nix-files/TODO.md

76 lines
3.0 KiB
Markdown
Raw Normal View History

2023-05-26 05:58:08 +00:00
## BUGS
- why i need to manually restart `wireguard-wg-ovpns` on servo periodically
- else DNS fails
2023-05-16 11:24:34 +00:00
## REFACTORING:
2023-05-13 10:04:46 +00:00
### sops/secrets
- attach secrets to the thing they're used by (sane.programs)
- rework secrets to leverage `sane.fs`
- remove sops activation script as it's covered by my systemd sane.fs impl
2023-05-13 10:04:46 +00:00
### roles
- allow any host to take the role of `uninsane.org`
- will make it easier to test new services?
2023-05-15 00:42:39 +00:00
### upstreaming
2023-06-07 08:08:23 +00:00
- split out a trust-dns module
- see: <https://github.com/NixOS/nixpkgs/pull/205866#issuecomment-1575753054>
2023-05-26 21:04:12 +00:00
- bump nodejs version in lemmy-ui
2023-05-15 00:42:39 +00:00
- add updateScripts to all my packages in nixpkgs
- fix lightdm-mobile-greeter for newer libhandy
- port zecwallet-lite to a from-source build
2023-05-15 00:42:39 +00:00
- fix or abandon Whalebird
2023-05-15 00:36:25 +00:00
2023-05-16 11:24:34 +00:00
## IMPROVEMENTS:
2023-05-14 02:08:09 +00:00
### security/resilience
- validate duplicity backups!
- encrypt more ~ dirs (~/archives, ~/records, ..?)
- best to do this after i know for sure i have good backups
2023-05-13 10:04:46 +00:00
- have `sane.programs` be wrapped such that they run in a cgroup?
- at least, only give them access to the portion of the fs they *need*.
- Android takes approach of giving each app its own user: could hack that in here.
2023-05-14 02:08:09 +00:00
- canaries for important services
- e.g. daily email checks; daily backup checks
2023-05-13 10:04:46 +00:00
2023-05-15 00:36:25 +00:00
### user experience
- firefox/librewolf: don't show browserpass/sponsorblock/metamask "first run" on every boot
- moby: improve gPodder launch time
2023-05-15 00:38:32 +00:00
- moby: replace jellyfin-desktop with jellyfin-vue?
- allows (maybe) to cache media for offline use
- "newer" jellyfin client
- not packaged for nix
2023-05-15 00:36:25 +00:00
- find a nice desktop ActivityPub client
2023-05-15 00:38:32 +00:00
- package Nix/NixOS docs for Zeal
2023-05-16 22:18:28 +00:00
- install [doc-browser](https://github.com/qwfy/doc-browser)
2023-05-16 11:24:34 +00:00
- this supports both dash (zeal) *and* the datasets from <https://devdocs.io> (which includes nix!)
2023-05-16 22:18:28 +00:00
- install [devhelp](https://wiki.gnome.org/Apps/Devhelp) (gnome)
- auto-mount servo
2023-05-17 00:26:18 +00:00
- have xdg-open parse `<repo:...> URIs (or adjust them so that it _can_ parse)
2023-05-17 10:39:20 +00:00
- `sane.programs`: auto-populate defaults with everything from `pkgs`
- zsh: disable "command not found" corrections
- sxmo: allow rotation to the upside-down position
- see: <repo:mil/sxmo-utils:scripts/core/sxmo_autorotate.sh>
- all orientations *except* upside down are supported
- sxmo: launch with auto-rotation enabled
2023-05-15 00:36:25 +00:00
2023-05-13 12:52:45 +00:00
### perf
- why does nixos-rebuild switch take 5 minutes when net is flakey?
2023-05-14 02:08:09 +00:00
- trying to auto-mount servo?
2023-05-13 12:52:45 +00:00
- something to do with systemd services restarting/stalling
- maybe wireguard & its refresh operation, specifically?
- fix OOM for large builds like webkitgtk
- these use significant /tmp space.
- either place /tmp on encrypted-cleared-at-boot storage
- which probably causes each CPU load for the encryption
- **or set up encrypted swap**
- encrypted swap could remove the need for my encrypted-cleared-at-boot stuff
2023-05-13 12:52:45 +00:00
2023-05-13 10:04:46 +00:00
2023-05-16 11:24:34 +00:00
## NEW FEATURES:
2023-05-13 10:04:46 +00:00
- add a FTP-accessible file share to servo
- just /var/www?
- migrate MAME cabinet to nix
- boot it from PXE from servo?
2023-05-17 08:49:06 +00:00
- enable IPv6