From 07538a39d142ac7a739464274c0af8ca0eb0b9d8 Mon Sep 17 00:00:00 2001
From: Pim Kunis <pim@kunis.nl>
Date: Mon, 29 Apr 2024 15:19:17 +0200
Subject: [PATCH] Add my username to trusted nix users Add attic client Use BBR
 as TCP congestion control algorithm

---
 home-manager/default.nix           | 1 +
 home-manager/syncthing/default.nix | 1 -
 nixos/default.nix                  | 2 ++
 nixos/hardware-configuration.nix   | 5 +++++
 4 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/home-manager/default.nix b/home-manager/default.nix
index 3d6dd6e..4b0ff4a 100644
--- a/home-manager/default.nix
+++ b/home-manager/default.nix
@@ -53,6 +53,7 @@
       sops
       nmap
       unstable.devenv
+      unstable.attic-client
     ];
   };
 
diff --git a/home-manager/syncthing/default.nix b/home-manager/syncthing/default.nix
index abd7f0d..590e2c4 100644
--- a/home-manager/syncthing/default.nix
+++ b/home-manager/syncthing/default.nix
@@ -1,7 +1,6 @@
 { config, ... }: {
   config = {
     services.syncthing.enable = true;
-    xdg.userDirs.music = "${config.home.homeDirectory}/sync/Music";
 
     homeage.file."syncthing-key.pem" = {
       source = ../../secrets/syncthing-key.pem.age;
diff --git a/nixos/default.nix b/nixos/default.nix
index ce5c252..12c9b0f 100644
--- a/nixos/default.nix
+++ b/nixos/default.nix
@@ -76,6 +76,8 @@
 
   nix = {
     package = pkgs.nixFlakes;
+    settings.trusted-users = [ "root" "pim" ];
+
     extraOptions = ''
       experimental-features = nix-command flakes
     '';
diff --git a/nixos/hardware-configuration.nix b/nixos/hardware-configuration.nix
index af50f19..83abaae 100644
--- a/nixos/hardware-configuration.nix
+++ b/nixos/hardware-configuration.nix
@@ -25,6 +25,11 @@
   boot.initrd.luks.devices."luks-cd1139a7-0c1b-4459-b586-29b577825ee9".device =
     "/dev/disk/by-uuid/cd1139a7-0c1b-4459-b586-29b577825ee9";
 
+  boot.kernel.sysctl = {
+    "net.core.default_qdisc" = "fq";
+    "net.ipv4.tcp_congestion_control" = "bbr";
+  };
+
   fileSystems."/boot" = {
     device = "/dev/disk/by-uuid/87DA-B083";
     fsType = "vfat";