so much

configuration.nix

@@ -12,7 +12,8 @@
 
   nixpkgs.config.permittedInsecurePackages = [
                 "python-2.7.18.6"
-                "electron-22.3.27"
+                # "electron-22.3.27"
+                "electron-25.9.0"
   #              "electron-16.2.3"
              ];
   
@@ -73,6 +74,22 @@
     LC_TIME = "nb_NO.utf8";
   };
 
+  # enable wireguard
+  networking.firewall.enable = true;
+  networking.firewall = {
+    # if packets are still dropped, they will show up in dmesg
+    logReversePathDrops = true;
+    # wireguard trips rpfilter up
+    extraCommands = ''
+      ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --sport 51820 -j RETURN
+      ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --dport 51820 -j RETURN
+    '';
+    extraStopCommands = ''
+      ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --sport 51820 -j RETURN || true
+      ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --dport 51820 -j RETURN || true
+    '';
+  };
+
 
   # Enable the i3 and keyboard
   console.keyMap = "dvorak-programmer";
@@ -127,6 +144,11 @@
     dedicatedServer.openFirewall = true;
   };
 
+  programs.streamdeck-ui = {
+    enable = true;
+    autoStart = true;
+  };
+
   environment.sessionVariables = rec {
     STEAM_EXTRA_COMPAT_TOOLS_PATHS = "\${HOME}/.steam/root/compatibilitytools.d";
     PATH = [
@@ -153,6 +175,12 @@
   # Enable CUPS to print documents.
   services.printing.enable = true;
 
+  virtualisation.docker.enable = true;
+  virtualisation.docker.rootless = {
+    enable = true;
+    setSocketVariable = true;
+  };
+
   # Enable sound with pipewire.
   sound.enable = true;
   hardware.pulseaudio.enable = false;
@@ -177,7 +205,7 @@
   users.users.lotte = {
     isNormalUser = true;
     description = "lotte";
-    extraGroups = [ "networkmanager" "wheel" "dialout" "storage" ];
+    extraGroups = [ "networkmanager" "wheel" "dialout" "storage" "docker" ];
     packages = with pkgs; [
       firefox
     #  thunderbird
@@ -225,6 +253,7 @@
     libsForQt5.ksudoku
     libsForQt5.kblocks
     unixtools.quota
+    deckmaster
 	
     # management
     xsel
@@ -247,10 +276,15 @@
     unstable.helix
     godot_4
     nodejs
+    nodePackages.vls
+    nodePackages.volar
     python310
     mold
-    ruby
+    (ruby.withPackages (ps: with ps; [ rails ]))
-    #cope
+    bundix
+    rubyPackages.rails
+    sqlite
+    gcc
     arduino
       # rust
       rustup
@@ -265,21 +299,13 @@
       rufo
       lldb #not a langage server but w/e
       nodePackages.vscode-langservers-extracted
-      unstable.typst-lsp
       #vscodium + extensions
-      (vscode-with-extensions.override {
+      vscode
-        vscode = vscodium;
-        vscodeExtensions = with vscode-extensions; [
-          rust-lang.rust-analyzer
-          dracula-theme.theme-dracula
-          arrterian.nix-env-selector
-          bungcip.better-toml
-        ];
-      })
    
     # creative
     gimp
     libsForQt5.kdenlive
+    glaxnimate
     aseprite-unfree
     darktable
     krita
@@ -312,6 +338,7 @@
     yt-dlp
     cmus
     cmusfm
+    clementine
     syncplay
     tor-browser-bundle-bin
     flatpak
@@ -357,6 +384,8 @@
     unstable.obs-cli
     unstable.libsForQt5.neochat
     libsForQt5.tokodon
+    libimobiledevice
+    ifuse
   ];