Merge branch 'main' of ssh://git.kb-one.de:9522/kb01/aux-config

systems/x86_64-linux/yerukall/default.nix

@@ -108,7 +108,7 @@ in {
   users.users.kb-work = {
     isNormalUser = true;
     description = "kb-work";
-    extraGroups = [ "networkmanager" "wheel" ];
+    extraGroups = [ "vboxusers" "networkmanager" "wheel" ];
     packages = with pkgs; [
       kate
       thunderbird
@@ -118,6 +118,19 @@ in {
       logseq
       ungoogled-chromium
       zed-editor # Editor
+      languagetool
+      syncthing
+      pysolfc
+      blender
+      prusa-slicer
+      kcalc
+      veracrypt
+      zoom-us
+      virtualbox
+      protonvpn-gui
+      tidal-hifi
+      gimp
+      libreoffice
     ];
 
   };
@@ -127,12 +140,19 @@ in {
     configDir = "/home/kb-work/.config/syncthing";
   };
 
+  services.languagetool = {
+    enable = true;
+    allowOrigin = "*";
+  };
+
   services.pcscd.enable = true;
   programs.gnupg.agent = {
 #    enable = true;
     pinentryPackage = pkgs.lib.mkForce pkgs.pinentry-qt;
   };
 
+  programs.virt-manager.enable = true;
+
   programs.firefox = {
     enable = true;
     nativeMessagingHosts.packages = [ pkgs.firefoxpwa ];
@@ -293,6 +313,7 @@ in {
     firefoxpwa
     gnupg
     pinentry-qt
+    cifs-utils # Needed to access SMB Shares
   ];
 
   # Some programs need SUID wrappers, can be configured further or are
@@ -317,11 +338,23 @@ in {
   # Enable the OpenSSH daemon.
   # services.openssh.enable = true;
 
-  services.globalprotect.settings = {
+  services.globalprotect = {
+    enable = true;
+    settings = {
       "vpn.ohmportal.de" = {
-      openconnect-args = "--protocol gp --disable-ipv6";
+        openconnect-args = "--protocol gp --disable-ipv6 --mtu=1284 --force-dpd=30 ";
       };
     };
+    csdWrapper = "${pkgs.openconnect}/libexec/openconnect/hipreport.sh";
+  };
+
+  virtualisation.virtualbox.host = {
+    enable = true;
+    enableKvm = true;
+    enableHardening = false; # Incompatible with KVM
+    addNetworkInterface = false; # Incompatible with KVM
+  };
+  virtualisation.libvirtd.enable = true;
 
   # Open ports in the firewall.
   # networking.firewall.allowedTCPPorts = [ ... ];