gitea! via nginx! round 4! with ONE t! AND ONE G! god damn dont do drugs!

flake.nix

@@ -85,13 +85,13 @@
         
         ./modules/sys/fs/btrfs.nix
         ./modules/sys/fs/mounts/efi.nix
-        ./modules/sys/fs/mounts/root-f2fs.nix
+        ./modules/sys/fs/mounts/root-btrfs.nix
         ./modules/sys/fs/mounts/swap.nix
 
         ./modules/sys/hw/boot.nix
-        #./modules/sys/hw/libinput.nix
+        ./modules/sys/hw/libinput.nix
-        ./modules/sys/hw/cpu/amd64.nix
+        ./modules/sys/hw/cpu/intel.nix
-        ./modules/sys/hw/gpu/amd.nix
+        ./modules/sys/hw/gpu/intel.nix
         ./modules/sys/hw/gpu/vmware.nix
         ./modules/sys/nix.nix
         ./modules/sys/perf.nix

hosts/nixcloud/services.d/git.nix

@@ -0,0 +1,37 @@
+{ config, lib, pkgs, ... }:
+
+
+{
+  services.gitea = {
+    enable = true;
+    captcha = {
+      enable = true;
+    };
+    database = {
+      type = "postgres";
+    };
+    settings = {
+      server = {
+        DISABLE_REGISTRATION = false;
+        DOMAIN = "git.k3t.dev";
+        HTTP_ADDR = "127.0.0.1";
+        HTTP_PORT = 34951;
+        ROOT_URL = "https://git.k3t.dev/";
+        SSH_PORT = 34952;
+      };
+    };
+  };
+  services.nginx.virtualHosts."git.k3t.dev" = {
+    forceSSL = true;
+    enableACME = true;
+    locations."/" = {
+      proxyPass = ''http://127.0.0.1:${toString config.services.gitea.settings.server.HTTP_PORT}'';
+    };
+  };
+  #services.nginx.virtualHosts."git.k3t.dev".extraConfig = ''
+  #  encode zstd gzip
+  #  reverse_proxy :${toString config.services.gittea.settings.server.HTTP_PORT} {
+  #      header_up X-Real-IP {remote_host}
+  #  }
+  #'';
+}

modules/de/i3.nix

@@ -29,11 +29,6 @@
     };
   };
 
-  services = {
-    libinput.enable = false;
-    xserver.modules = [  ];
-  };
-
   # useful services
   services.gvfs.enable = true;
   services.tumbler.enable = true;

modules/sys/hw/boot.nix

@@ -6,9 +6,24 @@
     "scsi_mod.use_blk_mq=1"
     "transparent_hugepage=madvise"  # CachyOS default
   ];
-  boot.loader.limine.enable = true;
+  boot.loader.limine = {
+    enable = true;
+    enrollConfig = true;
+    secureBoot = {
+      enable = true;
+      autoGenerateKeys = true;
+      autoEnrollKeys = {
+        enable = true;
+        extraArgs = [ "--microsoft" ];
+      };
+    };
+    style = {
+      wallpaperStyle = "centered";
+      wallpapers = [ pkgs.nixos-artwork.wallpapers.binary-black.gnomeFilePath ];
+    };
+  };
   boot.loader.efi.canTouchEfiVariables = true;
   boot.extraModulePackages = [ ];
-  boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "ahci" "usb_storage" "usbhid" "sd_mod" "sr_mod" "i915" "amdgpu" ];
+  boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "ahci" "usb_storage" "usbhid" "sd_mod" "sr_mod" ];
   boot.kernelModules = [ "v4l2loopback" ];
 }

modules/sys/pkgs.nix

@@ -19,5 +19,6 @@
     ffmpeg
     playerctl
     sshfs
+    sbctl
   ];
 }

modules/sys/sysctl.nix

@@ -2,9 +2,9 @@
   # Transparent Hugepages for better memory performance
   boot.kernel.sysctl = {
     "vm.max_map_count" = 1048576;  # For some games that need it
-    "vm.swappiness" = 200;  # Reduce swapping
+    "vm.swappiness" = 200; 
     # BBR congestion control
-    "net.core.default_qdisc" = "fq";
+    "net.core.default_qdisc" = "cake";
     "net.ipv4.tcp_congestion_control" = "bbr";
     "kernel.sysrq" = 1;  # Enable SysRq for emergency recovery
 
@@ -14,5 +14,9 @@
     "vm.dirty_ratio" = 10;  # Faster writes to disk
     "vm.dirty_background_ratio" = 5;  # Background write threshold
     "kernel.sched_autogroup_enabled" = 0;  # Better CPU scheduling for gaming
+
+    # ECN
+    "net.ipv4.tcp_ecn" = 1;
+    "net.ipv4.tcp_ecn_fallback" = 1;
    };
 }