fix vpn1 config

modules/_common/nixpkgs.nix

@@ -1,11 +1,6 @@
 {...}: {
   config = {
-    nixpkgs.config = {
+    nixpkgs.config.allowUnfree = true;
-      allowUnfree = true;
-      permittedInsecurePackages = [
-        "electron-12.2.3"
-      ];
-    };
 
     system = {
       stateVersion = "22.11";

modules/desktop/default.nix

@@ -105,5 +105,9 @@ in {
         ncdu
       ];
     };
+
+    nixpkgs.config.permittedInsecurePackages = [
+      "electron-12.2.3"
+    ];
   };
 }

modules/hardware/hetzner-vpn1.nix

@@ -7,74 +7,91 @@
     (modulesPath + "/profiles/qemu-guest.nix")
   ];
 
-  boot.cleanTmpDir = true;
+  config = {
-  zramSwap.enable = true;
+    boot = {
-  networking.domain = "";
+      tmp.cleanOnBoot = true;
-
+      loader = {
-  boot.loader.grub = {
+        systemd-boot.enable = lib.mkForce false;
-    efiSupport = true;
+        efi.canTouchEfiVariables = lib.mkForce false;
-    efiInstallAsRemovable = true;
+        grub = {
-    device = "nodev";
+          enable = true;
-  };
+          efiSupport = true;
-  fileSystems."/boot" = {
+          efiInstallAsRemovable = true;
-    device = "/dev/disk/by-uuid/77CF-345D";
+          device = "nodev";
-    fsType = "vfat";
+        };
-  };
+      };
-  boot.initrd.availableKernelModules = ["ata_piix" "uhci_hcd" "xen_blkfront"];
+      initrd = {
-  boot.initrd.kernelModules = ["nvme"];
+        availableKernelModules = ["ata_piix" "uhci_hcd" "xen_blkfront"];
-  fileSystems."/" = {
+        kernelModules = ["nvme"];
-    device = "/dev/sda1";
-    fsType = "ext4";
-  };
-
-  # This file was populated at runtime with the networking
-  # details gathered from the active system.
-  networking = {
-    nameservers = [
-      "8.8.8.8"
-    ];
-    defaultGateway = "172.31.1.1";
-    defaultGateway6 = {
-      address = "fe80::1";
-      interface = "eth0";
-    };
-    dhcpcd.enable = false;
-    usePredictableInterfaceNames = lib.mkForce false;
-    interfaces = {
-      eth0 = {
-        ipv4.addresses = [
-          {
-            address = "157.90.146.125";
-            prefixLength = 32;
-          }
-        ];
-        ipv6.addresses = [
-          {
-            address = "2a01:4f8:c012:7137::1";
-            prefixLength = 64;
-          }
-          {
-            address = "fe80::9400:2ff:fe87:7fc9";
-            prefixLength = 64;
-          }
-        ];
-        ipv4.routes = [
-          {
-            address = "172.31.1.1";
-            prefixLength = 32;
-          }
-        ];
-        ipv6.routes = [
-          {
-            address = "fe80::1";
-            prefixLength = 128;
-          }
-        ];
       };
     };
-  };
-  services.udev.extraRules = ''
-    ATTR{address}=="96:00:02:87:7f:c9", NAME="eth0"
 
-  '';
+    zramSwap.enable = true;
+    networking.domain = "";
+
+    fileSystems = {
+      "/boot" = {
+        device = "/dev/disk/by-uuid/77CF-345D";
+        fsType = "vfat";
+      };
+      "/" = {
+        device = "/dev/sda1";
+        fsType = "ext4";
+      };
+    };
+
+    # This file was populated at runtime with the networking
+    # details gathered from the active system.
+    networking = {
+      nameservers = ["8.8.8.8"];
+      defaultGateway = "172.31.1.1";
+      defaultGateway6 = {
+        address = "fe80::1";
+        interface = "eth0";
+      };
+      dhcpcd.enable = false;
+      usePredictableInterfaceNames = lib.mkForce false;
+      interfaces = {
+        eth0 = {
+          ipv4 = {
+            addresses = [
+              {
+                address = "157.90.146.125";
+                prefixLength = 32;
+              }
+            ];
+            routes = [
+              {
+                address = "172.31.1.1";
+                prefixLength = 32;
+              }
+            ];
+          };
+          ipv6 = {
+            addresses = [
+              {
+                address = "2a01:4f8:c012:7137::1";
+                prefixLength = 64;
+              }
+              {
+                address = "fe80::9400:2ff:fe87:7fc9";
+                prefixLength = 64;
+              }
+            ];
+            routes = [
+              {
+                address = "fe80::1";
+                prefixLength = 128;
+              }
+            ];
+          };
+        };
+      };
+    };
+
+    services.udev.extraRules = ''
+      ATTR{address}=="96:00:02:87:7f:c9", NAME="eth0"
+
+    '';
+  };
 }