Small changes

common/default.nix

@@ -15,6 +15,9 @@
 
   networking.useDHCP = false;
 
+  networking.firewall.enable = true;
+  networking.firewall.allowPing = true;
+
   time.timeZone = "America/New_York";
   i18n.defaultLocale = "en_US.UTF-8";
 
@@ -34,6 +37,8 @@
     usbutils
     killall
     screen
+    micro
+    helix
   ];
 
   nixpkgs.config.allowUnfree = true;
@@ -43,12 +48,15 @@
     isNormalUser = true;
     extraGroups = [
       "wheel"
-      "dialout"
+      "dialout" # serial
     ];
+    shell = pkgs.fish;
     openssh.authorizedKeys.keys = (import ./ssh.nix).users;
     hashedPassword = "$6$TuDO46rILr$gkPUuLKZe3psexhs8WFZMpzgEBGksE.c3Tjh1f8sD0KMC4oV89K2pqAABfl.Lpxu2jVdr5bgvR5cWnZRnji/r/";
   };
   nix.trustedUsers = [ "root" "googlebot" ];
 
   nix.gc.automatic = true;
+
+  programs.fish.enable = true;
 }

common/pc/chromium.nix

@@ -83,6 +83,7 @@ in {
         enableWideVine = true;
         # ungoogled = true;
         # --enable-native-gpu-memory-buffers # fails on AMD APU
+        # --enable-webrtc-vp9-support
         commandLineArgs = "--use-vulkan --use-gl=desktop --enable-zero-copy --enable-hardware-overlays --enable-features=VaapiVideoDecoder,CanvasOopRasterization --ignore-gpu-blocklist --enable-accelerated-mjpeg-decode --enable-accelerated-video  --enable-gpu-rasterization";
       };
     };

common/pc/default.nix

@@ -47,6 +47,7 @@ in {
       lm_sensors
       libreoffice-fresh
       thunderbird
+      spotifyd
       spotify-qt
       arduino
       yt-dlp