From bfe8ae35b8563a484d1d537087fff38994cead88 Mon Sep 17 00:00:00 2001
From: Amneesh Singh <natto@weirdnatto.in>
Date: Thu, 23 Mar 2023 18:25:48 +0530
Subject: [PATCH] satori: enable docker

Signed-off-by: Amneesh Singh <natto@weirdnatto.in>
---
 home/natto/{mpd.nix => music.nix} |  0
 hosts/modules/nvim/default.nix    |  2 +-
 hosts/satori/networking.nix       |  2 +-
 hosts/satori/services.nix         | 19 +++++++++++++------
 4 files changed, 15 insertions(+), 8 deletions(-)
 rename home/natto/{mpd.nix => music.nix} (100%)

diff --git a/home/natto/mpd.nix b/home/natto/music.nix
similarity index 100%
rename from home/natto/mpd.nix
rename to home/natto/music.nix
diff --git a/hosts/modules/nvim/default.nix b/hosts/modules/nvim/default.nix
index 43f46ea..9a7c38b 100644
--- a/hosts/modules/nvim/default.nix
+++ b/hosts/modules/nvim/default.nix
@@ -34,7 +34,7 @@
           presence-nvim
           nvim-web-devicons
           nvim-tree-lua
-          (nvim-treesitter.withPlugins (plugins: pkgs.tree-sitter.allGrammars))
+          nvim-treesitter
           vim-latex-live-preview
           lspkind-nvim
           catppuccin-nvim
diff --git a/hosts/satori/networking.nix b/hosts/satori/networking.nix
index 5d95d9e..59a2884 100644
--- a/hosts/satori/networking.nix
+++ b/hosts/satori/networking.nix
@@ -13,7 +13,7 @@
     };
 
     firewall = {
-      allowedTCPPorts = [ 22 18172 6600 8001 25565 ];
+      allowedTCPPorts = [ 22 18172 6600 8001 7590 25565 ];
       allowedUDPPorts = [ 22 17840 18172 ];
       trustedInterfaces = [ "docker0" ];
     };
diff --git a/hosts/satori/services.nix b/hosts/satori/services.nix
index da33981..213806c 100644
--- a/hosts/satori/services.nix
+++ b/hosts/satori/services.nix
@@ -5,7 +5,7 @@
     tor.enable = true;
     openssh = {
       enable = true;
-      settings.permitRootLogin = "yes";
+      settings.PermitRootLogin = "yes";
     };
     ratbagd.enable = true;
     btrfs.autoScrub.enable = true;
@@ -28,10 +28,17 @@
   };
 
   security.pki.certificateFiles = [ ../../cert.pem ];
-  virtualisation.libvirtd = {
-    enable = true;
-    onBoot = "ignore";
-    onShutdown = "shutdown";
-    qemu.runAsRoot = true;
+  virtualisation = {
+    docker = {
+      enable = true;
+      enableNvidia = true;
+      autoPrune.enable = true;
+    };
+    libvirtd = {
+      enable = true;
+      onBoot = "ignore";
+      onShutdown = "shutdown";
+      qemu.runAsRoot = true;
+    };
   };
 }