1611 Commits

Author SHA1 Message Date
cee29af431 buffybox: 3.2.0-unstable-2024-10-05 -> 3.2.0-unstable-2024-11-10 2024-11-25 07:15:05 +00:00
f63c8a490e feeds: subscribe to Matt Stoller - Organized Money 2024-11-23 17:26:42 +00:00
5788edbbc5 feeds: subscribe to Innuendo Studios 2024-11-14 14:25:16 +00:00
7b88c9c644 sane.fs: dont have local-fs.target depend on any of my (persistence) bind mounts
otherwise it's too easy for local-fs to hang (/mnt/persist/private), or fail (/mnt/pool), and i lose critical things like *networking*

this was only working because on servo the /mnt/persist/private deps caused a cycle and systemd just _removed_ local-fs.target
2024-11-13 12:05:31 +00:00
fed25f44d5 dyn-dns: allow services to subscribe *only* to change events, and not require DNS always be available
also switch back exclusively to UPnP / local source of trust
2024-11-12 04:06:24 +00:00
6513d927d4 hickory-dns: allow empty DNS substitutions, and handle those by filtering out the corresponding record 2024-11-12 04:05:25 +00:00
4779ad8f41 dyn-dns: better implementation 2024-11-12 02:31:50 +00:00
2134a9c738 WIP: dyn-dns: try a smarter trigger scheme, but im getting weird "resource" errors with systemd path units 2024-11-12 01:09:23 +00:00
5aa6c9b8c7 dyn-dns: when DNS changes, restart immediately instead of blocking on another dyn-dns.service query
the new behavior though causes dyn-dns consumers to be started even before we've learned the IP. that sort of matches the semantics of the module though. not sure the best design yet
2024-11-11 23:41:58 +00:00
388c58f656 servo: slim dependencies so that local-fs.target can be reached even if my media drives are inaccessible
this means some services which need access (like sftpgo) fail to start if the drive is unavailable
2024-11-11 20:40:13 +00:00
f3ee312dad modules/ssh: start sshd as early in the boot as possible
this allows more scenarios to be recoverable
2024-11-11 20:35:47 +00:00
ec5e8a3269 netns: simplify the host -> netns response tunneling
i don't actually need any route table that's higher priority than 'local'
2024-11-11 11:02:42 +00:00
f6369bce8d servo: doof: dont proxy DNS inside the net namespace 2024-11-11 02:46:06 +00:00
309bd04037 modules/netns: rename options for better grouping 2024-11-11 02:37:00 +00:00
23913c9cd2 netns: configure the device in a way that should allow named endpoints to be resolved outside the netns 2024-11-11 02:19:00 +00:00
2684b3c1aa wg-home: re-enable keepalives
this should fix some of the flakiness i've seen when deploying moby?
2024-11-10 16:19:07 +00:00
2ed633cfe8 wg-ovpns/doof: port from networking.wireguard -> sane.netns 2024-11-10 15:48:43 +00:00
2962f2dc21 refactor: modules/netns.nix 2024-11-10 14:00:29 +00:00
cd870e70cd hickory-dns: use upstream package, unpatched
I don't need the recursive resolver patches anymore
2024-11-10 05:56:09 +00:00
c30929e1a6 servo: switch to unbound for local DNS provider 2024-11-10 05:53:17 +00:00
e2dfbfe829 kiwix-serve: fix service sandboxing typo (ReadPaths -> ReadOnlyPaths) 2024-11-10 05:07:13 +00:00
5d1549bbeb hickory-dns: update comment about status of upstream hickory-dns 2024-11-08 08:09:13 +00:00
1f84fc4b2b programs: port a few programs from dconf -> gsettings, tested on desko 2024-11-07 05:06:44 +00:00
3a9e4af6da modules/programs: introduce a gsettings config option, which so far routes to dconf but later will stand alone 2024-11-07 03:30:34 +00:00
fa8cbd690d feeds: subscribe to ergaster podcast 2024-11-04 12:24:26 +00:00
e230d40fae ollama: ship gemma2-27b, package but dont ship codegemma-7b 2024-11-03 12:44:47 +00:00
3aadc12f04 services: ollama: remove some LLM models which ive found to not be useful 2024-11-03 12:16:27 +00:00
0dff9f993f browserpass: sandbox 2024-10-29 08:21:42 +00:00
864e75afce sanebox: purge 2024-10-29 05:59:01 +00:00
5b45282da6 buffybox/buffyboard: push systemd service upstream 2024-10-26 03:58:36 +00:00
ea4e230efd feeds: switch Matrix Live to the Youtube channel (the RSS is dead) 2024-10-26 02:30:24 +00:00
94e391c9a7 feeds: podcasts: subscribe to Unexplainable 2024-10-25 03:43:11 +00:00
6b1ea48f7a feeds: podcasts: subscribe to Stuff you should Know 2024-10-25 03:40:04 +00:00
d810c17cfd feeds: podcasts: subscribe to Last Week In AI 2024-10-25 03:32:22 +00:00
969d4cbef2 feeds: subscribe to EFF How To Fix The Internet 2024-10-25 03:31:46 +00:00
1c57b9ce9e programs/sandbox: include udev rules in the sandboxed program output
notably, this fixes feedbackd so that the PPP haptics/vibrator is writable by the user
2024-10-22 07:01:18 +00:00
ea65680a50 feeds: subscribe to TVW_Washington YouTube 2024-10-21 21:20:03 +00:00
d138cec9fc users/systemd: fix so oneshot services arent stopped immediately after activation 2024-10-18 02:55:44 +00:00
dbc29db5fa modules/programs: update docs for tryKeepUsers 2024-10-16 00:18:06 +00:00
8b8046773e feeds: subscribe to momi.ca / Anjan 2024-10-15 23:37:44 +00:00
455b05e99a ollama: ship deepseek-coder-v2-16b-lite-instruct-q5_1,qwen2_5-32b-instruct-q2_K 2024-10-13 18:56:05 +00:00
7f5b262801 ollama: ship fewer models, improve notes on the remaining models 2024-10-13 08:37:50 +00:00
b58416b6ac ollamaPackages: add a bunch more 2024-10-13 08:37:50 +00:00
bc302df2fa ollamaPackages.{qwen2_5-7b,qwen2_5-14b}: init, and cleanup the surroundings 2024-10-13 08:37:50 +00:00
14da2b6b6c ollamaPackages: rename {model}_{variant} -> {model}-{variant} 2024-10-13 08:37:50 +00:00
cb963bba4c ollama: ship mistral 2024-10-13 08:37:50 +00:00
06ee80bc40 ollama: cleanup docs 2024-10-12 23:29:52 +00:00
cba800ca17 ollama: enable AMD GPU acceleration 2024-10-12 23:10:42 +00:00
cacec52d8e ollama: enable on desko 2024-10-12 22:43:49 +00:00
2edce8e6c8 refactor: use mkEnableOption,mkPackageOption where applicable 2024-10-12 19:36:50 +00:00