Add new server modules and configurations for various services

- Introduced `default-creds` module for managing default credentials with Umami integration. - Added `fail2ban` module for brute-force attack protection with configurable ban times. - Created `firewall` module to enable and configure basic firewall settings. - Implemented `gitea` module for self-hosted Git service with PostgreSQL backend. - Developed `glance` module for a customizable dashboard with various widgets and themes. - Added `iknowyou` module for a self-hosted password manager with production and demo environments. - Introduced `kernel-hardening` module for enhancing kernel security settings. - Created `mazanoke` module for a simple web application with Nginx integration. - Added `mealie` module for a self-hosted meal planning application. - Implemented `stirling-pdf` module for PDF generation service. - Developed `umami` module for self-hosted analytics with secret management. - Added `ssh` module for secure SSH configuration with user restrictions. - Introduced `nixy` theme for a customized aesthetic experience across services.
2026-06-16 23:03:39 +02:00
commit 5082521524
140 changed files with 9740 additions and 0 deletions
@@ -0,0 +1,45 @@
+{
+  pkgs,
+  pkgs-stable,
+  pkgs-nur-hadi,
+  ...
+}: {
+  home.packages = with pkgs-stable; [
+    vlc # Video player
+    obsidian # Note taking app
+    textpieces # Manipulate texts
+    resources # Ressource monitor
+    gnome-clocks # Clocks app
+    gnome-text-editor # Basic graphic text editor
+    ticktick # Todo app
+    pinta # Image editor
+    switcheroo # Convert images between different formats
+    onlyoffice-desktopeditors # Office suite
+    blanket # Listen to different sounds
+    signal-desktop # Messaging app
+    librewolf # Backup browser
+
+    # I love TUIs
+    caligula # User-friendly, lightweight TUI for disk imaging (ISO, USB BOOT)
+    browsh # A modern text-based browser that renders anything that a modern browser can. It runs in a terminal and can be used remotely over SSH
+    dysk # A terminal-based disk usage analyzer
+    wikiman # Offline search engine for manual pages (arch wiki, tldr)
+    tealdeer # Fast tldr client
+    sttr # Minimalist "cyberchef" like. Cross-platform, cli app to perform various operations on string
+    wiremix # Simple TUI mixer for PipeWire
+    slides # A terminal-based presentation tool that allows you to create and deliver presentations directly from the command line
+    pom # Pomodoro timer in your terminal
+    pkgs.wifitui # TUI for managing wifi
+    pkgs-nur-hadi.usbguard-tui # TUI for managing USBGuard rules
+    pkgs-nur-hadi.sheets # Terminal based spreadsheet tool
+
+    # I love CLIs
+    httpie # Command-line HTTP client, a user-friendly cURL replacement
+    gh # GitHub
+    gh-dash # A terminal dashboard for GitHub
+    figlet # Transform text into ASCII art
+    pastel # Command-line tool to generate, analyze, convert and manipulate colors
+    imagemagick # Image manipulation tool
+    chafa # Image to ANSI/Unicode converter and more.
+  ];
+}
@@ -0,0 +1,48 @@
+{
+  pkgs,
+  pkgs-stable,
+  pkgs-nur-hadi,
+}:
+(with pkgs-stable; [
+  # Web
+  dirb
+  ffuf
+  katana
+  whatweb
+
+  # Hashes
+  hashcat
+  haiti
+  hydra
+  john
+
+  # Databases
+  mariadb
+  redis
+  sqlmap
+  nosqli
+
+  # Network
+  inetutils
+  termshark # wireshark in TUI
+  dnsrecon
+  whois
+  dig
+  nmap
+  samba
+
+  # Misc
+  metasploit
+  nuclei
+  openvpn
+
+  # Secrets
+  trufflehog
+
+  # Forensics
+  binwalk
+])
++ (with pkgs-nur-hadi; [
+  spilltea
+  jwt-tui
+])
@@ -0,0 +1,45 @@
+{
+  pkgs,
+  pkgs-stable,
+  pkgs-nur-hadi,
+  ...
+}: {
+  home.packages = import ./cybersecurity-packages.nix {
+    inherit pkgs pkgs-stable pkgs-nur-hadi;
+  };
+
+  systemd.user.tmpfiles.rules = [
+    "d %h/Cyber/tmp 0755 - - -"
+    "d %h/Cyber/wordlists 0755 - - -"
+    "d %h/Cyber/wordlists/rules 0755 - - -"
+  ];
+
+  home.file = {
+    "Cyber/wordlists/seclists".source = pkgs.fetchFromGitHub {
+      owner = "danielmiessler";
+      repo = "SecLists";
+      rev = "47aa98053fce8670c6489e4f6fb57dc34881d8bd";
+      hash = "sha256-ojXLB/TXap1Qi0MtV5/WJlJpjNIDYx/sLY2KHm0uFKI=";
+    };
+
+    "Cyber/wordlists/fuzz4bounty".source = pkgs.fetchFromGitHub {
+      owner = "0xPugal";
+      repo = "fuzz4bounty";
+      rev = "a805f6b434033f054312da0ddc2bc3021cc9a3b0";
+      hash = "sha256-wMhx1CcxIyw2E7gJXQxXAFc7m5nYt0FXNkoTZqFMQh4=";
+    };
+
+    # RULES
+    "Cyber/wordlists/rules/oneruletorulethemstill".source = pkgs.fetchFromGitHub {
+      owner = "stealthsploit";
+      repo = "oneruletorulethemstill";
+      rev = "4bfb7322e189305b5f35bb7fcd4e9cc233c3d3c6";
+      hash = "sha256-h7MeymIXS/6wlPRt4lzsIEqOOssP0lDx9nQip65cwZw=";
+    };
+
+    "Cyber/wordlists/rules/best64.rule".source = pkgs.fetchurl {
+      url = "https://raw.githubusercontent.com/CarlosLannister/OwadeReborn/refs/heads/master/owade/fileAnalyze/hashcatLib/best64.rule%7E";
+      hash = "sha256-T0XkMHJZQiy63/j25nGTkaiDFjc+blmgEVGTAFgVylU=";
+    };
+  };
+}
@@ -0,0 +1,17 @@
+{
+  pkgs,
+  pkgs-stable,
+}:
+(with pkgs; [
+  go
+  claude-code
+])
++ (with pkgs-stable; [
+  nodejs
+  air
+  duckdb
+  python3
+  jq
+  nix-prefetch-github
+  rsync
+])
@@ -0,0 +1,7 @@
+{
+  pkgs,
+  pkgs-stable,
+  ...
+}: {
+  home.packages = import ./dev-packages.nix {inherit pkgs pkgs-stable;};
+}
@@ -0,0 +1,22 @@
+{
+  inputs,
+  pkgs,
+  pkgs-stable,
+  pkgs-nur-hadi,
+  system,
+  ...
+}: let
+  devPackages = import ./dev-packages.nix {inherit pkgs pkgs-stable;};
+  cyberPackages = import ./cybersecurity-packages.nix {inherit pkgs pkgs-stable pkgs-nur-hadi;};
+in {
+  packages.${system} = {
+    dev = pkgs.buildEnv {
+      name = "dev-tools";
+      paths = devPackages;
+    };
+    cybersecurity = pkgs.buildEnv {
+      name = "cybersecurity-tools";
+      paths = cyberPackages;
+    };
+  };
+}
@@ -0,0 +1,16 @@
+{
+  pkgs-stable,
+  pkgs-nur-hadi,
+  inputs,
+  ...
+}: {
+  home.packages = with pkgs-stable; [
+    tty-solitaire
+    bastet
+    peaclock
+    cbonsai
+    pipes
+    cmatrix
+    fastfetch
+  ];
+}