toasty/nixconfigs
Watch
1
0
Fork
You've already forked nixconfigs
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
No description
189 commits 3 branches 0 tags 31 MiB
  • Nix 57.5%
  • Python 18.8%
  • QML 11.7%
  • HTML 9.7%
  • GLSL 1.5%
  • Other 0.8%
Find a file
Exact
Repository files (latest commit first)
Filename Latest commit message Latest commit date
toastyyyxd a4771dbe3a remote-desktop: on-demand Sunshine host and probook launcher 
Add a Sunshine remote-desktop host on the desktop and a Moonlight launcher
on the probook, reachable only over the tailnet.

The host is not a daemon: the probook opens a YubiKey-authenticated SSH
control master, starts the Sunshine user service over it, and stops it again
when the stream ends. Sunshine runs inside the existing Hyprland session
(the compositor publishes its Wayland environment to
/run/user/1000/hypr-session-env at startup) and captures the desktop with
wlr-screencopy.

A global prep command switches the Philips output to 1920x1080@60 8-bit sRGB
for the duration of the stream and restores 2560x1440@170 10-bit on
disconnect, so a 1080p30 HEVC stream fits the ~10 Mbps home uplink. Audio
and clipboard are deliberately off.

On the probook a Hyprland `remote` submap releases its own keybinds while
streaming, so SUPER+Q opens fuzzel on the desktop; SUPER+ALT+R is the local
escape (it kills Moonlight, whose launcher then stops the host). Moonlight
runs fullscreen with absolute mouse, system-key capture, HEVC 1080p30 at
8 Mbps.

The headscale ACL grows from SSH only to SSH plus Sunshine's TCP/UDP ports,
and the desktop firewall admits those ports on tailscale0 only.
2026-10-18 22:31:24 +08:00
assets ssh: keep the FIDO2 resident-key handle unencrypted 2026-10-18 18:54:04 +08:00
hosts remote-desktop: on-demand Sunshine host and probook launcher 2026-10-18 22:31:24 +08:00
modules remote-desktop: on-demand Sunshine host and probook launcher 2026-10-18 22:31:24 +08:00
overlays large update 2026-09-17 00:39:02 +08:00
pkgs Merge branch 'master' of ssh://git.toastyx.dev:222/toasty/nixconfigs 2026-10-11 08:34:15 +08:00
.gitignore inspiron: Noise_KK transport for the visualizer feed 2026-09-23 21:10:22 +08:00
flake.lock flake: bump ncro to v2.4.0 for the routed-NAR compression fix 2026-10-18 18:53:59 +08:00
flake.nix flake: bump ncro to v2.4.0 for the routed-NAR compression fix 2026-10-18 18:53:59 +08:00
hm-setup.sh hm-setup: auto-detect user/host, skip reinstall if nix present, support /workspace/nixconfigs 2026-07-02 02:35:34 +08:00
README.md ssh: keep the FIDO2 resident-key handle unencrypted 2026-10-18 18:54:04 +08:00

README.md

NixOS Configuration Repository

This is my nix config.

I use this for my home desktop and school laptops.

Yes, this repository is safe for public sharing. assets/id_ed25519_sk_rk is an unencrypted FIDO2 resident-key handle: it contains no exportable private key and still requires the YubiKey, its FIDO PIN/user verification, and a physical touch.

I have no clue what I'm doing. How did you know?