From 87649ec999e0fa14bd2e62db52d1705cc7f23919 Mon Sep 17 00:00:00 2001
From: Tim Schubert <dadada@dadada.li>
Date: Fri, 20 Dec 2024 23:09:09 +0100
Subject: [PATCH 1/4] fix(ninurta): printer address

---
 nixos/ninurta/printing.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nixos/ninurta/printing.nix b/nixos/ninurta/printing.nix
index 6fdbb08..e22c989 100644
--- a/nixos/ninurta/printing.nix
+++ b/nixos/ninurta/printing.nix
@@ -32,7 +32,7 @@
     drivers = [ pkgs.brlaser ];
     # Remove all state at the start of the service
     stateless = true;
-    listenAddresses = [ "192.168.101.184:631" "fd42:9c3b:f96d:101:4a21:bff:fe3e:9cfe:631" ];
+    listenAddresses = [ "192.168.101.29:631" ];
     allowFrom = [ "from 192.168.101.0/24" ];
     browsing = true;
     defaultShared = true;

From fe7dd57bc16312259babc650f4d34c0c72063281 Mon Sep 17 00:00:00 2001
From: Tim Schubert <dadada@dadada.li>
Date: Fri, 20 Dec 2024 23:27:42 +0100
Subject: [PATCH 2/4] feat(gorgon): adapt power management options

---
 nixos/gorgon/configuration.nix | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/nixos/gorgon/configuration.nix b/nixos/gorgon/configuration.nix
index 935052a..c90a2eb 100644
--- a/nixos/gorgon/configuration.nix
+++ b/nixos/gorgon/configuration.nix
@@ -226,5 +226,16 @@ in
     ];
   };
 
+  powerManagement = {
+    enable = true;
+    powertop.enable = true;
+    cpuFreqGovernor = "schedutil";
+    powerUpCommands = ''
+      echo 40 > /sys/class/power_supply/BAT0/charge_control_start_threshold
+      echo 80 > /sys/class/power_supply/BAT0/charge_control_stop_threshold
+    '';
+  };
+  services.tlp.enable = false;
+
   system.stateVersion = "23.11";
 }

From 12b4614fc78db46a8cf6adf6d7ba187ea4e04a97 Mon Sep 17 00:00:00 2001
From: Tim Schubert <dadada@dadada.li>
Date: Fri, 20 Dec 2024 23:53:21 +0100
Subject: [PATCH 3/4] feat(ninurta): disable hydra

---
 nixos/ninurta/configuration.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nixos/ninurta/configuration.nix b/nixos/ninurta/configuration.nix
index dcd050f..9eba60d 100644
--- a/nixos/ninurta/configuration.nix
+++ b/nixos/ninurta/configuration.nix
@@ -159,7 +159,7 @@ in
   };
 
   services.hydra = {
-    enable = true;
+    enable = false;
     package = pkgs.hydra;
     hydraURL = "https://hydra.dadada.li";
     notificationSender = "hydra@localhost";

From 09ca9341f94365d04af34d9461fa06954f2d345a Mon Sep 17 00:00:00 2001
From: Tim Schubert <dadada@dadada.li>
Date: Fri, 20 Dec 2024 23:53:38 +0100
Subject: [PATCH 4/4] feat(ninurta): make firewall configuration a little more
 restrictive

---
 nixos/ninurta/configuration.nix | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/nixos/ninurta/configuration.nix b/nixos/ninurta/configuration.nix
index 9eba60d..e188991 100644
--- a/nixos/ninurta/configuration.nix
+++ b/nixos/ninurta/configuration.nix
@@ -376,17 +376,21 @@ in
     enable = true;
     allowPing = true;
     allowedTCPPorts = [
-      22 # SSH
       2222 # SSH
-      80 # munin web
-      631 # Printing
     ];
     allowedUDPPorts = [
-      631 # Printing
       51234 # Wireguard
       51235 # Wireguard
     ];
     interfaces = {
+      br0.allowedTCPPorts = [
+        22 # SSH
+        80 # munin web
+        631 # IPP
+      ];
+      br0.allowedUDPPorts = [
+        631 # IPP
+      ];
       uwu.allowedTCPPorts = [
         softServePort
       ];