mirror of
https://github.com/ryan4yin/nix-config.git
synced 2026-11-13 12:13:46 +01:00
ryan4yin | 二花
1256570a84
* fix(youko): stop homepage from probing the authenticated transmission RPC
The siteMonitor hit /transmission/rpc unauthenticated, so every probe returned 401 and counted against transmission's anti-brute-force threshold.
* feat(youko): tune transmission and firewall its network namespace
Raise the upload limit and queues, relax required encryption to preferred, and add a default-drop nftables input chain inside the netns so the peer port stays open while everything else is closed. Allowlist the nftables 'iif' keyword for typos.
* feat(youko): export transmission metrics and add a Grafana dashboard
nixpkgs has no transmission exporter, so add a small stdlib Python exporter that queries the authenticated netns RPC on loopback, scrape it from VictoriaMetrics, and ship a Transmission dashboard.
* fix(youko): cap transmission upload at 2500 kB/s
30 MB/s ignored the 50 Mbps uplink; keep seeding around 20 Mbps.
* Revert "feat(youko): export transmission metrics and add a Grafana dashboard"
This reverts commit 9df7a26526.
52 lines
1.2 KiB
TOML
52 lines
1.2 KiB
TOML
[files]
|
|
# Respect .ignore files.
|
|
ignore-dot = true
|
|
# Respect ignore files.
|
|
ignore-files = true
|
|
# Typos-specific ignore globs (gitignore syntax).
|
|
# NOTE: This setting is ignored when you pass the path directly on the command line, as cachix/git-hooks.nix does.
|
|
# To ignore those files, you must also exclude those directories via git-hooks.hooks.typos.settings.exclude.
|
|
extend-exclude = [
|
|
"data/",
|
|
"rime-data/",
|
|
]
|
|
|
|
[default]
|
|
# Check binary files as text.
|
|
binary = false
|
|
# Verify spelling in file names.
|
|
check-filename = true
|
|
# ignore some special identifiers(sha256, mac address, crypto keys, etc)
|
|
extend-ignore-re = [
|
|
"iterm2",
|
|
"iHgEIBYKACAWIQSizQe9ljFEyyclWmtVhZllwnQrSwUCZZ1T9wIdAAAKCRBVhZll", # crypto keys
|
|
"noice", # noice.nvim
|
|
"crypted-nixos",
|
|
"daed",
|
|
|
|
# catppuccin theme colors
|
|
"11111b",
|
|
"1e1e2e",
|
|
"313244",
|
|
"414356",
|
|
"45475a",
|
|
"585b70",
|
|
"89b4fa",
|
|
"94e2d5",
|
|
"a6adc8",
|
|
"a6e3a1",
|
|
"bac2de",
|
|
"cdd6f4",
|
|
"f38ba8",
|
|
"f5c2e7",
|
|
"f5e0dc",
|
|
"f9e2af",
|
|
"fab387",
|
|
|
|
# The upstream dictionary maps UPnP to "UOnP", which is wrong; keep UPnP.
|
|
"UPnP",
|
|
|
|
# nftables keyword `iif` (input interface); the spell checker wants `if`.
|
|
"iif",
|
|
]
|