WIP

hosts/homelab/boot.nix

@@ -1,7 +1,10 @@
 { config, ... }:
 {
   boot.loader = {
-    systemd-boot.enable = true;
+    systemd-boot = { 
+      enable = true;
+      configurationLimit = 5;
+    };
     efi.canTouchEfiVariables = true;
   };
 }

hosts/homelab/configuration.nix

@@ -1,6 +1,7 @@
 {
   config,
   lib,
+  pkgs,
   ...
 }:
 {
@@ -16,7 +17,6 @@
       ]
       ++ (map (f: "hosts/common/optional/${f}") [
         "bbr.nix"
-        "docker.nix"
         "endlessh.nix"
         "fail2ban.nix"
         "openssh.nix"
@@ -25,5 +25,6 @@
   ];
 
   disko.cfg.mainDevice = "/dev/disk/by-id/ata-AMD_R5M120G8_07092225C0040";
+  environment.shells = [ pkgs.zsh ];
   system.stateVersion = "26.05";
 }

hosts/homelab/network.nix

@@ -2,25 +2,13 @@
 {
   networking = {
     hostName = "homelab";
-    useDHCP = false;
-    dhcpcd.enable = false;
-    defaultGateway = "192.168.88.1";
-    nameservers = [ "192.168.88.1" ];
-
-    interfaces.enp7s0.ipv4.addresses = [
-    {
-      address = "192.168.88.5";
-      prefixLength = 24;
-    }
-    ];
-
     firewall = {
-      allowedTCPPorts = [
-        22
-        80
-        443
-      ];
-      allowedUDPPorts = [ ];
+      allowedTCPPorts = [ 22 80 443 6969 ];
+      allowedUDPPorts = [ 3478 ];
     };
   };
+
+  boot.kernel.sysctl = {
+    "net.ipv4.ip_unprivileged_port_start" = 80;
+  };
 }