Compare commits

...

3 commits

Author SHA1 Message Date
Chris (wolcen) Thompson
50e1cab175 Update firewall rules for Ollama server 2025-06-08 12:16:54 -04:00
Chris (wolcen) Thompson
5d831405a0 Add disable panel self-refresh to fix AMDGPU bug/hang and switch back to zen kernel 2025-06-08 12:16:37 -04:00
Chris (wolcen) Thompson
16b1667373 Update flake.lock 2025-06-08 12:15:56 -04:00
2 changed files with 11 additions and 8 deletions

12
flake.lock generated
View file

@ -7,11 +7,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1748737919, "lastModified": 1749243446,
"narHash": "sha256-5kvBbLYdp+n7Ftanjcs6Nv+UO6sBhelp6MIGJ9nWmjQ=", "narHash": "sha256-P1gumhZN5N9q+39ndePHYrtwOwY1cGx+VoXGl+vTm7A=",
"owner": "nix-community", "owner": "nix-community",
"repo": "home-manager", "repo": "home-manager",
"rev": "5675a9686851d9626560052a032c4e14e533c1fa", "rev": "2d7d65f65b61fdfce23278e59ca266ddd0ef0a36",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -22,11 +22,11 @@
}, },
"nixpkgs": { "nixpkgs": {
"locked": { "locked": {
"lastModified": 1748693115, "lastModified": 1749143949,
"narHash": "sha256-StSrWhklmDuXT93yc3GrTlb0cKSS0agTAxMGjLKAsY8=", "narHash": "sha256-QuUtALJpVrPnPeozlUG/y+oIMSLdptHxb3GK6cpSVhA=",
"owner": "nixos", "owner": "nixos",
"repo": "nixpkgs", "repo": "nixpkgs",
"rev": "910796cabe436259a29a72e8d3f5e180fc6dfacc", "rev": "d3d2d80a2191a73d1e86456a751b83aa13085d7d",
"type": "github" "type": "github"
}, },
"original": { "original": {

View file

@ -55,11 +55,14 @@
# Temporarily pin to 6.12 to fix llvm/rocm build # Temporarily pin to 6.12 to fix llvm/rocm build
# https://github.com/NixOS/nixpkgs/issues/368672#issuecomment-2608697421 # https://github.com/NixOS/nixpkgs/issues/368672#issuecomment-2608697421
# boot.kernelPackages = pkgs.linuxPackages_6_12; # boot.kernelPackages = pkgs.linuxPackages_6_12;
# boot.kernelPackages = pkgs.linuxPackages_zen; boot.kernelPackages = pkgs.linuxPackages_zen;
# nct6775 - for monitoring functions on ASUS ROG STRIX B550-F GAMING WIFI II # nct6775 - for monitoring functions on ASUS ROG STRIX B550-F GAMING WIFI II
# kvm-amd - AMD virtualization support # kvm-amd - AMD virtualization support
boot.kernelModules = [ "kvm-amd" "nct6775" ]; boot.kernelModules = [ "kvm-amd" "nct6775" ];
# Problems with hangs on RX6700
boot.kernelParams = [ "amdgpu.dcdebugmask=0x10" ];
# Direct patching for enabling for async reprojection (for SteamVR) on AMD # Direct patching for enabling for async reprojection (for SteamVR) on AMD
# boot.kernelPatches = [ # boot.kernelPatches = [
# { # {
@ -198,8 +201,8 @@
checkReversePath = "loose"; checkReversePath = "loose";
extraCommands = '' extraCommands = ''
# Enable connections to Ollama for VPN users: # Enable connections to Ollama for VPN users:
iptables -t filter -I INPUT --protocol TCP --source 10.40.4.0/24 --destination 10.40.4.2 --dport 8080 -j ACCEPT
iptables -t filter -I INPUT --protocol TCP --source 10.40.4.2/32 --destination 10.40.4.2 --dport 11434 -j ACCEPT iptables -t filter -I INPUT --protocol TCP --source 10.40.4.2/32 --destination 10.40.4.2 --dport 11434 -j ACCEPT
iptables -t filter -I INPUT --protocol TCP --source 10.0.7.0/24 --destination 10.40.4.2 --dport 11434 -j ACCEPT
''; '';
# wireguard trips rpfilter up # wireguard trips rpfilter up
#extraCommands = '' #extraCommands = ''