f45b032e48
home: add plasmatube (though it might not be working well)
2022-11-08 05:34:02 +00:00
1c810dc1b8
time: switch to UTC
...
Daylight Savings Time is too confusing for me.
2022-11-08 02:35:50 +00:00
fc4138327a
home-packaged: add rsync
2022-11-06 20:53:22 -08:00
889c47e884
link debug symbols into /run/current-system/sw/lib/debug
2022-11-06 19:25:50 -08:00
f6f500c592
fs: hopefully fix /mnt/servo-root by linking sftp-server at the remote endpoint
2022-11-06 18:54:22 -08:00
26f920e119
disable default environment packages
2022-11-06 05:22:16 -08:00
88fba6f496
document --substituters nix options
2022-11-06 03:47:10 -08:00
5cca6ede0d
emote: fix persistence dir
2022-11-06 02:30:53 -08:00
3b4e394ce8
flake update nixpkgs: 2022-11-03 -> 2022-11-05, home-manager
...
```
• Updated input 'home-manager':
'github:nix-community/home-manager/d78b3488a76d251701ab58a9b7f0dd092b806c1e' (2022-11-03)
→ 'github:nix-community/home-manager/87d55517f6f36aa1afbd7a4a064869d5a1d405b8' (2022-11-05)
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/a2a777538d971c6b01c6e54af89ddd6567c055e8' (2022-11-03)
→ 'github:NixOS/nixpkgs/3bacde6273b09a21a8ccfba15586fb165078fb62' (2022-11-05)
• Updated input 'nixpkgs-stable':
'github:NixOS/nixpkgs/1404483f4531560aad73bdebae4096881c910ac0' (2022-11-04)
→ 'github:NixOS/nixpkgs/f09ad462c5a121d0239fde645aacb2221553a217' (2022-11-05)
```
2022-11-06 02:20:04 -08:00
d9b3fccdfa
persist emote dir
2022-11-06 02:07:32 -08:00
a0d332766a
nixcache: always trust my own caches, even if not enabled by default
2022-11-05 20:13:17 -07:00
cdd9672654
libreoffice: disable first-run dialog
2022-11-05 17:24:19 -07:00
887a431956
podcasts: add The Verge - Decoder
2022-11-05 06:16:20 -07:00
57ada6af4f
tokodon: fix segfault on launch
...
also persist the ~/.cache/KDE/tokodon directory.
since the login form isn't working yet (partially the fault of my
Pleroma install?), i can't tell if this is where tokens are stashed or
not.
2022-11-04 06:52:18 -07:00
d1d64b7376
import and update Tokodon package from < https://github.com/NixOS/nixpkgs/pull/170466 >
...
this hangs and then segfaults at start. i suppose i should `gdb` it.
2022-11-03 22:23:14 -07:00
6d52c0e8ab
new option: sane.gui.plasma.enable to enable desktop KDE plasma
...
this is useful for testing applications which are designed for KDE
first.
2022-11-03 03:09:14 -07:00
730fa8ba4b
moby: fix lightdm-mobile-greeter config to work again
2022-11-02 04:59:36 -07:00
8817f661ac
browser: temporarily switch back to firefox
...
recompiling librewolf is not practical -- until the addon signing is
upstreamed
2022-11-02 04:21:55 -07:00
3b0f505864
moby: move lightdm-mobile-greeter stuff into nixpkgs
2022-11-02 04:14:00 -07:00
b559d334c3
librewolf: work toward upstreaming the MOZ_REQUIRE_SIGNING patch
2022-11-02 02:39:56 -07:00
f6e4c0058c
add mercurial to dev packages
2022-11-01 22:20:05 -07:00
775fc979fc
browser: fix Extensions.Uninstall + refactor nits
2022-11-01 19:29:33 -07:00
ad6daa4e5b
librewolf: allow sideloading unsigned addons
...
still defaulting to firefox, because this requires a recompilation of
the browser -- particularly expensive for moby.
2022-11-01 19:17:49 -07:00
3ecfea158a
browser: make more easily swappable between firefox and librewolf
2022-11-01 16:23:50 -07:00
ca93518dda
browser: switch from librewolf to firefox-esr
...
librewolf doesn't allow unsigned addons. i believe this is a bug, as the
nixpkg build file looks like it *meant* to allow addons (and maybe at
some point did)
2022-11-01 04:58:45 -07:00
8b473ff88f
neovim: fix python tree-sitter plugin
...
which was otherwise yielding parsing errors.
2022-10-31 23:05:27 -07:00
7c38c1dbe9
de-persist /etc/machine-id, and generate it from the ssh key instead
...
note that /etc/machine-id now contains a different value than before,
meaning `journalctl` will not show logs from before the time of this
change.
2022-10-30 21:02:41 -07:00
b3b45ec0f2
fix host ssh key persistence
2022-10-30 20:03:00 -07:00
34d77542e7
impermanence: ensure /etc/ssh is populated before we decode machine secrets during activation
...
the impermanence activation scripts don't appear to mount folders --
only files. rather, the impermanence module creates fstab entries for
each bind mount folder, and *something* (systemd?) mounts these *after*
/run/current-system/activate is run.
therefore, if we want access to a bind-mounted directory during
activateion, we have to manually mount it.
i.e. `mount /etc/ssh/host_keys`.
2022-10-30 05:59:55 -07:00
6236c14def
vendor librewolf addons instead of fetching them on first run
...
this obviously speeds up startup, it's hopefully also less likely to
break surprisingly, and i hope it's the path to me shipping forks of
official extensions.
2022-10-27 03:20:29 -07:00
0c0f8c44bd
Merge branch 'master' of git.uninsane.org:colin/nix-files
2022-10-26 07:18:41 -07:00
7f97786a88
librewolf: use browserpass password store
...
this is working -- forked to support sops as a backend --
without totp support yet. it's possible in theory: i might just need to
write some adapter logic.
upstream discussion about genericizing backend support:
- <https://github.com/browserpass/browserpass-native/issues/127 >
2022-10-26 07:13:55 -07:00
db2e156f15
home: enable celluloid mpv frontend
...
i want to test this on mobile
2022-10-26 05:31:11 -07:00
43efec495e
librewolf: integrate with gopass
...
it's able to list passwords, but not decrypt them:
i think i can solve this on the store side?
2022-10-26 00:10:54 -07:00
10e224be0d
ssh: set known hosts via ~/.ssh/config
...
this prevents the ssh agent from updating the known_hosts file
and confusing home-manager.
2022-10-25 05:17:28 -07:00
e25c92794f
refactor: split ssh settings out of home-manager/default.nix
2022-10-25 05:06:33 -07:00
a8d2b7196d
statically populate ssh known_hosts
2022-10-25 05:01:32 -07:00
c44cad9c16
fractal: persist data in ~/private
2022-10-25 02:12:55 -07:00
e3bf585382
persist ssh host keys in a subdirectory
2022-10-25 02:09:27 -07:00
1fea9618ba
zsh: remove rm and mv confirmations
2022-10-25 01:42:46 -07:00
d54b595e45
RSS: subscribe to Edward Snowden
2022-10-24 20:23:14 -07:00
ad75ed352c
RSS: clean up the substack subs
2022-10-24 20:14:36 -07:00
306836042c
RSS: add my own feed :-)
2022-10-24 19:52:39 -07:00
939278b970
home: migrate Element directory to private storage
2022-10-24 06:42:51 -07:00
3d0bd0fbf4
remove TODO file
...
some of these had been done. the ones not done are documented elsewhere
(either in this repo or in my own PKM).
2022-10-24 06:20:22 -07:00
36d8a711ac
modules/services: abstract behind default.nix
2022-10-24 06:13:04 -07:00
1721546410
store ssh keys in ~/private, where they're encrypted
2022-10-24 01:33:14 -07:00
c833c68d83
move ssh pubkeys into their own file for future reuse
2022-10-24 01:33:01 -07:00
8de5b0a79d
iwd: switch APs more aggressively
...
unclear how much of a difference this makes yet: will hopefully
test/tune it over time.
2022-10-24 00:25:19 -07:00
b658b93c64
lappy: store the hashed user passwd in git and decrypt it into /etc/passwd on boot
...
this approach lets me persist the password. persisting /etc/shadow
directly wasn't so feasible. populating /etc/shadow at activation time
is something nix already does and is easy to plug into.
so we store the passwd hash in this repo, but encrypt it to the
destination machine's ssh pubkey to add enough entropy that it's not
brute-forceable through the public git repo.
2022-10-23 06:53:06 -07:00
