fix vpn1 config

modules/_common/nixpkgs.nix

@@ -1,11 +1,6 @@
 {...}: {
   config = {
-    nixpkgs.config = {
-      allowUnfree = true;
-      permittedInsecurePackages = [
-        "electron-12.2.3"
-      ];
-    };
+    nixpkgs.config.allowUnfree = true;
 
     system = {
       stateVersion = "22.11";

modules/desktop/default.nix

@@ -105,5 +105,9 @@ in {
         ncdu
       ];
     };
+
+    nixpkgs.config.permittedInsecurePackages = [
+      "electron-12.2.3"
+    ];
   };
 }

modules/hardware/hetzner-vpn1.nix

@@ -7,32 +7,43 @@
     (modulesPath + "/profiles/qemu-guest.nix")
   ];
 
-  boot.cleanTmpDir = true;
-  zramSwap.enable = true;
-  networking.domain = "";
-
-  boot.loader.grub = {
+  config = {
+    boot = {
+      tmp.cleanOnBoot = true;
+      loader = {
+        systemd-boot.enable = lib.mkForce false;
+        efi.canTouchEfiVariables = lib.mkForce false;
+        grub = {
+          enable = true;
           efiSupport = true;
           efiInstallAsRemovable = true;
           device = "nodev";
         };
-  fileSystems."/boot" = {
+      };
+      initrd = {
+        availableKernelModules = ["ata_piix" "uhci_hcd" "xen_blkfront"];
+        kernelModules = ["nvme"];
+      };
+    };
+
+    zramSwap.enable = true;
+    networking.domain = "";
+
+    fileSystems = {
+      "/boot" = {
         device = "/dev/disk/by-uuid/77CF-345D";
         fsType = "vfat";
       };
-  boot.initrd.availableKernelModules = ["ata_piix" "uhci_hcd" "xen_blkfront"];
-  boot.initrd.kernelModules = ["nvme"];
-  fileSystems."/" = {
+      "/" = {
         device = "/dev/sda1";
         fsType = "ext4";
       };
+    };
 
     # This file was populated at runtime with the networking
     # details gathered from the active system.
     networking = {
-    nameservers = [
-      "8.8.8.8"
-    ];
+      nameservers = ["8.8.8.8"];
       defaultGateway = "172.31.1.1";
       defaultGateway6 = {
         address = "fe80::1";
@@ -42,13 +53,22 @@
       usePredictableInterfaceNames = lib.mkForce false;
       interfaces = {
         eth0 = {
-        ipv4.addresses = [
+          ipv4 = {
+            addresses = [
               {
                 address = "157.90.146.125";
                 prefixLength = 32;
               }
             ];
-        ipv6.addresses = [
+            routes = [
+              {
+                address = "172.31.1.1";
+                prefixLength = 32;
+              }
+            ];
+          };
+          ipv6 = {
+            addresses = [
               {
                 address = "2a01:4f8:c012:7137::1";
                 prefixLength = 64;
@@ -58,13 +78,7 @@
                 prefixLength = 64;
               }
             ];
-        ipv4.routes = [
-          {
-            address = "172.31.1.1";
-            prefixLength = 32;
-          }
-        ];
-        ipv6.routes = [
+            routes = [
               {
                 address = "fe80::1";
                 prefixLength = 128;
@@ -73,8 +87,11 @@
           };
         };
       };
+    };
+
     services.udev.extraRules = ''
       ATTR{address}=="96:00:02:87:7f:c9", NAME="eth0"
 
     '';
+  };
 }