Fix wineWow64Packages, add network tools, imports

modules/laptop.nix

@@ -2,11 +2,6 @@
 
 {
   imports = [ ../hardware-configuration.nix ./emulation.nix ];
-  # DNS fallback (Tailscale MagicDNS sometimes blocks public resolvers)
-  networking.nameservers = [ "1.1.1.1" "8.8.8.8" ];
-  security.sudo.extraRules = [
-    { groups = [ "wheel" ]; commands = [ { command = "ALL"; options = [ "NOPASSWD" ]; } ]; }
-  ];
 
   # === System Packages ===
   environment.systemPackages = with pkgs; [
@@ -34,14 +29,26 @@
     openssh
     mosh
 
-    # SMB/CIFS mount support
-    cifs-utils
-    mount-truenas-shared
     # Network debugging
     bind
     traceroute
     mtr
     netcat
+
+    # SMB/CIFS mount support
+    cifs-utils
+    mount-truenas-shared
+
+    # Windows apps via Wine
+    wineWow64Packages.stable
+  ];
+
+  # DNS fallback (Tailscale MagicDNS sometimes blocks public resolvers)
+  networking.nameservers = [ "1.1.1.1" "8.8.8.8" ];
+
+  # Passwordless sudo for sscoble
+  security.sudo.extraRules = [
+    { groups = [ "wheel" ]; commands = [ { command = "ALL"; options = [ "NOPASSWD" ]; } ]; }
   ];
 
   # === Network Shares ===
@@ -52,11 +59,6 @@
   ];
 
   systemd.services.mount-truenas-shared = {
-    # Network debugging
-    bind
-    traceroute
-    mtr
-    netcat
     description = "Mount TrueNAS Shared SMB volume";
     after = [ "network-online.target" "tailscaled.service" ];
     wants = [ "network-online.target" ];
@@ -65,28 +67,13 @@
       Type = "oneshot";
       RemainAfterExit = true;
       ExecStart = "${pkgs.mount-truenas-shared}/bin/mount-truenas-shared";
-    # Network debugging
-    bind
-    traceroute
-    mtr
-    netcat
       ExecStop = "${pkgs.mount-truenas-shared}/bin/mount-truenas-shared umount";
-    # Network debugging
-    bind
-    traceroute
-    mtr
-    netcat
     };
   };
 
   nixpkgs.overlays = [
     (final: prev: {
       mount-truenas-shared = prev.writeShellScriptBin "mount-truenas-shared" ''
-    # Network debugging
-    bind
-    traceroute
-    mtr
-    netcat
         set -o pipefail
 
         SHARE="Shared"
@@ -219,6 +206,8 @@
 
   # === Boot ===
   boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+}
 
   # === SSH Server ===
   services.openssh = {
@@ -226,6 +215,3 @@
     settings.PasswordAuthentication = false;
     openFirewall = true;
   };
-
-boot.loader.efi.canTouchEfiVariables = true;
-}