colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity
3,040 Commits 125 Branches 1 Tag 12 MiB
3b5ff938ce
Commit Graph

212 Commits

Author SHA1 Message Date
Colin
b39a250e22 secrets: fix servo secrets to all be "binary" format 2023-05-14 08:47:21 +00:00
Colin
0822ed34d7 secrets: split matrix_synapse_secrets out of servo.yaml 2023-05-14 08:46:40 +00:00
Colin
147b1c50b2 secrets: split pleroma_secrets out of servo.yaml 2023-05-14 08:44:37 +00:00
Colin
55875816d0 secrets: split nix_serve_privkey out of servo.yaml 2023-05-14 08:43:07 +00:00
Colin
e25a4bbee6 secrets: split freshrss_passwd out of servo.yaml 2023-05-14 08:41:27 +00:00
Colin
dbb9e00bed secrets: split dovecot_passwd out of servo.yaml 2023-05-14 08:40:35 +00:00
Colin
6b1c3d02c1 secrets: split wg_ovpns_privkey out of servo.yaml 2023-05-14 08:38:46 +00:00
Colin
4a448a1bf1 secrets: split ddns_afraid out of servo.yaml 2023-05-14 08:37:13 +00:00
Colin
452a55c5e1 secrets: split ddns_he out of servo.yaml 2023-05-14 08:36:04 +00:00
Colin
d10f70aff7 secrets: split duplicity_passphrase out of servo.yaml 2023-05-14 08:34:36 +00:00
Colin
38423183ee secrets: split mediawiki_pw out of servo.yaml 2023-05-14 08:33:22 +00:00
Colin
ed020b56c0 secrets: split moby.yaml into file-per-secret 2023-05-14 02:42:07 +00:00
Colin
af42cbd575 servo: fix typo in nixserve secret config 2023-05-14 02:33:56 +00:00
Colin
974656a80a secrets: split lappy.yaml into per-secret files 2023-05-14 02:33:21 +00:00
Colin
318efe09e2 secrets: split desko.yaml into one-secret-per-file 2023-05-14 02:29:30 +00:00
Colin
74e3aa02b9 servo: disable DNSSEC to fix connectivity problems 2023-05-13 21:28:47 +00:00
Colin
9e21101207 Merge branch 'staging/nixpkgs-2023-05-06' 2023-05-12 06:55:13 +00:00
Colin
5997283cef lemmy: break pict-rs config into own unit & persist its data 2023-05-12 06:54:26 +00:00
Colin
3c2715648c moby: ship compressed kernel images 
i've verified that .gz images boot. don't know about zImage, etc.
 2023-05-12 06:49:59 +00:00
Colin
d7bed3bec2 lemmy: remove debugging statements 2023-05-12 04:49:15 +00:00
Colin
079ab08642 lemmy: remove federation.debug 2023-05-12 04:47:10 +00:00
Colin
e34c9cc190 lemmy: enable proxyWebsockets instead of manually specifying upgrade logic 2023-05-12 04:46:38 +00:00
Colin
6ff2c8acae lemmy: restrict the http_accept types i forward to the backend 
it seems that forwarding `POST`s is the important part i was missing earlier
 2023-05-12 03:05:26 +00:00
Colin
04e8e72ae3 lemmy: switch back to using nix-style proxyPass 2023-05-12 02:47:47 +00:00
Colin
5b33c85e75 gitea: link to config options 2023-05-12 02:35:46 +00:00
Colin
083d905f4c lemmy: fix federation 
now when i subscribe to a community, the request actually seems to go through.

this change probably does more than necessary, but it serves as a known-good config
 2023-05-12 02:35:37 +00:00
Colin
ada8b75670 transmission: double upload BW to 600 kBps 2023-05-11 06:27:31 +00:00
Colin
d5ffa6d796 zeal/docsets: ship on desko too 2023-05-10 21:23:42 +00:00
Colin
b9afd1e340 lemmy: fixup websocket forwarding 
able to create admin account and subscribe to remote communities.
haven't tested posting comments.
 2023-05-10 08:24:52 +00:00
Colin
bfcbea5ca1 lemmy: fix the database connection 2023-05-09 10:05:14 +00:00
Colin
0376b15a2f matrix: appservice-irc: connect to esper.net IRC 2023-05-09 08:01:26 +00:00
Colin
fbae81eca7 zeal: ship docsets via programs config 2023-05-08 19:18:02 +00:00
Colin
f89f136041 sane.programs: allow per-program config (and port web-browser to use that) 2023-05-08 09:49:58 +00:00
Colin
94a8c00a40 gitea: migrate config away from deprecated options 2023-05-05 22:33:59 +00:00
Colin
6b9bbe278f moby: shift the kernel config into the linux-megous package 2023-05-03 22:48:07 +00:00
Colin
96eb427ea7 matrix: support larger uploads (100M) 2023-05-03 22:22:09 +00:00
Colin
96d113ffac lemmy: bump to git version in attempt to debug failed launch 2023-04-30 00:54:08 +00:00
Colin
6f7b7ddb84 Merge branch 'master' of git.uninsane.org:colin/nix-files 2023-04-28 09:20:05 +00:00
Colin
d06516a71b servo: try to ship lemmy (it's failing with some DB migration stuff) 2023-04-28 02:02:39 +00:00
Colin
fd82256bbc install zeal docs for packages like mx-sanebot 2023-04-27 10:07:16 +00:00
Colin
09a1d286d0 servo: enable komga, a comic/manga webapp 2023-04-21 07:15:05 +00:00
Colin
0662b06df6 servo: try to ship calibre (but i get runtime errors, so disable it) 2023-04-21 06:57:26 +00:00
Colin
b0a99da884 dovecot: if mail fails DKIM, deliver it to Junk 2023-04-20 14:25:59 +00:00
Colin
12fd7ebc41 email: split dovecot config out of postfix config 2023-04-20 09:43:39 +00:00
Colin
f4a04ff6ba reorg: move postfix stuff into an email subdir 2023-04-20 09:24:20 +00:00
Colin
89e2a83067 postfix: toy with some spam protection (but don't actually enable it) 2023-04-20 09:17:25 +00:00
Colin
6af0d54e7b matrix: re-enable signal bridge 2023-04-18 06:10:17 +00:00
Colin
099cd12bdd matrix/irc.nix: sanitize quit messages 2023-04-18 00:58:15 +00:00
Colin
bf67def14a matrix/irc.nix: MyAnonamouse: disable SASL auth 
it's unclear if SASL auth *might* actually work -- just with some weird delays -- but non-SASL auth *definitely* works
 2023-04-17 01:57:27 +00:00
Colin
4ff82f002b matrix/irc.nix: bridge to MyAnonamouse 2023-04-16 13:13:36 +00:00
Colin
781a149542 matrix: re-enable IRC bridge 2023-04-16 00:32:04 +00:00
Colin
94ac4ec0e9 matrix-appservice-irc: correct the user id/gid 2023-04-15 06:58:13 +00:00
Colin
5c17de6e83 Merge branch 'staging/nixpkgs-next-2023-03-28' 2023-03-31 13:05:04 +00:00
Colin
8db4498ae8 jellyfin: enable port forwarding and DLNA debugging 2023-03-31 12:42:31 +00:00
Colin
b1e9d8db80 nix flake update: nixpkgs f027fe965cc2 -> fc47fa33a3ac; sops-nix 2023-03-31 05:53:20 +00:00
Colin
2e120f613f lappy: enable yggdrasil 2023-03-20 08:35:40 +00:00
Colin
f89837f3aa servo: re-enable jellyfin 2023-03-16 09:11:26 +00:00
Colin
4b41aa3718 postfix: group forwarded ports by host 2023-03-14 11:35:56 +00:00
Colin
71d6fe44a1 postfix: compact the TXT MX records 2023-03-14 11:35:34 +00:00
Colin
8fc57c4249 make it so servo doesn't do binfmt emulation, nor fetch cache from desko 2023-03-11 13:45:45 +00:00
Colin
3e1a2243c7 hosts/rescue: make this evaluate again 2023-03-11 10:00:53 +00:00
Colin
dc1cd7a9a5 sane.persist: make it default-true for my hosts 2023-03-11 08:36:14 +00:00
Colin
f3151320a3 servo: shutup sane-deadlines warning 2023-03-11 07:58:56 +00:00
Colin
403b177a80 matrix: disable mautrix-signal (temporarily) 2023-03-11 00:02:30 +00:00
Colin
d725dfb7f1 refactor: group build-machine-related config into one "role" file 2023-03-05 01:05:17 +00:00
Colin
43f39674d6 nixcache: enable on all machines 2023-03-04 08:19:46 +00:00
Colin
386c712a23 lappy: ship stepmania 2023-03-04 08:08:37 +00:00
Colin
9beb6b52e5 desko: re-enable steam 2023-03-04 07:48:22 +00:00
Colin
4a7513ba23 moby: re-enable nixos documentation 
now that we properly cross compile (no emulation), it's pretty trivial.
 2023-03-02 08:30:58 +00:00
Colin
b722a4bcc8 Merge branch 'staging/mesa-downgrade-10' into dev/moby 
moby can cross compile, desko can still build without recompiling
*everything* (only mesa & derivatives)
 2023-03-02 00:46:52 +00:00
Colin
2fcb0ebfd0 moby: disable sequioa instead of emulating it 2023-03-01 10:14:48 +00:00
Colin
478002766e trust-dns: fetch lan IP to listen on from config instead of repeating myself 2023-02-21 11:38:27 +00:00
Colin
e923636181 Merge branch 'dev/servo' 2023-02-21 11:35:00 +00:00
Colin
58b219546b ejabberd: reduce TURN port pool 2023-02-21 11:25:34 +00:00
Colin
499078e0f8 trust-dns: update the address we listen on 2023-02-21 11:25:16 +00:00
Colin
15755a8a71 WIP: reduce emulated cross pkgset; aborted x86-x86 cross compilation 2023-02-21 01:25:42 +00:00
Colin
02067db774 moby: ship the full recommended guiApps again 2023-02-21 01:25:42 +00:00
Colin
d776c4618a programs: split the guiApps category into slightly smaller bits 2023-02-21 01:25:39 +00:00
Colin
50812e5678 moby: ship some of the base apps 2023-02-21 01:21:01 +00:00
Colin
6cbeccf51f WIP: moby: partially working cross compilation for phosh w/o apps (webkitgtk build OOMs) 2023-02-21 01:19:02 +00:00
Colin
5715795d1f WIP: moby-cross: is cross-by-default instead of opt-in 2023-02-21 01:19:00 +00:00
Colin
251297b62e desko: enable iphone utils 2023-02-21 01:11:42 +00:00
Colin
b6685c9e6c refactor: move konsole from moby/default.nix -> gui/phosh.nix 2023-02-04 10:00:10 +00:00
Colin
e08281c380 fix: typo in config option name 2023-02-03 09:09:37 +00:00
Colin
afb006f6ec programs: port last users & remove the old packages.nix 2023-02-03 05:26:57 +00:00
Colin
a76cf03232 remove unused "enableDevPkgs" option 2023-02-03 05:18:38 +00:00
Colin
c0377ff1a0 dovecot: define Drafts and Trash folders 2023-01-31 08:22:20 +00:00
Colin
062ef20d05 dovecot: auto-create the "Sent" message box 2023-01-31 06:57:35 +00:00
Colin
77cc560052 use sane.user.persist instead of sane.persist.home 2023-01-30 10:35:03 +00:00
Colin
870afec07e add which is shorthand to define a fs entry inside that user's home 2023-01-30 08:32:55 +00:00
colin
d419e10f10 moby: bump CMA 384M -> 512M 2023-01-26 23:41:22 +00:00
colin
6006b84f9e moby: disable metamask 2023-01-26 23:35:57 +00:00
colin
33d7819619 trust-dns: add a "quiet" option and enable it 2023-01-25 08:18:29 +00:00
colin
0846abb6bf signald: update, and persist the /var/lib/signald accounts directory 2023-01-25 06:38:27 +00:00
colin
f3568462c2 fix matrix-synapse after nixpkgs update 2023-01-25 03:46:05 +00:00
colin
358b673344 moby: bump CMA 256MB -> 384MB 2023-01-23 07:42:51 +00:00
colin
f2d22231a3 freshrss: force sync feeds on every launch. requires to login as user "colin" 2023-01-21 03:50:27 +00:00
colin
5d78bc6704 moby: enable wireguard/home VPN 2023-01-20 22:40:58 +00:00
colin
4da19a6d34 servo: remove users.nix; move autologinUser -> default.nix 2023-01-20 22:16:47 +00:00
colin
2f75925678 servo: lift pleroma user def out of toplevel -> pleroma.nix 2023-01-20 22:15:26 +00:00
colin
55a1856e87 servo: lift git user def out of toplevel -> gitea.nix 2023-01-20 22:14:14 +00:00
colin
2ee0f4efe2 servo: navidrome: give non-private dir and fix perms 2023-01-20 22:11:15 +00:00
colin
9af157b294 moby: enable the client role 2023-01-20 11:37:43 +00:00
colin
c316e51344 desko: enable wg-home 2023-01-20 07:59:11 +00:00
colin
f4f0c1bdd6 servo: fix broken config/typo 2023-01-20 07:45:54 +00:00
colin
6a2374e046 wg-home: unify server and client config 2023-01-20 07:42:31 +00:00
colin
094b7223c7 servo: wireguard secret is auto-generated 2023-01-20 07:11:37 +00:00
colin
df848b3262 wg-home: use separate host key than client key 2023-01-20 05:10:51 +00:00
colin
038a9034d7 hosts: remove the is-target attribute and opt into roles via the config system instead 2023-01-20 00:13:13 +00:00
colin
5a232eb832 servo: fix secrets path 2023-01-19 23:57:40 +00:00
colin
9301b95dbb wg-home: move to shared module so that host and client config can be adjacent 2023-01-19 23:55:56 +00:00
colin
d13bcc49ab refactor hosts directory, and move ssh keys out of modules/data 
longer-term, i want hosts/by-name to define host-specific data
that's accessible via the other hosts (things like pubkeys).

also the secrets management needs some rethinking. there's really not
much point in me specifiying where *exactly* a secret comes from at its
use site. i should really be specifying secret store manifests; i.e.
"servo.yaml contains secrets X Y and Z", and leaving the rest up to
auto-computing.
 2023-01-19 23:23:43 +00:00