steveej's infra

This repository helps me to manage all computer infrastructure. This is mostly achieved with the help of Nix.

In the unlikely case that you actually read this and have any questions please don't hesitate to reach out.

Initial Roadmap

• All graphical systems (incl. install media) must have
  • Full-disk encryption by default
  • Yubikey support with SSH auth
• Migrate all devices to new structure
  • Encrypted Install media
  • steveej-laptop
  • steveej-laptop-work
• Migrate home environment to new structure
  • home-manager
  • pkgs-configuration
  • development environments
• (Semi-) automatic synchronization of important repositories
  • Modification strategy The approach is to use vcsh for the dotfiles
  • dotfiles
• Toplevel Justfile for simple actions
  • mount/umount disks
  • install to mounted disk
  • rebuild running system
  • update running system
  • annotate recipes with some documentation
  • declare shell.nix with runtime deps
  • partition/encrypt/format disks
• Document bootstrap process
  • a new machine
  • an install media
• Design disaster recovery
• Automatic synchronization of other state files - see https://gitlab.com/steveeJ/nix-expressions/issues/2
• Recycle _archived
• Maybe make this a nix-overlay

Bugs

• home-manager leaves ~/.gnupg at 0755

Usage

(These are reminders for my future self)

just --list

Bootstrap

A new machine

• ensure the dotfiles repo has a branch with the new machine's hostname

• boot with an install media and go through setup

Post-Install Setup

• chmod --recursive g-rwx,o-rwx ~/.gnupg
• gpg2 --edit-card; fetch
• clone password-manager and infra repositories
• gpg2: ultimately trust my own key