Commit graph

81 commits

Author SHA1 Message Date
c0daa9e6e9 chore: bump and reconfigure treefmt-nix, include just fmt 2025-02-14 16:49:27 +01:00
27c6c4f9fa feat: introduce treefmt and fmt all 2024-11-15 11:45:00 +01:00
7f97ee3d47 fix(sj-srv1,containers, systemd-resolved): resolve via dhcp, host, and never use fallbacks 2024-10-16 23:03:38 +02:00
1533077234 sj-srv1,containers: debug and streamline networking config; update and track forgejo here
after an update to nixpkgs on sj-srv1 the networking for the `webserver`
container wasn't working. this caused me to debug the situation and
changing lots of things around. the culprit was most likely some impure
state file on the server that caused the `ve-webserver` interface not to
persist its IP. after renaming the webserver container the problem went
away.

i reverted all the IP changes and am keeping the other changes as opporunistic
improvements
2024-07-26 18:02:52 +02:00
4c18f0a7ab fix(*): adapt to nixos-24.05 changes 2024-06-01 21:47:09 +02:00
c13b460ee9 fmt and TODO comment 2024-02-15 20:21:33 +01:00
7137e93805 nix fmt 2024-02-08 21:04:39 +01:00
7b1b54ac9f shift illum serivce around and enable on x13s 2024-02-08 21:04:39 +01:00
6fb71cbf4f steveej-x13s-rmvbl: boring setup with copying the whole x13s flake 2024-02-08 21:04:39 +01:00
ffdf25c117 clean up and refactor more into OS snippets; bluetooth works on x13s 2024-02-08 21:04:39 +01:00
3b7a80ef03 update commonUsers and refactor system config 2024-02-08 21:04:39 +01:00
a083c05b27 WIP: x13s: install to nvme, refactor into module 2024-02-08 21:04:39 +01:00
26f0bde4b3 WIP everything 2024-01-18 19:06:42 +01:00
7a66eb1ef5 refactor nix settings 2023-12-01 21:00:17 +01:00
f5882396e3 sj-vps-htz0,containers/dns: remove IPv6, opportunistic TLS 2023-11-25 09:19:31 +01:00
93d6e2e39a nix fmt 2023-11-23 17:52:21 +01:00
c1f9977d63 grahpical: enable v4l2l loopback 2023-11-23 11:26:48 +01:00
6a2993b665 feat(router0-dmz0): init bpir3 based router 2023-10-01 11:29:16 +02:00
5ec13b17b7 feat(common/users): init module and add customization options 2023-10-01 11:28:59 +02:00
9988e3e969 [BROKEN DYNDNS] feat(containers): switch to hetzner for primary domain 2023-08-08 17:54:11 +02:00
4cb8e6df29 feat: init srv0-dmz0 2023-07-06 22:42:24 +02:00
b481126ae2 feat: start migrating steveej-t14 and sj-vps-htz-0 to sops 2023-07-05 15:55:04 +02:00
6970b8c7d2 feat(nix): extend wayland with sway setup 2023-05-23 18:11:30 +02:00
5b6ecd0a25 feat(Justfile): cachix recipe and apply locally without ssh 2023-05-23 18:09:54 +02:00
476e10780b flakfiy some Justfile recipes and experiment with wayland based custom desktop 2023-05-21 11:58:57 +02:00
33e0c3f4c6 feat: flakify, gnome3
chore: nix fmt
refactor: split out more home-manager programs
feat: migrate shell as flake devShell
feat: initial flake structure with colmena
feat: migrate elias-e525 to colmena
feat: migrate steveej-t14 with colmena
feat: configure chromium extensions
chore: remove all overlays and package overrides
chore: delete some of _archive
feat: migrate vmd102066
feat: migrate sj-vps-htz0
2023-04-21 22:15:34 +02:00
6befc79c8e nix fmt 2023-03-21 13:38:22 +01:00
7a10782170 feat(167.233.1.14): migrate all containers here 2023-03-09 13:09:51 +01:00
28c116337c format and change 2023-02-07 18:23:51 +01:00
eae8f1319e feat(nix): use stable nix, don't allow broken and insecure packages 2023-01-26 11:29:57 +01:00
37ecf7d4b1 fix(nix): move location related values to encrypted file 2022-11-19 16:34:11 -06:00
05f0cbdfb4 feat(nix/os/graphical): use systemd-resolved for DNS 2022-11-13 22:01:43 +01:00
d039179898 chore: nixfmt * 2022-11-03 20:46:14 +01:00
4a2ee46f7f feat(common,steveej-t14,graphical): udpate to nixos-22.05 2022-06-02 11:34:21 +02:00
Holochain CI
9ef670d9a1 srv0: use systemd-resolved 2022-03-20 16:40:47 +01:00
d7c4c7e02c graphical: fix layout 2022-02-01 13:34:36 +01:00
2e74a2172c use niv and add device elias-e525 2022-01-16 02:01:49 +01:00
c2aa524d64 update to nixUnstable 2022-01-03 21:03:05 +01:00
3f9f50745d steveej-t14: update to nixos 21.11 2021-12-04 12:30:36 +01:00
1680940e50 graphical: enable core-os-services 2021-08-20 23:28:51 +02:00
1242a8e215 adjust to nixos 21.05 2021-06-08 14:33:58 +02:00
fe76636775 fixup! support unencrypted disk provisioning 2021-01-07 19:40:17 +01:00
2a2715d447 support unencrypted disk provisioning 2021-01-07 19:40:17 +01:00
b215e8280d graphical-systems: disable pcscd
Also add udev rule to allow users device access. This is required for
users accessing the Yubikey directly which is the case when using gpg
without pcscd
2020-12-22 00:51:51 +01:00
162aea6283 profiles/common: use all cores for build jobs 2020-11-25 21:52:48 +01:00
9b8051f0a5 profiles/common: don't use latest kernel 2020-11-25 21:52:20 +01:00
433bf07407 nix: add podman to user env and remove from system 2020-10-24 13:00:50 +02:00
bf17d2f259 nix/graphical: fix bluetooth-applet 2020-10-18 22:08:55 +02:00
89c9f9e606 versions: bump to 20.09 and improve NIX_PATH assembly
The NIX_PATH assembly now walks over all keys in the given channel
repositories and assembles a NIX_PATH entry from it. Previously it made
assumptions about a set of hardcoded keys being available, which wasn't
ideal as it didn't allow device-entries.
2020-10-18 20:26:32 +02:00
522d7279bd nix: set NIX_PATH per device versions at buildtime
Previously all devices would have NIX_PATH set on the common verion file
defindd in *nix/variables/versions.nix*. Now NIX_PATH is populated with
the versions of the respective device.
2020-10-16 22:31:01 +02:00