From 64bb0050829f23ae9840aabeb1310a744bf69d85 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?L=C3=A9ana=20=E6=B1=9F?= Date: Thu, 1 Jan 2026 22:29:48 +0100 Subject: [PATCH 1/3] Reapply "vanadium/connectivity: block youtube for a while" This reverts commit 01e50baa5c0ae74e9aa7a04306c8ba4cc06530d6. --- nix/configurations/vanadium/nixos/connectivity.nix | 3 +++ 1 file changed, 3 insertions(+) diff --git a/nix/configurations/vanadium/nixos/connectivity.nix b/nix/configurations/vanadium/nixos/connectivity.nix index c484540f..e4906268 100644 --- a/nix/configurations/vanadium/nixos/connectivity.nix +++ b/nix/configurations/vanadium/nixos/connectivity.nix @@ -67,6 +67,9 @@ 0.0.0.0 instagram.com 0.0.0.0 www.instagram.com + 0.0.0.0 youtube.com + 0.0.0.0 www.youtube.com + # The "people who you viewed can see you" thing is weird af 0.0.0.0 linkedin.com 0.0.0.0 www.linkedin.com From 2c424bf878f1d76151e13f833fa7f463b1654f6f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?L=C3=A9ana=20=E6=B1=9F?= Date: Fri, 2 Jan 2026 00:48:16 +0100 Subject: [PATCH 2/3] vanadium: doas allow framework_tool without password --- nix/configurations/vanadium/nixos/misc.nix | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/nix/configurations/vanadium/nixos/misc.nix b/nix/configurations/vanadium/nixos/misc.nix index 4d512a82..0f757beb 100644 --- a/nix/configurations/vanadium/nixos/misc.nix +++ b/nix/configurations/vanadium/nixos/misc.nix @@ -19,4 +19,12 @@ # https://discourse.nixos.org/t/how-do-i-get-my-aarch64-linux-machine-to-build-x86-64-linux-extra-platforms-doesnt-seem-to-work/38106/2?u=leana8959 boot.binfmt.emulatedSystems = [ "aarch64-linux" ]; nix.settings.extra-platforms = config.boot.binfmt.emulatedSystems; + + security.doas.extraRules = [ + { + users = [ ":wheel" ]; + cmd = "framework_tool"; + noPass = true; + } + ]; } From 02ed4b61236a037b12a4f1060cb6461c1e5c4e39 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?L=C3=A9ana=20=E6=B1=9F?= Date: Fri, 2 Jan 2026 10:55:39 +0100 Subject: [PATCH 3/3] packages/typst-bot: update --- nix/packages/by-name/typst-bot/package.nix | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/nix/packages/by-name/typst-bot/package.nix b/nix/packages/by-name/typst-bot/package.nix index ffca5ea8..836d4dcc 100644 --- a/nix/packages/by-name/typst-bot/package.nix +++ b/nix/packages/by-name/typst-bot/package.nix @@ -10,8 +10,8 @@ rustPlatform.buildRustPackage (finalAttrs: { src = fetchFromGitHub { owner = "mattfbacon"; repo = "typst-bot"; - rev = "c9d4b164ff5dc2567bb0de3876460e51da62ba94"; - hash = "sha256-tB+zrE5p7zOloOgoP2fmFsajd4IBf94ET1v/0W3aNcM="; + rev = "a4f2e0ea6046a1f9d551c1543d42696107d18a78"; + hash = "sha256-bLB9W/2nHPL/T2TxTJLBBC5JSQczklZ34n6AJAR/3gI="; }; preBuild = '' @@ -29,7 +29,8 @@ rustPlatform.buildRustPackage (finalAttrs: { cargoLock = { lockFile = "${finalAttrs.src}/Cargo.lock"; outputHashes = { - "poise-0.6.1" = "sha256-iXyp9sR/vzPsexGPdRjfuKyFcGqvDdqiBAXnuw/HFo8="; + "poise-0.6.1" = "sha256-/UrFlHWDsCDaqWd+XchmH0PzauxIWuYaJp9ZZh3W+50="; + "typst-dev-assets-0.14.2" = "sha256-mRkQXg1YG0qqcTVtgpQpvKw54RM9FBo1EgM2WJFbQAI="; }; }; })