5a10805287
hardware.opengl.extraPackages: move to machine-specific files
2022-07-02 23:53:55 -07:00
09700adba2
desko: replace 'electron' package with 'electrum' -- as it was meant to be
2022-07-02 14:45:21 -07:00
8db30b5de9
servo: enlarge the /tmp tmpfs so we can build large nix packages
2022-06-30 00:17:05 -07:00
1f3c93623f
desko: enable snapper for testing
2022-06-29 03:58:11 -07:00
634e5a8c71
servo: use a swap partition instead of a swapfile
2022-06-29 03:29:45 -07:00
92488dd890
complete servo image & port to impermanence
...
there might still be some bugs to work out here.
this produces a workable image, but with some uncertainty
around that swapfile (the first attempt had /swapfile living on a
tmpfs).
2022-06-29 01:17:53 -07:00
fd48880a0a
nixcache: only enable on moby
...
it's annoying to rebuild on desko/lappy, and have that fail when servo
is offline/unreachable.
and it's really silly to have servo use its own cache *over the
network*.
long-term would be better to do properly distributed builds instead of
the cache.
2022-06-28 03:44:10 -07:00
9cce427ea4
WIP: add tow-boot files to servo image
...
i think this breaks the build -- will debug.
2022-06-27 17:11:27 -07:00
d0ff605f19
lappy: setup snapper (automated btrfs snapshots)
2022-06-27 01:28:17 -07:00
075969540a
uninsane.org: force SSL to avoid CORS problems
2022-06-26 04:20:33 -07:00
57886ec3d0
servo: add ipfs service
2022-06-26 03:44:41 -07:00
d3fa6a31f9
decrease transmission upload bandwidth
...
i think it's messing with other services (like ipfs) :|
2022-06-25 19:49:48 -07:00
fdcbaae776
servo: firewall: open ipfs ports
2022-06-25 17:51:46 -07:00
436ade540f
tune /var/lib impermanence (for lappy)
2022-06-24 21:10:49 -07:00
c39d0d1667
rebuild desko and flash it
...
haven't booted into it yet (we'll see!)
2022-06-24 02:07:40 -07:00
84e57ec3d8
lappy: add a dedicated /tmp fs
2022-06-24 01:02:26 -07:00
17d2029ba2
image: make the gpt headerHole configurable
2022-06-24 00:53:43 -07:00
d38f17207b
remove extlinux bootloader wrapper: use colinsane.extraBootFiles
2022-06-24 00:10:07 -07:00
e7f05fa2ec
*/fs.nix: remove extraneous mkDefault
s
...
these are no longer needed with the new image builder.
2022-06-23 21:21:01 -07:00
bf6ac1b7ae
moby: enable boot.loader.generic-extlinux-compatible.enable
2022-06-23 19:56:40 -07:00
b244e8e845
moby: properly flash firmware as part of the image build
2022-06-23 19:01:04 -07:00
187c2f2406
lappy: switch back to the existing fs uuids
2022-06-23 16:28:12 -07:00
ac050ac390
move the canTouchEfiVars into the right place
2022-06-23 16:26:46 -07:00
f0857181c0
decrease the moby-specific stuff in flake.nix
2022-06-23 15:42:20 -07:00
46dc2fb521
extend image builder to support btrfs
2022-06-23 15:28:33 -07:00
0acb2e138b
image building: enable impermanence
...
note that it still needs an interactive `mkdir /mnt-root/nix/var/{lib,log}`
in the initrd.
2022-06-23 03:39:09 -07:00
0579faaf89
get an image which can boot to a login prompt unattended
...
NB: this breaks compat with the existing lappy install.
need to switch back to impermanence, and switch the disk uuids too.
2022-06-23 02:24:52 -07:00
d80bd7d162
inline image building, and (for lappy) use a generic-extlinux-compatible bootloader
...
the generic bootloader will allow more code-sharing with rpi and
pinephone. desko should soon use the generic bootloader as well.
problems: lappy can't boot from USB stick. it makes it to the initrd,
but there's no dev nodes for the USB drive.
unsure if this is how it was before, too.
2022-06-23 00:24:39 -07:00
b6de07a731
ddns-he: start timer on boot
2022-06-20 15:36:48 -07:00
fa131fe39f
lappy: enable impermanence
...
it mostly went smooth, though i lost a .ssh key.
probably the best upgrade process is to do most of the heavy work in the
initrd:
write the new nix config, notably, configuring a tmpfs / mount
and moving the previous / to /nix.
then boot and in the initrd, move all the `/nix/nix/...` items
up a level.
2022-06-20 03:28:01 -07:00
a91914053d
transmission: disable the anti-brute-force option
...
this should allow me to more reliably login from anywhere.
2022-06-18 18:47:22 -07:00
a031beee18
servo: transmission: relax the umask (to hopefully make files globally readable)
2022-06-18 15:54:27 -07:00
b50150b52e
enable stuff needed for ifuse/iphone photo syncing
2022-06-15 17:22:27 -07:00
2b8ff8d5ae
rename 'uninsane' machine -> 'servo'
2022-06-12 15:11:41 -07:00
fb15f84f1d
desko: enable duplicity backups
2022-06-10 01:43:48 -07:00
7da3d48272
migrate duplicity config to a module
...
this will let other machines reuse it
2022-06-10 01:30:57 -07:00
defcc15b03
desko: update fs UUIDs
2022-06-10 00:32:50 -07:00
cd43247d2c
enable himalaya
for sending and receiving email
...
sent messages don't get copied to the sent mailbox, but oh well.
problem for another day.
2022-06-09 18:58:42 -07:00
51bf327290
port helpers/home-manager-gen-colin.nix to modules system
2022-06-09 14:50:24 -07:00
bc51244c52
move helpers/universal -> modules/universal
2022-06-09 14:06:31 -07:00
ff002c3197
matrix: port secrets to sops
2022-06-08 17:03:41 -07:00
117b69d39e
pleroma: port secrets to sops
2022-06-08 16:46:32 -07:00
46b0f10b9d
nix-serve: port secrets to sops
2022-06-08 16:27:35 -07:00
e188db9344
postfix/dovecot: convert secrets to sops
2022-06-08 15:59:02 -07:00
85f16d9732
ovpn config: use sops for secrets
2022-06-08 14:39:10 -07:00
bc9450a0fa
port ddns-he to sops secret
2022-06-08 14:32:16 -07:00
364f76b59e
move uninsane secrets to a machine-global file
2022-06-08 14:22:43 -07:00
ed50ea4b4b
sway: configure emoji fonts
2022-06-08 13:02:28 -07:00
05559c9c39
secrets: move uninsane secrets so nix config is valid on other hosts
2022-06-07 23:29:57 -07:00
a313f61351
duplicity: migrate secrets to sops
2022-06-07 02:33:11 -07:00