Initial commit

modules/hm/docker.nix

@@ -0,0 +1,16 @@
+{
+  osConfig,
+  lib,
+  ...
+}:
+{
+  home.file = lib.mkIf (osConfig.networking.hostName != "fenixpc") {
+    fenixpcDockerContext = {
+      enable = true;
+      target = ".docker/contexts/meta/02db303260eb60b1d5cf88ef7f50e894d1573f2beafe3551def02353d6982a0c/meta.json";
+      text = ''
+        {"Name":"fenixpc","Metadata":{},"Endpoints":{"docker":{"Host":"tcp://192.168.1.2:2375","SkipTLSVerify":true}}}
+      '';
+    };
+  };
+}

modules/hm/git.nix

@@ -0,0 +1,38 @@
+{ lib, ... }:
+{
+  programs = {
+    git = {
+      userName = lib.mkDefault "derfenix";
+      userEmail = lib.mkDefault "derfenix@gmail.com";
+
+      extraConfig = {
+        core = {
+          hookspath = "/home/fenix/.git_settings/hooks";
+        };
+
+        url = {
+          "git@git.derfenix.pro:" = {
+            insteadOf = "https://git.derfenix.pro";
+          };
+        };
+        init = {
+          defaultBranch = "master";
+        };
+        protocol = {
+          "git" = {
+            allow = "always";
+          };
+        };
+        extensions = {
+          objectFormat = "sha256";
+        };
+      };
+
+      signing = {
+        format = "openpgp";
+        signByDefault = lib.mkDefault true;
+        key = lib.mkDefault "DD89337AFABD013FDD57A0F133445FB510D677DF";
+      };
+    };
+  };
+}

modules/hm/gpg.nix

@@ -0,0 +1,33 @@
+{
+
+  lib,
+  pkgs,
+  config,
+  osConfig,
+  ...
+}:
+{
+  programs = {
+    gpg = {
+      mutableKeys = false;
+      mutableTrust = false;
+      publicKeys = [
+
+      ];
+    };
+  };
+
+  services = {
+    gpg-agent = {
+      enable = config.programs.gpg.enable;
+      enableFishIntegration = true;
+      enableZshIntegration = true;
+      enableSshSupport = true;
+      enableScDaemon = true;
+      # pinentryPackage = pkgs.pinentry-qt;
+      extraConfig = lib.mkIf osConfig.services.desktopManager.plasma6.enable ''
+        pinentry-program ${pkgs.kwalletcli}/bin/pinentry-kwallet
+      '';
+    };
+  };
+}

modules/hm/neovim.nix

@@ -0,0 +1,41 @@
+{
+  pkgs,
+  ...
+}:
+
+{
+  programs.neovim = {
+    defaultEditor = true;
+    viAlias = true;
+    vimAlias = true;
+    coc = {
+      enable = true;
+      settings = {
+
+      };
+    };
+
+    extraPackages = with pkgs; [
+      universal-ctags
+    ];
+    extraConfig = ''
+      set number relativenumber
+      set list
+      set listchars=tab:→\ ,space:·,nbsp:␣,trail:•,eol:¶,precedes:«,extends:»
+      set ts=2
+      set softtabstop=2
+      set shiftwidth=2
+      set smarttab
+      set smartindent
+      set autoindent
+      colorscheme zaibatsu
+    '';
+    plugins = with pkgs.vimPlugins; [
+      vim-nix
+      nerdtree
+      neogit
+      mru
+      tagbar
+    ];
+  };
+}

modules/hm/pt.nix

@@ -0,0 +1,77 @@
+{
+  lib,
+  config,
+  pkgs,
+  ...
+}:
+let
+  devFolder = "~/dev/PT";
+  conf = config.pt;
+in
+{
+  options = {
+    pt = {
+      enable = lib.mkOption {
+        type = lib.types.bool;
+        default = false;
+      };
+    };
+  };
+
+  config = lib.mkIf conf.enable {
+    home.packages = with pkgs; [
+      mattermost-desktop
+    ];
+
+    programs = {
+      git = {
+        extraConfig = {
+          url = {
+            "git@gitlab.ptsecurity.com:" = {
+              insteadOf = "https://gitlab.ptsecurity.com";
+            };
+          };
+        };
+        includes = [
+          {
+            condition = "gitdir:${devFolder}";
+            contents = {
+              user = {
+                name = "Sergey Kostyuchenko";
+                email = "skostyuchenko@ptsecurity.com";
+                signingkey = "0x0574DBAF";
+              };
+              commit = {
+                gpgsign = true;
+              };
+              gpg = {
+                format = "x509";
+              };
+            };
+          }
+        ];
+      };
+    };
+
+    home.file.ptDevStIgnore = {
+      enable = true;
+      target = lib.removePrefix "~/" (devFolder + "/.stignore");
+      text = ''
+        **/.devenv/
+        **/.direnv/
+      '';
+    };
+
+    services.syncthing.settings = {
+      folders = {
+        "PTDev" = {
+          id = "pt-dev";
+          type = "sendreceive";
+          enabled = true;
+          label = "PTDev";
+          path = devFolder;
+        };
+      };
+    };
+  };
+}

modules/hm/ssh.nix

@@ -0,0 +1,73 @@
+{ ... }:
+{
+  programs = {
+    ssh = {
+      matchBlocks = {
+        "router" = {
+          user = "admin";
+          hostname = "192.168.1.1";
+          port = 2222;
+          controlPersist = "10m";
+          addKeysToAgent = "9h";
+          compression = false;
+
+          forwardAgent = false;
+          serverAliveInterval = 0;
+          serverAliveCountMax = 3;
+          hashKnownHosts = false;
+          userKnownHostsFile = "~/.ssh/known_hosts";
+          controlMaster = "auto";
+          controlPath = "~/.ssh/master-%r@%n:%p";
+        };
+        "aur" = {
+          hostname = "aur.archlinux.org";
+          identityFile = "~/.ssh/id_rsa-aur";
+          user = "aur";
+          controlPersist = "10m";
+          addKeysToAgent = "9h";
+          compression = true;
+
+          forwardAgent = false;
+          serverAliveInterval = 0;
+          serverAliveCountMax = 3;
+          hashKnownHosts = false;
+          userKnownHostsFile = "~/.ssh/known_hosts";
+          controlMaster = "auto";
+          controlPath = "~/.ssh/master-%r@%n:%p";
+        };
+        "vpn1" = {
+          # https://bill.pq.hosting/billmgr
+          user = "root";
+          hostname = "45.120.178.159";
+          controlPersist = "10m";
+          addKeysToAgent = "9h";
+          compression = true;
+
+          forwardAgent = false;
+          serverAliveInterval = 0;
+          serverAliveCountMax = 3;
+          hashKnownHosts = false;
+          userKnownHostsFile = "~/.ssh/known_hosts";
+          controlMaster = "auto";
+          controlPath = "~/.ssh/master-%r@%n:%p";
+        };
+        "vpn2" = {
+          # https://my.msk.host/billing/my-services
+          user = "root";
+          hostname = "194.67.193.95";
+          controlPersist = "10m";
+          addKeysToAgent = "9h";
+          compression = true;
+
+          forwardAgent = false;
+          serverAliveInterval = 0;
+          serverAliveCountMax = 3;
+          hashKnownHosts = false;
+          userKnownHostsFile = "~/.ssh/known_hosts";
+          controlMaster = "auto";
+          controlPath = "~/.ssh/master-%r@%n:%p";
+        };
+      };
+    };
+  };
+}

modules/hm/syncthing.nix

@@ -0,0 +1,79 @@
+{
+  lib,
+  hosts,
+  ...
+}:
+{
+  services.syncthing = {
+    guiAddress = lib.mkDefault "127.0.0.1:8384";
+    overrideDevices = false;
+    overrideFolders = false;
+    cert = "~/.config/syncthing/cert";
+    key = "~/.config/syncthing/key";
+
+    settings = {
+      folders = {
+        "Sync" = {
+          id = "default";
+          type = "sendreceive";
+          enabled = lib.mkDefault true;
+          label = "Sync";
+          path = "~/Sync";
+        };
+        "Documents" = {
+          id = "ikwrq-ahv5a";
+          type = "sendreceive";
+          enabled = lib.mkDefault false;
+          label = "Documents";
+          path = "~/Documents";
+        };
+        "Music" = {
+          id = "6ytyt-ngvta";
+          type = "sendreceive";
+          enabled = lib.mkDefault false;
+          label = "Music";
+          path = "~/Music";
+        };
+        "Obsidian" = {
+          id = "hyeaf-ygups";
+          type = "sendreceive";
+          enabled = lib.mkDefault false;
+          label = "Obsidian";
+          path = "~/Obsidian";
+        };
+        "Camera S25" = {
+          id = "sm-s938b_9wbf-фото";
+          enabled = lib.mkDefault false;
+          type = "receiveonly";
+          label = "Camera S25";
+          path = "~/Photos/S25";
+        };
+        "PhotoArchive" = {
+          id = "6detn-xjbco";
+          type = "receiveonly";
+          enabled = lib.mkDefault false;
+          label = "PhotoArchive";
+          path = "~/Photos/archive";
+          ignorePerms = true;
+        };
+        "books" = {
+          id = "6st45-t9jej";
+          type = "sendreceive";
+          enabled = lib.mkDefault false;
+          label = "Books";
+          path = "/mnt/hdd/Books";
+        };
+      };
+
+      devices = lib.mapAttrs (
+        name: host:
+        lib.mkIf (host ? syncthing) {
+          addresses = [
+            "tcp://${host.ip}:22000"
+          ];
+          id = host.syncthing;
+        }
+      ) hosts;
+    };
+  };
+}

modules/hm/vivaldi.nix

@@ -0,0 +1,77 @@
+{
+  pkgs,
+  lib,
+  config,
+  osConfig,
+  ...
+}:
+let
+  conf = config.programs.vivaldi;
+in
+{
+  config = lib.mkIf conf.enable {
+    home.file.vivaldiKDEScript = {
+      target = ".local/bin/vivaldi-kde.sh";
+      text = ''
+        #!/bin/sh
+        vivaldi --profile-directory=$(qdbus org.kde.ActivityManager /ActivityManager/Activities org.kde.ActivityManager.Activities.ActivityName $(qdbus org.kde.ActivityManager /ActivityManager/Activities org.kde.ActivityManager.Activities.CurrentActivity)) "$@"
+      '';
+      executable = true;
+    };
+
+    programs.vivaldi = {
+      nativeMessagingHosts =
+        [ ]
+        ++ lib.optionals (osConfig.services.desktopManager.plasma6.enable) [
+          pkgs.kdePackages.plasma-browser-integration
+        ];
+    };
+
+    xdg.desktopEntries = {
+      vivaldi-stable-kde = {
+        name = "Vivaldi-KDE";
+        settings = {
+          OnlyShowIn = "KDE";
+        };
+        genericName = "Web Browser for KDE";
+        exec = "${config.home.file.vivaldiKDEScript.source} %U";
+        terminal = false;
+        actions = {
+          "newPrivateWindow" = {
+            name = "New Private Window";
+            exec = "${config.home.file.vivaldiKDEScript.source} --incognito --remote";
+          };
+          "newWindow" = {
+            name = "New Window";
+            exec = "${config.home.file.vivaldiKDEScript.source} --new-window";
+          };
+        };
+        icon = "vivaldi";
+        startupNotify = true;
+        categories = [
+          "Application"
+          "Network"
+          "WebBrowser"
+        ];
+        mimeType = [
+          "application/pdf"
+          "application/rdf+xml"
+          "application/rss+xml"
+          "application/xhtml+xml"
+          "application/xhtml_xml"
+          "application/xml"
+          "image/gif"
+          "image/jpeg"
+          "image/png"
+          "image/webp"
+          "text/html"
+          "text/xml"
+          "x-scheme-handler/ftp"
+          "x-scheme-handler/http"
+          "x-scheme-handler/https"
+          "x-scheme-handler/mailto"
+        ];
+      };
+    };
+  };
+}

modules/hm/vscode/default.nix

@@ -0,0 +1,64 @@
+{
+  pkgs,
+  lib,
+  config,
+  ...
+}:
+{
+  programs.vscode = {
+    package = pkgs.vscodium;
+
+    profiles = {
+      default = {
+        extensions = (import ./extensions { inherit pkgs config lib; });
+        globalSnippets = {
+          fixme = {
+            body = [
+              "$LINE_COMMENT FIXME: $0"
+            ];
+            description = "Insert a FIXME remark";
+            prefix = [
+              "fixme"
+            ];
+          };
+          todo = {
+            body = [
+              "$LINE_COMMENT TODO: $0"
+            ];
+            description = "Insert a TODO remark";
+            prefix = [
+              "todo"
+            ];
+          };
+        };
+        languageSnippets = {
+          go = { };
+        };
+
+        keybindings = [
+          # {
+          #   key = "ctrl+c";
+          #   command = "editor.action.clipboardCopyAction";
+          #   when = "textInputFocus";
+          # }
+        ];
+
+        userTasks = { };
+
+        # userSettings = builtins.fromJSON (builtins.readFile ./settings.json);
+      };
+    };
+  };
+
+  xdg.mimeApps.defaultApplications = {
+    "x-scheme-handler/vscodium" = [
+      "codium-url-handler.desktop"
+    ];
+    "x-scheme-handler/codium" = [
+      "codium-url-handler.desktop"
+    ];
+    "x-scheme-handler/vscode" = [
+      "codium-url-handler.desktop"
+    ];
+  };
+}

modules/hm/vscode/extensions/default.nix

@@ -0,0 +1,36 @@
+{
+  pkgs,
+  lib,
+  go ? true,
+  nix ? true,
+  ...
+}:
+with pkgs.vscode-extensions;
+[
+  dracula-theme.theme-dracula
+  # vscodevim.vim
+  yzhang.markdown-all-in-one
+  (lib.optionals go golang.go)
+  (lib.optionals nix jnoortheen.nix-ide)
+  mkhl.direnv
+  gitlab.gitlab-workflow
+  (pkgs.vscode-utils.buildVscodeMarketplaceExtension {
+    mktplcRef = {
+      name = "vscode-docker";
+      publisher = "ms-azuretools";
+      version = "1.29.4";
+      sha256 = "1nhrp43gh4pwsdy0d8prndx2l0mrczf1kirjl1figrmhcp7h4q4g";
+    };
+  })
+  (pkgs.vscode-utils.buildVscodeMarketplaceExtension {
+    mktplcRef = {
+      name = "yandex-code-assist";
+      publisher = "yandex";
+
+      version = "0.11.17";
+    };
+    vsix = builtins.path {
+      path = ./yandex-code-assist.zip;
+    };
+  })
+]

modules/hm/vscode/settings.json

@@ -0,0 +1,199 @@
+{
+  "files.autoSave": "afterDelay",
+  "chat.editor.fontSize": 16,
+  "window.autoDetectHighContrast": false,
+  "workbench.settings.applyToAllProfiles": [
+    "window.autoDetectColorScheme",
+    "editor.formatOnSave"
+  ],
+  "git.autofetch": true,
+  "editor.formatOnSave": true,
+  "files.autoSaveWhenNoErrors": true,
+  "go.coverOnSingleTestFile": true,
+  "go.coverShowCounts": true,
+  "go.formatTool": "gofmt",
+  "go.installDependenciesWhenBuilding": true,
+  "go.lintTool": "golangci-lint",
+  "go.languageServerFlags": [],
+  "workbench.colorTheme": "Dracula Theme Soft",
+  "window.zoomLevel": 1.2,
+  "editor.minimap.showSlider": "always",
+  "editor.minimap.size": "fit",
+  "go.editorContextMenuCommands": {
+    "fillStruct": true,
+    "removeTags": true,
+    "testPackage": true,
+    "testFile": true,
+    "generateTestForFile": true,
+    "generateTestForPackage": true,
+    "benchmarkAtCursor": true
+  },
+  "go.testFlags": [
+    "-race",
+    "-v"
+  ],
+  "go.toolsEnvVars": {},
+  "go.toolsGopath": "",
+  "gopls": {
+    "ui.codelenses": {
+      "tidy": true,
+      "generate": true,
+      "test": true,
+      "vulncheck": true,
+      "upgrade_dependency": true
+    },
+    "ui.completion.experimentalPostfixCompletions": true,
+    "ui.semanticTokens": true
+  },
+  "git.allowForcePush": true,
+  "git.branchPrefix": "sub-task/",
+  "git.enableSmartCommit": true,
+  "git.fetchOnPull": true,
+  "git.followTagsWhenSync": true,
+  "git.mergeEditor": true,
+  "git.timeline.showUncommitted": true,
+  "github.gitProtocol": "ssh",
+  "telemetry.telemetryLevel": "all",
+  "testing.coverageToolbarEnabled": true,
+  "go.testEnvVars": {},
+  "gitlab.duoCodeSuggestions.enabled": false,
+  "gitlab.duoCodeSuggestions.enabledSupportedLanguages": {
+    "c": false,
+    "cpp": false,
+    "csharp": false,
+    "go": false,
+    "handlebars": false,
+    "haml": false,
+    "java": false,
+    "javascript": false,
+    "javascriptreact": false,
+    "kotlin": false,
+    "python": false,
+    "php": false,
+    "ruby": false,
+    "rust": false,
+    "scala": false,
+    "shellscript": false,
+    "sql": false,
+    "swift": false,
+    "typescript": false,
+    "typescriptreact": false,
+    "svelte": false,
+    "terraform": false,
+    "terragrunt": false,
+    "vue": false
+  },
+  "redhat.telemetry.enabled": true,
+  "go.testTags": null,
+  "diffEditor.renderSideBySide": true,
+  "diffEditor.experimental.showMoves": true,
+  "docker.composeCommand": "docker compose",
+  "docker.contexts.showInStatusBar": true,
+  "workbench.editor.autoLockGroups": {
+    "mainThreadWebview-markdown.preview": true
+  },
+  "workbench.editor.pinnedTabsOnSeparateRow": true,
+  "workbench.editor.sharedViewState": true,
+  "workbench.editor.wrapTabs": true,
+  "window.menuBarVisibility": "toggle",
+  "window.density.editorTabHeight": "compact",
+  "workbench.tree.renderIndentGuides": "always",
+  "workbench.settings.openDefaultSettings": true,
+  "explorer.confirmDelete": false,
+  "git.confirmSync": false,
+  "gitlab.duoChat.enabled": false,
+  "gitlab.duoCodeSuggestions.openTabsContext": false,
+  "gitlab.duo.enabledWithoutGitlabProject": false,
+  "gitlab.customQueries": [
+    {
+      "name": "Issues assigned to me",
+      "type": "issues",
+      "scope": "assigned_to_me",
+      "state": "opened",
+      "noItemText": "No issues assigned to you."
+    },
+    {
+      "name": "Issues created by me",
+      "type": "issues",
+      "scope": "created_by_me",
+      "state": "opened",
+      "noItemText": "No issues created by you."
+    },
+    {
+      "name": "Merge requests assigned to me",
+      "type": "merge_requests",
+      "scope": "assigned_to_me",
+      "state": "opened",
+      "noItemText": "No merge requests assigned to you."
+    },
+    {
+      "name": "Merge requests I'm reviewing",
+      "type": "merge_requests",
+      "reviewer": "<current_user>",
+      "state": "opened",
+      "noItemText": "No merge requests for you to review."
+    },
+    {
+      "name": "Merge requests created by me",
+      "type": "merge_requests",
+      "scope": "created_by_me",
+      "state": "opened",
+      "noItemText": "No merge requests created by you."
+    },
+    {
+      "name": "All project merge requests",
+      "type": "merge_requests",
+      "scope": "all",
+      "state": "opened",
+      "noItemText": "The project has no merge requests"
+    }
+  ],
+  "nix.serverPath": "/etc/profiles/per-user/fenix/bin/nil",
+  "nix.formatterPath": "/etc/profiles/per-user/fenix/bin/nixfmt",
+  "nix.serverSettings": {
+    "nil": {
+      "formatting": {
+        "command": [
+          "nixfmt"
+        ]
+      }
+    }
+  },
+  "markdown-mermaid.lightModeTheme": "forest",
+  "extensions.experimental.affinity": {
+    "asvetliakov.vscode-neovim": 1
+  },
+  "workbench.preferredDarkColorTheme": "Catppuccin Macchiato",
+  "window.autoDetectColorScheme": true,
+  "go.diagnostic.vulncheck": "Imports",
+  "go.inlayHints.compositeLiteralFields": true,
+  "go.inlayHints.constantValues": true,
+  "editor.semanticHighlighting.enabled": true,
+  "regroupImports.organization": "gitlab.ptsecurity.com",
+  "go.coverMode": "atomic",
+  "nix.enableLanguageServer": true,
+  "window.newWindowProfile": "Default",
+  "protoc": {},
+  "go.buildTags": "integration",
+  "workbench.preferredLightColorTheme": "Catppuccin Latte",
+  "cSpell.userWords": [
+    "логгер",
+    "логгирования",
+    "Appender",
+    "fenix",
+    "Prepender",
+    "zaptest"
+  ],
+  "cSpell.spellCheckOnlyWorkspaceFiles": true,
+  "chat.commandCenter.enabled": false,
+  "catppuccin.accentColor": "flamingo",
+  "rest-client.showResponseInDifferentTab": true,
+  "cSpell.language": "en,ru",
+  "cSpell.ignoreRegExpList": [
+    "/\\/\\/nolint:[a-z]+/g",
+    "/import \\([^)]+\\)/g"
+  ],
+  "cSpell.enabledFileTypes": {
+    "ignore": false
+  }
+}

modules/hm/zsh.nix

@@ -0,0 +1,62 @@
+{ lib, ... }:
+{
+  programs.zsh = {
+    autosuggestion = {
+      enable = true;
+      strategy = [
+        "history"
+        "completion"
+      ];
+    };
+    syntaxHighlighting.enable = lib.mkDefault true;
+    autocd = true;
+    # defaultKeymap = "vicmd";
+    dirHashes = { };
+    shellAliases = {
+      "ll" = "ls -l";
+      "sc" = "systemctl";
+      "ssc" = "sudo systemctl";
+      "scu" = "systemctl --user";
+    };
+    shellGlobalAliases = {
+      UUID = "$(uuidgen | tr -d \\n)";
+      G = "| grep";
+    };
+    zsh-abbr = {
+      enable = true;
+      abbreviations = {
+
+      };
+      globalAbbreviations = {
+
+      };
+    };
+    oh-my-zsh = {
+      enable = lib.mkDefault true;
+      plugins = [
+        "git"
+        "ssh"
+        "sudo"
+        "z"
+        "golang"
+        "direnv"
+        "kubectl"
+        "docker"
+        "docker-compose"
+        "helm"
+        "themes"
+        "aliases"
+        "alias-finder"
+        "rsync"
+      ];
+      theme = lib.mkDefault "agnoster";
+    };
+
+    initContent = ''
+      zstyle ':omz:plugins:alias-finder' autoload yes
+      zstyle ':omz:plugins:alias-finder' longer no
+      zstyle ':omz:plugins:alias-finder' exact yes
+      zstyle ':omz:plugins:alias-finder' cheaper yes
+    '';
+  };
+}

modules/sys/docker.nix

@@ -0,0 +1,43 @@
+{ pkgs, lib, ... }:
+let
+  port = 2375;
+in
+{
+  environment.systemPackages = with pkgs; [
+    docker-credential-helpers
+  ];
+
+  virtualisation.oci-containers.backend = "docker";
+
+  virtualisation.docker = {
+    enable = lib.mkDefault true;
+    storageDriver = lib.mkDefault "btrfs";
+    extraOptions = lib.mkDefault "";
+    extraPackages = with pkgs; [
+      docker-credential-helpers
+      docker-buildx
+    ];
+    daemon.settings = {
+      "registry-mirrors" = [
+        "https://mirror.gcr.io"
+        "https://daocloud.io"
+        "https://c.163.com"
+        "https://registry.docker-cn.com"
+      ];
+      "dns" = [
+        "192.168.1.1"
+        "8.8.8.8"
+        "10.100.10.100"
+      ];
+    };
+  };
+
+  systemd.sockets.docker.listenStreams = [
+    ("0.0.0.0:" + builtins.toString (port))
+  ];
+
+  networking.firewall.allowedTCPPorts = [
+    port
+  ];
+
+}

modules/sys/printing/Dockerfile

@@ -0,0 +1,14 @@
+FROM archlinux:latest
+
+COPY ./ricoh-sp150-ppd-v1.0.22-1-x86_64.pkg.tar.zst /opt/
+
+RUN pacman -Sy && pacman -S --noconfirm cups && pacman -U --noconfirm /opt/ricoh-sp150-ppd-v1.0.22-1-x86_64.pkg.tar.zst && pacman -Scc --noconfirm
+RUN useradd -r -G root -M admin; \
+    sed -i  's%admin:!:20024%admin:$y$j9T$hw1G6LnWpCcLzXHTpxzxf0$GVeFQpWJ5X2pw7ZZqGzn2CPU/nS9aWAmD0wlEWYkGZ4:20024%g' /etc/shadow; \
+    ln -fs /usr/share/zoneinfo/EuropeMoscow /etc/localtime
+
+COPY ./cupsd.conf /etc/cups/cupsd.conf
+COPY ./printers.conf /etc/cups/printers.conf
+COPY ./RICOH_SP_150SU.ppd /etc/cups/ppd/RICOH_SP_150SU.ppd
+
+CMD ["/usr/bin/cupsd", "-f"]

modules/sys/printing/RICOH_SP_150SU.ppd

@@ -0,0 +1,536 @@
+*PPD-Adobe: "4.3"
+*FileVersion: "1.022"
+*FormatVersion: "4.3"
+*LanguageEncoding: ISOLatin1
+*LanguageVersion: English
+*Manufacturer: "RICOH"
+*PCFileName: "SP150.PPD"
+*Product: "(RICOH SP 150)"
+*PSVersion: "(3015.103) 1"
+*ShortNickName: "RICOH SP 150"
+*ModelName: "RICOH SP 150"
+*NickName: "RICOH SP 150 v1.022"
+*cupsFilter:	"application/vnd.cups-raster 0 RICOH_SP_150Filter.app"
+*%APPrinterIconPath: "/Library/Printers/RICOH/Icons/RICOH SP 150.icns"
+*%APPrinterLowInkTool: "/Library/Printers/RICOH/Utility/TonerSupplyToolSP 150.app/Contents/MacOS/TonerSupplyToolSP 150"
+
+*% == Constraints (Page Size vs. Paper Type) ==
+*UIConstraints: *MediaType Plain *PageSize Env10
+*UIConstraints: *MediaType Plain *PageSize EnvMonarch
+*UIConstraints: *MediaType Plain *PageSize EnvC5
+*UIConstraints: *MediaType Plain *PageSize EnvDL
+*UIConstraints: *MediaType Plain-side2 *PageSize Env10
+*UIConstraints: *MediaType Plain-side2 *PageSize EnvMonarch
+*UIConstraints: *MediaType Plain-side2 *PageSize EnvC5
+*UIConstraints: *MediaType Plain-side2 *PageSize EnvDL
+*UIConstraints: *MediaType PlainThick *PageSize Env10
+*UIConstraints: *MediaType PlainThick *PageSize EnvMonarch
+*UIConstraints: *MediaType PlainThick *PageSize EnvC5
+*UIConstraints: *MediaType PlainThick *PageSize EnvDL
+*UIConstraints: *MediaType PlainThick-side2 *PageSize Env10
+*UIConstraints: *MediaType PlainThick-side2 *PageSize EnvMonarch
+*UIConstraints: *MediaType PlainThick-side2 *PageSize EnvC5
+*UIConstraints: *MediaType PlainThick-side2 *PageSize EnvDL
+*UIConstraints: *MediaType Recycled *PageSize Env10
+*UIConstraints: *MediaType Recycled *PageSize EnvMonarch
+*UIConstraints: *MediaType Recycled *PageSize EnvC5
+*UIConstraints: *MediaType Recycled *PageSize EnvDL
+*UIConstraints: *MediaType Recycled-side2 *PageSize Env10
+*UIConstraints: *MediaType Recycled-side2 *PageSize EnvMonarch
+*UIConstraints: *MediaType Recycled-side2 *PageSize EnvC5
+*UIConstraints: *MediaType Recycled-side2 *PageSize EnvDL
+*UIConstraints: *MediaType Label *PageSize Env10
+*UIConstraints: *MediaType Label *PageSize EnvMonarch
+*UIConstraints: *MediaType Label *PageSize EnvC5
+*UIConstraints: *MediaType Label *PageSize EnvDL
+*UIConstraints: *PageSize Env10 *MediaType Plain
+*UIConstraints: *PageSize EnvMonarch *MediaType Plain
+*UIConstraints: *PageSize EnvC5 *MediaType Plain
+*UIConstraints: *PageSize EnvDL *MediaType Plain
+*UIConstraints: *PageSize Env10 *MediaType Plain-side2
+*UIConstraints: *PageSize EnvMonarch *MediaType Plain-side2
+*UIConstraints: *PageSize EnvC5 *MediaType Plain-side2
+*UIConstraints: *PageSize EnvDL *MediaType Plain-side2
+*UIConstraints: *PageSize Env10 *MediaType PlainThick
+*UIConstraints: *PageSize EnvMonarch *MediaType PlainThick
+*UIConstraints: *PageSize EnvC5 *MediaType PlainThick
+*UIConstraints: *PageSize EnvDL *MediaType PlainThick
+*UIConstraints: *PageSize Env10 *MediaType PlainThick-side2
+*UIConstraints: *PageSize EnvMonarch *MediaType PlainThick-side2
+*UIConstraints: *PageSize EnvC5 *MediaType PlainThick-side2
+*UIConstraints: *PageSize EnvDL *MediaType PlainThick-side2
+*UIConstraints: *PageSize Env10 *MediaType Recycled
+*UIConstraints: *PageSize EnvMonarch *MediaType Recycled
+*UIConstraints: *PageSize EnvC5 *MediaType Recycled
+*UIConstraints: *PageSize EnvDL *MediaType Recycled
+*UIConstraints: *PageSize Env10 *MediaType Recycled-side2
+*UIConstraints: *PageSize EnvMonarch *MediaType Recycled-side2
+*UIConstraints: *PageSize EnvC5 *MediaType Recycled-side2
+*UIConstraints: *PageSize EnvDL *MediaType Recycled-side2
+*UIConstraints: *PageSize Env10 *MediaType Label
+*UIConstraints: *PageSize EnvMonarch *MediaType Label
+*UIConstraints: *PageSize EnvC5 *MediaType Label
+*UIConstraints: *PageSize EnvDL *MediaType Label
+
+*UIConstraints: *DrvDuplex DrvDuplexNoTumble *MediaType Label
+*UIConstraints: *DrvDuplex DrvDuplexTumble *MediaType Label
+*UIConstraints: *MediaType Label *DrvDuplex DrvDuplexNoTumble
+*UIConstraints: *MediaType Label *DrvDuplex DrvDuplexTumble
+
+*UIConstraints: *DrvDuplex DrvDuplexNoTumble *MediaType Envelope
+*UIConstraints: *DrvDuplex DrvDuplexTumble *MediaType Envelope
+*UIConstraints: *MediaType Envelope *DrvDuplex DrvDuplexNoTumble
+*UIConstraints: *MediaType Envelope *DrvDuplex DrvDuplexTumble
+
+*UIConstraints: *DrvDuplex DrvDuplexNoTumble *MediaType Plain-side2
+*UIConstraints: *DrvDuplex DrvDuplexTumble *MediaType Plain-side2
+*UIConstraints: *MediaType Plain-side2 *DrvDuplex DrvDuplexNoTumble
+*UIConstraints: *MediaType Plain-side2 *DrvDuplex DrvDuplexTumble
+
+
+*UIConstraints: *DrvDuplex DrvDuplexNoTumble *MediaType PlainThick-side2
+*UIConstraints: *DrvDuplex DrvDuplexTumble *MediaType PlainThick-side2
+*UIConstraints: *MediaType PlainThick-side2 *DrvDuplex DrvDuplexNoTumble
+*UIConstraints: *MediaType PlainThick-side2 *DrvDuplex DrvDuplexTumble
+
+*UIConstraints: *DrvDuplex DrvDuplexNoTumble *MediaType Covers-side2
+*UIConstraints: *DrvDuplex DrvDuplexTumble *MediaType Covers-side2
+*UIConstraints: *MediaType Covers-side2 *DrvDuplex DrvDuplexNoTumble
+*UIConstraints: *MediaType Covers-side2 *DrvDuplex DrvDuplexTumble
+
+*UIConstraints: *DrvDuplex DrvDuplexNoTumble *MediaType Coated-side2
+*UIConstraints: *DrvDuplex DrvDuplexTumble *MediaType Coated-side2
+*UIConstraints: *MediaType Coated-side2 *DrvDuplex DrvDuplexNoTumble
+*UIConstraints: *MediaType Coated-side2 *DrvDuplex DrvDuplexTumble
+
+*UIConstraints: *DrvDuplex DrvDuplexNoTumble *MediaType Recycled-side2
+*UIConstraints: *DrvDuplex DrvDuplexTumble *MediaType Recycled-side2
+*UIConstraints: *MediaType Recycled-side2 *DrvDuplex DrvDuplexNoTumble
+*UIConstraints: *MediaType Recycled-side2 *DrvDuplex DrvDuplexTumble
+
+*UIConstraints: *ImageType Photo *TonerMode 1
+*UIConstraints: *ImageType Photo *TonerMode 2
+*UIConstraints: *ImageType Photo *TonerMode 3
+
+*UIConstraints: *ImageType Graphics *TonerMode 1
+*UIConstraints: *ImageType Graphics *TonerMode 2
+*UIConstraints: *ImageType Graphics *TonerMode 3
+
+*UIConstraints: *ImageType WebPages *TonerMode 1
+*UIConstraints: *ImageType WebPages *TonerMode 2
+*UIConstraints: *ImageType WebPages *TonerMode 3
+
+*UIConstraints: *ImageType POP *TonerMode 1
+*UIConstraints: *ImageType POP *TonerMode 2
+*UIConstraints: *ImageType POP *TonerMode 3
+
+*UIConstraints: *DrvDuplex DrvDuplexNoTumble *RISaveBlankSheet True
+*UIConstraints: *DrvDuplex DrvDuplexTumble *RISaveBlankSheet True
+*UIConstraints: *RISaveBlankSheet True *DrvDuplex DrvDuplexNoTumble
+*UIConstraints: *RISaveBlankSheet True *DrvDuplex DrvDuplexTumble
+
+
+*UIConstraints: *TonerMode 1 *ImageType Photo
+*UIConstraints: *TonerMode 2 *ImageType Photo
+*UIConstraints: *TonerMode 3 *ImageType Photo
+
+*UIConstraints: *TonerMode 1 *ImageType Graphics
+*UIConstraints: *TonerMode 2 *ImageType Graphics
+*UIConstraints: *TonerMode 3 *ImageType Graphics
+
+*UIConstraints: *TonerMode 1 *ImageType WebPages
+*UIConstraints: *TonerMode 2 *ImageType WebPages
+*UIConstraints: *TonerMode 3 *ImageType WebPages
+
+*UIConstraints: *TonerMode 1 *ImageType POP
+*UIConstraints: *TonerMode 2 *ImageType POP
+*UIConstraints: *TonerMode 3 *ImageType POP
+
+*UIConstraints: *ColorModel Gray *IAM Complementary
+*UIConstraints: *IAM Complementary *ColorModel Gray
+
+
+
+
+*% ==== Device Capabilities ===============
+*LanguageLevel: "3"
+*Protocols: TBCP
+*1284Modes Parallel: Compat Nibble ECP
+*1284DeviceID: "MFG:RICOH;MDL:SP 150;DES:RICOH SP 150;CMD:GDI;CLS:PRINTER;"
+*End
+
+*ColorDevice:	False
+*DefaultColorSpace: Grayscale
+*VariablePaperSize: True
+*LandscapeOrientation: Plus90
+
+*TTRasterizer: Type42
+*?TTRasterizer: "
+save
+    42 /FontType resourcestatus
+    {pop pop (Type42)}{(No Type42)} ifelse = flush
+restore
+"
+*End
+*FileSystem: True
+*?FileSystem: "
+  save false
+   (%disk?%)
+   { currentdevparams dup /Writeable known
+      { /Writeable get {pop true} if }  { pop } ifelse
+    } 10 string /IODevice resourceforall
+    {(True)}{(False)} ifelse = flush
+ restore
+"
+*End
+
+*Throughput: "25"
+*Password: "()"
+*ExitServer: "
+ count 0 eq
+ { false } { true exch startjob } ifelse
+ not {
+     (WARNING: Cannot modify initial VM.) =
+     (Missing or invalid password.) =
+     (Please contact the author of this software.) = flush quit
+     } if
+"
+*End
+*Reset: "
+ count 0 eq
+ { false } { true exch startjob } ifelse
+ not {
+    (WARNING: Cannot reset printer.) =
+    (Missing or invalid password.) =
+    (Please contact the author of this software.) = flush quit
+    } if
+ systemdict /quit get exec
+ (WARNING : Printer Reset Failed.) = flush
+"
+*End
+
+*AccurateScreensSupport: True
+*SuggestedJobTimeout: "0"
+*SuggestedWaitTimeout: "300"
+*PrintPSErrors: True
+*APSupportsCustomColorMatching: true
+*APDefaultCustomColorMatchingProfile: sRGB
+*APCustomColorMatchingProfile: sRGB
+
+
+
+
+*% Paper Handling ===================
+*OpenUI *PageSize/Media Size: PickOne
+*OrderDependency: 11 AnySetup *PageSize
+*DefaultPageSize: Letter
+*PageSize Letter/US Letter: "<</PageSize[612 792]/ImagingBBox null>>setpagedevice"
+*PageSize A4/A4: "<</PageSize[595 842]/ImagingBBox null>>setpagedevice"
+*PageSize A5/A5: "<</PageSize[420 595]/ImagingBBox null>>setpagedevice"
+*PageSize A6/A6: "<</PageSize[297 420]/ImagingBBox null>>setpagedevice"
+*PageSize B5/JIS B5: "<</PageSize[516 729]/ImagingBBox null>>setpagedevice"
+*PageSize B6/JIS B6: "<</PageSize[363 516]/ImagingBBox null>>setpagedevice"
+*PageSize Executive/Executive: "<</PageSize[522 756]/ImagingBBox null>>setpagedevice"
+*PageSize 16K/16K: "<</PageSize[524 737]/ImagingBBox null>>setpagedevice"
+*PageSize A5LEF/A5(LEF): "<</PageSize[595 420]/ImagingBBox null>>setpagedevice"
+*PageSize B6LEF/JIS B6(LEF): "<</PageSize[516 363]/ImagingBBox null>>setpagedevice"
+*PageSize Legal/Legal: "<</PageSize [612 1008]/ImagingBBox null>>setpagedevice"
+*CloseUI: *PageSize
+*OpenUI *PageRegion/Media Size: PickOne
+*OrderDependency: 12 AnySetup *PageRegion
+*DefaultPageRegion: Letter
+*PageRegion Letter/US Letter: "<</PageSize[612 792]/ImagingBBox null>>setpagedevice"
+*PageRegion A4/A4: "<</PageSize[595 842]/ImagingBBox null>>setpagedevice"
+*PageRegion A5/A5: "<</PageSize[420 595]/ImagingBBox null>>setpagedevice"
+*PageRegion A6/A6: "<</PageSize[297 420]/ImagingBBox null>>setpagedevice"
+*PageRegion B5/JIS B5: "<</PageSize[516 729]/ImagingBBox null>>setpagedevice"
+*PageRegion B6/JIS B6: "<</PageSize[363 516]/ImagingBBox null>>setpagedevice"
+*PageRegion Executive/Executive: "<</PageSize[522 756]/ImagingBBox null>>setpagedevice"
+*PageRegion 16K/16K: "<</PageSize[524 737]/ImagingBBox null>>setpagedevice"
+*PageRegion A5LEF/A5(LEF): "<</PageSize[595 420]/ImagingBBox null>>setpagedevice"
+*PageRegion B6LEF/JIS B6(LEF): "<</PageSize[516 363]/ImagingBBox null>>setpagedevice"
+*PageRegion Legal/Legal: "<</PageSize [612 1008]/ImagingBBox null>>setpagedevice"
+*CloseUI: *PageRegion
+*DefaultImageableArea: Letter
+*ImageableArea Letter/US Letter: "11.905511856079 11.905511856079 600.094482421875 780.094482421875"
+*ImageableArea A4/A4: "11.905511856079 11.905511856079 583.094482421875 830.094482421875"
+*ImageableArea A5/A5: "11.905511856079 11.905511856079 408.094482421875 583.094482421875"
+*ImageableArea A6/A6: "11.905511856079 11.905511856079 285.094482421875 408.094482421875"
+*ImageableArea B5/JIS B5: "11.905511856079 11.905511856079 504.094482421875 717.094482421875"
+*ImageableArea B6/JIS B6: "11.905511856079 11.905511856079 351.094482421875 504.094482421875"
+*ImageableArea Executive/Executive: "11.905511856079 11.905511856079 510.094482421875 744.094482421875"
+*ImageableArea 16K/16K: "11.905511856079 11.905511856079 512.094482421875 725.094482421875"             
+*ImageableArea A5LEF/A5(LEF): "11.905511856079 11.905511856079 583.094482421875 408.094482421875"
+*ImageableArea B6LEF/JIS B6(LEF): "11.905511856079 11.905511856079 504.094482421875 351.094482421875"
+*ImageableArea Legal/Legal: "11.905511856079 11.905511856079 600.094482421875 996.09448818898"
+*DefaultPaperDimension: Letter
+*PaperDimension Letter/US Letter: "612 792"
+*PaperDimension A4/A4: "595 842"
+*PaperDimension A5/A5: "420 595"
+*PaperDimension A6/A6: "297 420"
+*PaperDimension B5/JIS B5: "516 729"
+*PaperDimension B6/JIS B6: "363 516"
+*PaperDimension Executive/Executive: "522 756"
+*PaperDimension 16K/16K: "524 737"
+*PaperDimension A5LEF/A5(LEF): "595 420"
+*PaperDimension B6LEF/JIS B6(LEF): "516 363"
+*PaperDimension Legal/Legal: "612 1008"
+*MaxMediaWidth: "612.283508300781"
+*MaxMediaHeight: "1152"
+*HWMargins: 11.905511856079 11.905511856079 11.905511856079 11.905511856079
+*CustomPageSize True: "pop pop pop <</PageSize[5 -2 roll]/ImagingBBox null>>setpagedevice"
+*ParamCustomPageSize Width: 1 points 215.999 612.284
+*ParamCustomPageSize Height: 2 points 328.817 1008.001
+*ParamCustomPageSize WidthOffset: 3 points 0 0
+*ParamCustomPageSize HeightOffset: 4 points 0 0
+*ParamCustomPageSize Orientation: 5 int 0 0
+
+
+*LeadingEdge Short: ""
+*DefaultLeadingEdge: Short
+
+
+
+
+
+*OpenGroup: Graphics/Detailed Settings
+*% OutputMode Information ===================
+
+
+*AccurateScreensSupport: True
+*OpenUI *DrvResolution/Image Quality: PickOne
+*OrderDependency: 10 AnySetup *DrvResolution
+*DefaultDrvResolution: 600dpi
+*DrvResolution 600dpi/600DPI: "<</HWResolution [600 600]>>setpagedevice"
+*DrvResolution 1200dpi/1200DPI: "<</HWResolution [1200 600]>>setpagedevice"
+*CloseUI: *DrvResolution
+
+*AccurateScreensSupport: True
+*OpenUI *ColorModel/Output Color: PickOne
+*OrderDependency: 10 AnySetup *ColorModel
+*DefaultColorModel: Gray
+*ColorModel Gray/Black: "<</cupsBitsPerPixel 8/cupsBitsPerColor 8/cupsColorSpace 0/NegativePrint true>>setpagedevice"
+*CloseUI: *ColorModel
+
+
+
+*% Image Rotation ===============
+*OpenUI *ImageRotation/Image Rotation: Boolean
+*OrderDependency: 15.0 AnySetup *ImageRotation
+*DefaultImageRotation: False
+*ImageRotation False/Off: "<</ImageRotation false >>setpagedevice"
+*ImageRotation True/On: "<</ImageRotation true >>setpagedevice"
+*CloseUI: *ImageRotation
+*% Toner Mode ===============
+*OpenUI *TonerMode/Toner Saving Mode: PickOne
+*OrderDependency: 15.0 AnySetup *TonerMode
+*DefaultTonerMode: 0
+*TonerMode 1/On: "<</TonerMode>>setpagedevice"
+*TonerMode 0/Off: "<</TonerMode>>setpagedevice"
+*CloseUI: *TonerMode
+
+*ColorKeyWords: "StpBrightness"
+*OpenUI *StpBrightness/Brightness: PickOne
+*OrderDependency: 41.0 AnySetup *StpBrightness
+*DefaultStpBrightness: 200
+*StpBrightness 100/-100: "<</StpBrightness>>setpagedevice"
+*StpBrightness 120/-80: "<</StpBrightness>>setpagedevice"
+*StpBrightness 140/-60: "<</StpBrightness>>setpagedevice"
+*StpBrightness 160/-40: "<</StpBrightness>>setpagedevice"
+*StpBrightness 180/-20: "<</StpBrightness>>setpagedevice"
+*StpBrightness 200/0: "<</StpBrightness>>setpagedevice"
+*StpBrightness 220/20: "<</StpBrightness>>setpagedevice"
+*StpBrightness 240/40: "<</StpBrightness>>setpagedevice"
+*StpBrightness 260/60: "<</StpBrightness>>setpagedevice"
+*StpBrightness 280/80: "<</StpBrightness>>setpagedevice"
+*StpBrightness 300/100: "<</StpBrightness>>setpagedevice"
+*CloseUI: *StpBrightness
+*CloseGroup: Graphics
+
+
+
+*OpenGroup: ColorBalanceGroup/Color Balance
+
+
+*OpenUI *RIColorDensityBlackLow/Low Density (K): PickOne
+*OrderDependency: 50.0 AnySetup *RIColorDensityBlackLow
+*DefaultRIColorDensityBlackLow: 0
+*RIColorDensityBlackLow 3/Darker (+3): "/Black/Low 3/Custom/ProcSet"
+*RIColorDensityBlackLow 2/Darker (+2): "/Black/Low 2/Custom/ProcSet"
+*RIColorDensityBlackLow 1/Darker (+1): "/Black/Low 1/Custom/ProcSet"
+*RIColorDensityBlackLow 0/Normal (0): "/Black/Low 0/Custom/ProcSet"
+*RIColorDensityBlackLow -1/Lighter (-1): "/Black/Low -1/Custom/ProcSet"
+*RIColorDensityBlackLow -2/Lighter (-2): "/Black/Low -2/Custom/ProcSet"
+*RIColorDensityBlackLow -3/Lighter (-3): "/Black/Low -3/Custom/ProcSet"
+*CloseUI: *RIColorDensityBlackLow
+
+*OpenUI *RIColorDensityBlackMid/Medium Density (K): PickOne
+*OrderDependency: 51.0 AnySetup *RIColorDensityBlackMid
+*DefaultRIColorDensityBlackMid: 0
+*RIColorDensityBlackMid 3/Darker (+3): "/Black/Middle 3/Custom/ProcSet"
+*RIColorDensityBlackMid 2/Darker (+2): "/Black/Middle 2/Custom/ProcSet"
+*RIColorDensityBlackMid 1/Darker (+1): "/Black/Middle 1/Custom/ProcSet"
+*RIColorDensityBlackMid 0/Normal (0): "/Black/Middle 0/Custom/ProcSet"
+*RIColorDensityBlackMid -1/Lighter (-1): "/Black/Middle -1/Custom/ProcSet"
+*RIColorDensityBlackMid -2/Lighter (-2): "/Black/Middle -2/Custom/ProcSet"
+*RIColorDensityBlackMid -3/Lighter (-3): "/Black/Middle -3/Custom/ProcSet"
+*CloseUI: *RIColorDensityBlackMid
+
+*OpenUI *RIColorDensityBlackHigh/High Density (K): PickOne
+*OrderDependency: 52.0 AnySetup *RIColorDensityBlackHigh
+*DefaultRIColorDensityBlackHigh: 0
+*RIColorDensityBlackHigh 3/Darker (+3): "/Black/High 3/Custom/ProcSet"
+*RIColorDensityBlackHigh 2/Darker (+2): "/Black/High 2/Custom/ProcSet"
+*RIColorDensityBlackHigh 1/Darker (+1): "/Black/High 1/Custom/ProcSet"
+*RIColorDensityBlackHigh 0/Normal (0): "/Black/High 0/Custom/ProcSet"
+*RIColorDensityBlackHigh -1/Lighter (-1): "/Black/High -1/Custom/ProcSet"
+*RIColorDensityBlackHigh -2/Lighter (-2): "/Black/High -2/Custom/ProcSet"
+*RIColorDensityBlackHigh -3/Lighter (-3): "/Black/High -3/Custom/ProcSet"
+*CloseUI: *RIColorDensityBlackHigh
+*CloseGroup: ColorBalanceGroup
+
+*OpenGroup: AdvancedMedia/Paper Handling
+*% Collate ===============
+*OpenUI *Collate/Collated: Boolean
+*OrderDependency: 15.0 AnySetup *Collate
+*DefaultCollate: False
+*Collate False/Off: "<</Collate false >>setpagedevice"
+*Collate True/On: "<</Collate true >>setpagedevice"
+*CloseUI: *Collate
+
+
+*% MediaType ===============
+*OpenUI *MediaType/Paper Type: PickOne
+*OrderDependency: 13 AnySetup *MediaType
+*DefaultMediaType: Plain
+*MediaType Plain/Plain:	"<</MediaType(Plain)/cupsMediaType 0>>setpagedevice"
+*MediaType Recycled/Recycled:	"<</MediaType(Recycled)/cupsMediaType 1>>setpagedevice"
+*MediaType PlainThick/Plain Thick:	"<</MediaType(Plain Thick)/cupsMediaType 2>>setpagedevice"
+*MediaType PlainThin/Plain Thin: "<</MediaType(Plain Thin)/cupsMediaType 3>>setpagedevice"
+*MediaType Label/Label:	"<</MediaType(Label)/cupsMediaType 4>>setpagedevice"
+*CloseUI: *MediaType
+
+*OpenUI *DrvDuplex/Duplex: PickOne
+*OrderDependency: 31 AnySetup *DrvDuplex
+*DefaultDrvDuplex: None
+*DrvDuplex None/1 Sided Print: ""
+*DrvDuplex DrvDuplexNoTumble/Flip on Long Edge: "<</DrvDuplex true /Tumble false>>setpagedevice"
+*DrvDuplex DrvDuplexTumble/Flip on Short Edge: "<</DrvDuplex true /Tumble true>>setpagedevice"
+*CloseUI: *DrvDuplex
+
+
+*CloseGroup: AdvancedMedia
+
+*OpenGroup: PrinterFunction/Printer Specific Options
+*% Color Control ===============
+*OpenUI *RISaveBlankSheet/Skip Blank Pages: Boolean
+*OrderDependency: 40.0 AnySetup *RISaveBlankSheet
+*DefaultRISaveBlankSheet: False
+*RISaveBlankSheet False/Off: "<</RISaveBlankSheet false >>setpagedevice"
+*RISaveBlankSheet True/On: "<</RISaveBlankSheet true >>setpagedevice"
+*CloseUI: *RISaveBlankSheet
+*CloseGroup: PrinterFunction
+
+*% Input Sources (format: %%[ status: <stat>; source: <one of these> ]%% )
+*Source: "USB"
+*Source: "EtherTalk"
+
+
+
+*cupsLanguages: "ru"
+
+*% === RU ===
+
+*ru.Translation PageSize/Формат бумаги: ""
+*ru.PageSize A4/A4: ""
+*ru.PageSize A5/A5: ""
+*ru.PageSize A6/A6: ""
+*ru.PageSize B5/JIS B5: ""
+*ru.PageSize B6/JIS B6: ""
+*ru.PageSize Letter/US Letter: ""
+*ru.PageSize Executive/Executive: ""
+*ru.PageSize 16K/16K: ""
+
+
+*ru.Translation PageRegion/PageRegion: ""
+*ru.PageRegion A4/A4: ""
+*ru.PageRegion A5/A5: ""
+*ru.PageRegion A6/A6: ""
+*ru.PageRegion B5/JIS B5: ""
+*ru.PageRegion B6/JIS B6: ""
+*ru.PageRegion Letter/US Letter: ""
+*ru.PageRegion Executive/Executive: ""
+*ru.PageRegion 16K/16K: ""
+
+*ru.Translation Graphics/Подробные настройки: ""
+*ru.Translation ColorModel/Цвет отпечатка: ""
+*ru.ColorModel Gray/Черный: ""
+
+
+*ru.Translation DrvResolution/Качество изображения: ""
+*ru.DrvResolution 600dpi/600 т/д: ""
+*ru.DrvResolution 1200dpi/1200 т/д: ""
+
+*ru.Translation DrvDuplex/Двухсторонняя печать: ""
+*ru.DrvDuplex None/Односторонняя печать: ""
+*ru.DrvDuplex DrvDuplexNoTumble/Поворачивать по длинному краю: ""
+*ru.DrvDuplex DrvDuplexTumble/Поворачивать по короткому краю: ""
+
+
+*ru.Translation StpBrightness/Яркость: ""
+
+*ru.Translation TonerMode/Режим экономии тонера: ""
+*ru.TonerMode 0/Выкл.: ""
+*ru.TonerMode 1/Вкл.: ""
+
+
+*ru.Translation ImageRotation/Поворот изображения: ""
+*ru.ImageRotation False/Выкл.: ""
+*ru.ImageRotation True/Вкл.: ""
+
+
+*ru.Translation ColorBalanceGroup/Цветовой баланс: ""
+*ru.Translation RIColorDensityBlackLow/Низкая плотность (K): ""
+*ru.RIColorDensityBlackLow 3/Темнее (+3): ""
+*ru.RIColorDensityBlackLow 2/Темнее (+2): ""
+*ru.RIColorDensityBlackLow 1/Темнее (+1): ""
+*ru.RIColorDensityBlackLow 0/Стандартно (0): ""
+*ru.RIColorDensityBlackLow -1/Светлее (-1): ""
+*ru.RIColorDensityBlackLow -2/Светлее (-2): ""
+*ru.RIColorDensityBlackLow -3/Светлее (-3): ""
+*ru.Translation RIColorDensityBlackMid/Средняя плотность (K): ""
+*ru.RIColorDensityBlackMid 3/Темнее (+3): ""
+*ru.RIColorDensityBlackMid 2/Темнее (+2): ""
+*ru.RIColorDensityBlackMid 1/Темнее (+1): ""
+*ru.RIColorDensityBlackMid 0/Стандартно (0): ""
+*ru.RIColorDensityBlackMid -1/Светлее (-1): ""
+*ru.RIColorDensityBlackMid -2/Светлее (-2): ""
+*ru.RIColorDensityBlackMid -3/Светлее (-3): ""
+*ru.Translation RIColorDensityBlackHigh/Высокая плотность (K): ""
+*ru.RIColorDensityBlackHigh 3/Темнее (+3): ""
+*ru.RIColorDensityBlackHigh 2/Темнее (+2): ""
+*ru.RIColorDensityBlackHigh 1/Темнее (+1): ""
+*ru.RIColorDensityBlackHigh 0/Стандартно (0): ""
+*ru.RIColorDensityBlackHigh -1/Светлее (-1): ""
+*ru.RIColorDensityBlackHigh -2/Светлее (-2): ""
+*ru.RIColorDensityBlackHigh -3/Светлее (-3): ""
+
+*ru.Translation AdvancedMedia/Управление бумагой: ""
+*ru.Translation Collate/Разобрать по копиям: ""
+*ru.Collate False/Выкл.: ""
+*ru.Collate True/Вкл.: ""
+
+*ru.Translation MediaType/Тип бумаги: ""
+*ru.MediaType Plain/Обычная: ""
+*ru.MediaType PlainThick/Обычная толстая: ""
+*ru.MediaType PlainThin/Обычная тонкая: ""
+*ru.MediaType Label/Этикетка: ""
+*ru.MediaType Recycled/Переработанная: ""
+
+
+*ru.Translation PrinterFunction/Параметры принтера: ""
+*ru.Translation RISaveBlankSheet/Пропускать пустые страницы: ""
+*ru.RISaveBlankSheet False/Выкл.: ""
+*ru.RISaveBlankSheet True/Вкл.: ""
+
+

modules/sys/printing/cupsd.conf

@@ -0,0 +1,135 @@
+LogLevel warn
+MaxLogSize 0
+ErrorPolicy stop-printer
+# Allow remote access
+Port 631
+Listen /run/cups/cups.sock
+# Share local printers on the local network.
+Browsing On
+BrowseLocalProtocols dnssd
+DefaultAuthType Basic
+WebInterface Yes
+IdleExitTimeout 60
+<Location />
+  # Allow shared printing...
+  Order allow,deny
+  Allow all
+</Location>
+<Location /admin>
+  AuthType Default
+  Require user @SYSTEM
+</Location>
+<Location /admin/conf>
+  AuthType Default
+  Require user @SYSTEM
+</Location>
+<Location /admin/log>
+  AuthType Default
+  Require user @SYSTEM
+</Location>
+<Policy default>
+  JobPrivateAccess default
+  JobPrivateValues default
+  SubscriptionPrivateAccess default
+  SubscriptionPrivateValues default
+  <Limit Create-Job Print-Job Print-URI Validate-Job>
+    Order deny,allow
+  </Limit>
+  <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job>
+    Require user @OWNER @SYSTEM
+    Order deny,allow
+  </Limit>
+  <Limit CUPS-Get-Document>
+    AuthType Default
+    Require user @OWNER @SYSTEM
+    Order deny,allow
+  </Limit>
+  <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default CUPS-Get-Devices>
+    AuthType Default
+    Require user @SYSTEM
+    Order deny,allow
+  </Limit>
+  <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
+    AuthType Default
+    Require user @SYSTEM
+    Order deny,allow
+  </Limit>
+  <Limit Cancel-Job>
+    Require user @OWNER @SYSTEM
+    Order deny,allow
+  </Limit>
+  <Limit CUPS-Authenticate-Job>
+    AuthType Default
+    Require user @OWNER @SYSTEM
+    Order deny,allow
+  </Limit>
+  <Limit All>
+    Order deny,allow
+  </Limit>
+</Policy>
+<Policy authenticated>
+  JobPrivateAccess default
+  JobPrivateValues default
+  SubscriptionPrivateAccess default
+  SubscriptionPrivateValues default
+  <Limit Create-Job Print-Job Print-URI Validate-Job>
+    AuthType Default
+    Order deny,allow
+  </Limit>
+  <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
+    AuthType Default
+    Require user @OWNER @SYSTEM
+    Order deny,allow
+  </Limit>
+  <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
+    AuthType Default
+    Require user @SYSTEM
+    Order deny,allow
+  </Limit>
+  <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
+    AuthType Default
+    Require user @SYSTEM
+    Order deny,allow
+  </Limit>
+  <Limit Cancel-Job CUPS-Authenticate-Job>
+    AuthType Default
+    Require user @OWNER @SYSTEM
+    Order deny,allow
+  </Limit>
+  <Limit All>
+    Order deny,allow
+  </Limit>
+</Policy>
+<Policy kerberos>
+  JobPrivateAccess default
+  JobPrivateValues default
+  SubscriptionPrivateAccess default
+  SubscriptionPrivateValues default
+  <Limit Create-Job Print-Job Print-URI Validate-Job>
+    AuthType Negotiate
+    Order deny,allow
+  </Limit>
+  <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
+    AuthType Negotiate
+    Require user @OWNER @SYSTEM
+    Order deny,allow
+  </Limit>
+  <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
+    AuthType Default
+    Require user @SYSTEM
+    Order deny,allow
+  </Limit>
+  <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
+    AuthType Default
+    Require user @SYSTEM
+    Order deny,allow
+  </Limit>
+  <Limit Cancel-Job CUPS-Authenticate-Job>
+    AuthType Negotiate
+    Require user @OWNER @SYSTEM
+    Order deny,allow
+  </Limit>
+  <Limit All>
+    Order deny,allow
+  </Limit>
+</Policy>

modules/sys/printing/default.nix

@@ -0,0 +1,32 @@
+{
+  lib,
+  config,
+  ...
+}:
+
+{
+  options = with lib; {
+    services.printing = {
+      ricoh = {
+        enable = mkEnableOption "Enable Ricoh Printer";
+      };
+    };
+  };
+
+  config = lib.mkIf config.services.printing.enable {
+    virtualisation.oci-containers.containers = lib.mkIf config.services.printing.ricoh.enable {
+      ricoh = {
+        image = "ricoh-cups:latest";
+        autoStart = true;
+        extraOptions = [
+          "--device=/dev/bus/usb/005"
+          "--network=host"
+        ];
+      };
+    };
+
+    networking.firewall.allowedTCPPorts = [
+      631
+    ];
+  };
+}

modules/sys/printing/printers.conf

@@ -0,0 +1,24 @@
+# Printer configuration file for CUPS v2.4.11
+# Written by cupsd
+# DO NOT EDIT THIS FILE WHEN CUPSD IS RUNNING
+NextPrinterId 2
+<Printer RICOH_SP_150SU>
+PrinterId 1
+UUID urn:uuid:6a1e1442-eced-3a35-69bc-92de4802890b
+Info RICOH SP 150SU
+Location 
+MakeModel RICOH SP 150 v1.022
+DeviceURI usb://RICOH/SP%20150SU?serial=Y076M502861&interface=1
+State Idle
+StateTime 1738919335
+ConfigTime 1738919327
+Type 37060
+Accepting Yes
+Shared Yes
+JobSheets none none
+QuotaPeriod 0
+PageLimit 0
+KLimit 0
+OpPolicy default
+ErrorPolicy stop-printer
+</Printer>