added sunshine

hosts/hakase/configuration.nix

@@ -126,7 +126,7 @@
   networking = {
     networkmanager.enable = true;
     firewall = {
-      enable = false;
+      enable = true;
       allowedTCPPorts = [22 80];
       allowedUDPPorts = [53];
     };

modules/default/remote.nix

@@ -1,5 +1,6 @@
 {
   imports = [
     ../../packages/moondeck-buddy/appimage.nix
+    ../../packages/sunshine/default.nix
   ];
 }

packages/moondeck-buddy/appimage.nix

@@ -1,15 +1,57 @@
+# /etc/nixos/configuration.nix
 {
-  appimageTools,
+  config,
+  pkgs,
+  lib,
   fetchurl,
+  ...
 }: let
+  moondeckBuddyWrapped = pkgs.appimageTools.wrapType2 {
     pname = "moondeck-buddy";
     version = "1.8.2";
 
-  src = fetchurl {
-    url = "https://github.com/FrogTheFrog/moondeck-buddy/releases/download/v${version}/MoonDeckBuddy-${version}-x86_64.AppImage";
-    hash = "sha256-he1uGC1M/nFcKpMM9JKY4oeexJcnzV0ZRxhTjtJz6xw=";
+    src = pkgs.fetchurl {
+      url = "https://github.com/FrogTheFrog/moondeck-buddy/releases/download/v1.8.2/MoonDeckBuddy-1.8.2-x86_64.AppImage";
+      hash = "sha256-D+9XIi3pIwaAq22DGHWAUqKub778qHQSjCU0aIjXmYY="; # Don't forget to update this!
     };
-in
-  appimageTools.wrapType2 {
-    inherit pname version src;
+
+    extraPkgs = pkgs:
+      with pkgs; [
+        # Your extraPkgs here
+      ];
+
+    desktopItems = [
+      (pkgs.makeDesktopItem {
+        name = "Moondeck Buddy";
+        exec = "moondeck-buddy";
+        icon = "applications-other";
+        comment = "A Sunshine/Moondeck Buddy.";
+        categories = ["Utility" "Productivity"];
+      })
+    ];
+
+    meta = with lib; {
+      description = "Moondeck Buddy is an companion app for NVIDIA Sunshine/Moonlight.";
+      homepage = "https://github.com/FrogTheFrog/moondeck-buddy";
+      license = licenses.gpl3Only;
+      platforms = platforms.linux;
+      mainProgram = "moondeck-buddy";
+    };
+  };
+in {
+  environment.systemPackages = with pkgs; [
+    moondeckBuddyWrapped
+  ];
+
+  programs.appimage.enable = true;
+  programs.appimage.binfmt = true;
+
+  # --- Firewall Configuration ---
+  networking.firewall.allowedTCPPorts = [
+    59999 # Allow Moondeck Buddy to listen on this port
+  ];
+  # If Moondeck Buddy also needs UDP, uncomment and add it here:
+  # networking.firewall.allowedUDPPorts = [
+  #   59999
+  # ];
 }

packages/sunshine/default.nix

@@ -0,0 +1,11 @@
+{pkgs, ...}: {
+  environment.systemPackages = with pkgs; [
+    sunshine
+  ];
+  services.sunshine = {
+    enable = true;
+    autoStart = true;
+    capSysAdmin = true;
+    openFirewall = true;
+  };
+}