networking and security updates

hosts/thinkpad/default.nix

@@ -56,6 +56,16 @@
     HibernateDelaySec=2h
   '';
 
+  services.mysql = {
+    enable = true;
+    package = pkgs.mariadb;
+    ensureUsers = [
+      {
+        name = "user1";
+      }
+    ];
+  };
+
   services.logind = {
     lidSwitch = "suspend-then-hibernate";
     lidSwitchDocked = "suspend-then-hibernate";

hosts/thinkpad/modules/networks/default.nix

@@ -41,7 +41,9 @@
     hostName = "thinkpad";
     hostId = "d8d34032";
     enableIPv6 = true;
-    firewall.allowedTCPPorts = [ 24727 ];
+    firewall = {
+      logRefusedConnections = false;
+    };
     wireless = {
       enable = true;
       userControlled.enable = true;

hosts/thinkpad/modules/sound/default.nix

@@ -9,5 +9,6 @@
   };
   environment.systemPackages = with pkgs; [
     qpwgraph
+    easyeffects
   ];
 }