0c6b949a72
lift some more files out of modules -> hosts
2022-11-22 04:29:17 +00:00
9a6c83776d
vpn: move out of modules/
2022-11-22 03:46:25 +00:00
e408e77026
move secrets.nix out of modules
2022-11-22 03:37:57 +00:00
e0612ccfa8
move allocations out of universal
...
it doesn't cause any changes to the system
2022-11-22 03:35:11 +00:00
a0e85ff31b
nixserve: remove the default sops path
...
it might make more sense to make this a runtime path (/run/secrets/...)
2022-11-22 03:20:50 +00:00
ed52b5f251
nixcache: modularize
2022-11-22 03:07:11 +00:00
dc21b0d68c
modularize image.nix image building
2022-11-22 03:02:41 +00:00
84a17f4599
move hardware out of modules into hosts/common
...
i want for `modules/` to behave like a more typical `modules` directory,
where functionality is opt-in.
2022-11-22 02:52:07 +00:00
43fa7fdd9f
rename machines -> hosts
...
- shorter.
- congruent with `nixos-rebuild .` choosing what to build based on `hostname`.
- more widely used within other nix repos i've seen.
- more accurate in the case that i migrate a host to a different
machine (which i plan to do with servo).
2022-11-22 02:33:47 +00:00
9633c4f012
packages: add kdenlive
2022-11-21 10:39:58 +00:00
b869617b09
duplicity: refactor and update files list
2022-11-21 10:39:52 +00:00
ad7ae94501
home: ship dino XMPP client
2022-11-12 10:18:13 +00:00
fd8f660ee0
feeds: add Jeff Kaufman
2022-11-11 07:50:42 +00:00
f45b032e48
home: add plasmatube (though it might not be working well)
2022-11-08 05:34:02 +00:00
1c810dc1b8
time: switch to UTC
...
Daylight Savings Time is too confusing for me.
2022-11-08 02:35:50 +00:00
fc4138327a
home-packaged: add rsync
2022-11-06 20:53:22 -08:00
889c47e884
link debug symbols into /run/current-system/sw/lib/debug
2022-11-06 19:25:50 -08:00
f6f500c592
fs: hopefully fix /mnt/servo-root by linking sftp-server at the remote endpoint
2022-11-06 18:54:22 -08:00
26f920e119
disable default environment packages
2022-11-06 05:22:16 -08:00
88fba6f496
document --substituters nix options
2022-11-06 03:47:10 -08:00
5cca6ede0d
emote: fix persistence dir
2022-11-06 02:30:53 -08:00
3b4e394ce8
flake update nixpkgs: 2022-11-03 -> 2022-11-05, home-manager
...
```
• Updated input 'home-manager':
'github:nix-community/home-manager/d78b3488a76d251701ab58a9b7f0dd092b806c1e' (2022-11-03)
→ 'github:nix-community/home-manager/87d55517f6f36aa1afbd7a4a064869d5a1d405b8' (2022-11-05)
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/a2a777538d971c6b01c6e54af89ddd6567c055e8' (2022-11-03)
→ 'github:NixOS/nixpkgs/3bacde6273b09a21a8ccfba15586fb165078fb62' (2022-11-05)
• Updated input 'nixpkgs-stable':
'github:NixOS/nixpkgs/1404483f4531560aad73bdebae4096881c910ac0' (2022-11-04)
→ 'github:NixOS/nixpkgs/f09ad462c5a121d0239fde645aacb2221553a217' (2022-11-05)
```
2022-11-06 02:20:04 -08:00
d9b3fccdfa
persist emote dir
2022-11-06 02:07:32 -08:00
a0d332766a
nixcache: always trust my own caches, even if not enabled by default
2022-11-05 20:13:17 -07:00
cdd9672654
libreoffice: disable first-run dialog
2022-11-05 17:24:19 -07:00
887a431956
podcasts: add The Verge - Decoder
2022-11-05 06:16:20 -07:00
57ada6af4f
tokodon: fix segfault on launch
...
also persist the ~/.cache/KDE/tokodon directory.
since the login form isn't working yet (partially the fault of my
Pleroma install?), i can't tell if this is where tokens are stashed or
not.
2022-11-04 06:52:18 -07:00
d1d64b7376
import and update Tokodon package from < https://github.com/NixOS/nixpkgs/pull/170466 >
...
this hangs and then segfaults at start. i suppose i should `gdb` it.
2022-11-03 22:23:14 -07:00
6d52c0e8ab
new option: sane.gui.plasma.enable to enable desktop KDE plasma
...
this is useful for testing applications which are designed for KDE
first.
2022-11-03 03:09:14 -07:00
730fa8ba4b
moby: fix lightdm-mobile-greeter config to work again
2022-11-02 04:59:36 -07:00
8817f661ac
browser: temporarily switch back to firefox
...
recompiling librewolf is not practical -- until the addon signing is
upstreamed
2022-11-02 04:21:55 -07:00
3b0f505864
moby: move lightdm-mobile-greeter stuff into nixpkgs
2022-11-02 04:14:00 -07:00
b559d334c3
librewolf: work toward upstreaming the MOZ_REQUIRE_SIGNING patch
2022-11-02 02:39:56 -07:00
f6e4c0058c
add mercurial to dev packages
2022-11-01 22:20:05 -07:00
775fc979fc
browser: fix Extensions.Uninstall + refactor nits
2022-11-01 19:29:33 -07:00
ad6daa4e5b
librewolf: allow sideloading unsigned addons
...
still defaulting to firefox, because this requires a recompilation of
the browser -- particularly expensive for moby.
2022-11-01 19:17:49 -07:00
3ecfea158a
browser: make more easily swappable between firefox and librewolf
2022-11-01 16:23:50 -07:00
ca93518dda
browser: switch from librewolf to firefox-esr
...
librewolf doesn't allow unsigned addons. i believe this is a bug, as the
nixpkg build file looks like it *meant* to allow addons (and maybe at
some point did)
2022-11-01 04:58:45 -07:00
8b473ff88f
neovim: fix python tree-sitter plugin
...
which was otherwise yielding parsing errors.
2022-10-31 23:05:27 -07:00
7c38c1dbe9
de-persist /etc/machine-id, and generate it from the ssh key instead
...
note that /etc/machine-id now contains a different value than before,
meaning `journalctl` will not show logs from before the time of this
change.
2022-10-30 21:02:41 -07:00
b3b45ec0f2
fix host ssh key persistence
2022-10-30 20:03:00 -07:00
34d77542e7
impermanence: ensure /etc/ssh is populated before we decode machine secrets during activation
...
the impermanence activation scripts don't appear to mount folders --
only files. rather, the impermanence module creates fstab entries for
each bind mount folder, and *something* (systemd?) mounts these *after*
/run/current-system/activate is run.
therefore, if we want access to a bind-mounted directory during
activateion, we have to manually mount it.
i.e. `mount /etc/ssh/host_keys`.
2022-10-30 05:59:55 -07:00
6236c14def
vendor librewolf addons instead of fetching them on first run
...
this obviously speeds up startup, it's hopefully also less likely to
break surprisingly, and i hope it's the path to me shipping forks of
official extensions.
2022-10-27 03:20:29 -07:00
0c0f8c44bd
Merge branch 'master' of git.uninsane.org:colin/nix-files
2022-10-26 07:18:41 -07:00
7f97786a88
librewolf: use browserpass password store
...
this is working -- forked to support sops as a backend --
without totp support yet. it's possible in theory: i might just need to
write some adapter logic.
upstream discussion about genericizing backend support:
- <https://github.com/browserpass/browserpass-native/issues/127 >
2022-10-26 07:13:55 -07:00
db2e156f15
home: enable celluloid mpv frontend
...
i want to test this on mobile
2022-10-26 05:31:11 -07:00
43efec495e
librewolf: integrate with gopass
...
it's able to list passwords, but not decrypt them:
i think i can solve this on the store side?
2022-10-26 00:10:54 -07:00
10e224be0d
ssh: set known hosts via ~/.ssh/config
...
this prevents the ssh agent from updating the known_hosts file
and confusing home-manager.
2022-10-25 05:17:28 -07:00
e25c92794f
refactor: split ssh settings out of home-manager/default.nix
2022-10-25 05:06:33 -07:00
a8d2b7196d
statically populate ssh known_hosts
2022-10-25 05:01:32 -07:00
c44cad9c16
fractal: persist data in ~/private
2022-10-25 02:12:55 -07:00
e3bf585382
persist ssh host keys in a subdirectory
2022-10-25 02:09:27 -07:00
1fea9618ba
zsh: remove rm and mv confirmations
2022-10-25 01:42:46 -07:00
d54b595e45
RSS: subscribe to Edward Snowden
2022-10-24 20:23:14 -07:00
ad75ed352c
RSS: clean up the substack subs
2022-10-24 20:14:36 -07:00
306836042c
RSS: add my own feed :-)
2022-10-24 19:52:39 -07:00
939278b970
home: migrate Element directory to private storage
2022-10-24 06:42:51 -07:00
3d0bd0fbf4
remove TODO file
...
some of these had been done. the ones not done are documented elsewhere
(either in this repo or in my own PKM).
2022-10-24 06:20:22 -07:00
36d8a711ac
modules/services: abstract behind default.nix
2022-10-24 06:13:04 -07:00
1721546410
store ssh keys in ~/private, where they're encrypted
2022-10-24 01:33:14 -07:00
c833c68d83
move ssh pubkeys into their own file for future reuse
2022-10-24 01:33:01 -07:00
8de5b0a79d
iwd: switch APs more aggressively
...
unclear how much of a difference this makes yet: will hopefully
test/tune it over time.
2022-10-24 00:25:19 -07:00
b658b93c64
lappy: store the hashed user passwd in git and decrypt it into /etc/passwd on boot
...
this approach lets me persist the password. persisting /etc/shadow
directly wasn't so feasible. populating /etc/shadow at activation time
is something nix already does and is easy to plug into.
so we store the passwd hash in this repo, but encrypt it to the
destination machine's ssh pubkey to add enough entropy that it's not
brute-forceable through the public git repo.
2022-10-23 06:53:06 -07:00
f68bc342e8
fix activationScript ordering to remove sops double-decrypt hack
2022-10-23 06:53:05 -07:00
e3221bf8b9
home: add handbrake program
2022-10-23 03:02:31 -07:00
2b14648587
servo: persist the maildir
...
this way i don't lose my mail on every reboot...
wow i can't believe it took me this long to make the connection.
2022-10-22 07:00:56 -07:00
0753aa59e9
refactor: move default home impermanence dirs to modules/universal/users.nix
2022-10-22 06:09:53 -07:00
55cbce17c2
refactor: impermanence: remove duplicate function map-service-dirs
2022-10-22 06:03:04 -07:00
ebf3152ced
refactor: purge impermanence.home-files option
...
persisting individual files doesn't work super well. we can do without
it and things are simpler.
2022-10-22 05:56:04 -07:00
8345375bc4
zsh: fix history path to be fully-qualified
...
it's implicitly a relative path to where the shell is initialized.
2022-10-22 05:52:05 -07:00
8f61ba6085
zsh: move .zsh_history to ~/.local/share/zsh
...
this works better with impermanence (see code comment)
2022-10-22 04:08:37 -07:00
b43103a024
refactor: move .zsh_history impermanence definition into zsh.nix
2022-10-22 04:02:40 -07:00
187a52527b
refactor: squash env directory
2022-10-22 03:56:50 -07:00
b26e826b3b
sway: add a config option to disable the greeter (and auto-login instead)
...
i need this now as a way to keep gtk3 packages (in greetd) out of the
environment, so i can test the Nautilus gtk3-not-present bug.
2022-10-22 01:31:51 -07:00
7cc44f9455
feeds: follow Anish Lakhwara
...
supposedly. we'll see if my RSS client actually understands that feed...
2022-10-21 09:30:54 -07:00
419ababe6f
home-manager: split discord.nix out of default.nix
2022-10-21 09:27:04 -07:00
e4c0a0d468
home-manager: split aerc.nix out of default.nix
2022-10-21 09:15:08 -07:00
0e63cd4e11
home-manager: split sublime-music.nix out of default.nix
2022-10-21 09:10:55 -07:00
9328e5ff32
home: disable nb
2022-10-21 09:01:06 -07:00
87dda0ad11
home: nb: move package inclusion to nb.nix
2022-10-21 08:59:04 -07:00
46783cd0e2
home-manager: split nb out of default.nix
2022-10-21 08:53:08 -07:00
f7d3b8128e
home-manager: split vlc config out of default.nix
2022-10-21 08:47:21 -07:00
9119f0b092
home-manager: split mpv config out of default.nix
2022-10-21 08:44:25 -07:00
17189b22e9
home-manager: split git config out of default.nix
2022-10-21 08:41:28 -07:00
7db3816511
home-manager: move librewolf out of default.nix
2022-10-21 08:38:20 -07:00
8c20017544
home-manager: split neovim out of default.nix
2022-10-21 08:30:35 -07:00
4c1f68f82f
home-manager: split kitty out of default.nix
2022-10-21 08:24:07 -07:00
289745f41a
split zsh config out of home-manager.nix monolith
2022-10-21 08:20:30 -07:00
d9caf70c6c
home-manager: remove 'enable' option
2022-10-21 07:43:20 -07:00
cf95a6e321
env: alias to mkdir + pushd
2022-10-21 07:06:55 -07:00
bafe7aa3c7
Merge branch 'staging/nixpkgs-2022-10-20'
2022-10-21 02:08:33 -07:00
a8227bbcbc
nix flake update (nixpkgs 2022-10-14 -> 2022-10-19 and others)
...
```
• Updated input 'home-manager':
'github:nix-community/home-manager/17208be516fc36e2ab0ceb064d931e90eb88b2a3' (2022-10-11)
→ 'github:nix-community/home-manager/b81e128fc053ab3159d7b464d9b7dedc9d6a6891' (2022-10-17)
• Updated input 'mobile-nixos':
'github:nixos/mobile-nixos/e4b6f680b2a4f29f087a7c1299c11499d1a367b6' (2022-10-14)
→ 'github:nixos/mobile-nixos/2a4d4a71e1dfa6d9001249fd57229e949dac0908' (2022-10-21)
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/4428e23312933a196724da2df7ab78eb5e67a88e' (2022-10-14)
→ 'github:NixOS/nixpkgs/db25c4da285c5989b39e4ce13dea651a88b7a9d4' (2022-10-19)
• Updated input 'nixpkgs-stable':
'github:NixOS/nixpkgs/e06bd4b64bbfda91d74f13cb5eca89485d47528f' (2022-10-12)
→ 'github:NixOS/nixpkgs/44fc3cb097324c9f9f93313dd3f103e78d722968' (2022-10-20)
• Updated input 'sops-nix':
'github:Mic92/sops-nix/0ce0449e6404c4ff9d1b7bd657794ae5ca54deb3' (2022-10-09)
→ 'github:Mic92/sops-nix/8e470d4eac115aa793437e52e84e7f9abdce236b' (2022-10-18)
• Updated input 'sops-nix/nixpkgs-22_05':
'github:NixOS/nixpkgs/b3783bcfb8ec54e0de26feccfc6cc36b8e202ed5' (2022-10-09)
→ 'github:NixOS/nixpkgs/945a85cb7ee31f5f8c49432d77b610b777662d4f' (2022-10-15)
```
2022-10-21 00:42:30 -07:00
90b0535c56
env: add gdb to enableDevPkgs
...
this is especially useful for `coredumpctl`.
maybe useful enough that it should be in `environment.systemPackages`...
2022-10-20 23:55:50 -07:00
f8157961c8
phosh: ensure the user we want to login as is available in AccountsService
2022-10-20 23:41:52 -07:00
25df2ebc28
phosh: lightdm: configure user-session so that the greeter properly launches phosh
2022-10-20 23:20:19 -07:00
33110dc1d9
phosh/lightdm: configure default xorg session
2022-10-20 21:16:38 -07:00
48ff8e9ca7
more feedbackd user definition to phosh
2022-10-20 19:59:03 -07:00
366e28e199
home-packages: create a new option to enable devPkgs
2022-10-20 19:59:03 -07:00
ed03f7f929
lightdm-mobile-greeter: create passthru.xgreeters like other lightdm greeters do
2022-10-20 18:00:23 -07:00
e6adfe95fa
phosh: use lightdm-mobile-greeter
...
untested, so probably need to change the .desktop path
2022-10-20 05:03:30 -07:00
4752371b43
phosh: disable the greeter
...
none of them work without a keyboard
2022-10-19 08:12:56 -07:00
3e7c112548
phosh: try using the lightdm greeter
2022-10-19 05:18:13 -07:00
a2856a3601
gnome: use deterministic uids/gids (fixes gnome gui build)
2022-10-19 03:56:52 -07:00
53d8bdc0ea
sway: enable Alt+L to lock the screen
2022-10-18 23:34:41 -07:00
94a6ca82f3
sway: enable login prompt/greeter
2022-10-18 22:53:13 -07:00
10e9daa085
git: enable git difftool to use difftastic
2022-10-18 19:46:24 -07:00
e11f903aec
create/deply ~/private: an encrypted filesystem
...
it uses gocryptfs -- a newer alternative to EncFS -- to encrypt
paths and data (but not metadata) onto an underlying backing filesystem
2022-10-18 05:29:36 -07:00
98c2ac21fe
zsh: do not remember rm commands
2022-10-17 18:22:28 -07:00
52fe0c7523
enable programs to propagate zsh completions, as suggested by home-manager
2022-10-17 18:21:56 -07:00
75ae16aaab
feeds: refactor
2022-10-14 22:37:02 -07:00
8a1ea79f1f
feeds: simplify/abstract the OPML generation
2022-10-14 09:37:40 -07:00
b25f270f48
feeds: convert to ordinary nix expression instead of config/options
...
there's no real reason for it to be externally configurable at this
level.
2022-10-14 09:02:50 -07:00
d296475e64
home: add cdrtools to rip CDs
2022-10-14 04:21:00 -07:00
699204c5f5
git: disable difftastic until i find how to make it more usable
2022-10-14 01:10:23 -07:00
9305d44fde
servo: add freshrss service
2022-10-13 17:52:43 -07:00
8fa591229f
env: RSS: simplify implementation
2022-10-11 02:05:27 -07:00
a118e17b32
home: RSS: specify feeds in a friendlier schema
2022-10-11 01:50:46 -07:00
8afe0c0be5
env: RSS populate a .opml file which can be manually imported into NewsFlash
2022-10-11 01:30:17 -07:00
aa6153aa56
newsflash: persist data dir
2022-10-11 01:30:10 -07:00
69a7e2fae1
home: add newsflash (RSS viewer)
...
it's configurable via OPML in the UI, maybe possible to hack in a CLI
if i code against the underlying library/API
2022-10-10 18:57:37 -07:00
eec4e288f3
gpodder: fix \n instead of actual newline in generated OPML
2022-10-10 18:35:27 -07:00
f84e451a9e
home: switch back to vlc for audio
2022-10-10 17:30:29 -07:00
dacbfa0493
users: allow moby to ssh into any device
2022-10-10 17:27:01 -07:00
6a44432d3f
home: configure mpv as default audio player
2022-10-09 18:37:19 -07:00
9047aec7e9
home: clean up xdg/mime-types definitions
2022-10-09 17:42:48 -07:00
b702031ddf
home: remove unused packages rmlint and gnome-podcasts
2022-10-09 17:36:32 -07:00
d50b8c1315
env: split RSS feeds out of home-manager
2022-10-09 05:43:53 -07:00
336301258f
enable difftastic git rendering
2022-10-09 04:43:39 -07:00
645ca3764b
vim: disable mouse mode by default >.>
2022-10-08 23:17:26 -07:00
22602283c9
browser: gracefully handle OCSP outages
2022-10-08 21:54:00 -07:00
1a5f1260e2
Merge branch 'staging/2022-10-08-flutter-update'
2022-10-08 21:39:37 -07:00
c18e8eddcc
zsh: enable zmb builtin
2022-10-08 20:12:50 -07:00
874c352987
net: add psk for connecting to my mobile hotspot
2022-10-08 19:24:55 -07:00
0395c5b8ee
update nixpkgs: 2022-10-06 and rebase Kaiteki
2022-10-08 18:21:38 -07:00
f64c44716e
home: persist fractal IM data
2022-10-08 05:42:02 -07:00
4f05a00e4a
RSS: add Doomberg
2022-10-07 20:13:26 -07:00
6e01c59d08
default-initialize gnome keyrings, and persist them to disk
2022-10-06 17:29:10 -07:00
a95884d635
env: enable home-manager-help command; add libsecret to env
2022-10-06 15:56:37 -07:00
0c4dd28bc8
env: include sqlite to debug databases
2022-10-05 02:46:11 -07:00
a38d66073d
env: add packages for tagging mp3s
2022-10-02 01:25:31 -07:00
f486fa9eda
env: symlink servo media into Videos and Music
2022-10-02 01:24:42 -07:00
93177fffb3
pkgs: install the Fractal matrix client
...
i'll try to deploy this to the Pinephone, because it looks very modern
and supports E2E
2022-10-01 02:53:28 -07:00
ef2d58a5a2
install phosh-mobile-settings
2022-09-30 17:19:08 -07:00
2180361eaf
update nixpkgs: 2022-09-26 -> 202-09-28
...
```
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/62228ccc672ed000f35b1e5c82e4183e46767e52' (2022-09-26)
→ 'github:NixOS/nixpkgs/854fdc68881791812eddd33b2fed94b954979a8e' (2022-09-28)
```
2022-09-29 17:16:17 -07:00
d6e34c6e98
net: rename encrypted .psk files -> .psk.bin
2022-09-29 06:12:51 -07:00
3184c6cfb6
net: switch to iwd for better experience
...
iwd, v.s. wpa_supplicant, has smarter metrics for choosing which
wireless networks to connect to when multiple are in range.
2022-09-29 06:08:33 -07:00
26c8d2d2d4
networking: replace env symlinks with sops native path feature
2022-09-29 03:33:48 -07:00
570619b097
first stab at switching to iwd (it didn't work)
2022-09-28 05:25:34 -07:00
b5cab38348
feeds: add Kaiteki commit log
2022-09-27 23:45:26 -07:00
bb7e2ee70a
moby: enable hardware.driSupport
...
not extensively tested, but the basics seem to work.
2022-09-27 23:23:37 -07:00
