From 0f52e50434a8be845866f73cf5e31f2ebafce520 Mon Sep 17 00:00:00 2001
From: elwrcl <elwerici@icloud.com>
Date: Wed, 15 Apr 2026 01:10:54 +0300
Subject: [PATCH] new oceanix system for opencore and zapret enable

---
 nixos/boot/opencore.nix          | 229 +++++++++++++++----------------
 nixos/networking/vpn/default.nix |   2 +-
 2 files changed, 108 insertions(+), 123 deletions(-)

diff --git a/nixos/boot/opencore.nix b/nixos/boot/opencore.nix
index 8143ffd..eee5c31 100644
--- a/nixos/boot/opencore.nix
+++ b/nixos/boot/opencore.nix
@@ -14,137 +14,122 @@ let
     url = "https://github.com/acidanthera/OcBinaryData/archive/refs/heads/master.zip";
     sha256 = "sha256-B5CABp0Y2dAVuw7185suaUuryl3iII4QNBVBttivQ7Y=";
   };
+
+  ocConfig = inputs.oceanix.lib.makeOC {
+    inherit pkgs;
+    config = {
+      Booter.Quirks = {
+        AvoidRuntimeDefrag = true;
+        EnableWriteUnprotector = true;
+        ProvideCustomSlide = true;
+        SetupVirtualMap = true;
+      };
+
+      Misc = {
+        Boot = {
+          PickerMode = "External";
+          PickerVariant = "Acidanthera\\Syrah";
+          PickerAttributes = 17;
+          ShowPicker = true;
+          Timeout = 10;
+        };
+        Security = {
+          AllowSetDefault = true;
+          AuthRestart = false;
+          BlacklistAppleUpdate = true;
+          DmgLoading = "Signed";
+          EnablePassword = false;
+          ExposeSensitiveData = 6;
+          HaltLevel = 2147483648;
+          ScanPolicy = 0;
+          SecureBootModel = "Disabled";
+          Vault = "Optional";
+        };
+        Entries = [
+          {
+            Name = "Limine";
+            Enabled = true;
+            Path = "PciRoot(0x0)/Pci(0x1f,0x2)/Sata(2,0,0)/HD(1,GPT,73ae5e9a-c31d-4787-9792-ee1843de3e9d,0x800,0x200000)/\\EFI\\limine\\BOOTX64.EFI";
+          }
+        ];
+      };
+
+      PlatformInfo = {
+        Automatic = true;
+        UpdateDataHub = true;
+        UpdateNVRAM = true;
+        UpdateSMBIOS = true;
+        UpdateSMBIOSMode = "Create";
+        Generic = {
+          AdviseFeatures = true;
+          SystemProductName = "MacBookPro16,1";
+          SystemSerialNumber = "C02DF0Y0MD6N";
+          SystemUUID = "5445524E-A59B-4D8B-9B2F-9876543210AB";
+        };
+      };
+
+      UEFI = {
+        ConnectDrivers = true;
+        Input = {
+          KeySupport = true;
+          KeySupportMode = "Auto";
+        };
+        Output = {
+          ProvideConsoleGop = true;
+          Resolution = "Max";
+          TextRenderer = "BuiltinGraphics";
+        };
+        Quirks = {
+          ReleaseUsbOwnership = true;
+          RequestBootVarRouting = true;
+          DisableSecurityPolicy = true;
+        };
+        Drivers = [
+          { Path = "OpenRuntime.efi"; Enabled = true; }
+          { Path = "OpenCanopy.efi"; Enabled = true; }
+          { Path = "OpenLinuxBoot.efi"; Enabled = true; }
+          { Path = "OpenUsbKbDxe.efi"; Enabled = true; }
+        ];
+      };
+    };
+  };
+
+  limineConf = pkgs.writeText "limine.conf" ''
+    TIMEOUT=5
+    GRAPHICS=yes
+    INTERFACE_RESOLUTION=1366x768
+
+    :NixOS (Systemd-Boot)
+        PROTOCOL=efi_chainload
+        PATH=boot:///EFI/systemd/systemd-bootx64.efi
+  '';
+
 in
 {
   system.activationScripts.opencoreConfig = {
     text = ''
-            echo "--- Copland Project: Limine Protokolü Düzeltiliyor ---"
+      echo "--- Kōpurando ---"
       
-            mkdir -p ${ocPath}/Drivers
-            mkdir -p ${ocPath}/Resources
-            mkdir -p ${liminePath}
+      mkdir -p ${ocPath}/Drivers
+      mkdir -p ${ocPath}/Resources
+      mkdir -p ${liminePath}
 
-            cp -f ${ocPkg}/X64/EFI/OC/Drivers/*.efi ${ocPath}/Drivers/
-            cp -rf ${ocResources}/Resources/* ${ocPath}/Resources/
+      # copying files
+      cp -f ${ocPkg}/X64/EFI/OC/Drivers/*.efi ${ocPath}/Drivers/
+      cp -rf ${ocResources}/Resources/* ${ocPath}/Resources/
       
-            if [ -f ${pkgs.limine}/share/limine/BOOTX64.EFI ]; then
-              cp -f ${pkgs.limine}/share/limine/BOOTX64.EFI ${liminePath}/BOOTX64.EFI
-            fi
+      if [ -f ${pkgs.limine}/share/limine/BOOTX64.EFI ]; then
+        cp -f ${pkgs.limine}/share/limine/BOOTX64.EFI ${liminePath}/BOOTX64.EFI
+      fi
 
-            # İŞTE BURASI DÜZELDİ: efi_chainload yerine sadece chainload yazdık
-            cat <<EOF > ${liminePath}/limine.conf
-      TIMEOUT=5
-      GRAPHICS=yes
-      INTERFACE_RESOLUTION=1366x768
+      # .plists
+      cp -f ${ocConfig}/config.plist ${ocPath}/config.plist
+      cp -f ${limineConf} ${liminePath}/limine.conf
 
-      :NixOS (Systemd-Boot)
-          PROTOCOL=chainload
-          IMAGE_PATH=boot:///EFI/systemd/systemd-bootx64.efi
-      EOF
-
-            cat <<EOF > ${ocPath}/config.plist
-      <?xml version="1.0" encoding="UTF-8"?>
-      <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-      <plist version="1.0">
-      <dict>
-          <key>Booter</key>
-          <dict>
-              <key>Quirks</key>
-              <dict>
-                  <key>AvoidRuntimeDefrag</key><true/>
-                  <key>EnableWriteUnprotector</key><true/>
-                  <key>ProvideCustomSlide</key><true/>
-                  <key>SetupVirtualMap</key><true/>
-              </dict>
-          </dict>
-
-          <key>Misc</key>
-          <dict>
-              <key>Boot</key>
-              <dict>
-                  <key>PickerMode</key><string>External</string>
-                  <key>PickerVariant</key><string>Acidanthera\Syrah</string>
-                  <key>PickerAttributes</key><integer>17</integer>
-                  <key>ShowPicker</key><true/>
-                  <key>Timeout</key><integer>10</integer>
-              </dict>
-              <key>Security</key>
-              <dict>
-                  <key>AllowSetDefault</key><true/>
-                  <key>AuthRestart</key><false/>
-                  <key>BlacklistAppleUpdate</key><true/>
-                  <key>DmgLoading</key><string>Signed</string>
-                  <key>EnablePassword</key><false/>
-                  <key>ExposeSensitiveData</key><integer>6</integer>
-                  <key>HaltLevel</key><integer>2147483648</integer>
-                  <key>PasswordHash</key><data></data>
-                  <key>PasswordSalt</key><data></data>
-                  <key>ScanPolicy</key><integer>0</integer>
-                  <key>SecureBootModel</key><string>Disabled</string>
-                  <key>Vault</key><string>Optional</string>
-              </dict>
-              <key>Entries</key>
-              <array>
-                  <dict>
-                      <key>Name</key><string>Limine</string>
-                      <key>Enabled</key><true/>
-                      <key>Path</key><string>PciRoot(0x0)/Pci(0x1f,0x2)/Sata(2,0,0)/HD(1,GPT,73ae5e9a-c31d-4787-9792-ee1843de3e9d,0x800,0x200000)/\EFI\limine\BOOTX64.EFI</string>
-                  </dict>
-              </array>
-          </dict>
-
-          <key>PlatformInfo</key>
-          <dict>
-              <key>Automatic</key><true/>
-              <key>UpdateDataHub</key><true/>
-              <key>UpdateNVRAM</key><true/>
-              <key>UpdateSMBIOS</key><true/>
-              <key>UpdateSMBIOSMode</key><string>Create</string>
-              <key>Generic</key>
-              <dict>
-                  <key>AdviseFeatures</key><true/>
-                  <key>SystemProductName</key><string>MacBookPro16,1</string>
-                  <key>SystemSerialNumber</key><string>C02DF0Y0MD6N</string>
-                  <key>SystemUUID</key><string>5445524E-A59B-4D8B-9B2F-9876543210AB</string>
-                  <key>ROM</key><data>ABEiM0RV</data>
-              </dict>
-          </dict>
-
-          <key>UEFI</key>
-          <dict>
-              <key>ConnectDrivers</key><true/>
-              <key>Input</key>
-              <dict>
-                  <key>KeySupport</key><true/>
-                  <key>KeySupportMode</key><string>Auto</string>
-              </dict>
-              <key>Output</key>
-              <dict>
-                  <key>ProvideConsoleGop</key><true/>
-                  <key>Resolution</key><string>Max</string>
-                  <key>TextRenderer</key><string>BuiltinGraphics</string>
-              </dict>
-              <key>Quirks</key>
-              <dict>
-                  <key>ReleaseUsbOwnership</key><true/>
-                  <key>RequestBootVarRouting</key><true/>
-                  <key>DisableSecurityPolicy</key><true/>
-              </dict>
-              <key>Drivers</key>
-              <array>
-                  <string>OpenRuntime.efi</string>
-                  <string>OpenLinuxBoot.efi</string>
-                  <string>OpenUsbKbDxe.efi</string>
-                  <string>OpenCanopy.efi</string>
-              </array>
-          </dict>
-      </dict>
-      </plist>
-      EOF
-
-            if ! ${pkgs.efibootmgr}/bin/efibootmgr | grep -q "OpenCore_Copland"; then
-              ${pkgs.efibootmgr}/bin/efibootmgr -c -d /dev/sda -p 1 -L "OpenCore_Copland" -l "\EFI\OC\OpenCore.efi"
-            fi
+      # bios 
+      if ! ${pkgs.efibootmgr}/bin/efibootmgr | grep -q "OpenCore_Copland"; then
+        ${pkgs.efibootmgr}/bin/efibootmgr -c -d /dev/sda -p 1 -L "OpenCore_Copland" -l "\EFI\OC\OpenCore.efi"
+      fi
     '';
   };
 }
diff --git a/nixos/networking/vpn/default.nix b/nixos/networking/vpn/default.nix
index 8591ff4..19d98d6 100644
--- a/nixos/networking/vpn/default.nix
+++ b/nixos/networking/vpn/default.nix
@@ -4,7 +4,7 @@
   services.cloudflare-warp.enable = false;
 
   services.zapret = {
-    enable = false;
+    enable = true;
     params = [
       "--filter-tcp=80"
       "--dpi-desync=fake,multisplit"