From 0b6821383cd34bc25b828da1eca033cc16eb282f Mon Sep 17 00:00:00 2001
From: Dave Gallant <davegallant@gmail.com>
Date: Sat, 22 Oct 2022 16:01:44 -0400
Subject: [PATCH] Enable opensnitch

---
 common/linux.nix |  2 ++
 flake.lock       | 12 ++++++------
 home/default.nix |  2 ++
 3 files changed, 10 insertions(+), 6 deletions(-)

diff --git a/common/linux.nix b/common/linux.nix
index 77a1709..64ebf37 100644
--- a/common/linux.nix
+++ b/common/linux.nix
@@ -29,6 +29,8 @@
 
   sound.enable = true;
 
+  services.opensnitch.enable = true;
+
   # Enable 32bit for steam
   hardware.pulseaudio.enable = true;
   hardware.opengl.driSupport32Bit = true;
diff --git a/flake.lock b/flake.lock
index 20355e9..fa10ff6 100644
--- a/flake.lock
+++ b/flake.lock
@@ -28,11 +28,11 @@
         "utils": "utils"
       },
       "locked": {
-        "lastModified": 1666080735,
-        "narHash": "sha256-4YWYJgzt9mGuAvXAuEziYms+bYlk/1spyt3iLizRL5I=",
+        "lastModified": 1666463764,
+        "narHash": "sha256-NmayV9S0s7CgNEA2QbIxDU0VCIiX6bIHu8PCQPnYHDM=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "42f81ac107c5a9a177888080107094dba57f134e",
+        "rev": "69d19b9839638fc487b370e0600a03577a559081",
         "type": "github"
       },
       "original": {
@@ -93,11 +93,11 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1665940183,
-        "narHash": "sha256-cPe3F7CtnxU9YbJpc3Adl4d9kX+turqTv5FxM98i8vg=",
+        "lastModified": 1666377499,
+        "narHash": "sha256-dZZCGvWcxc7oGnUgFVf0UeNHsJ4VhkTM0v5JRe8EwR8=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "104e8082de1b20f9d0e1f05b1028795ed0e0e4bc",
+        "rev": "301aada7a64812853f2e2634a530ef5d34505048",
         "type": "github"
       },
       "original": {
diff --git a/home/default.nix b/home/default.nix
index 79b563e..19c6cc7 100644
--- a/home/default.nix
+++ b/home/default.nix
@@ -24,6 +24,7 @@ in {
       defaultCacheTtlSsh = 3600;
       enableSshSupport = true;
     };
+    opensnitch-ui.enable = stdenv.isLinux;
   };
 
   fonts.fontconfig.enable = true;
@@ -171,6 +172,7 @@ in {
       shellAliases = {
         ".." = "cd ..";
         c = "code";
+        docker = "podman";
         g = "git";
         gr = "cd $(git rev-parse --show-toplevel)";
         gho = "gh repo view --web >/dev/null";