Update nixpkgs 2025-12-15-02-03

configuration/common/programs.nix

@@ -7,6 +7,9 @@
     gptfdisk
     parted
     grow-last-partition-and-filesystem
+    pciutils
+    lshw
+    ethtool
 
     # Normal usage
     htop

flake.lock

@@ -650,11 +650,11 @@
     },
     "nixpkgs_5": {
       "locked": {
-        "lastModified": 1764667669,
-        "narHash": "sha256-7WUCZfmqLAssbDqwg9cUDAXrSoXN79eEEq17qhTNM/Y=",
+        "lastModified": 1765472234,
+        "narHash": "sha256-9VvC20PJPsleGMewwcWYKGzDIyjckEz8uWmT0vCDYK0=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "418468ac9527e799809c900eda37cbff999199b6",
+        "rev": "2fbfb1d73d239d2402a8fe03963e37aab15abe8b",
         "type": "github"
       },
       "original": {

hosts/carbon/ds-lite-ncfttb.nix

@@ -8,7 +8,7 @@
     tunnelInterfaceName = "ds-lite-ncfttb";
     lanInterfaces = [
       {
-        name = "net-heimnetz";
+        name = "enp2s0";
         sla_id = 201;
         prefix_len = 64;
       }

hosts/carbon/net-dsl.nix

@@ -3,17 +3,9 @@
 {
 
   ## DSL-Uplink
-  networking.vlans."enp1s0.10" = {
-    id = 10;
-    interface = "enp1s0";
-  };
   networking.vlans."enp3s0.10" = {
     id = 10;
     interface = "enp3s0";
   };
-  networking.bridges."net-dsl".interfaces = [
-    "enp1s0.10"
-    "enp3s0.10"
-  ];
 
 }

hosts/carbon/net-heimnetz.nix

@@ -3,24 +3,16 @@
 {
 
   ## Heimnetz
-  networking.vlans."enp1s0.201" = {
-    id = 201;
-    interface = "enp1s0";
-  };
-  networking.bridges."net-heimnetz".interfaces = [
-    "enp1s0.201"
-    "enp2s0"
-  ];
-  networking.interfaces."net-heimnetz".ipv6.addresses = [
+  networking.interfaces."enp2s0".ipv6.addresses = [
     { address = "fe80::1"; prefixLength = 64; }
     { address = "fd00:152:152:4::1"; prefixLength = 64; }
   ];
-  networking.interfaces."net-heimnetz".ipv4.addresses = [
+  networking.interfaces."enp2s0".ipv4.addresses = [
     { address = "10.152.4.1"; prefixLength = 24; }
   ];
 
   services.radvd.config = ''
-    interface net-heimnetz {
+    interface enp2s0 {
       AdvSendAdvert on;
       MaxRtrAdvInterval 30;
       prefix ::/64 {
@@ -35,7 +27,7 @@
   services.kea.dhcp4 = {
     settings = {
       interfaces-config = {
-        interfaces = [ "net-heimnetz" ];
+        interfaces = [ "enp2s0" ];
       };
       subnet4 = [
         # Heimnetz

hosts/carbon/ppp-ncfttb.nix

@@ -6,7 +6,7 @@
     enable = true;
     peers.ncfttb = {
       config = ''
-        plugin pppoe.so net-dsl
+        plugin pppoe.so enp3s0.10
         user "''${PPPD_NETCOLOGNE_USERNAME}"
         ifname ppp-ncfttb
         persist

hosts/dn42-il-gw1/configuration.nix

@@ -243,6 +243,25 @@
       ];
       privateKeyFile = config.sops.secrets.dn42-router-general-wireguard-key.path;
     };
+    # jona / cryne
+    wg3402 = {
+      ips = [
+        "fe80::2574/128"
+      ];
+      postSetup = ''
+      ip addr replace dev wg3402 fe80::2574/128 peer fe80::3402/128
+      '';
+      listenPort = 53402;
+      allowedIPsAsRoutes = false;
+      peers = [
+        {
+          allowedIPs = [ "fe80::/10" "fd00::/8" ];
+          endpoint = "dn42.cryne.me:42574";
+          publicKey = "YsKInIp90is8ysnQDHGoKnz2CqlTMWMZDmQ+vwvN2C0=";
+        }
+      ];
+      privateKeyFile = config.sops.secrets.dn42-router-general-wireguard-key.path;
+    };
     # lutoma
     wg4719 = {
       ips = [
@@ -296,6 +315,7 @@
     51411 # wg1411
     51718 # wg1718
     52189 # wg2189
+    53402 # wg3402
     54719 # wg4719
     56190 # wg6190
   ];
@@ -391,6 +411,13 @@
         remoteAsn = "4242422189";
         localAddress = "fe80::2574";
       }
+      {
+        peerName = "peer_3402";
+        remoteAddress = "fe80::3402";
+        interfaceName = "wg3402";
+        remoteAsn = "4242423402";
+        localAddress = "fe80::2574";
+      }
       {
         peerName = "peer_4719";
         remoteAddress = "fe80::acab";

hosts/krypton/configuration.nix

@@ -13,6 +13,10 @@
     ];
 
   profiles.clerie.desktop.enable = true;
+  profiles.clerie.desktop.users = [
+    "clerie"
+  ];
+
 
   # Use the systemd-boot EFI boot loader.
   boot.loader.systemd-boot.enable = true;

profiles/desktop/default.nix

@@ -6,6 +6,11 @@ with lib;
 
   options.profiles.clerie.desktop = {
     enable = mkEnableOption "clerie Desktop Config";
+    users = mkOption {
+      type = with types; listOf str;
+      default = [];
+      description = "Names of users that are considered desktop users and therefore get special permissions";
+    };
   };
 
   imports = [

profiles/desktop/networking.nix

@@ -2,9 +2,13 @@
 
 with lib;
 
-{
+let
 
-  config = mkIf config.profiles.clerie.desktop.enable {
+  cfg = config.profiles.clerie.desktop;
+
+in {
+
+  config = mkIf cfg.enable {
 
     networking.networkmanager.settings = {
       connectivity = {
@@ -15,6 +19,8 @@ with lib;
       };
     };
 
+    users.groups.networkmanager.members = cfg.users;
+
   };
 
 }