11 files changed, 84 insertions, 54 deletions
diff --git a/lass/2configs/default.nix b/lass/2configs/default.nix
index f4e4cd2cc..b747ccb39 100644
--- a/lass/2configs/default.nix
+++ b/lass/2configs/default.nix
@@ -64,10 +64,7 @@ with import <stockholm/lib>;
       ];
     }
     {
-      services.dnscrypt-proxy = {
-        enable = true;
-        resolverName = "d0wn-nl-ns3";
-      };
+      services.dnscrypt-proxy.enable = true;
       networking.extraResolvconfConf = ''
         name_servers='127.0.0.1'
       '';
@@ -138,6 +135,7 @@ with import <stockholm/lib>;
     aria2
 
   #neat utils
+    kpaste
     krebspaste
     mosh
     pciutils
diff --git a/lass/2configs/go.nix b/lass/2configs/go.nix
index 8e31f050f..b75233871 100644
--- a/lass/2configs/go.nix
+++ b/lass/2configs/go.nix
@@ -17,7 +17,7 @@ with import <stockholm/lib>;
       '';
       serverAliases = [
         "go"
-        "go.retiolum"
+        "go.r"
       ];
     };
   };
diff --git a/lass/2configs/hw/tp-x220.nix b/lass/2configs/hw/tp-x220.nix
index 1e75271ca..9be0b6bd2 100644
--- a/lass/2configs/hw/tp-x220.nix
+++ b/lass/2configs/hw/tp-x220.nix
@@ -51,6 +51,11 @@ with import <stockholm/lib>;
 
   services.xserver.synaptics = {
     enable = true;
-    additionalOptions = ''Option "TouchpadOff" "1"'';
+    horizEdgeScroll = false;
+    horizontalScroll = false;
+    vertEdgeScroll = false;
+    maxSpeed = "0.1";
+    minSpeed = "0.01";
+    tapButtons = false;
   };
 }
diff --git a/lass/2configs/mail.nix b/lass/2configs/mail.nix
index a08dc88da..41c7bceb2 100644
--- a/lass/2configs/mail.nix
+++ b/lass/2configs/mail.nix
@@ -113,9 +113,12 @@ let
     macro index ~ ,@( 'Toggle sidebar'      # toggle the sidebar
   '';
 
-  mutt = pkgs.writeDashBin "mutt" ''
-    exec ${pkgs.neomutt}/bin/mutt -F ${muttrc} $@
-  '';
+  mutt = pkgs.concat "mutt" [
+    pkgs.neomutt
+    (pkgs.writeDashBin "mutt" ''
+      exec ${pkgs.neomutt}/bin/mutt -F ${muttrc} $@
+    '')
+  ];
 
 in {
   environment.systemPackages = [
diff --git a/lass/2configs/monitoring/client.nix b/lass/2configs/monitoring/client.nix
index e2b7dcae6..b8c245215 100644
--- a/lass/2configs/monitoring/client.nix
+++ b/lass/2configs/monitoring/client.nix
@@ -23,13 +23,4 @@ with import <stockholm/lib>;
       };
     };
   };
-
-  services.journalbeat = {
-    enable = true;
-    extraConfig = ''
-      output.elasticsearch:
-        hosts: ["prism:9200"]
-        template.enabled: false
-    '';
-  };
 }
diff --git a/lass/2configs/monitoring/server.nix b/lass/2configs/monitoring/server.nix
index b6ccf9cc1..d1ff234ee 100644
--- a/lass/2configs/monitoring/server.nix
+++ b/lass/2configs/monitoring/server.nix
@@ -79,21 +79,9 @@ with import <stockholm/lib>;
     security = import <secrets/grafana_security.nix>; # { AdminUser = ""; adminPassword = ""}
   };
 
-  services.elasticsearch = {
-    enable = true;
-    listenAddress = "0.0.0.0";
-  };
-
-  services.kibana = {
-    enable = true;
-    listenAddress = "0.0.0.0";
-  };
-
   krebs.iptables.tables.filter.INPUT.rules = [
     { predicate = "-p tcp -i retiolum --dport 8086"; target = "ACCEPT"; }
     { predicate = "-p tcp -i retiolum --dport 3000"; target = "ACCEPT"; }
     { predicate = "-p udp -i retiolum --dport 25826"; target = "ACCEPT"; }
-    { predicate = "-p tcp -i retiolum --dport 9200"; target = "ACCEPT"; }
-    { predicate = "-p tcp -i retiolum --dport 5601"; target = "ACCEPT"; }
   ];
 }
diff --git a/lass/2configs/mpv.nix b/lass/2configs/mpv.nix
index 9988e788f..d9c6274db 100644
--- a/lass/2configs/mpv.nix
+++ b/lass/2configs/mpv.nix
@@ -2,15 +2,17 @@
 
 let
 
-  mpv-config = pkgs.writeText "mpv-config" ''
-    script=${lib.concatStringsSep "," [
-      good
-      delete
-    ]}
-  '';
-  mpv = pkgs.writeDashBin "mpv" ''
-    exec ${pkgs.mpv}/bin/mpv --no-config --include=${mpv-config} "$@"
-  '';
+  scripts = lib.concatStringsSep "," [
+    good
+    delete
+  ];
+
+  mpv = pkgs.concat "mpv" [
+    pkgs.mpv
+    (pkgs.writeDashBin "mpv" ''
+      exec ${pkgs.mpv}/bin/mpv --no-config --script=${scripts} "$@"
+    '')
+  ];
 
   moveToDir = key: dir: pkgs.writeText "move-with-${key}.lua" ''
     tmp_dir = "${dir}"
@@ -31,20 +33,6 @@ let
   up = moveToDir "U" "./up";
   down = moveToDir "Y" "./down";
 
-  deleteCurrentTrack = pkgs.writeText "delete.lua" ''
-    deleted_tmp = "./.graveyard"
-
-    -- Delete the current track by moving it to the `deleted_tmp` location.
-    function delete_current_track()
-      track = mp.get_property("path")
-      os.execute("mkdir -p '" .. deleted_tmp .. "'")
-      os.execute("mv '" .. track .. "' '" .. deleted_tmp .. "'")
-      print("'" .. track .. "' deleted.")
-    end
-
-    mp.add_key_binding("D", "delete_current_track", delete_current_track)
-  '';
-
 in {
   krebs.per-user.lass.packages = [
     mpv
diff --git a/lass/2configs/nixpkgs.nix b/lass/2configs/nixpkgs.nix
index 7f6512552..24437d040 100644
--- a/lass/2configs/nixpkgs.nix
+++ b/lass/2configs/nixpkgs.nix
@@ -3,6 +3,6 @@
 {
   krebs.build.source.nixpkgs.git = {
     url = https://cgit.lassul.us/nixpkgs;
-    ref = "ade5837";
+    ref = "a563923";
   };
 }
diff --git a/lass/2configs/paste.nix b/lass/2configs/paste.nix
new file mode 100644
index 000000000..293691c0f
--- /dev/null
+++ b/lass/2configs/paste.nix
@@ -0,0 +1,27 @@
+{ config, pkgs, ... }:
+with import <stockholm/lib>;
+
+{
+  services.nginx.virtualHosts.paste = {
+    serverAliases = [ "p.r" ];
+    locations."/".extraConfig = ''
+      client_max_body_size 4G;
+      proxy_set_header Host $host;
+      proxy_pass http://localhost:9081;
+    '';
+  };
+  krebs.htgen.paste = {
+    port = 9081;
+    script = toString [
+      "PATH=${makeBinPath [
+        pkgs.nix
+      ]}:$PATH"
+      "STATEDIR=$HOME"
+      ". ${pkgs.htgen}/examples/paste"
+    ];
+  };
+  krebs.iptables.tables.filter.INPUT.rules = [
+    { predicate = "-i retiolum -p tcp --dport 80"; target = "ACCEPT";}
+    { predicate = "-i retiolum -p tcp --dport 9081"; target = "ACCEPT";}
+  ];
+}
diff --git a/lass/2configs/repo-sync.nix b/lass/2configs/repo-sync.nix
index 74e508549..775bd7665 100644
--- a/lass/2configs/repo-sync.nix
+++ b/lass/2configs/repo-sync.nix
@@ -105,6 +105,7 @@ in {
     (sync-remote "realwallpaper" "https://github.com/lassulus/realwallpaper")
     (sync-remote "lassulus-blog" "https://github.com/lassulus/lassulus-blog")
     (sync-remote "painload" "https://github.com/krebscode/painload")
+    (sync-remote "Reaktor" "https://github.com/krebscode/Reaktor")
     (sync-remote-silent "nixpkgs" "https://github.com/nixos/nixpkgs")
     (sync-retiolum "go")
     (sync-retiolum "much")
diff --git a/lass/2configs/websites/domsen.nix b/lass/2configs/websites/domsen.nix
index fde3f7c2b..a5c51735a 100644
--- a/lass/2configs/websites/domsen.nix
+++ b/lass/2configs/websites/domsen.nix
@@ -21,6 +21,22 @@ let
     exec ${pkgs.msmtp}/bin/msmtp --read-envelope-from -C ${msmtprc} "$@"
   '';
 
+  restartPhpfpm_o.ubikmedia = pkgs.writeDash "restartPhpfpm_o.ubikmedia.org" ''
+    ${pkgs.systemd}/bin/systemctl restart phpfpm-o.ubikmedia.de.service
+  '';
+
+  restartPhpfpm_o.ubikmedia_wrapper = pkgs.writeDashBin "restartPhpfpm_o.ubikmedia" ''
+    /run/wrappers/bin/sudo ${restartPhpfpm_o.ubikmedia}
+  '';
+
+  restartPhpfpm_ubikmedia = pkgs.writeDash "restartPhpfpm_ubikmedia.org" ''
+    ${pkgs.systemd}/bin/systemctl restart phpfpm-ubikmedia.de.service
+  '';
+
+  restartPhpfpm_ubikmedia_wrapper = pkgs.writeDashBin "restartPhpfpm_ubikmedia" ''
+    /run/wrappers/bin/sudo ${restartPhpfpm_ubikmedia}
+  '';
+
 in {
   imports = [
     ./sqlBackup.nix
@@ -116,6 +132,7 @@ in {
       { from = "ubik@ubikmedia.eu"; to = "domsen, jms, ms"; }
 
       { from = "testuser@lassul.us"; to = "testuser"; }
+      { from = "testuser@ubikmedia.eu"; to = "testuser"; }
     ];
     sender_domains = [
       "jla-trading.com"
@@ -162,5 +179,17 @@ in {
     useDefaultShell = true;
     createHome = true;
   };
+
+  #sudo restart wrappers
+  security.sudo.extraConfig = ''
+    domsen ALL= (root) NOPASSWD: ${restartPhpfpm_o.ubikmedia}
+    domsen ALL= (root) NOPASSWD: ${restartPhpfpm_ubikmedia}
+  '';
+
+  krebs.per-user.domsen.packages = [
+    restartPhpfpm_ubikmedia_wrapper
+    restartPhpfpm_o.ubikmedia_wrapper
+  ];
+
 }