From c2c078dbabb08fc2999b828c67339420c0b97b2b Mon Sep 17 00:00:00 2001
From: Ricard Illa <rilla@monotremata.xyz>
Date: Mon, 31 Jan 2022 13:06:18 +0100
Subject: [PATCH] misc changes

---
 capibara.nix          | 24 ++++++++++++------------
 home/nixos-common.nix |  7 ++++++-
 nixos/common.nix      | 12 ++++++++++++
 3 files changed, 30 insertions(+), 13 deletions(-)

diff --git a/capibara.nix b/capibara.nix
index b41ebff..002b599 100644
--- a/capibara.nix
+++ b/capibara.nix
@@ -18,18 +18,18 @@ in {
 
   home-manager.users.rilla = import home/capibara.nix;
 
-  fileSystems = {
-    "/home/rilla/Music" = {
-      device = "narwhal:/music";
-      fsType = "nfs";
-      options = [
-        "nfsvers=4"
-        "noauto"
-        "x-systemd.automount"
-        "x-systemd.idle-timeout=1min"
-      ];
-    };
-  };
+  #fileSystems = {
+  #  "/home/rilla/Music" = {
+  #    device = "narwhal:/music";
+  #    fsType = "nfs";
+  #    options = [
+  #      "nfsvers=4"
+  #      "noauto"
+  #      "x-systemd.automount"
+  #      "x-systemd.idle-timeout=1min"
+  #    ];
+  #  };
+  #};
 
   environment.variables.NIXOS_CONFIG =
     "/home/rilla/configs/nix-config/capibara.nix";
diff --git a/home/nixos-common.nix b/home/nixos-common.nix
index 851c0a8..d21212d 100644
--- a/home/nixos-common.nix
+++ b/home/nixos-common.nix
@@ -146,7 +146,10 @@ in {
 
   services.syncthing.enable = true;
 
-  services.kdeconnect.enable = true;
+  services.kdeconnect = {
+    enable = true;
+    indicator = true;
+  };
 
   programs.bat = {
     enable = true;
@@ -172,6 +175,8 @@ in {
     startInBackground = true;
   };
 
+  services.network-manager-applet.enable = true;
+
   xdg.mimeApps = {
     enable = true;
     defaultApplications = {
diff --git a/nixos/common.nix b/nixos/common.nix
index d7804b2..386d874 100644
--- a/nixos/common.nix
+++ b/nixos/common.nix
@@ -28,8 +28,20 @@ in {
     interfaces = { };
 
     firewall = {
+
+      # 51820 is used by wireguard
       allowedUDPPorts = [ 51820 ];
 
+      # 1714 - 1764 is used by kdeconnect
+      allowedTCPPortRanges = [{
+        from = 1714;
+        to = 1764;
+      }];
+      allowedUDPPortRanges = [{
+        from = 1714;
+        to = 1764;
+      }];
+
       # if packets are still dropped, they will show up in dmesg
       logReversePathDrops = true;
       # wireguard trips rpfilter up