7 current 2025-10-05 19:40:33 25.05.20251001.5b5be50 6.12.49 *

flake.nix

@@ -1,6 +1,6 @@
 # flake for blakes nixos config
 # define new devices in outputs
-# generation: 6 current   2025-10-05 18:36:02  25.05.20251001.5b5be50  6.12.49                          *
+# generation: 7 current   2025-10-05 19:40:33  25.05.20251001.5b5be50  6.12.49                          *
 {
   description = "blakes nix config";
   inputs = {

hosts/snowbelle/configuration.nix

@@ -17,7 +17,7 @@
       syncthing.enable = true;
         syncthing.mode = "server";
       tailscale.enable = true;
-      nvidia.enable = false;
+      nvidia.enable = true;
     };
     homelab = {
       zfs.enable = true;
@@ -113,7 +113,7 @@
 
   networking.firewall.allowedUDPPorts = [ 51820 ];
   # Or disable the firewall altogether.
-  networking.firewall.enable = false;
+  networking.firewall.enable = true;
 
   system.stateVersion = "25.05"; # Did you read the comment?
 

modules/system/nvidia.nix

@@ -9,6 +9,10 @@ in
   };
 
   config = lib.mkIf cfg.enable {
+
+    services.xserver.videoDrivers = [ "nvidia" ];
+    hardware.opengl.driSupport32Bit = true;
+
     # enable nvidia proprietary driver
     hardware.nvidia = {
       modesetting.enable = true;  # required
@@ -18,11 +22,6 @@ in
       package = config.boot.kernelPackages.nvidiaPackages.stable;
     };
 
-    # install nvidia-smi
-    environment.systemPackages = with pkgs; [
-      nvidia-smi
-    ];
-
     # enable docker gpu passthrough
     virtualisation.docker.enableNvidia = true;
   };

modules/system/tailscale.nix

@@ -12,7 +12,7 @@ in
   config = lib.mkIf cfg.enable {
     services.tailscale = {
       enable = true;
-      useRoutingFeatures = "both";
+      useRoutingFeatures = "server";
       authKeyFile = authkey_file;
     };
   };