Commit Graph

187 Commits

Author SHA1 Message Date
9e4bfc2fce moby: switch from linux latest to linux 5.18
doesn't fix my WiFi issue, but will be easier to build on
2022-08-08 16:03:58 -07:00
d3193bc051 moby: bump to latest kernel (5.19) 2022-08-08 16:03:58 -07:00
c0b6d46575 moby: try building with mainline linux 2022-08-08 16:03:58 -07:00
54754de6fa moby: enable mobile-nixos' firmware (notably: bluetooth) 2022-08-05 14:42:08 -07:00
7003f7407e servo: add navidrome music streaming service 2022-08-04 23:33:34 -07:00
e80e37ae29 moby: persist the whole .librewolf dir 2022-08-04 14:05:24 -07:00
a3111d250f moby: ship without mobile-nixos' stage-1
the stage-1 fails to handle impermanence
2022-08-03 16:23:36 -07:00
21c9ce21cc servo: packages: clarify why we include matrix-synapse explicitly 2022-08-03 01:42:56 -07:00
65bcaa939e make some shared boot/hardware settings universal 2022-08-03 01:39:19 -07:00
8059477edd dhcpcd: automatically enable the user, if detected.
not sure this is the *best* place for it, but then, what is?
2022-08-03 00:41:59 -07:00
c6fbbbab66 moby: fix missing / as tmpfs 2022-08-02 16:02:14 -07:00
b1205e964b moby: migrate the user definitions to phosh.nix 2022-08-02 16:00:37 -07:00
ba6d0b7e3d machines: moby: enable impermanence (experimental)
last time i tried to rebuild nixos on the pinephone it didn't switch,
IIRC. i don't know why, but i expect it'll be easier to manage my
machines if i keep more of the setup consistent across them.

likely i'll tune this to be more leniant on moby (e.g. persist all of
.librewolf).
2022-08-01 14:38:40 -07:00
4d7d96f4a4 machines: moby: remove w3m: it's already included in the common config 2022-08-01 14:38:10 -07:00
40bc4098ad lappy: disable guest account 2022-08-01 00:25:08 -07:00
451816f623 rename config.{colinsane -> sane} 2022-08-01 00:23:49 -07:00
18bb89ded0 lappy: enable guest account 2022-07-31 11:35:15 -07:00
8f88085eb5 desko: add steam 2022-07-16 03:10:57 -07:00
5ec0ee4524 add TODO: remove some dangling hardcoded uid numbers 2022-07-15 01:01:41 -07:00
8c9c9ca6c9 migrate the rest of the uids/gids to 'allocations' system, but don't fix conflicts 2022-07-15 00:12:13 -07:00
42117f375b introduce an 'allocations' systems for things like uids/gids 2022-07-14 23:58:27 -07:00
c07c106a68 machines: rescue: remove incorrect comment about tmpfs 2022-07-14 16:25:13 -07:00
d4d345ca12 machines: add a rescue machine for live-booting 2022-07-14 16:21:59 -07:00
8f37edb402 transmission: specify download-dir and incomplete-dir instead of bind-mounting them
this appears to fix the permissions issue
2022-07-11 01:54:02 -07:00
99d55167f6 impermanence: only persist service directories if those services are enabled. 2022-07-10 17:58:16 -07:00
dc6472f39f electrum: put on all GUI systems 2022-07-07 04:10:57 -07:00
eb8cfc682f remove opengl modules
they don't seem to be necessary:
- still able to run spirv/vulkan-accelerated stuff at the same rate.
- still able to watch videos at the same CPU load.

i think mesa packages solid drivers that make this part mostly
irrelevant.
2022-07-06 02:00:12 -07:00
5a10805287 hardware.opengl.extraPackages: move to machine-specific files 2022-07-02 23:53:55 -07:00
09700adba2 desko: replace 'electron' package with 'electrum' -- as it was meant to be 2022-07-02 14:45:21 -07:00
8db30b5de9 servo: enlarge the /tmp tmpfs so we can build large nix packages 2022-06-30 00:17:05 -07:00
1f3c93623f desko: enable snapper for testing 2022-06-29 03:58:11 -07:00
634e5a8c71 servo: use a swap partition instead of a swapfile 2022-06-29 03:29:45 -07:00
92488dd890 complete servo image & port to impermanence
there might still be some bugs to work out here.
this produces a workable image, but with some uncertainty
around that swapfile (the first attempt had /swapfile living on a
tmpfs).
2022-06-29 01:17:53 -07:00
fd48880a0a nixcache: only enable on moby
it's annoying to rebuild on desko/lappy, and have that fail when servo
is offline/unreachable.
and it's really silly to have servo use its own cache *over the
network*.

long-term would be better to do properly distributed builds instead of
the cache.
2022-06-28 03:44:10 -07:00
9cce427ea4 WIP: add tow-boot files to servo image
i think this breaks the build -- will debug.
2022-06-27 17:11:27 -07:00
d0ff605f19 lappy: setup snapper (automated btrfs snapshots) 2022-06-27 01:28:17 -07:00
075969540a uninsane.org: force SSL to avoid CORS problems 2022-06-26 04:20:33 -07:00
57886ec3d0 servo: add ipfs service 2022-06-26 03:44:41 -07:00
d3fa6a31f9 decrease transmission upload bandwidth
i think it's messing with other services (like ipfs) :|
2022-06-25 19:49:48 -07:00
fdcbaae776 servo: firewall: open ipfs ports 2022-06-25 17:51:46 -07:00
436ade540f tune /var/lib impermanence (for lappy) 2022-06-24 21:10:49 -07:00
c39d0d1667 rebuild desko and flash it
haven't booted into it yet (we'll see!)
2022-06-24 02:07:40 -07:00
84e57ec3d8 lappy: add a dedicated /tmp fs 2022-06-24 01:02:26 -07:00
17d2029ba2 image: make the gpt headerHole configurable 2022-06-24 00:53:43 -07:00
d38f17207b remove extlinux bootloader wrapper: use colinsane.extraBootFiles 2022-06-24 00:10:07 -07:00
e7f05fa2ec */fs.nix: remove extraneous mkDefaults
these are no longer needed with the new image builder.
2022-06-23 21:21:01 -07:00
bf6ac1b7ae moby: enable boot.loader.generic-extlinux-compatible.enable 2022-06-23 19:56:40 -07:00
b244e8e845 moby: properly flash firmware as part of the image build 2022-06-23 19:01:04 -07:00
187c2f2406 lappy: switch back to the existing fs uuids 2022-06-23 16:28:12 -07:00
ac050ac390 move the canTouchEfiVars into the right place 2022-06-23 16:26:46 -07:00
f0857181c0 decrease the moby-specific stuff in flake.nix 2022-06-23 15:42:20 -07:00
46dc2fb521 extend image builder to support btrfs 2022-06-23 15:28:33 -07:00
0acb2e138b image building: enable impermanence
note that it still needs an interactive `mkdir /mnt-root/nix/var/{lib,log}`
in the initrd.
2022-06-23 03:39:09 -07:00
0579faaf89 get an image which can boot to a login prompt unattended
NB: this breaks compat with the existing lappy install.
need to switch back to impermanence, and switch the disk uuids too.
2022-06-23 02:24:52 -07:00
d80bd7d162 inline image building, and (for lappy) use a generic-extlinux-compatible bootloader
the generic bootloader will allow more code-sharing with rpi and
pinephone. desko should soon use the generic bootloader as well.

problems: lappy can't boot from USB stick. it makes it to the initrd,
but there's no dev nodes for the USB drive.
unsure if this is how it was before, too.
2022-06-23 00:24:39 -07:00
b6de07a731 ddns-he: start timer on boot 2022-06-20 15:36:48 -07:00
fa131fe39f lappy: enable impermanence
it mostly went smooth, though i lost a .ssh key.
probably the best upgrade process is to do most of the heavy work in the
initrd:

write the new nix config, notably, configuring a tmpfs / mount
and moving the previous / to /nix.
then boot and in the initrd, move all the `/nix/nix/...` items
up a level.
2022-06-20 03:28:01 -07:00
a91914053d transmission: disable the anti-brute-force option
this should allow me to more reliably login from anywhere.
2022-06-18 18:47:22 -07:00
a031beee18 servo: transmission: relax the umask (to hopefully make files globally readable) 2022-06-18 15:54:27 -07:00
b50150b52e enable stuff needed for ifuse/iphone photo syncing 2022-06-15 17:22:27 -07:00
2b8ff8d5ae rename 'uninsane' machine -> 'servo' 2022-06-12 15:11:41 -07:00
fb15f84f1d desko: enable duplicity backups 2022-06-10 01:43:48 -07:00
7da3d48272 migrate duplicity config to a module
this will let other machines reuse it
2022-06-10 01:30:57 -07:00
defcc15b03 desko: update fs UUIDs 2022-06-10 00:32:50 -07:00
cd43247d2c enable himalaya for sending and receiving email
sent messages don't get copied to the sent mailbox, but oh well.
problem for another day.
2022-06-09 18:58:42 -07:00
51bf327290 port helpers/home-manager-gen-colin.nix to modules system 2022-06-09 14:50:24 -07:00
bc51244c52 move helpers/universal -> modules/universal 2022-06-09 14:06:31 -07:00
ff002c3197 matrix: port secrets to sops 2022-06-08 17:03:41 -07:00
117b69d39e pleroma: port secrets to sops 2022-06-08 16:46:32 -07:00
46b0f10b9d nix-serve: port secrets to sops 2022-06-08 16:27:35 -07:00
e188db9344 postfix/dovecot: convert secrets to sops 2022-06-08 15:59:02 -07:00
85f16d9732 ovpn config: use sops for secrets 2022-06-08 14:39:10 -07:00
bc9450a0fa port ddns-he to sops secret 2022-06-08 14:32:16 -07:00
364f76b59e move uninsane secrets to a machine-global file 2022-06-08 14:22:43 -07:00
ed50ea4b4b sway: configure emoji fonts 2022-06-08 13:02:28 -07:00
05559c9c39 secrets: move uninsane secrets so nix config is valid on other hosts 2022-06-07 23:29:57 -07:00
a313f61351 duplicity: migrate secrets to sops 2022-06-07 02:33:11 -07:00
d2ea4c5ffe migrate duplicity PASSPHRASE to sops 2022-06-06 19:06:53 -07:00
d33d5a4582 hardware-x86_64: port to modules system 2022-06-06 17:51:35 -07:00
5bae11fcbc gui/phosh: port to module system 2022-06-06 17:39:40 -07:00
d28738eb0e gui/sway: port to module system 2022-06-06 17:35:28 -07:00
fa7a2186ca lappy: switch to sway 2022-06-06 01:17:08 -07:00
8ef29966b3 cleanup: remove unecessary arguments from nix config 2022-06-05 23:44:01 -07:00
75ba43aaca desko: switch to sway compositor 2022-06-03 01:40:32 -07:00
6df3ccd81f enable i3; switch desko to i3 2022-06-02 23:43:41 -07:00
4300cbbf8a uninsane: clarify kernelPkgs config value 2022-06-02 17:02:36 -07:00
a7259279bb port raspberry pi bootloader fixes to a nixpkgs patch 2022-06-02 14:18:41 -07:00
a30050af8f moby: add gnome-podcasts 2022-05-31 20:07:18 -07:00
14e7db3eae moby: scale display to 150% 2022-05-31 16:12:29 -07:00
ca5fa0839c moby: try a slight variant of phosh 2022-05-30 14:56:31 -07:00
7c36ebee3c acme: update config for nixos 22.05 2022-05-29 16:39:57 -07:00
524e9749be desko/lappy: explicitly set system.stateVersion 2022-05-28 13:14:48 -07:00
7ae8526771 update nixos-21.11 -> nixos-22.05 2022-05-28 12:40:35 -07:00
6318e66314 uninsane: enable nix-cache
note that the other machines can't easily use it unitl i upgrade to nixos-22.05
2022-05-28 12:39:50 -07:00
52bf4f5b67 put all gui helpers under helpers/gui/ subdir 2022-05-27 01:14:36 -07:00
f30d51abbc move phosh out from moby/ to helpers/
better yet would be put these all in a gui/ subdir
2022-05-27 01:13:09 -07:00
123e140212 moby: switch from phosh to plasma-mobile
this isn't the *best*: it's verrry slow to login.
but more software works. that could be more due to using wayland though,
than to plasma itself.
2022-05-27 01:08:59 -07:00
27f1360681 migrate dovecot secrets to secrets nix file 2022-05-27 00:57:36 -07:00
e207ca56dc duplicity: port passphrase to secrets file 2022-05-27 00:46:58 -07:00
a9b7b614b8 move matrix-synapse email password to secrets file 2022-05-27 00:34:19 -07:00