anchor.diff:  #    openocd
   #    openscad
   #    p7zip
  -    parted
  +          parted
   #    patchelf
  -    pavucontrol
  +          pavucontrol
   #    pencil
  -    picocom
  +          picocom
   #    (pidgin-with-plugins.override { plugins = [ pidginsipe ]; })
   #    poppler
   #    posix_man_pages
  -    powertop
  +          powertop
   #    psmisc
   #    pulseview  # sigrok GUI
   #    pv
  -    pwgen
  +          pwgen
   #    pythonFull
   #    pythonPackages.demjson  # has a jsonlint command line tool (alternative: json_pp from perl)
   #    pythonPackages.ipython
   #    pythonPackages.sympy
   #    python2nix
  -    qemu
  +          qemu
   #    qmmp
  -    #qtcreator
  +#qtcreator
   #    remake
   #    remmina
   #    rmlint
   #    rtl-sdr
   #    saleae-logic
   #    samba
  -    screen
  +          screen
   #    sigrok-cli
   #    silver-searcher
  -    simplescreenrecorder
  -/*    (if hostname == myLaptop then
  -      # My laptop (Asus UL30A) has upside down webcam. Flip it back.
  -      let
  -        libv4l_i686 = callPackage_i686 <nixpkgs/pkgs/os-specific/linux/v4l-utils> { qt5 = null; };
  -      in
  -      lib.overrideDerivation skype (attrs: {
  -        installPhase = attrs.installPhase +
  -          ''
  -            sed -i "2iexport LD_PRELOAD=${libv4l_i686}/lib/v4l1compat.so" "$out/bin/skype"
  -          '';
  -      })
  -    else
  -      # Other machines don't need the flip (use plain skype).
  -      skype
  -    )*/
  +          simplescreenrecorder
  +          /*    (if hostname == myLaptop then
  +# My laptop (Asus UL30A) has upside down webcam. Flip it back.
  +let
  +libv4l_i686 = callPackage_i686 <nixpkgs/pkgs/os-specific/linux/v4l-utils> { qt5 = null; };
  +in
  +lib.overrideDerivation skype (attrs: {
  +installPhase = attrs.installPhase +
  +''
  +sed -i "2iexport LD_PRELOAD=${libv4l_i686}/lib/v4l1compat.so" "$out/bin/skype"
  +'';
  +})
  +else
  +# Other machines don't need the flip (use plain skype).
  +skype
  +)*/
   #    sloccount
  -    smartmontools
  +          smartmontools
   #    socat
   #    solfege
   #    spice
  
positive.code: #    subversion
  #    surfraw
  #    sweethome3d.application
      taskwarrior  # causes grep help text to be printed each time a new terminal is started (bash completion script is buggy)
      tcpdump
      #teamviewer  # changes hash all the time
  #    telnet
  #    tig
      traceroute
  #    tree
  #    unoconv
  #    unrar #XXX: unfree license!
      unzip
  #    vifm
  #    vim_configurable
  #    virtmanager
  #    virtviewer
      vlc
  #    weston
      wget
      wgetpaste
      which
  #    wineUnstable
  #    winpdb
      wireshark
  #    wpa_supplicant
  #    wpa_supplicant_gui
  #    w3m
  #    xchat
      youtube-dl
  
        ];
  
  # List services that you want to enable:
  #virtualisation.virtualbox.guest.enable = true; #already in hardware*nix
        boot.initrd.checkJournalingFS = false;
        boot.initrd.supportedFilesystems = [
        "btrfs"
        ];
        boot.tmpOnTmpfs = true; #/tmp is on tmpfs ? yes!
  
        boot.kernel.sysctl = {
  
  # TCP SYN Flood Protection
  #src: https://www.ndchost.com/wiki/server-administration/hardening-tcpip-syn-flood
  "net.ipv4.tcp_syncookies" = 1;
  "net.ipv4.tcp_max_syn_backlog" = 2048;
  "net.ipv4.tcp_synack_retries" = 3;
  
        # Disables packet forwarding
  "net.ipv4.ip_forward" = 0;
  # Disables IP dynaddr
  #net.ipv4.ip_dynaddr = 0
  # Disable ECN
  #net.ipv4.tcp_ecn = 0
  # Enables source route verification
  "net.ipv4.conf.default.rp_filter" = 1;
  # Enable reverse path
  "net.ipv4.conf.all.rp_filter" = 1;
  
  # Enable SYN cookies (yum!)
  # http://cr.yp.to/syncookies.html
  
negative.code: #led_class               5565  1 rtsx_usb_sdmmc
  #XXX: that is: led_class is used by rtsx_usb_sdmmc which is internal card reader of Z575 laptop
    "fglrx"
  #blacklist radeon
  #fglrx
  #blacklist fb
  #blacklist fbcon
  
  # this is how you mute annoying beeps in console and shutdown
  #blacklist pcspkr
  