mullvad and firewall

modules/nixos/desktop-environment/default.nix

@@ -57,6 +57,17 @@ in {
         3389 
         3390
       ];
+
+      # users.users.andreas.extraGroups = [ "sambashare" ];    
+      # Enable Avahi (mDNS/DNS-SD) for discovery
+      services.avahi = {
+        enable = true;
+        nssmdns4 = true;
+        openFirewall = true;
+      };
+      # Enable GNOME sharing services
+      services.gnome.gnome-user-share.enable = true;
+
       environment.systemPackages = with pkgs; [
         gnome-tweaks
         gnome-software

modules/nixos/steam/default.nix

@@ -52,14 +52,15 @@
         "-r" "172"
         "-e" # Enable steam integration
         "--steam"
+        "--prefer-outpout DP-4"
         "--prefer-vk-device 8086:e20b" # lspci -nn | grep VGA
       ];
       env = {
-        WLR_RENDERER = "vulkan";
+        # WLR_RENDERER = "vulkan";
-        DXVK_HDR = "0 ";
+        # DXVK_HDR = "0 ";
-        ENABLE_GAMESCOPE_WSI = "0";
+        # ENABLE_GAMESCOPE_WSI = "0";
-        WINE_FULLSCREEN_FSR = "1";
+        # WINE_FULLSCREEN_FSR = "1";
-        SDL_VIDEODRIVER = "wayland,x11"; # Games allegedly prefer X11
+        # SDL_VIDEODRIVER = "wayland,x11"; # Games allegedly prefer X11
       };
     };
     
@@ -71,7 +72,7 @@
         ];
         extraEnv = {
           # SDL_VIDEODRIVER = "wayland,x11";
-          SDL_VIDEODRIVER = "x11";
+          # SDL_VIDEODRIVER = "x11,wayland";
         };
       };
       remotePlay.openFirewall = true; # Open ports in the firewall for Steam Remote Play

overlays/mesa-gcc/default.nix

@@ -2,13 +2,13 @@
 
 final: prev: {
   mesa = (prev.mesa.overrideAttrs (old: rec {
-    version = "git-unstable-2026-02-12";
+    version = "git-unstable-2026-03-22";
     src = prev.fetchFromGitLab {
       domain = "gitlab.freedesktop.org";
       owner = "mesa";
       repo = "mesa";
       rev = "main";
-      hash = "sha256-5gpLORvbV3skALrQa0VxTJJarYjuq+KyTxDm9HtZNbQ=";
+      hash = "sha256-IoLD9ODAU8sMqnPeDXdPhU3S1fr/UNnmuR3CpZC99Rs=";
     };
     patches = [];
     buildInputs = old.buildInputs ++ (with prev.llvmPackages_21; [ 

systems/x86_64-linux/drivebystation-nix/configuration.nix

@@ -196,13 +196,14 @@
   # Enable the OpenSSH daemon.
   services.openssh.enable = true;
 
-  # Open ports in the firewall.
+  # Open ports in the .
   networking.firewall.allowedTCPPorts = [
     24800 #Synergy
     53317 #localsend
     3390 #rdp
     9090
     8000
+    40122
   ];
   networking.firewall.allowedUDPPorts = [
     24800 #Synergy
@@ -210,6 +211,7 @@
     3390 #rdp
     9090
     8000
+    40122
   ];
   networking.firewall.trustedInterfaces = [ "virbr0" ];
   networking.nat = {
@@ -233,7 +235,8 @@
       }
     ];
   };
-
+  services.mullvad-vpn.enable = true;
+  services.mullvad-vpn.package = pkgs.mullvad-vpn;
   # Or disable the firewall altogether.
   # networking.firewall.enable = false;
 

systems/x86_64-linux/drivebystation-nix/default.nix

@@ -45,6 +45,7 @@ in
       my-namespace.desktop-environment.xfce.enable = true;
       my-namespace.desktop-environment.gnome.enable = true;
       my-namespace.desktop-environment.kde.enable = true;
+      my-namespace.desktop-environment.hyprland.enable = true;
       my-namespace.desktop-environment.cosmic.enable = true;
       my-namespace.performance-tuning.enable = true;
       my-namespace.file-organization.enable = true;

systems/x86_64-linux/drivebystation-nix/hardware/acer-monitor-edid.nix

@@ -1,7 +1,9 @@
 { config, lib, pkgs, ... }:
 {
   # boot.kernelParams = [ "drm.edid_firmware=DP-1:edid/edid.bin,DP-2:edid/edid.bin,DP-3:edid/edid.bin,DP-4:edid/edid.bin" ];
-  boot.kernelParams = [ "drm.edid_firmware=DP-2:edid/edid.bin" ];
+  boot.kernelParams = [ 
+    "drm.edid_firmware=DP-2:edid/edid.bin,DP-4:edid/edid.bin" 
+  ];
 
 
   hardware.firmware = [

systems/x86_64-linux/drivebystation-nix/hardware/graphics/intel.nix

@@ -27,7 +27,7 @@
     "module_blacklist=nouveau,nvidia,nvidia_drm,nvidia_modeset,nvidia_uvm"
   ];
   services.switcherooControl.enable = true;
-  environment.variables.VK_ICD_FILENAMES = "/run/opengl-driver/share/vulkan/icd.d/intel_icd.x86_64.json";
+  # environment.variables.VK_ICD_FILENAMES = "/run/opengl-driver/share/vulkan/icd.d/intel_icd.x86_64.json";
   hardware.intel-gpu-tools.enable = true;
   hardware.graphics = {
     enable = true;
@@ -53,6 +53,13 @@
     "nvidia_uvm"
   ];
 
+  # Mark Arc B580 as a discrete Intel GPU for switcheroo-control and
+  # keep runtime PCI power management enabled for the device.
+  services.udev.extraRules = ''
+    ACTION=="add|bind", SUBSYSTEM=="pci", ATTR{vendor}=="0x8086", ATTR{device}=="0xe20b", TEST=="power/control", ATTR{power/control}="auto"
+    SUBSYSTEM=="drm", DRIVERS=="xe", ATTRS{vendor}=="0x8086", ATTRS{device}=="0xe20b", TAG+="switcheroo-discrete-gpu"
+  '';
+
   environment.variables = {
     # Force Intel GPU for all graphics operations
     KWIN_DRM_DEVICES = "/dev/dri/card0";
@@ -120,4 +127,7 @@
     clinfo
     vulkan-tools
   ];
+  services.xserver.deviceSection = ''
+    Option "TearFree" "false"
+  '';
 }

systems/x86_64-linux/drivebystation-nix/hardware/hardware-configuration.nix

@@ -33,7 +33,7 @@
 
     serviceConfig = {
       Type = "oneshot";
-      ExecStart = "${pkgs.ethtool}/bin/ethtool --set-eee enp75s0 eee off";
+      ExecStart = "${pkgs.ethtool}/bin/ethtool --set-eee enp10s0 eee off";
       RemainAfterExit = true;
     };
   };