21c9ce21cc
servo: packages: clarify why we include matrix-synapse explicitly
2022-08-03 01:42:56 -07:00
65bcaa939e
make some shared boot/hardware settings universal
2022-08-03 01:39:19 -07:00
8059477edd
dhcpcd: automatically enable the user, if detected.
...
not sure this is the *best* place for it, but then, what is?
2022-08-03 00:41:59 -07:00
c6fbbbab66
moby: fix missing / as tmpfs
2022-08-02 16:02:14 -07:00
b1205e964b
moby: migrate the user definitions to phosh.nix
2022-08-02 16:00:37 -07:00
ba6d0b7e3d
machines: moby: enable impermanence (experimental)
...
last time i tried to rebuild nixos on the pinephone it didn't switch,
IIRC. i don't know why, but i expect it'll be easier to manage my
machines if i keep more of the setup consistent across them.
likely i'll tune this to be more leniant on moby (e.g. persist all of
.librewolf).
2022-08-01 14:38:40 -07:00
4d7d96f4a4
machines: moby: remove w3m: it's already included in the common config
2022-08-01 14:38:10 -07:00
40bc4098ad
lappy: disable guest account
2022-08-01 00:25:08 -07:00
451816f623
rename config.{colinsane -> sane}
2022-08-01 00:23:49 -07:00
18bb89ded0
lappy: enable guest account
2022-07-31 11:35:15 -07:00
8f88085eb5
desko: add steam
2022-07-16 03:10:57 -07:00
5ec0ee4524
add TODO: remove some dangling hardcoded uid numbers
2022-07-15 01:01:41 -07:00
8c9c9ca6c9
migrate the rest of the uids/gids to 'allocations' system, but don't fix conflicts
2022-07-15 00:12:13 -07:00
42117f375b
introduce an 'allocations' systems for things like uids/gids
2022-07-14 23:58:27 -07:00
c07c106a68
machines: rescue: remove incorrect comment about tmpfs
2022-07-14 16:25:13 -07:00
d4d345ca12
machines: add a rescue
machine for live-booting
2022-07-14 16:21:59 -07:00
8f37edb402
transmission: specify download-dir and incomplete-dir instead of bind-mounting them
...
this appears to fix the permissions issue
2022-07-11 01:54:02 -07:00
99d55167f6
impermanence: only persist service directories if those services are enabled.
2022-07-10 17:58:16 -07:00
dc6472f39f
electrum: put on all GUI systems
2022-07-07 04:10:57 -07:00
eb8cfc682f
remove opengl modules
...
they don't seem to be necessary:
- still able to run spirv/vulkan-accelerated stuff at the same rate.
- still able to watch videos at the same CPU load.
i think mesa packages solid drivers that make this part mostly
irrelevant.
2022-07-06 02:00:12 -07:00
5a10805287
hardware.opengl.extraPackages: move to machine-specific files
2022-07-02 23:53:55 -07:00
09700adba2
desko: replace 'electron' package with 'electrum' -- as it was meant to be
2022-07-02 14:45:21 -07:00
8db30b5de9
servo: enlarge the /tmp tmpfs so we can build large nix packages
2022-06-30 00:17:05 -07:00
1f3c93623f
desko: enable snapper for testing
2022-06-29 03:58:11 -07:00
634e5a8c71
servo: use a swap partition instead of a swapfile
2022-06-29 03:29:45 -07:00
92488dd890
complete servo image & port to impermanence
...
there might still be some bugs to work out here.
this produces a workable image, but with some uncertainty
around that swapfile (the first attempt had /swapfile living on a
tmpfs).
2022-06-29 01:17:53 -07:00
fd48880a0a
nixcache: only enable on moby
...
it's annoying to rebuild on desko/lappy, and have that fail when servo
is offline/unreachable.
and it's really silly to have servo use its own cache *over the
network*.
long-term would be better to do properly distributed builds instead of
the cache.
2022-06-28 03:44:10 -07:00
9cce427ea4
WIP: add tow-boot files to servo image
...
i think this breaks the build -- will debug.
2022-06-27 17:11:27 -07:00
d0ff605f19
lappy: setup snapper (automated btrfs snapshots)
2022-06-27 01:28:17 -07:00
075969540a
uninsane.org: force SSL to avoid CORS problems
2022-06-26 04:20:33 -07:00
57886ec3d0
servo: add ipfs service
2022-06-26 03:44:41 -07:00
d3fa6a31f9
decrease transmission upload bandwidth
...
i think it's messing with other services (like ipfs) :|
2022-06-25 19:49:48 -07:00
fdcbaae776
servo: firewall: open ipfs ports
2022-06-25 17:51:46 -07:00
436ade540f
tune /var/lib impermanence (for lappy)
2022-06-24 21:10:49 -07:00
c39d0d1667
rebuild desko and flash it
...
haven't booted into it yet (we'll see!)
2022-06-24 02:07:40 -07:00
84e57ec3d8
lappy: add a dedicated /tmp fs
2022-06-24 01:02:26 -07:00
17d2029ba2
image: make the gpt headerHole configurable
2022-06-24 00:53:43 -07:00
d38f17207b
remove extlinux bootloader wrapper: use colinsane.extraBootFiles
2022-06-24 00:10:07 -07:00
e7f05fa2ec
*/fs.nix: remove extraneous mkDefault
s
...
these are no longer needed with the new image builder.
2022-06-23 21:21:01 -07:00
bf6ac1b7ae
moby: enable boot.loader.generic-extlinux-compatible.enable
2022-06-23 19:56:40 -07:00
b244e8e845
moby: properly flash firmware as part of the image build
2022-06-23 19:01:04 -07:00
187c2f2406
lappy: switch back to the existing fs uuids
2022-06-23 16:28:12 -07:00
ac050ac390
move the canTouchEfiVars into the right place
2022-06-23 16:26:46 -07:00
f0857181c0
decrease the moby-specific stuff in flake.nix
2022-06-23 15:42:20 -07:00
46dc2fb521
extend image builder to support btrfs
2022-06-23 15:28:33 -07:00
0acb2e138b
image building: enable impermanence
...
note that it still needs an interactive `mkdir /mnt-root/nix/var/{lib,log}`
in the initrd.
2022-06-23 03:39:09 -07:00
0579faaf89
get an image which can boot to a login prompt unattended
...
NB: this breaks compat with the existing lappy install.
need to switch back to impermanence, and switch the disk uuids too.
2022-06-23 02:24:52 -07:00
d80bd7d162
inline image building, and (for lappy) use a generic-extlinux-compatible bootloader
...
the generic bootloader will allow more code-sharing with rpi and
pinephone. desko should soon use the generic bootloader as well.
problems: lappy can't boot from USB stick. it makes it to the initrd,
but there's no dev nodes for the USB drive.
unsure if this is how it was before, too.
2022-06-23 00:24:39 -07:00
b6de07a731
ddns-he: start timer on boot
2022-06-20 15:36:48 -07:00
fa131fe39f
lappy: enable impermanence
...
it mostly went smooth, though i lost a .ssh key.
probably the best upgrade process is to do most of the heavy work in the
initrd:
write the new nix config, notably, configuring a tmpfs / mount
and moving the previous / to /nix.
then boot and in the initrd, move all the `/nix/nix/...` items
up a level.
2022-06-20 03:28:01 -07:00
a91914053d
transmission: disable the anti-brute-force option
...
this should allow me to more reliably login from anywhere.
2022-06-18 18:47:22 -07:00
a031beee18
servo: transmission: relax the umask (to hopefully make files globally readable)
2022-06-18 15:54:27 -07:00
b50150b52e
enable stuff needed for ifuse/iphone photo syncing
2022-06-15 17:22:27 -07:00
2b8ff8d5ae
rename 'uninsane' machine -> 'servo'
2022-06-12 15:11:41 -07:00
fb15f84f1d
desko: enable duplicity backups
2022-06-10 01:43:48 -07:00
7da3d48272
migrate duplicity config to a module
...
this will let other machines reuse it
2022-06-10 01:30:57 -07:00
defcc15b03
desko: update fs UUIDs
2022-06-10 00:32:50 -07:00
cd43247d2c
enable himalaya
for sending and receiving email
...
sent messages don't get copied to the sent mailbox, but oh well.
problem for another day.
2022-06-09 18:58:42 -07:00
51bf327290
port helpers/home-manager-gen-colin.nix to modules system
2022-06-09 14:50:24 -07:00
bc51244c52
move helpers/universal -> modules/universal
2022-06-09 14:06:31 -07:00
ff002c3197
matrix: port secrets to sops
2022-06-08 17:03:41 -07:00
117b69d39e
pleroma: port secrets to sops
2022-06-08 16:46:32 -07:00
46b0f10b9d
nix-serve: port secrets to sops
2022-06-08 16:27:35 -07:00
e188db9344
postfix/dovecot: convert secrets to sops
2022-06-08 15:59:02 -07:00
85f16d9732
ovpn config: use sops for secrets
2022-06-08 14:39:10 -07:00
bc9450a0fa
port ddns-he to sops secret
2022-06-08 14:32:16 -07:00
364f76b59e
move uninsane secrets to a machine-global file
2022-06-08 14:22:43 -07:00
ed50ea4b4b
sway: configure emoji fonts
2022-06-08 13:02:28 -07:00
05559c9c39
secrets: move uninsane secrets so nix config is valid on other hosts
2022-06-07 23:29:57 -07:00
a313f61351
duplicity: migrate secrets to sops
2022-06-07 02:33:11 -07:00
d2ea4c5ffe
migrate duplicity PASSPHRASE to sops
2022-06-06 19:06:53 -07:00
d33d5a4582
hardware-x86_64: port to modules system
2022-06-06 17:51:35 -07:00
5bae11fcbc
gui/phosh: port to module system
2022-06-06 17:39:40 -07:00
d28738eb0e
gui/sway: port to module system
2022-06-06 17:35:28 -07:00
fa7a2186ca
lappy: switch to sway
2022-06-06 01:17:08 -07:00
8ef29966b3
cleanup: remove unecessary arguments from nix config
2022-06-05 23:44:01 -07:00
75ba43aaca
desko: switch to sway compositor
2022-06-03 01:40:32 -07:00
6df3ccd81f
enable i3; switch desko to i3
2022-06-02 23:43:41 -07:00
4300cbbf8a
uninsane: clarify kernelPkgs config value
2022-06-02 17:02:36 -07:00
a7259279bb
port raspberry pi bootloader fixes to a nixpkgs patch
2022-06-02 14:18:41 -07:00
a30050af8f
moby: add gnome-podcasts
2022-05-31 20:07:18 -07:00
14e7db3eae
moby: scale display to 150%
2022-05-31 16:12:29 -07:00
ca5fa0839c
moby: try a slight variant of phosh
2022-05-30 14:56:31 -07:00
7c36ebee3c
acme: update config for nixos 22.05
2022-05-29 16:39:57 -07:00
524e9749be
desko/lappy: explicitly set system.stateVersion
2022-05-28 13:14:48 -07:00
7ae8526771
update nixos-21.11 -> nixos-22.05
2022-05-28 12:40:35 -07:00
6318e66314
uninsane: enable nix-cache
...
note that the other machines can't easily use it unitl i upgrade to nixos-22.05
2022-05-28 12:39:50 -07:00
52bf4f5b67
put all gui helpers under helpers/gui/ subdir
2022-05-27 01:14:36 -07:00
f30d51abbc
move phosh out from moby/ to helpers/
...
better yet would be put these all in a gui/ subdir
2022-05-27 01:13:09 -07:00
123e140212
moby: switch from phosh to plasma-mobile
...
this isn't the *best*: it's verrry slow to login.
but more software works. that could be more due to using wayland though,
than to plasma itself.
2022-05-27 01:08:59 -07:00
27f1360681
migrate dovecot secrets to secrets nix file
2022-05-27 00:57:36 -07:00
e207ca56dc
duplicity: port passphrase to secrets file
2022-05-27 00:46:58 -07:00
a9b7b614b8
move matrix-synapse email password to secrets file
2022-05-27 00:34:19 -07:00
243a8e1e4c
pleroma: port to secrets.nix
2022-05-26 23:21:43 -07:00
a407bd9920
wireguard: port private key to secrets.nix
2022-05-26 22:41:16 -07:00
0f54253cf7
duplicity: port url to secrets.nix
2022-05-26 22:24:50 -07:00
9c290e0a03
move 'machines/common' into helpers/
2022-05-26 22:16:16 -07:00
9dcbd2f2af
duplicity: allow "source mismatches" (hostname changes)
2022-05-26 14:34:43 -07:00
6e4629c0e8
disable powertop service: it breaks USB HID (mouse permanently asleep; keyboard powers off every 2 seconds)
2022-05-26 03:20:06 -07:00
1cdae86121
boot.initrd.availableKernelModules: annotate these modules based on what i know about their origin
2022-05-26 03:19:19 -07:00