Commit graph

288 commits

Author SHA1 Message Date
84fb7727da qenya/packages: rename from cli, include common graphical packages 2024-10-08 10:46:05 +01:00
ecd98229ff kilgharrah, tohru: install feishin 2024-10-08 01:29:30 +01:00
82787cea45 kilgharrah: serve navidrome 2024-10-08 01:28:49 +01:00
2a2f1674a3 qenya/xdg-mime-apps: file association for .zip 2024-10-07 23:31:55 +01:00
5c7d371ea5 misc: init with fstrim and nix store optimisation 2024-10-07 21:29:25 +01:00
bb2b59cd20 kilgharrah/networking: switch on systemd-networkd debugging
hoping this will help diagnose an issue
2024-10-06 19:07:20 +01:00
cdcdccb465 qenya/zsh: don't clobber with mv or rename 2024-10-02 17:04:27 +01:00
5a617f9cb3 kilgharrah: set up jellyfin 2024-10-02 17:02:35 +01:00
4f85fb54d8 kilgharrah: enable fstrim and nvidia drivers 2024-10-01 19:44:31 +01:00
5e1cfc3997 boot: fix attempt to install memtest86+ on non-x86 hardware 2024-10-01 19:30:21 +01:00
cd84be16be treewide: refactor bootloader config to common file 2024-10-01 19:20:34 +01:00
1b18133585 kilgharrah: install gimp-with-plugins, jellyfin-media-player 2024-09-29 17:59:31 +01:00
4e7ec3d571 tohru: install nicotine-plus 2024-09-28 07:42:19 +01:00
56bdf36abd keys: add kalessin, shaw; update trungle 2024-09-28 07:42:07 +01:00
ab035dcd5b kilgharrah: set up ftp server 2024-09-28 05:08:12 +01:00
309e44aa8a flake.nix: rationalise nixpkgs versions 2024-09-26 13:40:33 +01:00
3fc692f0c2 flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/23cbb250f3bf4f516a2d0bf03c51a30900848075' (2024-09-22)
  → 'github:NixOS/nixpkgs/759537f06e6999e141588ff1c9be7f3a5c060106' (2024-09-25)
• Updated input 'nixpkgsSmall':
    'github:NixOS/nixpkgs/7ca0f93c530406c1610defff0b9bf643333cf992' (2024-09-23)
  → 'github:NixOS/nixpkgs/37df9bcf93431c7f9f9358aec2d7ed0a52d7ba1d' (2024-09-25)
• Updated input 'nur':
    'github:nix-community/NUR/0d7209843407825066ccf9743c40d50b6d68674f' (2024-09-24)
  → 'github:nix-community/NUR/936785778bca86332d6b201dda67a38585cab885' (2024-09-26)
• Updated input 'plasma-manager':
    'github:nix-community/plasma-manager/6f1db348fcb89fd6b0b9c32e279d29ee6b4d1272' (2024-09-22)
  → 'github:nix-community/plasma-manager/a02fef2ece8084aff0b41700bb57d24d73574cd1' (2024-09-24)
• Updated input 'randomcat':
    'github:randomnetcat/nix-configs/2a6bd13e96db07e2e904fcc1b93faf5484725c91' (2024-09-24)
  → 'github:randomnetcat/nix-configs/7458a718acedf2590cbfc212e7070afdd3b8c4dc' (2024-09-26)
2024-09-26 12:48:03 +01:00
7ce034f2d0 flake.nix: only expose self to nixos modules, not all inputs 2024-09-26 12:36:09 +01:00
8b04d9039e orm: serve actual 2024-09-26 12:16:33 +01:00
59bbcc165e nginx: expand default CSP
this is required to run wasm and web workers
2024-09-26 12:15:49 +01:00
d1b974b86c yevaud: specify (non-boot-critical) zfs datasets with randomcat's module
Also moves forgejo state directory to the default location
2024-09-24 18:56:27 +01:00
8d2d55e4c4 openssh: disable fail2ban
We've always had password authentication disabled, so it's not really
doing much except periodically locking us out of our own servers when we
misconfigure something
2024-09-24 18:41:17 +01:00
3195af88ef nginx: improve hardening, tweak headers
Still not quite where I want it to be but it's better
2024-09-24 05:31:17 +01:00
26900a5973 steam: lightly refactor 2024-09-24 05:29:21 +01:00
2951f948b4 kilgharrah: set up zfs datasets using randomcat's module 2024-09-24 04:49:25 +01:00
7e1f688699 flake.lock: Update
Flake lock file updates:

• Updated input 'home-manager':
    'github:nix-community/home-manager/2ab00f89dd3ecf8012f5090e6d7ca1a7ea30f594' (2024-09-17)
  → 'github:nix-community/home-manager/2f23fa308a7c067e52dfcc30a0758f47043ec176' (2024-09-22)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/086b448a5d54fd117f4dc2dee55c9f0ff461bdc1' (2024-09-16)
  → 'github:NixOS/nixpkgs/23cbb250f3bf4f516a2d0bf03c51a30900848075' (2024-09-22)
• Updated input 'nixpkgsSmall':
    'github:NixOS/nixpkgs/a51a2cef87fc37c7e31d3a5345bc493e5f7a5f6e' (2024-09-17)
  → 'github:NixOS/nixpkgs/7ca0f93c530406c1610defff0b9bf643333cf992' (2024-09-23)
• Updated input 'nur':
    'github:nix-community/NUR/59c5c2575c0cae6bc98b9de8161731cfb8cdc1f0' (2024-09-18)
  → 'github:nix-community/NUR/0d7209843407825066ccf9743c40d50b6d68674f' (2024-09-24)
• Updated input 'plasma-manager':
    'github:nix-community/plasma-manager/5a0c70a007837e2db01e0bb68971792e8653d32c' (2024-09-16)
  → 'github:nix-community/plasma-manager/6f1db348fcb89fd6b0b9c32e279d29ee6b4d1272' (2024-09-22)
• Updated input 'randomcat':
    'github:randomnetcat/nix-configs/5d5d5c706fcb6d3f2d5ddd864ab07cd69a35b9d3' (2024-09-24)
  → 'github:randomnetcat/nix-configs/2a6bd13e96db07e2e904fcc1b93faf5484725c91' (2024-09-24)
2024-09-24 03:15:53 +01:00
f4912efaaa switch to agenix trunk 2024-09-23 23:58:36 +01:00
5ef9816a34 kilgharrah: enable zfs, luksdev 2024-09-23 23:22:48 +01:00
4f99cc5102 fix agenix pathspec 2024-09-23 23:22:32 +01:00
002b136ae8 qenya: install units 2024-09-20 15:58:24 +01:00
4dbe61e97a yevaud: add experimental BIND config 2024-09-19 23:25:35 +01:00
58109130e6 base-graphical/desktop: refactor 2024-09-19 23:23:46 +01:00
d7142d8619 qenya/xdg-mime-apps: open mailto links in evolution 2024-09-19 23:21:42 +01:00
9813aaf27b kilgharrah: disable autosuspend 2024-09-19 23:06:40 +01:00
8cbfb51930 move deployment config 2024-09-19 23:06:08 +01:00
bbb3bd3c16 kilgharrah: fix networking 2024-09-19 21:55:22 +01:00
0b6d72a4b6 qenya/vscode: disable automatic flake input evaluation
Unfortunately the memory requirements are too high to meet realistically
(tested with 8 GiB; still failed).
2024-09-18 19:45:18 +01:00
6a1597aee8 Update README.md 2024-09-18 19:38:59 +01:00
e713fe3b2c nix, home-manager: move common config out of flake.nix 2024-09-18 19:38:20 +01:00
a47d1f47e8 flake.lock: Update
Flake lock file updates:

• Updated input 'home-manager':
    'github:nix-community/home-manager/e1391fb22e18a36f57e6999c7a9f966dc80ac073' (2024-07-03)
  → 'github:nix-community/home-manager/2ab00f89dd3ecf8012f5090e6d7ca1a7ea30f594' (2024-09-17)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/6e99f2a27d600612004fbd2c3282d614bfee6421' (2024-08-30)
  → 'github:NixOS/nixpkgs/086b448a5d54fd117f4dc2dee55c9f0ff461bdc1' (2024-09-16)
• Updated input 'nur':
    'github:nix-community/NUR/444e1f3fdf23aa476489b0038e0738c6f4d9df85' (2024-09-04)
  → 'github:nix-community/NUR/59c5c2575c0cae6bc98b9de8161731cfb8cdc1f0' (2024-09-18)
• Updated input 'plasma-manager':
    'github:nix-community/plasma-manager/60becd0e994e25b372c8d0500fc944396f6c1085' (2024-09-09)
  → 'github:nix-community/plasma-manager/5a0c70a007837e2db01e0bb68971792e8653d32c' (2024-09-16)
2024-09-18 19:05:11 +01:00
28698d1a60 yevaud, orm, kalessin: switch to nixpkgs-small 2024-09-18 19:03:35 +01:00
ad1f4d2cc5 deduplicate flake outputs 2024-09-18 18:58:04 +01:00
a938b33679 export nixos configurations as standard flake outputs 2024-09-18 03:49:56 +01:00
f6010a968c treewide: specify hostname in host configs 2024-09-18 03:13:34 +01:00
9f6d0fbaf8 treewide: move all deployment keys to flake.nix 2024-09-18 03:06:48 +01:00
32dabca83f don't import universal config in host-specific homeManagerModules 2024-09-17 19:11:57 +01:00
3849eeb37b export homeManagerModules."qenya@shaw" 2024-09-17 18:57:02 +01:00
d881607cb0 Revert "qenya: plasma: workaround for issue in randomcat's config"
This reverts commit 7189fae109.

This didn't actually fix the issue, as it turns out mkIf still
resolves the children of its attrset recursively. The longer-term
solution is to export my home-manager config as a flake output,
which I'm moving towards.
2024-09-17 18:44:50 +01:00
a6359fdd36 export home-manager config from homeManagerModules 2024-09-17 18:40:15 +01:00
f4da07c4e6 move all host-specific configuration to hosts directory 2024-09-17 17:22:58 +01:00