updates to cyber packages and other small changes

eva-01/configuration.nix

@@ -2,20 +2,30 @@
 # your system.  Help is available in the configuration.nix(5) man page
 # and in the NixOS manual (accessible by running ‘nixos-help’).
 
-{ config, pkgs, pkgs-unstable, inputs, configPath, ... }:
+{
+  config,
+  pkgs,
+  pkgs-unstable,
+  inputs,
+  configPath,
+  ...
+}:
 
 {
-  imports =
-    [ # Include the results of the hardware scan.
-      ./hardware-configuration.nix
-      inputs.home-manager.nixosModules.default
-    ];
+  imports = [
+    # Include the results of the hardware scan.
+    ./hardware-configuration.nix
+    inputs.home-manager.nixosModules.default
+  ];
 
   # Bootloader.
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;
 
-  nix.settings.experimental-features = ["nix-command" "flakes"];
+  nix.settings.experimental-features = [
+    "nix-command"
+    "flakes"
+  ];
 
   # Nix optimizations
   nix.optimise.automatic = true;
@@ -26,30 +36,30 @@
     persistent = true;
     options = "--delete-older-than 30d";
   };
- 
-  # Dynamic power managment 
-#  powerManagement = {
-#    enable = true;
-#    cpuFreqGovernor = "powersave";
-#    powertop.enable = true;
-#  };
+
+  # Dynamic power managment
+  #  powerManagement = {
+  #    enable = true;
+  #    cpuFreqGovernor = "powersave";
+  #    powertop.enable = true;
+  #  };
 
   services.thermald.enable = true;
   services.power-profiles-daemon.enable = false;
   services.auto-cpufreq.enable = true;
   services.auto-cpufreq.settings = {
-	  battery = {
+    battery = {
       governor = "balanced";
-	     turbo = "auto";
-	  };
-	  charger = {
-	     governor = "performance";
-	     turbo = "auto";
-	  };
-	};
+      turbo = "auto";
+    };
+    charger = {
+      governor = "performance";
+      turbo = "auto";
+    };
+  };
   services.system76-scheduler = {
-      enable = true;
-      useStockConfig = true;
+    enable = true;
+    useStockConfig = true;
   };
 
   networking.hostName = "eva-01"; # Define your hostname.
@@ -65,7 +75,7 @@
   virtualisation.docker.enable = true;
 
   # Set your time zone.
-  time.timeZone = "America/Los_Angeles";
+  time.timeZone = "America/New_York";
 
   # Select internationalisation properties.
   i18n.defaultLocale = "en_US.UTF-8";
@@ -94,10 +104,10 @@
 
   services.tailscale.enable = true;
 
- #Enable Ollama daemon
+  #Enable Ollama daemon
   services.ollama = {
     enable = true;
-    #package = pkgs-unstable.ollama; 
+    package = pkgs-unstable.ollama;
   };
 
   services.fprintd.enable = true;
@@ -138,17 +148,21 @@
   # services.xserver.libinput.enable = true;
 
   # Define a user account. Don't forget to set a password with ‘passwd’.
-   programs.zsh.enable = true;   
-   users.users.rogueking = {
+  programs.zsh.enable = true;
+  users.users.rogueking = {
     isNormalUser = true;
     description = "rogueking";
-    extraGroups = [ "networkmanager" "wheel" "docker" ];
+    extraGroups = [
+      "networkmanager"
+      "wheel"
+      "docker"
+    ];
     shell = pkgs.zsh;
     #packages = [ inputs.home-manager.packages.${pkgs.system}.default ];
     packages = with pkgs; [
       #apps
       #cli
-    #  thunderbird
+      #  thunderbird
     ];
   };
 
@@ -169,25 +183,36 @@
 
   #steam
   programs.steam.enable = true;
-  
+
   # Enable OpenSSH daemon
   services.openssh = {
     enable = true;
     ports = [ 22 ];
     settings = {
       PasswordAuthentication = false;
-      AllowUsers = [ "rogueking" ]; 
+      AllowUsers = [ "rogueking" ];
       UseDns = true;
       X11Forwarding = false;
       PermitRootLogin = "no";
-      MaxAuthTries = "20"; 
+      MaxAuthTries = "20";
     };
   };
 
   users.users."rogueking".openssh.authorizedKeys.keys = [
-	"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINXqriPZVIuduc/J7GS1mD171LL0gIbgEjlImsxedWVX"
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINXqriPZVIuduc/J7GS1mD171LL0gIbgEjlImsxedWVX"
   ];
 
+  # Firewall
+  networking.firewall = {
+    enable = true;
+    allowedTCPPorts = [
+      22
+      # 80
+      # 443
+    ];
+    logRefusedConnections = true;
+  };
+
   # List packages installed in system profile. To search, run:
   # $ nix search wget
   environment.systemPackages = with pkgs; [
@@ -196,7 +221,7 @@
     fprintd
     guacamole-client
     #sddm-astronaut
-    
+
     #cli tools
     aircrack-ng
     android-tools
@@ -230,16 +255,16 @@
     nerd-fonts.hack
 
     #unstable
-    #pkgs-unstable.vllm 
-  ]; 
+    #pkgs-unstable.vllm
+  ];
 
   home-manager = {
-    extraSpecialArgs = { 
-	inherit 
-	  configPath
-	  inputs
-	  pkgs-unstable
-	  ;
+    extraSpecialArgs = {
+      inherit
+        configPath
+        inputs
+        pkgs-unstable
+        ;
     };
     users = {
       "rogueking" = import ./../home-manager/home.nix;
@@ -255,7 +280,6 @@
   #  backupFileExtension = "backup";
   #};
 
-
   # Some programs need SUID wrappers, can be configured further or are
   # started in user sessions.
   # programs.mtr.enable = true;

eva-03/configuration.nix

@@ -274,6 +274,7 @@
     dust
     file
     findutils
+    fwupd
     git
     hcxdumptool
     hcxtools
@@ -291,8 +292,8 @@
     tlp
     unzip
     vim
-    wirelesstools
     wifite2
+    wirelesstools
 
     #unstable
     pkgs-unstable.vllm

flake.lock

@@ -46,11 +46,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1750792728,
-        "narHash": "sha256-Lh3dopA8DdY+ZoaAJPrtkZOZaFEJGSYjOdAYYgOPgE4=",
+        "lastModified": 1751468302,
+        "narHash": "sha256-tWosziZTT039x6PgEZUhzGlV8oLvdDmIgKTE8ESMaEA=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "366f00797b1efb70f2882d3da485e3c10fd3d557",
+        "rev": "501cfec8277f931a9c9af9f23d3105c537faeafe",
         "type": "github"
       },
       "original": {
@@ -90,11 +90,11 @@
     },
     "nixos-hardware": {
       "locked": {
-        "lastModified": 1750837715,
-        "narHash": "sha256-2m1ceZjbmgrJCZ2PuQZaK4in3gcg3o6rZ7WK6dr5vAA=",
+        "lastModified": 1751432711,
+        "narHash": "sha256-136MeWtckSHTN9Z2WRNRdZ8oRP3vyx3L8UxeBYE+J9w=",
         "owner": "NixOS",
         "repo": "nixos-hardware",
-        "rev": "98236410ea0fe204d0447149537a924fb71a6d4f",
+        "rev": "497ae1357f1ac97f1aea31a4cb74ad0d534ef41f",
         "type": "github"
       },
       "original": {
@@ -106,11 +106,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1750969886,
-        "narHash": "sha256-zW/OFnotiz/ndPFdebpo3X0CrbVNf22n4DjN2vxlb58=",
+        "lastModified": 1751582995,
+        "narHash": "sha256-u7ubvtxdTnFPpV27AHpgoKn7qHuE7sgWgza/1oj5nzA=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "a676066377a2fe7457369dd37c31fd2263b662f4",
+        "rev": "7a732ed41ca0dd64b4b71b563ab9805a80a7d693",
         "type": "github"
       },
       "original": {
@@ -122,11 +122,11 @@
     },
     "nixpkgs-unstable": {
       "locked": {
-        "lastModified": 1751011381,
-        "narHash": "sha256-krGXKxvkBhnrSC/kGBmg5MyupUUT5R6IBCLEzx9jhMM=",
+        "lastModified": 1751271578,
+        "narHash": "sha256-P/SQmKDu06x8yv7i0s8bvnnuJYkxVGBWLWHaU+tt4YY=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "30e2e2857ba47844aa71991daa6ed1fc678bcbb7",
+        "rev": "3016b4b15d13f3089db8a41ef937b13a9e33a8df",
         "type": "github"
       },
       "original": {
@@ -146,11 +146,11 @@
         "systems": "systems_2"
       },
       "locked": {
-        "lastModified": 1751144320,
-        "narHash": "sha256-KJsKiGfkfXFB23V26NQ1p+UPsexI6NKtivnrwSlWWdQ=",
+        "lastModified": 1751492444,
+        "narHash": "sha256-26NgRXwhNM2x4hrok0C3CqSf2v0vi9byONNON5PzbHQ=",
         "owner": "nix-community",
         "repo": "nixvim",
-        "rev": "ceb52aece5d571b37096945c2815604195a04eb4",
+        "rev": "239d331bb48673dfd00d7187654892471cd60d44",
         "type": "github"
       },
       "original": {

home-manager/commands/commands.nix

@@ -47,6 +47,7 @@
     tldr
     traceroute
     trivy
+    wireguard-tools
     wget
     yazi
     yazi
@@ -54,19 +55,23 @@
 
     # cyber
     amass
+    bettercap
     bully
     burpsuite
     crunch
     dirbuster
-    dnschef 
+    dnschef
     ffuf
     hash-identifier
     hashcat
     hashcat-utils
     hping
     macchanger
+    medusa
     netdiscover
     netexec
+    pwnat
+    pwncat
     reaverwps-t6x
     recon-ng
     steghide

home-manager/programs/programs.nix

@@ -12,6 +12,7 @@
     blender
     brave
     desmume
+    gparted
     jellyfin-media-player
     kdePackages.bluedevil
     kdePackages.bluez-qt