59bbcc165e
nginx: expand default CSP
...
this is required to run wasm and web workers
2024-09-26 12:15:49 +01:00
8d2d55e4c4
openssh: disable fail2ban
...
We've always had password authentication disabled, so it's not really
doing much except periodically locking us out of our own servers when we
misconfigure something
2024-09-24 18:41:17 +01:00
3195af88ef
nginx: improve hardening, tweak headers
...
Still not quite where I want it to be but it's better
2024-09-24 05:31:17 +01:00
26900a5973
steam: lightly refactor
2024-09-24 05:29:21 +01:00
58109130e6
base-graphical/desktop: refactor
2024-09-19 23:23:46 +01:00
8cbfb51930
move deployment config
2024-09-19 23:06:08 +01:00
e713fe3b2c
nix, home-manager: move common config out of flake.nix
2024-09-18 19:38:20 +01:00
9f6d0fbaf8
treewide: move all deployment keys to flake.nix
2024-09-18 03:06:48 +01:00
a6359fdd36
export home-manager config from homeManagerModules
2024-09-17 18:40:15 +01:00
4a9e6b5f3c
move tooling to dev environment
2024-09-12 13:35:35 +01:00
a0a94b86ff
home-manager: rearrange config
2024-09-12 12:56:30 +01:00
b18e50fd4a
add plasma-manager for plasma config
2024-09-12 11:42:31 +01:00
c5261caa21
base-graphical: include settings for fonts, libinput, printing
2024-09-11 15:06:41 +01:00
9e638c009f
base-graphical: add desktop manager config
2024-09-11 06:36:21 +01:00
aeab801602
base-graphical: init with pipewire config
2024-09-11 05:43:35 +01:00
3fc4efab9c
rename sysadmin module to base-server
2024-09-11 05:17:19 +01:00
5290f25062
steam: move to common config
2024-09-06 02:50:40 +01:00
48a5083a02
nixpkgs, home-manager: return nixpkgs config to flake.nix
2024-09-06 02:37:34 +01:00
444c69edd3
zsh: condition on user qenya being present
2024-08-29 19:59:13 +01:00
4c07feb21a
nixpkgs: init config as separate file
2024-08-29 19:27:45 +01:00
4ed696e5b1
sysadmin: specify UTC timezone
2024-08-29 19:26:57 +01:00
766aa146df
users: change to immutable users
2024-08-29 18:27:43 +01:00
66cc74e388
users: define extraGroups per-host
2024-08-29 17:56:13 +01:00
f5191640f5
home-manager: move all config together, allow for multiple users
2024-08-29 17:55:43 +01:00
8076f91738
sysadmin: init, replacing deployment directory
2024-08-29 16:00:50 +01:00
b4b879a87b
entirely migrate from npins to flake inputs
2024-08-29 11:47:12 +01:00
54dd52b978
zsh: remove redundant config lines
2024-08-05 02:07:17 +01:00
31bf48154c
consolidate home-manager config to a module with one entrypoint
2024-07-30 13:02:11 +01:00
3bed356294
zsh: enable, set for qenya, add config
2024-07-27 00:23:27 +01:00
377060873d
add/rearrange packages
2024-07-19 20:04:12 +01:00
b96ef23c6c
rearrange files
2024-07-18 23:22:35 +01:00
db566deb4b
users: add randomcat
2024-07-09 22:16:37 +01:00
bae6a97842
users: add richard
2024-07-09 22:04:00 +01:00
0d0b3e2d2d
nginx: refactor to apply settings across all nodes
2024-07-09 22:00:09 +01:00
39c1bc664c
rearrange files
2024-07-09 18:14:33 +01:00
fc18e5538c
Install lshw
2024-06-23 21:15:52 +01:00
f71a65d051
[tohru] Remove reference to itch client
2024-06-19 20:58:18 +01:00
1e20b6b401
Allow SSH login to any machine
2024-06-19 20:22:37 +01:00
f464d022e5
Enable passwordless sudo on remote machines
...
Closes #2
2024-06-19 20:02:55 +01:00
6fc5a2b1ea
Fix CVE-2021-3156
2024-06-19 19:39:00 +01:00
a558fb0324
[tohru] Enable joycond
2024-06-14 15:41:33 +01:00
479dcc536a
Add $WORDLIST file
2024-06-13 19:44:05 +01:00
bf8e65ebe3
[tohru] Install Microsoft core web fonts
2024-06-07 22:08:37 +01:00
82ee674db4
Add common CLI utilities I want everywhere
2024-06-07 16:33:46 +01:00
bf2d7f7f10
Rename services directory to common
2024-06-05 23:30:24 +01:00
