stuff

profiles/desktop/cosmic.nix

@@ -2,6 +2,7 @@
   config,
   lib,
   inputs,
+  pkgs,
   ...
 }:
 let
@@ -24,6 +25,11 @@ in
       displayManager.cosmic-greeter.enable = true;
     };
 
+    environment.cosmic.excludePackages = [
+      pkgs.cosmic-edit
+      pkgs.cosmic-player
+    ];
+
     environment.sessionVariables.COSMIC_DATA_CONTROL_ENABLED = 1;
   };
 }

profiles/desktop/mpv.nix

@@ -0,0 +1,6 @@
+{ inputs, pkgs, ... }:
+{
+  environment.systemPackages = [
+    inputs.mympv.packages.${pkgs.system}.default
+  ];
+}

profiles/trusted/default.nix

@@ -0,0 +1,6 @@
+{ lib, ... }:
+{
+  options.profiles.trusted = {
+    enable = lib.mkEnableOption "trusted";
+  };
+}

profiles/trusted/syncthing.nix

@@ -0,0 +1,21 @@
+{
+  config,
+  lib,
+  ...
+}:
+let
+  cfg = config.profiles.trusted;
+  inherit (config.networking) hostName;
+in
+{
+  config = lib.mkIf cfg.enable {
+    services.syncthing = {
+      enable = true;
+      systemService = true;
+      openDefaultPorts = true;
+      guiAddress = "${hostName}.tailnet.helveticanonstandard.net:4000";
+      overrideDevices = false;
+      overrideFolders = false;
+    };
+  };
+}

profiles/trusted/tailscale.nix

@@ -0,0 +1,21 @@
+{
+  config,
+  lib,
+  ...
+}:
+let
+  cfg = config.profiles.trusted;
+in
+{
+  config = lib.mkIf cfg.enable {
+    services.tailscale = {
+      enable = true;
+      openFirewall = true;
+      useRoutingFeatures = "both"; # TODO
+    };
+
+    networking.firewall.trustedInterfaces = [
+      config.services.tailscale.interfaceName
+    ];
+  };
+}