6ffae00e17
fs: rename "service" option to "unit" option
2022-12-31 11:31:16 +00:00
be19985440
impermanence: crypt: more robust perms and ordering of backing device
2022-12-31 10:45:43 +00:00
f7e3e7294a
impermanence: transform gocryptfs key generation from activation script to systemd unit
2022-12-31 10:15:08 +00:00
d745e3c1ee
impermanence: remove fuse module: we don't need it now that we're mounting after activation
2022-12-31 09:13:31 +00:00
c1890ce82b
impermanence: cleanup some previously verbose code
2022-12-31 09:09:51 +00:00
53a0b621d8
impermanence: use sane.fs to inherit permissions instead of specifying defaults here
2022-12-31 01:04:49 +00:00
aeb2f63d65
impermanence: defer to fs.nix module for permissions & dir creation
2022-12-31 00:38:15 +00:00
528ffdb58e
add a new 'fs.nix' file i'll use to factor the impermanence stuff better
2022-12-30 14:45:34 +00:00
b6887b305e
impermanence: split out the root-on-tmpfs stuff
2022-12-30 04:35:34 +00:00
08dfc80c98
impermanence: split out sops setup
2022-12-30 04:31:24 +00:00
0a6d88dfc1
impermanence: simplify /etc/ssh/host_keys setup
2022-12-30 03:34:59 +00:00
0819899102
remove dead commented-out code
2022-12-29 18:34:03 +00:00
d3ff68217e
impermanence: enable hyphenated folder names
2022-12-29 18:29:27 +00:00
1a96859994
impermanence: re-enable mpv watch_later dir
2022-12-29 18:10:40 +00:00
af92a2250e
impermanence: fix up circular dependencies and permissions
...
this is now a proof of concept. still has some rough edges.
2022-12-29 18:03:41 +00:00
d00f9b15d7
impermanence: fix typo in permissions service
2022-12-29 17:16:27 +00:00
aa1c1f40cb
WIP: impermanence rework (gut 3rd-party lib)
2022-12-29 16:38:58 +00:00
530b2d6385
impermanence: factor out some helpers for generating fileSystems and services
2022-12-29 08:42:15 +00:00
e6919dd16f
impermanence: use systemd/fileSystems for the crypt mounts, instead of 3rd-party impermanence
2022-12-29 01:17:40 +00:00
8e5ca11259
cleanup gocryptfs mounting
...
there's possibly some latent issues. i think my changes to the gocryptfs
package *might* not be necessary: if you work via the fuse front-door,
it's a lot harder to get it into these weird places.
2022-12-29 01:17:40 +00:00
121936620a
impermanence: add support for encrypted clear-on-boot storage
...
this is useful for when we need to store files to disk purely due to
their size, but don't actually want them to be persisted.
2022-12-29 01:17:40 +00:00
4bdb34775d
consolidate filesystems./ across devices
2022-12-28 01:36:22 +00:00
a0ac7fa98d
snippets: add secret snippets
2022-12-26 09:29:04 +00:00
13f3b322b0
alias to cd ~/Videos
2022-12-26 04:40:21 +00:00
5c25330891
packages: add nheko matrix client
2022-12-26 03:52:04 +00:00
dc6dc2e475
discord: remove the SKIP_HOST_UPDATE hack. it's been upstreamed
2022-12-26 03:30:25 +00:00
c4352fa9bb
packages: move Signal, Discord, Tokodon to private storage
2022-12-26 03:26:50 +00:00
2c6629a658
packages: allow specifying multiple dir and private paths
2022-12-26 03:02:19 +00:00
9e0346c329
snippets: update jackett to be a search query
2022-12-25 08:43:29 +00:00
364a598324
pkgs: clean up the imports to not explicitly pass pkgs
2022-12-25 07:33:24 +00:00
730ef272d1
feeds: add put a num on it; remove Kaiteki code feed
2022-12-25 03:39:44 +00:00
6c7ca7630a
zsh: add tmp alias for ~/tmp
2022-12-22 11:35:35 +00:00
1f99d44288
/home/colin: fix perms to 0700
2022-12-22 11:33:13 +00:00
f1aa685a03
fix p10k variable expansion
2022-12-22 11:00:49 +00:00
2b31fc8776
powerlevel10k: always show user/host
2022-12-22 10:58:02 +00:00
77b8d0ddc0
fuzzel: tune dialog widths
2022-12-22 10:10:03 +00:00
84f23c602e
new snipper: nixos options search
2022-12-22 10:06:55 +00:00
ea5fbc63cf
zsh/p10k: selectively disable gitstatus acceleration on ~/private/
2022-12-21 14:13:20 +00:00
69361ee9a2
zsh: document prezto modules, switch dir aliases to dirHashes
2022-12-21 13:53:22 +00:00
1808d153b2
zsh: configure p10k
2022-12-21 13:08:23 +00:00
b3ad0f8f1f
update ~/knowledge to live in ~/private
2022-12-21 08:52:27 +00:00
c745612cfd
Merge branch 'master' of git.uninsane.org:colin/nix-files
2022-12-21 08:51:12 +00:00
278cc98c6d
minor ejabberd config changes, simplify DNS %NATIVE% updating
2022-12-21 08:50:41 +00:00
65777c70ad
snippets: add link to home-manager docs
2022-12-21 08:30:16 +00:00
c66699b697
update nixpkgs: 2022-12-11 -> 2022-12-18; sops-nix
...
```
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/64e0bf055f9d25928c31fb12924e59ff8ce71e60' (2022-12-11)
→ 'github:NixOS/nixpkgs/04f574a1c0fde90b51bf68198e2297ca4e7cccf4' (2022-12-18)
• Updated input 'nixpkgs-stable':
'github:NixOS/nixpkgs/06278c77b5d162e62df170fec307e83f1812d94b' (2022-12-12)
→ 'github:NixOS/nixpkgs/0938d73bb143f4ae037143572f11f4338c7b2d1c' (2022-12-17)
• Updated input 'sops-nix':
'github:Mic92/sops-nix/da98a111623101c64474a14983d83dad8f09f93d' (2022-12-04)
→ 'github:Mic92/sops-nix/32840f16ffa0856cdf9503a8658f2dd42bf70342' (2022-12-19)
• Updated input 'sops-nix/nixpkgs-stable':
'github:NixOS/nixpkgs/86370507cb20c905800527539fc049a2bf09c667' (2022-12-04)
→ 'github:NixOS/nixpkgs/87b58217c9a05edcf7630b9be32570f889217aef' (2022-12-19)
```
2022-12-19 22:42:58 +00:00
97044bf70e
trust-dns: port to dyn-dns for determining WAN IP
...
although the systemd wantedBy directive is working,
`before` seems to be ignored when the unit fails. so on first run,
dyn-dns runs, fails (poor net connectivity), then trust-dns starts
(fails), then they both restart 10s later.
it's not great, but good enough. also, wan IP is persisted, so this
likely won't happen much in practice.
2022-12-19 13:12:23 +00:00
3122334a41
dyn-dns: fix to only react when the IP actually changes
2022-12-19 11:54:27 +00:00
8acd6ca4f1
create sane.services.dyn-dns to manage dynamic DNS stuff
...
not yet integrated into servo
2022-12-19 11:16:30 +00:00
9b66aecf1b
trust-dns: port the remaining records to a structured format
...
SRV and MX _could_ have more structure (priority, etc).
not sure the best path there (option submodule, i guess).
2022-12-19 04:38:43 +00:00
16cb3b83a2
trust-dns: more idiomatic way to define SOA records
2022-12-19 04:00:27 +00:00
970438be8a
trust-dns: rename records option -> extraConfig
...
i'll be adding special options for records
2022-12-19 03:12:32 +00:00
a2935cedaa
snippets: add wikipedia search
2022-12-18 22:58:53 +00:00
3e1340ed61
enable i2p in firefox
2022-12-16 22:15:19 +00:00
341dd3f2b2
new zsh alias: ref -> cd ~/ref
2022-12-16 20:56:48 +00:00
1c9caa40bd
snippets: update nixos wiki to include search param
2022-12-16 20:35:33 +00:00
3be15c6d05
podcasts: add Michael Malice (is it any good? we'll see.)
2022-12-16 08:04:28 +00:00
8e8168ec28
add splatmoji package and sway config
2022-12-16 07:46:06 +00:00
28397807fc
gpt2tc: disable, because the mirror is unreliable
2022-12-16 07:08:55 +00:00
199a49755a
create a kiwix-serve service
2022-12-16 02:15:17 +00:00
8fe304d6c1
trust-dns: split the service into a generic config interface
2022-12-15 11:17:50 +00:00
01db7e1f23
servo: install mediawiki
2022-12-15 11:17:50 +00:00
df6e8f1562
Merge branch 'master' of git.uninsane.org:colin/nix-files
2022-12-15 09:59:53 +00:00
1f0a40c81f
snippets: add nixos wiki
2022-12-15 09:54:32 +00:00
7674735d42
Merge branch 'master' of git.uninsane.org:colin/nix-files
2022-12-14 12:28:58 +00:00
e0b1aef127
snippets: add sci-hub
2022-12-14 09:52:07 +00:00
9b8363dfb4
firefox addons: bypass-paywalls-clean: update hash
2022-12-14 08:00:42 +00:00
3627d47f12
firefox: add uBlacklist
2022-12-13 00:44:38 +00:00
028ecfe93f
snippets: add HN
2022-12-11 13:14:24 +00:00
cf857eaf9f
zsh: more cd aliases (knowledge, secrets)
2022-12-10 12:16:16 +00:00
2ccb470adc
packages: add tcpdump
2022-12-10 02:56:00 +00:00
041adb7092
snippets: add nixos search URL
2022-12-09 01:25:24 +00:00
6420c9fd16
packages: add gajim (at least temporarily, for debugging)
2022-12-07 08:02:14 +00:00
bf1ba786b3
packages: add imagemagick (for convert)
2022-12-07 07:41:05 +00:00
35a896a3e2
shell aliases to cd to common places
2022-12-07 07:40:52 +00:00
8a5be00c93
sway: define a "snippets.txt" file for e.g. browser bookmarks
2022-12-06 11:12:27 +00:00
b0b82a3d88
feeds: add Matrix Live podcast
...
haven't listened. just searching.
2022-12-06 06:58:59 +00:00
f7d9fdfe04
packages: add pstree
2022-12-04 03:42:54 +00:00
8790a7d9fd
note about persisting bluetooth config
2022-12-03 11:35:03 +00:00
bf838ea203
packages: add tree as system package
2022-12-03 08:56:26 +00:00
d320fa39f3
packages: move gpt2tc to x86-only group
...
it doesn't support arm
2022-12-03 07:29:53 +00:00
e40156ed9a
RSS: add Peter Saint-Andre
2022-12-03 06:31:29 +00:00
656837c810
add gpt2tc package for gpt-2 generation
2022-12-03 06:31:29 +00:00
0533ea1cc2
add awk as a system-level package
2022-12-03 06:31:29 +00:00
8b9c18aee1
firefox: update plugin hashes
2022-12-02 04:23:20 +00:00
69eacf6c4d
ship strace on all platforms
2022-12-02 01:02:08 +00:00
d7ad414a9c
package a mobile-friendly fork of sublime-music (untested)
2022-12-01 22:03:13 +00:00
533b0a91bd
remove unused vim package: nabla
2022-12-01 21:05:23 +00:00
56d87da650
feeds: add pomeroyb
2022-12-01 19:00:08 +00:00
b9533d7ee3
packages: ship some tools useful for debugging boot/HW state
2022-11-29 02:18:56 +00:00
27403fa36d
zecwallet: move data to private dir
2022-11-24 17:47:34 +00:00
b566910da0
home-manager: hide behind an enable flag
2022-11-22 05:28:41 +00:00
ca43811c16
remove sane.home-manager.extraPackages
...
replaced by sane.packages.extraUserPkgs
2022-11-22 05:11:02 +00:00
f772300d88
move system-packages into the main packages.nix file
2022-11-22 04:40:24 +00:00
eccb5ff3d6
rename home-packages -> packages
2022-11-22 04:31:55 +00:00
0c6b949a72
lift some more files out of modules -> hosts
2022-11-22 04:29:17 +00:00
9a6c83776d
vpn: move out of modules/
2022-11-22 03:46:25 +00:00
e408e77026
move secrets.nix out of modules
2022-11-22 03:37:57 +00:00
e0612ccfa8
move allocations out of universal
...
it doesn't cause any changes to the system
2022-11-22 03:35:11 +00:00
a0e85ff31b
nixserve: remove the default sops path
...
it might make more sense to make this a runtime path (/run/secrets/...)
2022-11-22 03:20:50 +00:00
ed52b5f251
nixcache: modularize
2022-11-22 03:07:11 +00:00
dc21b0d68c
modularize image.nix image building
2022-11-22 03:02:41 +00:00
84a17f4599
move hardware out of modules into hosts/common
...
i want for `modules/` to behave like a more typical `modules` directory,
where functionality is opt-in.
2022-11-22 02:52:07 +00:00
43fa7fdd9f
rename machines -> hosts
...
- shorter.
- congruent with `nixos-rebuild .` choosing what to build based on `hostname`.
- more widely used within other nix repos i've seen.
- more accurate in the case that i migrate a host to a different
machine (which i plan to do with servo).
2022-11-22 02:33:47 +00:00
9633c4f012
packages: add kdenlive
2022-11-21 10:39:58 +00:00
b869617b09
duplicity: refactor and update files list
2022-11-21 10:39:52 +00:00
ad7ae94501
home: ship dino XMPP client
2022-11-12 10:18:13 +00:00
fd8f660ee0
feeds: add Jeff Kaufman
2022-11-11 07:50:42 +00:00
f45b032e48
home: add plasmatube (though it might not be working well)
2022-11-08 05:34:02 +00:00
1c810dc1b8
time: switch to UTC
...
Daylight Savings Time is too confusing for me.
2022-11-08 02:35:50 +00:00
fc4138327a
home-packaged: add rsync
2022-11-06 20:53:22 -08:00
889c47e884
link debug symbols into /run/current-system/sw/lib/debug
2022-11-06 19:25:50 -08:00
f6f500c592
fs: hopefully fix /mnt/servo-root by linking sftp-server at the remote endpoint
2022-11-06 18:54:22 -08:00
26f920e119
disable default environment packages
2022-11-06 05:22:16 -08:00
88fba6f496
document --substituters nix options
2022-11-06 03:47:10 -08:00
5cca6ede0d
emote: fix persistence dir
2022-11-06 02:30:53 -08:00
3b4e394ce8
flake update nixpkgs: 2022-11-03 -> 2022-11-05, home-manager
...
```
• Updated input 'home-manager':
'github:nix-community/home-manager/d78b3488a76d251701ab58a9b7f0dd092b806c1e' (2022-11-03)
→ 'github:nix-community/home-manager/87d55517f6f36aa1afbd7a4a064869d5a1d405b8' (2022-11-05)
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/a2a777538d971c6b01c6e54af89ddd6567c055e8' (2022-11-03)
→ 'github:NixOS/nixpkgs/3bacde6273b09a21a8ccfba15586fb165078fb62' (2022-11-05)
• Updated input 'nixpkgs-stable':
'github:NixOS/nixpkgs/1404483f4531560aad73bdebae4096881c910ac0' (2022-11-04)
→ 'github:NixOS/nixpkgs/f09ad462c5a121d0239fde645aacb2221553a217' (2022-11-05)
```
2022-11-06 02:20:04 -08:00
d9b3fccdfa
persist emote dir
2022-11-06 02:07:32 -08:00
a0d332766a
nixcache: always trust my own caches, even if not enabled by default
2022-11-05 20:13:17 -07:00
cdd9672654
libreoffice: disable first-run dialog
2022-11-05 17:24:19 -07:00
887a431956
podcasts: add The Verge - Decoder
2022-11-05 06:16:20 -07:00
57ada6af4f
tokodon: fix segfault on launch
...
also persist the ~/.cache/KDE/tokodon directory.
since the login form isn't working yet (partially the fault of my
Pleroma install?), i can't tell if this is where tokens are stashed or
not.
2022-11-04 06:52:18 -07:00
d1d64b7376
import and update Tokodon package from < https://github.com/NixOS/nixpkgs/pull/170466 >
...
this hangs and then segfaults at start. i suppose i should `gdb` it.
2022-11-03 22:23:14 -07:00
6d52c0e8ab
new option: sane.gui.plasma.enable to enable desktop KDE plasma
...
this is useful for testing applications which are designed for KDE
first.
2022-11-03 03:09:14 -07:00
730fa8ba4b
moby: fix lightdm-mobile-greeter config to work again
2022-11-02 04:59:36 -07:00
8817f661ac
browser: temporarily switch back to firefox
...
recompiling librewolf is not practical -- until the addon signing is
upstreamed
2022-11-02 04:21:55 -07:00
3b0f505864
moby: move lightdm-mobile-greeter stuff into nixpkgs
2022-11-02 04:14:00 -07:00
b559d334c3
librewolf: work toward upstreaming the MOZ_REQUIRE_SIGNING patch
2022-11-02 02:39:56 -07:00
f6e4c0058c
add mercurial to dev packages
2022-11-01 22:20:05 -07:00
775fc979fc
browser: fix Extensions.Uninstall + refactor nits
2022-11-01 19:29:33 -07:00
ad6daa4e5b
librewolf: allow sideloading unsigned addons
...
still defaulting to firefox, because this requires a recompilation of
the browser -- particularly expensive for moby.
2022-11-01 19:17:49 -07:00
3ecfea158a
browser: make more easily swappable between firefox and librewolf
2022-11-01 16:23:50 -07:00
ca93518dda
browser: switch from librewolf to firefox-esr
...
librewolf doesn't allow unsigned addons. i believe this is a bug, as the
nixpkg build file looks like it *meant* to allow addons (and maybe at
some point did)
2022-11-01 04:58:45 -07:00
8b473ff88f
neovim: fix python tree-sitter plugin
...
which was otherwise yielding parsing errors.
2022-10-31 23:05:27 -07:00
7c38c1dbe9
de-persist /etc/machine-id, and generate it from the ssh key instead
...
note that /etc/machine-id now contains a different value than before,
meaning `journalctl` will not show logs from before the time of this
change.
2022-10-30 21:02:41 -07:00
b3b45ec0f2
fix host ssh key persistence
2022-10-30 20:03:00 -07:00
34d77542e7
impermanence: ensure /etc/ssh is populated before we decode machine secrets during activation
...
the impermanence activation scripts don't appear to mount folders --
only files. rather, the impermanence module creates fstab entries for
each bind mount folder, and *something* (systemd?) mounts these *after*
/run/current-system/activate is run.
therefore, if we want access to a bind-mounted directory during
activateion, we have to manually mount it.
i.e. `mount /etc/ssh/host_keys`.
2022-10-30 05:59:55 -07:00
6236c14def
vendor librewolf addons instead of fetching them on first run
...
this obviously speeds up startup, it's hopefully also less likely to
break surprisingly, and i hope it's the path to me shipping forks of
official extensions.
2022-10-27 03:20:29 -07:00
0c0f8c44bd
Merge branch 'master' of git.uninsane.org:colin/nix-files
2022-10-26 07:18:41 -07:00
7f97786a88
librewolf: use browserpass password store
...
this is working -- forked to support sops as a backend --
without totp support yet. it's possible in theory: i might just need to
write some adapter logic.
upstream discussion about genericizing backend support:
- <https://github.com/browserpass/browserpass-native/issues/127 >
2022-10-26 07:13:55 -07:00
db2e156f15
home: enable celluloid mpv frontend
...
i want to test this on mobile
2022-10-26 05:31:11 -07:00
43efec495e
librewolf: integrate with gopass
...
it's able to list passwords, but not decrypt them:
i think i can solve this on the store side?
2022-10-26 00:10:54 -07:00
10e224be0d
ssh: set known hosts via ~/.ssh/config
...
this prevents the ssh agent from updating the known_hosts file
and confusing home-manager.
2022-10-25 05:17:28 -07:00
e25c92794f
refactor: split ssh settings out of home-manager/default.nix
2022-10-25 05:06:33 -07:00
a8d2b7196d
statically populate ssh known_hosts
2022-10-25 05:01:32 -07:00
c44cad9c16
fractal: persist data in ~/private
2022-10-25 02:12:55 -07:00
e3bf585382
persist ssh host keys in a subdirectory
2022-10-25 02:09:27 -07:00
1fea9618ba
zsh: remove rm and mv confirmations
2022-10-25 01:42:46 -07:00
d54b595e45
RSS: subscribe to Edward Snowden
2022-10-24 20:23:14 -07:00
ad75ed352c
RSS: clean up the substack subs
2022-10-24 20:14:36 -07:00
306836042c
RSS: add my own feed :-)
2022-10-24 19:52:39 -07:00
