQia` zqF@bapGjRCTv{M0n6K3D+fT%)ekd5aEl7^9?X1y#$(GZg+$+eUK!-tS z83Cu0CB!(vj6`@mqt2&$yyPFsuc2t7D2IFHYI-K1<==7JAf*4j_yhQkfXb8U0z*Mh5!0 z@F^)d9LRy3#zmInEmk0K(OT|ptrtgL zYZjd+z|~KymdO=erJ~D;KJ5;F@}5nkTvkl6J0E%|h}Px%eb=j`pJFAs16LrRc!J5T z8Sf;3S$n7|H0B1x*kxtcnqy(w9~P7d@l_=E?Dfmm7OF#x{!KMPC5Xnu{qfTFmq`B^ zKsKGQ5u>n?6%XqRoBSY`x)rVXO9i@n`)h> zkARH6-*1=s-QLlSCH=T)F74Eb6Uq24V*n%>zaLS;thllSf4-oB%!_0WRWJ=TCifcF zwYU)C>tdy*XQAI{V={&oKulF@gn_xrURSKY@ZhF9e28X?`yIyM7w-}@cKnnZmBER> zrI(0kg>crVb5TjUSW!!&KLTkHV2F|2%dgv?zDl(d@X(afVC}}0@p?iHYG7Qq%ov+@Zfq^O`7e`5bZhWt;2lTNCSs_jIG$0EfvJu<>`;e47tYV!L=U9 z5yVz#8DStcx>b<%hSMMQvseqGBcHQ70dh&jFXzQloLO2ks`~-1t@;$U(E(VfmMH=T zi^b~DGW&yqJ7$F#t1-e}6e57a+h0>4OK5hV+iscam$mrtP%x9956MdqJU`XQ`j{~^ z&=`=F-ZPiBKD=72rcZWT=ny6rmEv|uodKtcO%r$`&%j? z)mU7$8ot+Q|5JT{F{bm&(P7sE5Az0=`nz-lR+u?ysI+!pJ0g~EKRh|)A<9lB}scl6@dK7eqvUtDIC_YbPBO<6!=p{bCPGbo^&s@kGn7dY9=f)j3d zd06n0Pl1c1BU6`Ox30STkLem4=nn4l;0)56l6!UK7Fpgz91^+$RX$^uad9aDoxwgytR^4&ew(pKl?7KK3 zwg+;?XB9@d%8w#}>O0NoM#aviIu%NaRHD90&F0Py-&3W(cfb5Er`) zr>wV8SP20R83=Rb`tBjBKL>_LU&i5-a8EbkLD9!_nCjG>Q}e6Kts$3cLT*%Z_w_Re zxb}WCjalJfva0==OMSezL7TX^(O%|{_4J|Df$zx4_9}c7UzaW8$XIr5<6oj>Epzp_ zk?=9(PTk6s8}s3S_1S50kVKU!OxZ6^x8;Nb^Of{vQR?!u0jGEwF_G%_zOCm|1XH*F ztRE%9NIx?Y*C;u6Z1*0uz=;@dH-^F5Uue!S$K%v5tATBWq(26aRnjIDcwHhVEywvP z(-p1DresU-%DG`f^^l_uQXa4dbUfBd&ul(k(G@%DIS)s(o^V_M7CxFoLgiw2!!RQG zZv9R!?=VrNu$|Z}PpNbz2XnSK;X2oI%8T6VCL;ich+z&`en--hU2FSrfk~6TKrWiz z)#;9>f!ZD+!)gP^1q(ZO6j8=g8)I$!ny;_ZS0ILpoH`bPy}!_o3~E~ ze~5$mUn?(h?=~?2`ZB}swWzZC$Snc_z(S@}pxnGrR&4_H&FFV@zd$rY&&{a%6IP*y zu)UWiA8K2Tf#3B_z)WTeeMLG%{GK?LGEhD{l{hr1UQqL#YxCbgk=b5O$+eYGY_run zOySXLP##aoeX0=#!v&1aaZf8V;&(o#Q^!JYMIiWU3ew0qpM?p-1>}M_!@;-e9tNK)CuM!MLp_= zqhypBEmpLjh&~kwY;FG37S-Ed5RqO*6CP&fXf0?Ej(oTF zA~^2et)T5o-W?iYHHC_pK#R$&IX0kv>0YbxlYV%H(76d}7mXf69S7#KQ&KEmw=MiP zk+;HusqN@lxD*cRU}$MT)Fa|mAG*mhp&H7(&yR1fCa`ub#1we>l=qW(HYnZ77%;`7 zx0jFr))ua3#OhrPI~;#(?W{*bNz!@=%A^fxUBq%ZW|t zM=naLXKs@CsSKlp#BdsM2rjWIVz}TR{{p1B4#*t*8Jd9O>NCw?a~!U3bfKV7 z;cC|_oaKxt!NVx3(s=u01aH0g5zTJ`O@X*x$`^$L;WU@@fzV zjph=R=tXy;oLP$Xt8=P;2QyPrHAxwh{f5Qsj+~(sL-&Z;#gJ}6NF85WAp0rmhdVHg zhXi?VgSc^FzkD|YFS1h>WO?sLMPKG*=bL^{Kx(ss)(ZB1`5>87)d!7mQf;8+W*hr4 zw3oHDa|*FGESzSp!49`J1-h70aaMeQ)NIGaLjNBK8-q} zb^l^f4|MZG+tSXi6zWjBk=<_UM*cK5HSBCPau;p3C0>FZ)HfLMuP!Qs)y3JO?|PvA zXb++DIf~SZ-WAnnPj|cL7#%gU)*e=@J9Sy3=gTa7jcI693y$6CVE=wEb2tO_)(L|< zbUTy5L`dtZatc`!@;GUdIA=i>1HRCg=0{)jG4X0gb(QWWT>`WX z6OBOOJ>I@ACh?WM_L6bQ(vIVt-|aiH-hrT9xRo4>zNL*obtoC!zCf9Je;AkwooLMNGqqIs9@|Tjk0qXP zUj~oo;2sNJycD4QwlXV|_nO4TkuO9yxpydpK{}pWNF!dS9am%3mWW-FwuooIfy)ga zoD_DBCeu>ipbtp{ccFNz7U{T-6!1a8>JHg7j$3|ug{7HZK@0*rR*YCGX;qO%{em0 z(&_w*90c)nvN;Wy2&{bg4 zN5sb~UGuL;eK^FSDRbK5aL`GDZ1BCrPjR%j%4v{^t|obb=R^aZ+*vV#-i)1_3%>2& zgNeBju);G;HB!L4kVqrz-_gjOw+Ewrui|`V0`m_K2!gNh`(aa4`j4=m>qdr=Kmn;7 z(Ip_fPRO$~!A!eG42Q?=&o8Cd72oftl|iCmYPwCziaSfY@}d8>^kLb#sFEO!8J+Dy zh0NFTXgCW_65mk->7goIfJkc0EbL3=XCghTxGC@!&j;@iZ9~|C?RN8^kK$Ys1kwgX zY|Ys``TOKneo&+?!%fu%F%)O6r3zs?z2BMg-m>@3gd;Ua)m+Yne?(@OP~WOYI%oTx z|FLdjLsP86r=87Vu~!+4JvU$`g#|w|x5YkRl59Mqo+$S@;#hsY>=l`feuBy@Rq0F0 z`laV8Nq2(Mplm{r^0h9aB5yRrWHOxcVXCujU85GKfdeslMxM2_vO zh$&j3rPO@>K0G3O;{TO#L0owS`WLUU^R8J&BA5mtFyv9PqchWWMKBpoo%04&0f~;6 z{qlf96DM18w9JOg@1*YRC}F76K#=@PG+4?)J0VgO{PSEIsheJmxFE6@ zf_kt&o1@@J6_hfAI?L1p=TVi_N=ps7u<>X~OnsQBR#WOQh4)vXISpKxIpDuMazeB= z-IuaiMi(o%Fi4T-0CJ=8*Wjt3(ew3SrZY5)Af4~cpUc-j0*9tj&^>=u zHBQMs|KvpCqTAqKKS#W=NW~GDb1C$@b}6up7}C+FjLNh;q6FAb{4ajhf(I`UH@r>c zz@ty#9?&_rTg~IZleiXFhqPQTSDOXEI;80j6Bw>32l;_2hdt7FW4>h+5T;1t*w%yi zf!c7>(fiG$YymSEo^lC3+XM1*ApHrv3?hiBP&=j@5Hu8sE`1~KxeqXX$zex#+T#41 ztA5!-EwxdP%T}gecmIjT`e%gWArej}r#+iWG`JfGc2~>q&4+6;M-WDLdv)yz+xS?U z>2nJc{`_AI;vz>=7QmDkbHt+)1*ssRH__2+?+*4|H~=r61p{yxWTnVy6eHAS?6WuC zlF3cB@}^nnGta%?IMP=b*d{;*QFkb{24TFLx($4ta{-sZ9wBo?-ttZNWU^OmwK86$jy8DtCMGGnc3 z6f_MeW3rA?sNvYQ=>ubb2rTq;#&d4Y4b#}srrpc0D`mb=^9~DqR)|3u#-y zAOcTuE8em%Wd66*H8=wHdU&Z7Sp31~mBCfVy&kXL8O-+&$bO?%NvH>Ef1qL0;cdPIShu z5$6e*p~PBxF9*gpsuxXVqo+|H-3j^>T}XLS3%)4bR{}?Rt?f@*|6`|n+-S2b_7)TQj#fXn0bqmoxY7d< zfY9zLkvoRNeC7SW;scRLuYW$vgqJEO>xK4{fz!-4Z`jpzQ|Mlf?&wg2WDtq<#yJpT zj?S*VT}gg_m;(%LjvZXh4%<@!aaFRww~u44sogA%Nj~QR!y24w5((!}f{0|}0I$GR zKa}e`k0)sc$fpZ3Q{>w;o7&x#K70^w%#V?`EDo?wj<3MT>T@ah) zN7vX>bUKpRNN6NIQZNbHdX$Cp${urGn=E-zJ$n`_AR4=?8ECE1t;;U5Y+DV-qi|VU zFW$Tt9I)zd6sgg1yhIlIS@aSHsg%)6<~ZjplF;uEV|?R4Rv%h9dR`#{yYudY&m1Q= z%MH5iY#x@f>2`vQacj^FrQtI-Id0RRs%tLU%GU9s3C3&0pDFe5KBtav82V7QPjTPjphg>WCD;cS9%bjqA+dCwadN+FP{%XQ(zvr}@gIUkxzB2@S_y3qrsHTmFE*qcAT6*DB0%D>24S>5 zE;gDyE}nI)Ah8xw`Jb$dq-mw53#O@jCwNN_)~N1-Wwy^wve$oEhO?f)dQb}{?roU{ z(2O&(mATaW#(G!4$CYCI|7Mcp@IXaxG^;pNO-I2VxzW5UYBvC09;E9=dKz9J(%BF$ zkZ7%>!2FT_COSLbeGHkp^ly91#ky&?H1`4BDuQcG6fu;hlxG3-7oO=uG6_HyvbvlY z4J2AsG>kx7{97s6*tQ@U!)P~&*BlJClli3Kvino&&X(W)q|@4>PVf$Fl4Sp%t(l6J zzh3;_BYC8!1qxwAE&>2D;;6{i{vAvR%ow?!Y(7tEAF+S_9#*7r#cjT4wpY~OId;DG zp-Fx)0FhK@8RT58>giCx>|MjFr8zTLLR}8|=dUpI5(`#;2N|# z2^ykEllZrb-w3nj;87bbB#)Rj>EFzt(3;`NcbcKb1N|A!`#3Wd7N`F%S$Qozw=3rNncODleMs{lwR3czSL% zu}%L*_NpdcHZ561VSE{`TaIeix6}kD+;4Bq_H7A9)-siKJP|E$GI zwpY=lQH&00&N#BM!dmg;7I59W=!qwnJ=IyFUYNW^4d)>Ep)XgY0@%H z@TBA-*WCD%3z!o(GKO3D)tg%NKI))?oH?(97X1M@Q2yaXo;~fU^w&K3IvUAYv-&I{ zTU(7=Szzjp;>1O6;npG|`Z(7B11kcp-;<3;_>&2Tk}q7sFCF_KAm+#b#=f+4L}e9Y zw~Lh+szwpZlPDFtxD)cG90b$@f1+0qF5-^#;-02#cBl1@3QD=;HUapDjWIvw-2vqz z@H7pbacAy&ng7X~T>3y%epz#EHMk0-9{c~k9U&_GL-#{ISg5EbtXl!|(z$t#bS|Gb zD~$*_(`C6gK`HzzICq^5OMQ=3(v?Fbm!B5=?f8>4+lHgSpG3GM!QaE-+wmNy=_o^8 zZ?$*CnYV<5yPEyowbac23RXlQP7Jz$L^^yiRyPJUnSFmZ2`)a_a)*%Ju!>Zqy0w$WZ!L(j1M{mZS)H$K8+eB2nWF!AJQeIxdb~Dr%i^01?c6rU&!v(p;-r0!zdu?_8PhHpil*PCH=xeWMOnOD^41Bx|IVkHF?Vx)h*ZZa-DQ zlu4MHnk8}vh+aS99~q1dpGpuK8jv*Z%N!4$y4l5%yOSRqItx<833ASY-G8S~rKj;{ zq1+!&ANdjd{@e26e)m0iOyLCsX@c7WIi;>`RA|sc#g52tP>9y9r;n4LLo6a7v~J!d z3cz3QH&yGm#@Sskl)**-bP)Z{QeY_ei7|3E-6V46!&rIho0eR8N^>taIw_v;N^R!t zP_$f6TlC%I5!u?kC1|w<5Wkl6;7)L+M1{?oViHsYbx=BhW8fjAVHQ4^(h>@b1v?1l z8?u53honYvls3C6!LeMwA<)S6Q z1#dlM8Fd9O{=!gK9nU6U33<|b>yHIE$CFmgI7I2eB6d*X3M!CN!AL<$gA{B;rVzA; z8G-AnhFW^oMm4;m?~1SeH`sZI)w$i;&E#`+uKIzyCg%R$_-*mcmh$U8xhh&KeYZ(p z1jOP(<<#MR$l9`wOu1Gfow84l{MJd45LBbP&L{SifE^}aWvo@cT7&Uq*IqM8vT*!+ zHCI)$7e)E8N5mXkjM|zc%F7ca$e)Ll=#Yr3TL~e(8NkxlM zqNo?-w&&I4@!LHa{s-pVxGZK)ebD=^mjppn#CFsRDnmOQ3P*v=&uM@Wss_C3?`^$r ztc80Q@4rl9wN+5SD;zv#Wx;cT$}6Itv}Ae)6dbg~hO_ERY_a>&AF^~>6jjBH>11=u zAt{BgCy0_&Cp%9aH(&f7 z4j){?g0l+(STE)(g&(wPE6(!JO$k3Q%MgFHd{wGWEwPiCnQ(CWcufs)euA+#qKOwl z@$wxg6;|RvqBXQ_zedh`lh&Wowmy#d^K#0YL^)v3Iya7W(2tC}uzOm#(PEv<*t%8Fvo1L&&AC@10m74exs@*wgbl4Ii~U|$^H0*mZ9NdU>2Df{XTtA|$V03A-N$aHyL z3O#tILiVu>bfWeJvZnCbDL&J_!)b!y!=o`3pvyN)t3pDK21NG{$E6uegx(c=(XkK> z<4iXu%NfFI_M_9HO7~snmZOCFbh`zbShKt9hba`pXp|OIu+GAIad5s@Bl8bNTXYN> zhkquAH4HU*wfGZ~Ft2SU(S;{(ZQ$Dxcehi$;Q|L3ZqsHzP6-i`a3xIH?2>Rd9ovXo zO>{Ml4IF>2Yk3KAFb5n%q10JjY4+DaSjHH?C^*KAkA_C15j&FK=2+IA@Rx49Fb;zY zk5h+4@+ueX){yuQ*Mff%vW}}6#F7`DsUcr3&u>n=MsB12oa@ij#Xf=+x!Cu3UNsgk z(E+1{0bW#tK+Z>S#-p7@W{C1W5-BRW%!m#=I#~hJOH->5caYbJK9QBWRfdj9-&eWC$ z=Orlz^r<{_mpe$q^RSbVw61x>c2dp)j1!gHE@=3VsH|t0gzeo3ooJDi*Cj>Gvv-%! zyUoewS*I4PvbIXNv25}e<)EH|E0u$99`(d$uNckf69s?1TWxIM_1cXjvOVu2A}+vD zY?2m|RiDXD3hOWxniA5)%MNvnUVXz{9vw@a!S}nBsUO1eOnz4n#I&x)ukcCUTtHzl z1B9O$@*fE`iv{|@Sj2ki`YGcCT@mw(U6`n~%mPTLsyBmO%}E$Jfn6%<#@#MY^b-Q3 z)bDmvZ}|tz9C$F&+0_LJ=Mz4GJoSDg zZgA|+1P@%5vG6uxseng!>l;fSgv(nh5eA;dK2^$1K8ZQRh_1-PvsEP-Hu4I_)gPVN?3)(UWkgu%J_+5L|9`H zkdo{+Cq<{D^D!(LLuI?Hf_1+d$6&O`J3Ae<*ZrG*9|1lz5L?b8KT|M70MrA3{VN0! z!IK@X3|_NTlLq-}X(I>fl?YIg8Ggc}axbUpXkIwWq^Dof7sFvQs?X?S#l35j-9XGq zm(Wt|a47#!zEZrduIW;E>IaMlxf$C9KIHhXvbNkn?R8%H8TwN|S>x??X-J9vydX}e zy^&91LiG;)5!iXKLeN{oP{VdFtz)IpM&#W7drJdtg|F6ke+vW!aMBjTgE|@LG%U}q z_k=WDx-Mxm62R9Kp>3J)ZO%T{%>w1SecZhVUc`0PTBXM&;rWgX)1gk;Iq zEer_J&#`o97{}+y$~G+{PDoNe#PDcXYrmdN(?4`LoR44HQg&%>xKNA}K-_$7LK*34 zVx7w+Gd^m=Cx~?QUi6p=VfEa&mi6=L4D`f9Ow!E2lL!XW1(G?7Nb=F6-59==)@iqm zK1Cmj#DD3UD`%Yo(h-XO#wMEl{s*i4vlJquSiToscp{tB=UxI@CdZZSO-4Tu`>Pr$ zp2V6PQ6!n%$$ zLD}B==%;1;6W0X}mO9+*@-j5Z5gCp8$I5MAjDPaOlxhIjr@$i#PDIHqhP$8KtrS2X z(&N^Ku1`AcbH42{4+A=4JgF`69Q%bMprB~fV-e4>UudOi&1%>(xqI!`OmxDKbBKfs zN47a8zciJM9;e(+9DMh=6~B7ACzQsID}CBc-tY`(c}Q4npvO%^Ag5!L=A|kSuBDXe zM^_G9isPgDaBSxh>3R0yLXuUWSbE9-RFQypDy`2a%xm34$ z&XlKG<7xKj1>!jxx2-*d*XI$}JX@Gpgt#&J6|C@mXfo*|FV!IOB)L{V%kmFD6TB^` z(g7`9`r48R0Bi_{R5s|1`q^^*VW9D=7->(ooL06BEh0nkAI5-CY?lot--HMHm>6SO zMMXZzJ;SwM z&dRbBlxUh>NhfjZ&%=J#m3|y3B1#^)%#dN(V8fi>>GB=`Tk6mE&UasJ#u+n5l4FJu zW4q=F-fzdtDQn!=X~!E-Wj6;wcw8)2JKb>-cz&A+N5sI2G@yX30R0ZhErp#On#qu; z5h7rCU#*EPd-a07>artRZEZQ3$icKMB}ZjS8|aq%3Pp?3elP+@d0@Q%{v}esLje)! zO%T%?W0MGmY7Cva-Z(Qx42lpcz@W79=XUXWBLaF{N|Wk-plI~=}K_#)7dZ|myX@O zTRq>AYleDWqU(jfnY9#HwYor#69cB`}SyZ3tO-!m|400`8?AbAW#-DQGhbj7gr!@4X zMg{Tm9{Q%t-|%Nk*_|RzE!of87~B+x^kBJU#}S(vF>=)=C$c_{o#WOt*n>dyvVTWh zru#6Yk_VvU+(G(L45<|n{aTP???$)*C+?1B+QW5GD=|TY>`hFKs>gwp{5+iUYpbAdH?%b% z`$BY{9M=1s4&ijAUbm{E`*MX(ehTZfnb@oITmq%$CGWVR-e>RpaYmmmXFdH+>rddp z2x=EHQQvF=Aj}#-day22z}Ii?RT{(L02Jh(s5Qi4wU>&wlmj(UIij>j{ zYeyWhU)9`mo&8s z&k_!^5k9@6bLo0*j|74y(LFiNlgCOU5a%5RXWlnqFj3WR5(HZbE-n`WkjlO!Y{#hc z0G0sXEqSuo|3PK>VL5H_wN8o(ECoS6+?i@*%1K5Rv>x8L{D)6Gd1|iFR@_@Ay zNPr@=EsJ=+BIYV&Ep*;Jd`nW91Kg;*Qqhs4wQhX5xUVC9Rp@Ix5PD3ryune z@kjm7?)>Kx8114W#`$_=UQ8G-7UJhIJ9n986&0Cb$?7El7i)Oo_OtkVn{~ZjfYHgJ z1+IXax$d^ZVDl(qk3G%pqKXJ zy%$zR*@nUyD)IU2J-?l4PiZJ$8ckN{b5KVi`|a!s#sL%InOi~>LFm=av8UmV;a7_x ziw+MvVa^aNPVGV@0;KZFa=XK5x-G=B6;~z&`EQh1U)D^@8*;Y9-r&{GukRZbD+0+$ zlxXx1Yr%HX_V8(r44+me@0*~W^O1fKhV>lI-bpO*Qm1obzh5~4#kn8P|B79d1by;j zYWW=JVm?(a*!elc()j%RZI|5$O)mO49l-Er4$|qO23vLz3kbPz6}l~P*yZaMy~lCO z5A-0aTyZ;A57fG5PaBrQo=8dB?V|rM9e53S;2WO-4#M5(s{IJELlusM+=ff)V0aDx z2#l-pVf@^7?=U-;$2(SIa71j7P!P{}fv+Sszl<*64``OX2sU6*Pemi(kU0zl`(FWuf^m~H_1Uj(SU-RA9f+XaoU6AP)h)qSkP!~C$ zOnuh1?0}d#FO}zX$s$++%K#thVsWZQ&8XmMq7+#$B_P8mzYiac$U38pQ@73KM*ga! zmPJ|!{KzT#rbWJMR}w6>I;br?yp+53Y)K7*jSUa(f{Q^wcIrjPKl{A`7o42uo1=kU zF}u}7K;(%q$ZMgzie^RF_Mt~o7XVO;KW*LWa|x?DVSlKmR8ySM-Lcya8|hKDPylzL z{f*=f#&(hEe64~Cp*23UkA+kv<}(=+ee~i&@VJ(f8&%0xFOWInYVCh5_M2sQiwx$w zd193-PHQWIxs>PE&J;F-WAkq zIF6`1qRMldo<%tKBgs0pC`#>9$fk?? z6RZNLn>36UXRph*%z;iqAU(@M%=bqlzPi3VXwM?pSPzf7`K4m3P{=>vQDC@jPh%+e z@!SeX`{u{ukWA=jQmBuB_Y^@5a<~qG*^i1v!clvB17L`+N9$ zRo6?#Nmv+k7g`SwX+C0ULVSmhfL4S!`^Of(F+>HSQ~#7DXYoN+tLo$BIcGV=_mRY0 z6AZV>w)b~}+}D^qajQdcre6XBLQBD`ON9QPr^lv{H~rZa!oi|Q`O1?qb1U>22hYPj z>4!H9)q0SI`BT;~&4SW?U}4D2UYkxY9QT*ifO?|%7*^#h5@=_a>Vd)7X+Nd=@S z7ug!C9?ul-ck9;}nnR^KEt(pBrF(}SDoioeU@^yNPbM7h@8xYAJFHb?a-1-PuBsOT zc~s6-&K?T@iER4@O6af3g(>tf-ZiMSC3*>}SmVN-ODK6pFm0odO2!+mC|)WpoMwb_ z&MsxEGD_Nk&plOVoZ1lARmWTtLHmZsm{J3vAmpy%R2~6at&VOg?hI8V?h#3dFAeiR z{l@_uBK}u9wN=74z(9^LPv5E0H<}#50EoI@U1>fDZMWHhewGaC|UE6s$#R zu%F=%s^L)d;*J1?Z<+1>ehyBAiI?s_jE>{JCij8LZ;a6BwUa-Z%0V8Z0Dh@cf^F2M zaZW+~B0<}$^z_rb#54H#xP%WV@MHGo9WTSy8xx+AV71INv>r?*#T`nk5ks4_$1sNm zd3e&j?0_`=xob_)90l7vOl*Tl#cU@M3YQOS&TwemeNw0SHhw;%{j2nvO2+YvA2yK- zBg@mb!aS%D&A*gA-7N@3NqwC%A-Bb^PBf3z*dKx&qxKL>wkeT9S21H*aQSQoux-oC z3O+t0Eju5-KkyOfpC3RR1d3h^pIcq$Fzg$&6343GvL)%GBs6A^Fhd$Yej&i5S>&1p%? zXN1g2k(?Nt(N~a22bqyure8RVIga1}Fww8)77+ z?lAgP_DBHw>O0WS@QklfJ70Sdn(ZN)J3K`M_33f^dNgf(+SE=EKcc;Jd&KT86uQX= zYg;``=vd;Nq7$LuLbbyzZu*R%?h9+vQc>Lvm_Ao@9D~cKa|p55c^zlV>}k)3riyNA zvG~HuOcIs=3EYjfssb^DKM8bdgfW(G=<$|)(MJr7 zN{=s%WWe1rVh<|wLHlYE&}1&RVyursxO=hutz4*X-Aj|egA{$0T3n?ey$uE{wG~i> zJfNWoJic`95;a{c*Q=#j&;|F>S%VlUDfS;NndReNsd!_L6YSq=2ek4si)s(TvU8jr zo~1p|c)I~LR(}A@>JS{r@Ix&5)FT7&yw@=cZ2D1GtYSQFrfSNNY$>ehhi7D!Z$VR& zckya}F!cV478dc}%pq~Qvwe&w(NKOKF*+0rfnaHBgB8*N2~-uEwKJ$dekSpCl~wi1 zHwRavbRFrzncu&!s0Rk5>YI?PexwwKO?Pc_O*N4x;<@i*!7$AWMBx&WFEb@7Zp3;^ z*9TEO8hZND94Mwshgj1VUW$zq7y*jR@dH7N{lBE081*+CUR9px`Pb2Q#$19M)ldr{ z@NFb1N3vuymwyMnL_bLFF4oLaht5Qzs{Gg--NH7Wj?iJKYRG=>vH4s2(+Bd_i+hbC zvAJp6prHy*#S@+gwA60(H`rOr!d^>8ZXi9}1c>}l)bRS>%VC|EXDu4FQ(<|2d-%76 zuR(v-I|+uLL$Pwe+c6Sz6n-mxfB)RgORL@Y(zv~W595rTf!NTn|vJxpA&L)R0+(^b!0EY%^Ke|&!*YgFM3+DVoHxbz3s#d zoCeE77pXtIyq~F#XOpxb($BhTLOPfxH@n91J5wKz@a$zcFU!NRy{dG-uBh9(+ z#~cMhK|oGD+c(A%fST>;kJ!_7al>LtXA{F>7FtPntOnW^kwhPhRj!?sz{VSl`OqEz z<{FF&n)wU-f}A<#eH4$$8x~r8AbYczN=DQPA%vSs|F!2b95F;$yNnbLAr=^*A;@j- zwfbL@fYV)OjsQe$YI7M( zgb6NV`{m2}FZ3cP7h(*^D(1y=(2jupo?S$zH=#T+a3x^kOK!YgwEA#p)^A`jHrqfF zcEPgXC0Q68Th&(GxH}nf1-(x{T~uhKE#q_0V#;?NWHMS*srW(aQSkm^HDy$!DG6ss z17HbD)ao|*qZ;fHP$NPtS?LzPSu%{H6j8ZbRHL3Kj_f|c&VyY+k67^_epj95?KDi? z`pt*nea#5$BT~-$Vv1+Q%L`QK>)) ze?nK(`F6MuiRNN$W94a!ga=kZL#rv3jq7WcpiBdDN8FWRTl*rjX`o63;~&tp@DIt0 zhT*46si5{k0cK=PaGtC#oHGVvZvM8xSLT%`;n`Oj^Ii+rt&x>amL}TTN->S%86U*- z5R}Ur24fz)j$Y|ob=Cy3*PB7^pgsYp7p%#4 z?0#$sK~ELdVS{$Jf_5O2TaCBDkQ(c@!up^?&URu9_2aNN7I5v9%D!aP1{27;?a#wt z9Ptp_5qh)+)z+UO*5Kuq%DJazyJZGmxo+O`KKcE;tj;Vb-C`lopc4hY@c&M!%=B^K z+17$)?_tw`JZF{+Xb7y~F_S@-Nz|Bz_StO%^fU#7CUoCb$%`Dg(3Oxg2w=?x4i8=R zDvk7+xlCQmFzq0XM}FK^@jq`t5WuYhK^F_w!Dm8>Pk?K zi_>2QIArARwF@E|-xGaEE3@WX+54d4asi$_ID$DaFhZWv8e1AVG*I;c2K`_3$ELW} za6PTWJI<7o-RwnBB+UhFGlh-3k8?lY6*RG^|~F`s;=_<&78VCUmN+stz5AMZh{ z{_oG^&)#AHhb1YA2A$L%eG6i@cP#r}7s6YZ_+NhAOe&SOF?{`P>;L}5eJUQfDGFn; zTLx)pp+kF=4ZyEd_U{y@K6yR*>j{@-)A3Pg|G+5j|FGF{!=!#SPCF-MLA zmiGXZ$>XQZfXUKkU8|6HmN25!SMFD0VDWT)MvN{``d6zsdMT2L|H#Pu1}y`dk%TPA^N_;5c{IUU0Walu)NMoij^7<;Pd(ms zQjdV5o1}~rBXY$RJM8?nd-2&!e6rXJG?4WzE2@?vqUq#lbXot?V zkPm0h%rXDJCkT@{<0_SyAWlqKj`WJSCl9GAK!9#icqzSkIJib@8+4-L;r9V)|A zqX@1jT%$qrKqelbAQUn%dTyy446Ai8Dywm_=#h|u|E!?v-QhPnxe!USbW-NnEHcc2 z=E}mn;wOZ_M!b*lAOr8xy&FFi27zO>zv~v}zv&Dyka34K9=&^=3@-V8TEnY*U3oY7I+80hMH|#Uj!2259e1 zQ)1@HU?_+aukXYn8o}mqgW&t5eE;3coYoq$_lr`f)Qg98N5^)j_;LaJ4m`F=!li(? zRaayOV+@w07r5=i^HV-4gMAJ4Z?tdlw)hma_{(mQCTYCCH^~h2E=nmqd0&IfQ93Ua z@CT@5FZp?V-2`mI#C89+e+8;Tf-7X(^HIjBiOA2B*|J1pf3T*xHgA;Q91xj%AEIVo zq@6ITv7^-7F^FDfEzx%HCbo>)q{fs#22JY&qb0xc@0V7MB6r-l1z|^s4S~`5z!^wM zsSoit2srj2n>MOmWBay-W1Iu%G(WxWGZr~(F!q9|pw2ANGVKBSm+OAV*mme|ns->R z2(mIn8?u&&z*((Ezu0e~Qy5kNnP!E=4Cf^af$&*+`OR--Bc`_!t}NQLQT)^3KJ?BUWMM;xhtTxo(DCYX-fMPyX zl(TH21)_Kx_wl-r7|jK?Y*xfbRE53Og4~1w7!V?0(OencTt>$VTK>A`fft9NgZ7Xu}B|Hr&y&Q+tDPUgT*D!k^t3s zX$v$ccT3=1ayO6Y3)q9r^j9k`dCTIqRu8*PK;vX-n)UEQrfDqpmH}?1@?IV-z?_P2@_sxKTvMm$@!j8>y>i^K3P*7XgyHmKHhm`FnHi3`>372W zVBe14-o+~S3{&3WbXmTHgi8o~cySfzW$vBM#wNaNn?$vl+ZJJ9DzK1*$SV9OdouEI zF-8b_?-vAd%J_jy`BPn@MDLNujF2wZ8&Wj*rFQsF0_Ls7G2j*e{}5^aF_= zj{64zXDU5Sa~jn_ZfS$zrBHbXxUOZlUIE~MHj&s>hpuFDo2-$dg)*-91Xr)oYS%zC z&%>B(eV3fSJOouS8wC{pT}O9;z^|HNF=MPm#WRP{V>cVKLqj$4(s~I|NoE4QU==Q=OCJrMOfHi~RC<0IaqTgs^X2oQ%?=pCWrLQGR@#!N^ks%-g zg~@X(u5uRLQrp;y?m5;EH_CC#`9M|Mf%9QUl)psfDw)#D!%S7(7Rt3E-7ib_oxUA) zdAg9@!yhjemWL9zA0_ROn3s3nB2+K5tt~GTb6z3}KnMpWkdj1W5VcVc^R3djRO0dT zHT(SB2y=sn zB2%+ko&?7`&Qagh`lN1UqqLan|6*);(tF9MLZriOC?B^X2~W16%@JtHuwSipS_{hzV=linT0Dh}|UjQaiV1JuFysr03MqvsewX-?_<6(Cb{xT1VA zsp-2P(_6O<2xUnMlI2{k1~Rkej#AJ|pmF9mH>iEN1W0Lz-Chj#36>zVK~qeqm7nLE zO_!`~^u2MX${S~XBLAXVUUSiEGHZXT$Ke;?TAuwbF9KnS`SN!3v&BqauT}4CK=dtO zdK_Www6D51=C+)>Y%df4y|MWCEQ*)T72nSUyw;{}9$-eQ(H;h@1lHWs|G;ps`l$$6 zg9vs8to-wpMCkTYBf4bcek8L*0P-VW-jVvc!*WYCC|pXeDVu=Ny?*V?;cDG=js!~Xlb1|9a4a@p@+=V zh^YGpny4k0w3BgS0A5R;m@xbg52oRYoZ^HN##tQSKgmWmL8%a{5xLnXd9l$31HL4F{>YijXM=znK&v!lxSXu@-oLKGVS9uG!;^FeK}@v3QA#wG zO(8sci8k{V(LB8lBYZe!bAr_)Tm@=B$P9q;rx7uV=e4yFOy=61ujXo8r#tSv1+z%(bcDuH2biTo9(g?f*>cWsM=LwGK z(}_KzF7+FNBHm8+nlZY;mYTmuCu@o4VMm8xgq=2#WXuJ_L1Ol_HB7`S7gxZ=m_E@v z3P+@H?WSB*uUvEnHWBd860FVl7ZvvmU6e&w9-{O?-SuwnX^+Rp8xdtxu#;Xp!mvFP zr(KfvjIfc9f{jWScYuTJ>aGEKG{w^$l|D#&z`?v>s9v?DQP;X97_ERoxB=l3ye)fY z=!i#x$YNo069?wYg?-f?qg+NoF*>00tE#Tj*k@1`v-QL3p=_4hyeh2xaUTqL85D+9QN_1KTzp*##Ul-vNQGbG`sYdpQ*d5+lPlfyd+UE&PW1wtQS$!JFy z7yRU6wO!)P2lIC9=pwv+ORGg7zmf8rd{wFV!eDD3QPw{Rp;{0hCJDKTVww;Kp6a9t z`Wc7wSXh=IH|%{nYZNbIeG)S{^~vaxsyf;E><^$A+TV8VxuoO=-~TcyB>{#`UE6?4 zAjx1mwN+L+ZKT-x7;pw6f|BB}=oU=`A$W=bl3(W#7bm07_dGt$Z_YmwoIVtg#?IHk z9&xWgJXWM^$xwd_G!WFAjAqKtI28}CI(tFh=*pT{NdbrS1V)54-Mw&(q(&_RY`I1E zK9DnLgii(B={#MSpIe#PYjeSoYr{!AQ@woz?G^lSruQasU-AC)O!)n>RW(c!2&@io zkLnp&gS0_k&{U^~=n;qsuI%rLUVu}ICj(iIsIP6zxA*Ha$j1gU679Ux?>^97*OWAL zVxSqOb(e3eDuE~WNw-vg1ohzxZq;Mr%A2IMB0eN_j8KHqWW|;Uce^8P8tI{Z$5Baq ziAVWxO)$af?s&|<0}lRsMtp2rb3$ti&Q4fMbkXKD)Z`f1|Bgc(=#`dDSO^t}n-2w6 g$oEXMD3TKgsdJR|LygKX`kx=FugVucaf2fF^<21lDgXcg literal 0 HcmV?d00001 diff --git a/modules/config/nix.nix b/modules/config/nix.nix index f584a4c..fe14425 100644 --- a/modules/config/nix.nix +++ b/modules/config/nix.nix @@ -1,6 +1,7 @@ { inputs, stateVersion, + pkgs, ... }: { nix = { @@ -49,5 +50,6 @@ templates.flake = inputs.templates; }; }; + programs.nix-ld.enable = true; system.stateVersion = stateVersion; } diff --git a/secrets/smb.cred.age b/secrets/smb.cred.age index 8a1120b..a0f9d84 100644 --- a/secrets/smb.cred.age +++ b/secrets/smb.cred.age @@ -1,11 +1,14 @@ age-encryption.org/v1 --> X25519 3VPtgGs+YkYHBe63OyhOuUVL/fVX//XSizOdLHR3wDI -I/a7lYzVFGXLuBGtvn9hbsq6Tb5NMjgb6C0x44AW9hc --> piv-p256 XTQkUA A8ttYGbQD9jY7zA2X3SDynQy6WCOsp9qUenalQ0KtbPx -ssWdY0MKCJ33cVLLxR8Kv1wLbEz6F6MrV/yRcZK5fuk --> piv-p256 ZFgiIw Aqe9ZNtlViD+o+pMDP0F1FtUGFw35KmHyhjnFB4XVPRK -+I0y5TtoxGBla/46dk0tEzBEakHdb//m9ts92QCm7XA --> --grease S[|%w\&o t$efh*] jl8~ cB\tOaM -DpG7+qrkZLPtzRtZ38GatDO2rthpFyT93E/pqizz69QK0OXgv4ZAjA ---- f7oAB4l0kZpBDfwwwUwH/g76YX7GhbSIw2WCTNcg6dc -ӧ1vzzN9xt!Cr_DGؘVcr*[PRtCŠMR%oX@sf!!b&1>] \ No newline at end of file +-> X25519 g3YIxGyN1eZ+1EBvmDOidwML6GtFdSDZdqmgcoXStkU +CX8+qiwK+8snDkwzQ4hjP1LvXFuSIGjzGzB8ZXoZFgY +-> piv-p256 XTQkUA A+v6zX1feVTgp7PcQVxdVb9f+swtpTREyjDfi00AgTEE +MVwPR6qqPmNrhStXBN4JqzGLiKaQQkoQBUGzknUpLgs +-> piv-p256 ZFgiIw A37uVQyzvorE7+GOYcSNpGvwVfxqh1OJYz5lQ5+sIQ+m +AJqdNjxgifzfmYTXn5XTPC4DHY3r982xmSQU/HirrrM +-> piv-p256 ZFgiIw Am/nyZaSfikZr+OdP9qhIjhRfUSRwlxUclus3Bahl1Ed ++IWfzeNXvFO5Q/s8XJkGCJguMHiuTM5dnks9M9pRw/M +-> qPGW+-grease +VsuA9wcfbxca5OGjj6gOm2z4sivSF2lzhHM5gOznobFeMZDAbv8i+G0KPepxwalM +/CAzsYTmY5Qb6abKb2zAFNQ +--- eJn/i1/7jmP6oCQ6a3oRiAkSf6IKhVnLBIc2Dm1EmeQ +=zrsr߷ p5֎.+Nq…)N@iQ͠_ޙ?13ȗ^&{*,}zB \ No newline at end of file diff --git a/users/patrick/default.nix b/users/patrick/default.nix index 57162cc..5663300 100644 --- a/users/patrick/default.nix +++ b/users/patrick/default.nix @@ -65,7 +65,7 @@ lib.optionalAttrs (!minimal) { ++ { "desktopnix" = [ ../common/graphical/Xorg - #./streamdeck.nix + ./streamdeck.nix ./smb.nix ]; "patricknix" = [ diff --git a/users/patrick/firefox.nix b/users/patrick/firefox.nix index 265f8af..5f0e11e 100644 --- a/users/patrick/firefox.nix +++ b/users/patrick/firefox.nix @@ -46,6 +46,8 @@ "browser.tabs.crashReporting.sendReport" = false; # don't send crash reports "accessibility.typeaheadfind.enablesound" = false; # No sound in search windows pls "general.autoScroll" = true; + "browser.translations.automaticallyPopup" = false; + "browser.translations.neverTranslateLanguages" = "de"; # Privacy "privacy.donottrackheader.enabled" = true;