From da793609a78e71cb2a05af83f57aa12292cf80c9 Mon Sep 17 00:00:00 2001
From: Armel van Ravels <armel@armel.nl>
Date: Wed, 25 Mar 2026 10:08:07 +0100
Subject: [PATCH] Add RDP to gandalf

---
 systems/gandalf/default.nix |  1 +
 systems/modules/rdp.nix     | 16 ++++++++++++++++
 systems/modules/remmina.nix |  7 +++++++
 systems/work/default.nix    |  1 +
 4 files changed, 25 insertions(+)
 create mode 100644 systems/modules/rdp.nix
 create mode 100644 systems/modules/remmina.nix

diff --git a/systems/gandalf/default.nix b/systems/gandalf/default.nix
index 2f12f5a..20b3022 100644
--- a/systems/gandalf/default.nix
+++ b/systems/gandalf/default.nix
@@ -20,6 +20,7 @@
       ../modules/audacity.nix
       ../modules/ollama.nix
       ../modules/wireguard.nix
+      ../modules/rdp.nix
     ];
 
   boot.loader.systemd-boot.enable = true;
diff --git a/systems/modules/rdp.nix b/systems/modules/rdp.nix
new file mode 100644
index 0000000..7c7144b
--- /dev/null
+++ b/systems/modules/rdp.nix
@@ -0,0 +1,16 @@
+{ pkgs, ... }:
+
+{
+  services.xserver.desktopManager.plasma6.enable = true;
+  services.xrdp.enable = true;
+  services.xrdp.defaultWindowManager = "startplasma-x11";
+  services.xrdp.openFirewall = true;
+  programs.seahorse.enable = false;
+  security.polkit.extraConfig = ''
+    polkit.addRule(function(action, subject) {
+      if (action.id.indexOf("org.freedesktop.color-manager.") == 0 && subject.isInGroup("users")) {
+        return polkit.Result.YES;
+      }
+    });
+  '';
+}
diff --git a/systems/modules/remmina.nix b/systems/modules/remmina.nix
new file mode 100644
index 0000000..91f7924
--- /dev/null
+++ b/systems/modules/remmina.nix
@@ -0,0 +1,7 @@
+{ pkgs, ... }: 
+
+{
+  environment.systemPackages = with pkgs; [
+    remmina
+  ];
+}
diff --git a/systems/work/default.nix b/systems/work/default.nix
index 68e8fe6..be91167 100644
--- a/systems/work/default.nix
+++ b/systems/work/default.nix
@@ -17,6 +17,7 @@
       ../modules/azure-data-studio.nix
       ../modules/filezilla.nix
       ../modules/wireguard.nix
+      ../modules/remmina.nix
     ];
 
   boot.loader.systemd-boot.enable = true;