nginx fix permissions for comms and add mpv

home-manager/mpv.nix

@@ -0,0 +1,14 @@
+{ config, pkgs, inputs, ...}:
+{
+  programs.mpv = {
+    enable = true;
+    config = {
+      volume = 50;
+    };
+    scripts = with pkgs.mpvScripts; [
+      mpris
+      videoclip # keybind = c
+      modernx
+    ];
+  };
+}

modules/graphical/shared.nix

@@ -74,7 +74,6 @@ in {
       libreoffice-fresh
       screenshot
       anki
-      mpv
       p7zip
       qbittorrent
       brightnessctl

modules/services/nginx.nix

@@ -86,8 +86,16 @@ in {
             };
             "/socket.io" = { proxyPass = "http://localhost:9955"; proxyWebsockets = true; };
             "/comms/" = {
+              extraConfig = ''
+                  more_set_headers "Permissions-Policy: geolocation=(), microphone=(self), camera=(self)";
+              '';
               alias = "/comms/";
-              tryFiles = "$uri $uri/ /index.html";
+              tryFiles = "$uri $uri/ /comms/index.html";
+            };
+            "/comms" = {
+              extraConfig = ''
+                return 301 /comms/;
+              '';
             };
           };
         };

systems/laptop/configuration.nix

@@ -54,7 +54,8 @@
   };
 
   # Enable CUPS to print documents.
-  services.printing.enable = true;
+  # disable until CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177 is fixed
+  services.printing.enable = false;
 
   # Enable touchpad support (enabled default in most desktopManager).
   services.xserver.libinput.enable = true;

systems/pc/configuration.nix

@@ -152,10 +152,11 @@
   console.keyMap = "de";
 
   # Enable CUPS to print documents.
-  services.printing.enable = true;
+  # disable until CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177 is fixed
+  services.printing.enable = false;
   services.printing.drivers = [ pkgs.brlaser ];
   services.avahi = {
-    enable = true;
+    enable = false;
     nssmdns4 = true;
     openFirewall = true;
   };

systems/vm/configuration.nix

@@ -23,25 +23,18 @@
       #hyprland.enable = true;
       #lightdm.enable = true;
       #sddm.enable = true;
+      plasma.enable = true;
       #cosmic.enable = true;
     };
-    services = {
-      kavita = {
-        enable = true;
-        https = false;
-        autoDownload = false;
-        isTest = true;
-      };
-    };
-  };
-  services.xserver = {
-    enable = true;
-    desktopManager = {
-      xterm.enable = false;
-      xfce.enable = true;
-    };
-    displayManager.defaultSession = "xfce";
   };
+  #services.xserver = {
+  #  enable = true;
+  #  desktopManager = {
+  #    xterm.enable = false;
+  #    xfce.enable = true;
+  #  };
+  #  displayManager.defaultSession = "xfce";
+  #};
 
   programs.firefox.enable = true;
 

users/kopatz/home.nix

@@ -29,6 +29,7 @@
     ../../home-manager/zsh
     ../../home-manager/i3.nix
     ../../home-manager/stylix.nix
+    ../../home-manager/mpv.nix
     inputs.nixvim.homeManagerModules.nixvim
     inputs.nix-colors.homeManagerModule
   ];