Migration of transmission layer: Tor->Lokinet

README.md

@@ -11,6 +11,7 @@ We are using:
 * [mission-control](https://github.comPlatonic-Systems/mission-control) to administrate this repository
 * [lanzaboote](https://github.com/nix-community/lanzaboote) for declarative secure boot
 * [nixos-generators](https://github.com/nix-community/nixos-generators) to generate filesystem images
+* [LOKINET](https://lokinet.org) Low-latency Post-Quantum Safe (NTRU Prime) onion-router acting as a transmission layer between systems
 
 Trusted community members are welcomed to commit their systems for collective administration and share of resources.
 
@@ -177,4 +178,4 @@ This can easily safe you few Gigabytes if you don't have set maximum number of g
 
 Credit: [Samuel Sung](https://codeberg.org/samuelsung)
 
-*Feel Free To Add Your Tips*
+*Feel Free To Add Your Tips*

flake.nix

@@ -146,6 +146,10 @@
 						inputs.nixpkgs.legacyPackages.${system}.sbctl # To set up secureboot
 						inputs.nixpkgs.legacyPackages.${system}.fira-code # For liquratures in code editors
 
+						# Networking
+						inputs.nixpkgs.legacyPackages.${system}.nmap
+						inputs.nixpkgs.legacyPackages.${system}.dig
+
 						inputs.nixos-generators.packages.${system}.nixos-generate
 
 						inputs.disko.packages.${system}.disko-install

src/nixos/machines/mracek/config/security.nix

@@ -30,9 +30,9 @@ in {
 		}
 
 		# Enforce to use the Tor Proxy
-		(mkIf config.services.tor.enable {
-			networking.proxy.default = mkDefault "socks5://127.0.0.1:9050";
-			networking.proxy.noProxy = mkDefault "127.0.0.1,localhost";
-		})
+		# (mkIf config.services.tor.enable {
+		# 	networking.proxy.default = mkDefault "socks5://127.0.0.1:9050";
+		# 	networking.proxy.noProxy = mkDefault "127.0.0.1,localhost";
+		# })
 	];
 }

src/nixos/machines/mracek/config/setup.nix

@@ -12,6 +12,7 @@ in {
 	nix.distributedBuilds = true; # Perform distributed builds
 
 	services.gitea.enable = true;
+	services.lokinet.enable = true;
 	services.monero.enable = true;
 	services.murmur.enable = true;
 	services.navidrome.enable = true;
@@ -23,4 +24,4 @@ in {
 	users.users.root.openssh.authorizedKeys.keys = mkIf config.services.openssh.enable [
 		"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOzh6FRxWUemwVeIDsr681fgJ2Q2qCnwJbvFe4xD15ve [email protected]" # Allow root access for the Super Administrator (KREYREN)
 	];
-}
+}

src/nixos/machines/mracek/default.nix

@@ -30,6 +30,7 @@ in {
 			./services/binfmt.nix
 			./services/distributedBuilds.nix
 			./services/gitea.nix
+			./services/lokinet.nix
 			./services/monero.nix
 			./services/murmur.nix
 			./services/navidrome.nix

src/nixos/machines/mracek/services/lokinet.nix

@@ -0,0 +1,13 @@
+{ config, ... }:
+
+# Lokinet Management of MRACEK
+
+{
+	networking.nameservers = [ config.services.lokinet.settings.dns.bind ]; # Use the Lokinet-provided DNS server to resolve .loki addresses
+
+	# WARNING(Krey): This Needs To Be Made Impermanent otherwise reboot will refresh the key
+	services.lokinet.settings.network.keyfile = "snappkey.private"; # Set the keyfile so that the loki URL remains the same after service restart
+
+	# FIXME(Krey): We need to set a URL alias for
+	# services.lokinet.settings.network.mapaddr = "somewhereInTheDark.loki:sinnenfreude.systems.nxl";
+}

src/nixos/machines/sinnenfreude/config/setup.nix

@@ -13,6 +13,7 @@
 
 	services.flatpak.enable = true;
 	services.openssh.enable = true;
+	services.lokinet.enable = true;
 	services.tor.enable = true;
 
 	# Desktop Environment

src/nixos/machines/sinnenfreude/default.nix

@@ -53,6 +53,7 @@
 
 			./services/binfmt.nix
 			./services/distributedBuilds.nix
+			./services/lokinet.nix
 			./services/openssh.nix
 			./services/tor.nix
 		];

src/nixos/machines/sinnenfreude/services/lokinet.nix

@@ -0,0 +1,13 @@
+{ config, ... }:
+
+# Lokinet Management of SINNENFREUDE
+
+{
+	networking.nameservers = [ config.services.lokinet.settings.dns.bind ]; # Use the Lokinet-provided DNS server to resolve .loki addresses
+
+	# WARNING(Krey): This Needs To Be Made Impermanent otherwise reboot will refresh the key
+	services.lokinet.settings.network.keyfile = "snappkey.private"; # Set the keyfile so that the loki URL remains the same after service restart
+
+	# FIXME(Krey): We need to set a URL alias for
+	# services.lokinet.settings.network.mapaddr = "somewhereInTheDark.loki:sinnenfreude.systems.nxl";
+}

src/nixos/users/kreyren/home/modules/system/dconf/dconf.nix

@@ -45,14 +45,14 @@ in {
 			temperature-unit = "kelvin";
 		};
 
-		# Set up Proxy
-		"system/proxy" = {
-			mode = "manual";
-		};
-		"system/proxy/socks" = {
-			host = "127.0.0.1";
-			port = 9050;
-		};
+		# # Set up Proxy
+		# "system/proxy" = {
+		# 	mode = "manual";
+		# };
+		# "system/proxy/socks" = {
+		# 	host = "127.0.0.1";
+		# 	port = 9050;
+		# };
 
 		# Bottles
 		"com/usebottles/bottles" = {

src/nixos/users/kreyren/home/modules/web-browsers/firefox/firefox.nix

@@ -230,8 +230,8 @@ in {
 			};
 			PromptForDownloadLocation = true;
 			Proxy = {
-				Mode = "system"; # none | system | manual | autoDetect | autoConfig;
-				Locked = true;
+				Mode = "manual"; # none | system | manual | autoDetect | autoConfig;
+				Locked = true; # Do not allow the user to change the proxy settings
 				# HTTPProxy = hostname;
 				# UseHTTPProxyForAllProtocols = true;
 				# SSLProxy = hostname;