170008f345
home.files symlinks: port to sane.fs
2023-01-04 07:14:38 +00:00
2c48e61854
fs: fix mode of deployed files; simplify
2023-01-04 07:14:01 +00:00
f89f756489
fs: create symlinks at multi-user target by default
2023-01-04 06:32:53 +00:00
c0da19951b
fs: fix symlink ownership/perms
2023-01-04 06:28:44 +00:00
5fb67306e4
fs: rework for dir to not be mandatory
2023-01-04 06:17:34 +00:00
5533b586d7
fs: lift depends out of dir, to toplevel
2023-01-04 04:32:20 +00:00
68c2eb7363
impermanence: clean up the deps for the crypt store
2023-01-04 04:22:17 +00:00
fd79026366
fs: fix loose mount dependency
2023-01-04 04:06:19 +00:00
a76471cb1f
fs: simplify the mount configuration
2023-01-04 03:57:24 +00:00
c94b8299a6
fs: add experimental support for symlink entries
2023-01-04 02:51:07 +00:00
d7c8638fea
impermanence: add a storeDescription field per store
2023-01-04 01:54:13 +00:00
9d7d1acc80
sane.impermanence.dirs.home.<store> is now auto-generated and options can vary across deployments
2023-01-04 01:45:05 +00:00
787857d27f
firefox: update plugin hashes
2023-01-04 01:39:42 +00:00
9c248a8a31
impermanence: cleanup the dirs submodule
2023-01-04 01:34:19 +00:00
829680fb00
impermanence: simplify dir-acl handling by using a helper
2023-01-04 01:19:22 +00:00
2960b895b6
lib: lift acl type into sane-lib/types
2023-01-04 00:59:52 +00:00
afe684ca2c
modules: impermanence: use sane-lib.path
2023-01-03 14:55:27 +00:00
93f1411522
fs: split helpers out into sane-lib module
2023-01-03 14:20:02 +00:00
01e44c1f7f
flake.nix: remove unused specialArgs
2023-01-03 14:18:57 +00:00
618e9bd2fa
gocryptfs: place package in system.fsPackages instead of environment.systemPackages (it propagates anyway)
2023-01-03 12:00:49 +00:00
fbc39d0584
modules: fs: move to subdir
2023-01-03 08:27:28 +00:00
2d7b3750cd
impermanence: split the /home/colin perms fix into more appropriate places
2023-01-03 08:25:43 +00:00
e6ccd2e4f7
impermanence: split plaintext store to own file (this will bypass some recursion in the next patch)
2023-01-03 08:02:03 +00:00
d4bf491e9c
impermanence: improve docs
2023-01-03 07:45:19 +00:00
5a2bbcce3b
move plaintext home-dirs out of home-manager module into users module
2023-01-03 07:35:42 +00:00
327e6b536f
impermanence: large refactor, and experimental bind mounting of things from ~/private
2023-01-03 07:22:37 +00:00
bace7403e7
Merge branch 'staging/nixpkgs-2022-12-31'
2023-01-03 03:05:21 +00:00
9e32211c12
impermanence: cange "encryptedClearOnBoot" to a broader "store" argument
...
in the future it can support ~/private as a backing store
2023-01-03 03:04:19 +00:00
edf6bd4455
fs: add a "mount.bind" option & use it for impermanence bind-mounts
2023-01-03 02:45:23 +00:00
a9a14786f9
packages: disable fractal (unused, slow build)
2023-01-02 23:35:43 +00:00
be222c1d70
trust-dns: allow shorthand assignment of record lists
2023-01-02 13:23:52 +00:00
875e923197
declare ~/private in fileSystems and reuse for pamMount
2023-01-02 11:34:02 +00:00
54dd643cf0
trust-dns: make a note about another DNS library we could draw from
2023-01-02 11:33:32 +00:00
3c726f148b
remove some stale references to mobile-nixos
2023-01-02 10:00:20 +00:00
e225e2e704
modules/packages: directly set impermanence.home-dirs instead of working through home-manager
2023-01-02 07:45:05 +00:00
cf0bf8190e
modules/packages: clean up loose typing of sane.packages
2023-01-02 07:16:16 +00:00
b8f7f68d4c
packages: telegram: persist data in private storage
2023-01-02 07:06:58 +00:00
7a3aae8c97
fs: tidy
2022-12-31 12:38:50 +00:00
89e519810d
impermanence: clean up the bind mounts
2022-12-31 12:31:49 +00:00
0e920230ba
impermanence: fix systemd service ordering for crypt mount
2022-12-31 12:18:27 +00:00
6ffae00e17
fs: rename "service" option to "unit" option
2022-12-31 11:31:16 +00:00
be19985440
impermanence: crypt: more robust perms and ordering of backing device
2022-12-31 10:45:43 +00:00
f7e3e7294a
impermanence: transform gocryptfs key generation from activation script to systemd unit
2022-12-31 10:15:08 +00:00
d745e3c1ee
impermanence: remove fuse module: we don't need it now that we're mounting after activation
2022-12-31 09:13:31 +00:00
c1890ce82b
impermanence: cleanup some previously verbose code
2022-12-31 09:09:51 +00:00
53a0b621d8
impermanence: use sane.fs to inherit permissions instead of specifying defaults here
2022-12-31 01:04:49 +00:00
aeb2f63d65
impermanence: defer to fs.nix module for permissions & dir creation
2022-12-31 00:38:15 +00:00
528ffdb58e
add a new 'fs.nix' file i'll use to factor the impermanence stuff better
2022-12-30 14:45:34 +00:00
b6887b305e
impermanence: split out the root-on-tmpfs stuff
2022-12-30 04:35:34 +00:00
08dfc80c98
impermanence: split out sops setup
2022-12-30 04:31:24 +00:00
0a6d88dfc1
impermanence: simplify /etc/ssh/host_keys setup
2022-12-30 03:34:59 +00:00
0819899102
remove dead commented-out code
2022-12-29 18:34:03 +00:00
d3ff68217e
impermanence: enable hyphenated folder names
2022-12-29 18:29:27 +00:00
1a96859994
impermanence: re-enable mpv watch_later dir
2022-12-29 18:10:40 +00:00
af92a2250e
impermanence: fix up circular dependencies and permissions
...
this is now a proof of concept. still has some rough edges.
2022-12-29 18:03:41 +00:00
d00f9b15d7
impermanence: fix typo in permissions service
2022-12-29 17:16:27 +00:00
aa1c1f40cb
WIP: impermanence rework (gut 3rd-party lib)
2022-12-29 16:38:58 +00:00
530b2d6385
impermanence: factor out some helpers for generating fileSystems and services
2022-12-29 08:42:15 +00:00
e6919dd16f
impermanence: use systemd/fileSystems for the crypt mounts, instead of 3rd-party impermanence
2022-12-29 01:17:40 +00:00
8e5ca11259
cleanup gocryptfs mounting
...
there's possibly some latent issues. i think my changes to the gocryptfs
package *might* not be necessary: if you work via the fuse front-door,
it's a lot harder to get it into these weird places.
2022-12-29 01:17:40 +00:00
121936620a
impermanence: add support for encrypted clear-on-boot storage
...
this is useful for when we need to store files to disk purely due to
their size, but don't actually want them to be persisted.
2022-12-29 01:17:40 +00:00
4bdb34775d
consolidate filesystems./ across devices
2022-12-28 01:36:22 +00:00
a0ac7fa98d
snippets: add secret snippets
2022-12-26 09:29:04 +00:00
13f3b322b0
alias to cd ~/Videos
2022-12-26 04:40:21 +00:00
5c25330891
packages: add nheko matrix client
2022-12-26 03:52:04 +00:00
dc6dc2e475
discord: remove the SKIP_HOST_UPDATE hack. it's been upstreamed
2022-12-26 03:30:25 +00:00
c4352fa9bb
packages: move Signal, Discord, Tokodon to private storage
2022-12-26 03:26:50 +00:00
2c6629a658
packages: allow specifying multiple dir and private paths
2022-12-26 03:02:19 +00:00
9e0346c329
snippets: update jackett to be a search query
2022-12-25 08:43:29 +00:00
364a598324
pkgs: clean up the imports to not explicitly pass pkgs
2022-12-25 07:33:24 +00:00
730ef272d1
feeds: add put a num on it; remove Kaiteki code feed
2022-12-25 03:39:44 +00:00
6c7ca7630a
zsh: add tmp alias for ~/tmp
2022-12-22 11:35:35 +00:00
1f99d44288
/home/colin: fix perms to 0700
2022-12-22 11:33:13 +00:00
f1aa685a03
fix p10k variable expansion
2022-12-22 11:00:49 +00:00
2b31fc8776
powerlevel10k: always show user/host
2022-12-22 10:58:02 +00:00
77b8d0ddc0
fuzzel: tune dialog widths
2022-12-22 10:10:03 +00:00
84f23c602e
new snipper: nixos options search
2022-12-22 10:06:55 +00:00
ea5fbc63cf
zsh/p10k: selectively disable gitstatus acceleration on ~/private/
2022-12-21 14:13:20 +00:00
69361ee9a2
zsh: document prezto modules, switch dir aliases to dirHashes
2022-12-21 13:53:22 +00:00
1808d153b2
zsh: configure p10k
2022-12-21 13:08:23 +00:00
b3ad0f8f1f
update ~/knowledge to live in ~/private
2022-12-21 08:52:27 +00:00
c745612cfd
Merge branch 'master' of git.uninsane.org:colin/nix-files
2022-12-21 08:51:12 +00:00
278cc98c6d
minor ejabberd config changes, simplify DNS %NATIVE% updating
2022-12-21 08:50:41 +00:00
65777c70ad
snippets: add link to home-manager docs
2022-12-21 08:30:16 +00:00
c66699b697
update nixpkgs: 2022-12-11 -> 2022-12-18; sops-nix
...
```
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/64e0bf055f9d25928c31fb12924e59ff8ce71e60' (2022-12-11)
→ 'github:NixOS/nixpkgs/04f574a1c0fde90b51bf68198e2297ca4e7cccf4' (2022-12-18)
• Updated input 'nixpkgs-stable':
'github:NixOS/nixpkgs/06278c77b5d162e62df170fec307e83f1812d94b' (2022-12-12)
→ 'github:NixOS/nixpkgs/0938d73bb143f4ae037143572f11f4338c7b2d1c' (2022-12-17)
• Updated input 'sops-nix':
'github:Mic92/sops-nix/da98a111623101c64474a14983d83dad8f09f93d' (2022-12-04)
→ 'github:Mic92/sops-nix/32840f16ffa0856cdf9503a8658f2dd42bf70342' (2022-12-19)
• Updated input 'sops-nix/nixpkgs-stable':
'github:NixOS/nixpkgs/86370507cb20c905800527539fc049a2bf09c667' (2022-12-04)
→ 'github:NixOS/nixpkgs/87b58217c9a05edcf7630b9be32570f889217aef' (2022-12-19)
```
2022-12-19 22:42:58 +00:00
97044bf70e
trust-dns: port to dyn-dns for determining WAN IP
...
although the systemd wantedBy directive is working,
`before` seems to be ignored when the unit fails. so on first run,
dyn-dns runs, fails (poor net connectivity), then trust-dns starts
(fails), then they both restart 10s later.
it's not great, but good enough. also, wan IP is persisted, so this
likely won't happen much in practice.
2022-12-19 13:12:23 +00:00
3122334a41
dyn-dns: fix to only react when the IP actually changes
2022-12-19 11:54:27 +00:00
8acd6ca4f1
create sane.services.dyn-dns to manage dynamic DNS stuff
...
not yet integrated into servo
2022-12-19 11:16:30 +00:00
9b66aecf1b
trust-dns: port the remaining records to a structured format
...
SRV and MX _could_ have more structure (priority, etc).
not sure the best path there (option submodule, i guess).
2022-12-19 04:38:43 +00:00
16cb3b83a2
trust-dns: more idiomatic way to define SOA records
2022-12-19 04:00:27 +00:00
970438be8a
trust-dns: rename records option -> extraConfig
...
i'll be adding special options for records
2022-12-19 03:12:32 +00:00
a2935cedaa
snippets: add wikipedia search
2022-12-18 22:58:53 +00:00
3e1340ed61
enable i2p in firefox
2022-12-16 22:15:19 +00:00
341dd3f2b2
new zsh alias: ref -> cd ~/ref
2022-12-16 20:56:48 +00:00
1c9caa40bd
snippets: update nixos wiki to include search param
2022-12-16 20:35:33 +00:00
3be15c6d05
podcasts: add Michael Malice (is it any good? we'll see.)
2022-12-16 08:04:28 +00:00
8e8168ec28
add splatmoji package and sway config
2022-12-16 07:46:06 +00:00
28397807fc
gpt2tc: disable, because the mirror is unreliable
2022-12-16 07:08:55 +00:00
199a49755a
create a kiwix-serve service
2022-12-16 02:15:17 +00:00
8fe304d6c1
trust-dns: split the service into a generic config interface
2022-12-15 11:17:50 +00:00
