systems/x86_64-linux/yerukall/default.nix

@@ -108,7 +108,7 @@ in {
   users.users.kb-work = {
     isNormalUser = true;
     description = "kb-work";
-    extraGroups = [ "vboxusers" "networkmanager" "wheel" ];
+    extraGroups = [ "networkmanager" "wheel" ];
     packages = with pkgs; [
       kate
       thunderbird
@@ -118,19 +118,6 @@ in {
       logseq
       ungoogled-chromium
       zed-editor # Editor
-      languagetool
-      syncthing
-      pysolfc
-      blender
-      prusa-slicer
-      kcalc
-      veracrypt
-      zoom-us
-      virtualbox
-      protonvpn-gui
-      tidal-hifi
-      gimp
-      libreoffice
     ];
 
   };
@@ -140,19 +127,12 @@ in {
     configDir = "/home/kb-work/.config/syncthing";
   };
 
-  services.languagetool = {
-    enable = true;
-    allowOrigin = "*";
-  };
-
   services.pcscd.enable = true;
   programs.gnupg.agent = {
 #    enable = true;
     pinentryPackage = pkgs.lib.mkForce pkgs.pinentry-qt;
   };
 
-  programs.virt-manager.enable = true;
-
   programs.firefox = {
     enable = true;
     nativeMessagingHosts.packages = [ pkgs.firefoxpwa ];
@@ -313,7 +293,6 @@ in {
     firefoxpwa
     gnupg
     pinentry-qt
-    cifs-utils # Needed to access SMB Shares
   ];
 
   # Some programs need SUID wrappers, can be configured further or are
@@ -338,23 +317,11 @@ in {
   # Enable the OpenSSH daemon.
   # services.openssh.enable = true;
 
-  services.globalprotect = {
-    enable = true;
-    settings = {
+  services.globalprotect.settings = {
     "vpn.ohmportal.de" = {
-        openconnect-args = "--protocol gp --disable-ipv6 --mtu=1284 --force-dpd=30 ";
+      openconnect-args = "--protocol gp --disable-ipv6";
     };
   };
-    csdWrapper = "${pkgs.openconnect}/libexec/openconnect/hipreport.sh";
-  };
-
-  virtualisation.virtualbox.host = {
-    enable = true;
-    enableKvm = true;
-    enableHardening = false; # Incompatible with KVM
-    addNetworkInterface = false; # Incompatible with KVM
-  };
-  virtualisation.libvirtd.enable = true;
 
   # Open ports in the firewall.
   # networking.firewall.allowedTCPPorts = [ ... ];