+AZPIVERTRIEB01

hosts/AZ-PRM-1/services/default.nix

@@ -8,6 +8,7 @@
     ./postgres.nix
     ./traefik.nix
   ];
+
   services.traefik.dynamicConfigOptions.http = {
     services.ptrg.loadBalancer.servers = [{url = "http://192.168.152.102:7784/";}];
 
@@ -18,12 +19,23 @@
       entrypoints = "websecure";
     };
 
-    services.AZHA.loadBalancer.servers = [{url = "http://192.168.153.194:8123/";}];
+    services.AZHA.loadBalancer.servers = [{url = "http://192.168.152.47:8123/";}];
     routers.AZHA = {
       rule = "Host(`ha.l.az-gruppe.com`)";
       tls = {certResolver = "ionos";};
       service = "AZHA";
       entrypoints = "websecure";
     };
+    services.AZDESK.loadBalancer.servers = [
+      {
+        url = "https://azdesk.az-group.local:443/";
+      }
+    ];
+    routers.AZDESK = {
+      rule = "Host(`it-ticket.l.az-gruppe.com`)";
+      tls = {certResolver = "ionos";};
+      service = "AZDESK";
+      entrypoints = "websecure";
+    };
   };
 }

hosts/AZ-PRM-1/services/traefik.nix

@@ -3,6 +3,7 @@
     enable = true;
     staticConfigOptions = {
       log = {level = "WARN";};
+      serversTransport.insecureSkipVerify = true;
       certificatesResolvers = {
         ionos = {
           acme = {

hosts/AZLT124-L/configuration.nix

@@ -15,7 +15,7 @@
   boot.loader.systemd-boot.enable = true;
   boot.initrd.kernelModules = ["amdgpu" "hid_asus"];
   boot.kernelPackages = pkgs.linuxPackages_latest;
-  boot.kernelParams = ["pcie_aspm=off"];
+  boot.kernelParams = ["pcie_aspm=off" "pcie_port_pm=off"];
   boot.extraModprobeConfig = ''
     options hid_asus enable_touchpad=1
     options mt7925e disable_aspm=1
@@ -25,7 +25,17 @@
   security.polkit.enable = true;
   security.pam.services.gdm.enableGnomeKeyring = true;
   networking = {
-    wireless.iwd.enable = true;
+    wireless.iwd = {
+      enable = true;
+      settings = {
+        Settings = {
+          Timers = "DefaultRoamThreshold=30";
+        };
+        General = {
+          AddressRandomization = "network";
+        };
+      };
+    };
     networkmanager = {
       enable = true;
       wifi = {
@@ -35,7 +45,24 @@
     };
     hostName = "AZLT124-L";
   };
-
+  systemd.services.disable-wifi-powersave = {
+    description = "Disable WiFi power save";
+    after = ["network-online.target" "iwd.service"];
+    wants = ["network-online.target"];
+    wantedBy = ["multi-user.target"];
+    serviceConfig = {
+      Type = "oneshot";
+      RemainAfterExit = true;
+      ExecStart = ''
+        ${pkgs.bash}/bin/bash -c 'for i in {1..30}; do \
+          ${pkgs.iw}/bin/iw dev wlan0 set power_save off 2>/dev/null && exit 0; \
+          sleep 1; \
+        done; exit 1'
+      '';
+      Restart = "on-failure";
+      RestartSec = "10s";
+    };
+  };
   # Define your hostname.
   # warp-terminal update fix
   # networking.extraHosts = ''