Commit Graph

1870 Commits

Author SHA1 Message Date
52871b4fa3
services/archivebox: refactor and remove persistent option 2023-10-27 13:23:37 +08:00
29ddcaf501
decker: remove package
It's been upstreamed to nixpkgs.
2023-10-27 09:37:11 +08:00
c548866e1c
users/foo-dogsquared: remove custom scripts 2023-10-27 09:22:52 +08:00
47526b545c
users/foo-dogsquared: update SSH config 2023-10-26 22:10:18 +08:00
43f55f9c9b
profiles/dev: add submodule for funsies CLI apps 2023-10-26 22:09:41 +08:00
9a949d5ce6
users/foo-dogsquared: update Firefox config 2023-10-26 10:03:58 +08:00
2540825f21
users/foo-dogsquared: add git alias 2023-10-26 10:03:44 +08:00
7f148d5322
users/foo-dogsquared: update Tridactyl config 2023-10-26 10:03:15 +08:00
55902c8008
ci: update check step
It now actually checks instead of cheaply check.
2023-10-20 19:05:23 +08:00
5ca767848c
profiles/desktop: fix mpv config 2023-10-20 15:33:46 +08:00
479166c78d
services/vouch-proxy: add wantedBy for systemd service
Forgot to add that which is why there's no enabled service.
2023-10-20 15:33:16 +08:00
github-actions[bot]
768da2ba39 flake.lock: update inputs
Flake lock file updates:

• Updated input 'disko':
    'github:nix-community/disko/3c41ae36ff12afbada9396c7d8282c2c74f74e06' (2023-10-12)
  → 'github:nix-community/disko/c24c3a902935321e1dfa1ca587e66f47edf79faf' (2023-10-19)
• Updated input 'emacs-overlay':
    'github:nix-community/emacs-overlay/bd5c5e9a9b460a275df97c7226f573cd88cb27ef' (2023-10-12)
  → 'github:nix-community/emacs-overlay/8bc94376be2ab9290c3275f18a29cc47c7889c4f' (2023-10-19)
• Updated input 'emacs-overlay/nixpkgs-stable':
    'github:NixOS/nixpkgs/bd1cde45c77891214131cbbea5b1203e485a9d51' (2023-10-11)
  → 'github:NixOS/nixpkgs/b5f8ec6be261dfc44c3b56b220e2793d1b61512b' (2023-10-17)
• Updated input 'firefox-addons':
    'gitlab:rycee/nur-expressions/0a2aad558c096ea1bbe7db294c3c40fd61db2fa3?dir=pkgs/firefox-addons' (2023-10-12)
  → 'gitlab:rycee/nur-expressions/9bf07e417f4f7947fdc6d1b903b003c3ea8b8868?dir=pkgs/firefox-addons' (2023-10-19)
• Updated input 'helix-editor':
    'github:helix-editor/helix/574f82130892d4a388bfdcce63fe2c4a190e479e' (2023-10-12)
  → 'github:helix-editor/helix/e6d2835b0907102831a8979688a8464c064ff842' (2023-10-18)
• Updated input 'home-manager':
    'github:nix-community/home-manager/6bba64781e4b7c1f91a733583defbd3e46b49408' (2023-10-10)
  → 'github:nix-community/home-manager/c5c1ea85181d2bb44e46e8a944a8a3f56ad88f19' (2023-10-19)
• Updated input 'home-manager/nixpkgs':
    'github:NixOS/nixpkgs/87828a0e03d1418e848d3dd3f3014a632e4a4f64' (2023-10-06)
  → 'github:NixOS/nixpkgs/ca012a02bf8327be9e488546faecae5e05d7d749' (2023-10-16)
• Updated input 'neovim-nightly-overlay':
    'github:nix-community/neovim-nightly-overlay/185a47b09d95c430187a16d89b1ec32391698e07' (2023-10-13)
  → 'github:nix-community/neovim-nightly-overlay/1ddf097ce80bfa517cf6475a09bacdc39699496e' (2023-10-19)
• Updated input 'neovim-nightly-overlay/neovim-flake':
    'github:neovim/neovim/ebe489d8f0edbb3538a59733289d8969d1ffea22?dir=contrib' (2023-10-12)
  → 'github:neovim/neovim/a8fc94a2fdd07edf0679d34f2deaacb25b3fa69f?dir=contrib' (2023-10-18)
• Updated input 'nixos-stable':
    'github:NixOS/nixpkgs/bd1cde45c77891214131cbbea5b1203e485a9d51' (2023-10-11)
  → 'github:NixOS/nixpkgs/80c1aab725151632ddc2a20caeb914e76dd0673c' (2023-10-18)
• Updated input 'nixos-unstable':
    'github:NixOS/nixpkgs/f99e5f03cc0aa231ab5950a15ed02afec45ed51a' (2023-10-09)
  → 'github:NixOS/nixpkgs/ca012a02bf8327be9e488546faecae5e05d7d749' (2023-10-16)
• Updated input 'nixos-unstable-small':
    'github:NixOS/nixpkgs/4183880e0e56f5a8dc55ef63df0cb64a7d5ea21f' (2023-10-12)
  → 'github:NixOS/nixpkgs/6be2c349a30fcb489a3153dd331e9df387ab6449' (2023-10-19)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/f99e5f03cc0aa231ab5950a15ed02afec45ed51a' (2023-10-09)
  → 'github:NixOS/nixpkgs/ca012a02bf8327be9e488546faecae5e05d7d749' (2023-10-16)
• Updated input 'nur':
    'github:nix-community/NUR/9652d4b7c5c05d982e69d1c9df8d05010d431ba0' (2023-10-12)
  → 'github:nix-community/NUR/014d3f41f5308e668109dca14045835df73119f1' (2023-10-19)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/f995ea159252a53b25fa99824f2891e3b479d511' (2023-10-11)
  → 'github:Mic92/sops-nix/51186b8012068c417dac7c31fb12861726577898' (2023-10-15)
• Updated input 'sops-nix/nixpkgs-stable':
    'github:NixOS/nixpkgs/2f3b6b3fcd9fa0a4e6b544180c058a70890a7cc1' (2023-10-07)
  → 'github:NixOS/nixpkgs/0e1cff585c1a85aeab059d3109f66134a8f76935' (2023-10-15)
2023-10-20 01:00:38 +00:00
009a59e10b
config: set default value for system state version 2023-10-19 00:16:21 +08:00
142c2ef378
hosts/bootstrap: set system version and disable cache splitting
The user modules are apparently not compatible with the default way of
building the documentation so we'll have to. This should fix being able
to unable to be built due to the missing files which most likely came
from the cache.
2023-10-19 00:12:55 +08:00
f789aabd35
programs/distrobox: add extraConfig option 2023-10-18 18:59:46 +08:00
dependabot[bot]
f7b4539c6d
ci: bump DeterminateSystems/nix-installer-action from 5 to 6 (#7)
Bumps [DeterminateSystems/nix-installer-action](https://github.com/determinatesystems/nix-installer-action) from 5 to 6.
- [Release notes](https://github.com/determinatesystems/nix-installer-action/releases)
- [Commits](https://github.com/determinatesystems/nix-installer-action/compare/v5...v6)

---
updated-dependencies:
- dependency-name: DeterminateSystems/nix-installer-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-17 23:01:20 +00:00
6293a13965
profiles/dev: add sshfs 2023-10-18 09:37:43 +08:00
39ccbe0976
profiles/dev: use Distrobox Nix module 2023-10-18 09:17:33 +08:00
de8beb9780
programs/distrobox: remove settingsFile option 2023-10-18 09:16:25 +08:00
7f06e6a677
programs/distrobox: remove assertion
It seems to be more suitable as a program module.
2023-10-18 09:13:42 +08:00
af54c3570a
programs/distrobox: improve quoting for generated settings 2023-10-18 09:13:18 +08:00
7a61b28902
users/foo-dogsquared: add servers profile 2023-10-17 20:19:51 +08:00
5bd11ed430
programs/distrobox: init 2023-10-17 18:52:44 +08:00
5121e9e18e
users/foo-dogsquared: add Distrobox config 2023-10-17 19:43:38 +08:00
773af19f4c
users/foo-dogsquared: add kanidm client config 2023-10-17 19:49:41 +08:00
8fb9770882
services/vouch-proxy: escape service names for systemd 2023-10-17 18:33:02 +08:00
e6c4a20b83
hosts/plover: update miscellaneous parts of the services 2023-10-17 18:32:23 +08:00
e3bb442154
profiles/dev: add servers submodule
Mainly for managing them VPSs while in your home.
2023-10-17 13:26:06 +08:00
cfcd19313c
overlays/firefox-foodogsquared: init 2023-10-17 13:25:07 +08:00
5c7cea6df8
users/foo-dogsquared: update Firefox config 2023-10-17 12:59:31 +08:00
1a9960a0f3
flake.nix: move the imported modules into the shared config
This makes it easier to think about the default shared configurations.
2023-10-16 23:01:38 +08:00
dependabot[bot]
ec216c82d7
ci: bump stefanzweifel/git-auto-commit-action from 4 to 5 (#5)
Bumps [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action) from 4 to 5.
- [Release notes](https://github.com/stefanzweifel/git-auto-commit-action/releases)
- [Changelog](https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/stefanzweifel/git-auto-commit-action/compare/v4...v5)

---
updated-dependencies:
- dependency-name: stefanzweifel/git-auto-commit-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-14 07:32:17 +00:00
dependabot[bot]
e13daf9ebf
ci: bump DeterminateSystems/nix-installer-action from 4 to 5 (#6)
Bumps [DeterminateSystems/nix-installer-action](https://github.com/determinatesystems/nix-installer-action) from 4 to 5.
- [Release notes](https://github.com/determinatesystems/nix-installer-action/releases)
- [Commits](https://github.com/determinatesystems/nix-installer-action/compare/v4...v5)

---
updated-dependencies:
- dependency-name: DeterminateSystems/nix-installer-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-14 07:32:00 +00:00
23e32b45ac
hosts/plover: add Bind to be managed by nginx 2023-10-14 14:06:43 +08:00
1775a0febc
hosts/plover: update Bind systemd service config 2023-10-14 14:05:14 +08:00
680ec43428
hosts/plover: fix Vouch proxy settings 2023-10-14 14:04:38 +08:00
3e8987d26e
hosts/plover: update Wezterm mux server config with nginx 2023-10-14 14:04:27 +08:00
ec0fe7dec8
services/vouch-proxy: fix permissions for generated secrets 2023-10-14 14:03:40 +08:00
0b253e0553
hosts/plover: update Vouch proxy settings and secrets permissions 2023-10-14 11:26:33 +08:00
ac134281f8
hosts/plover: add back the custom Gitea logos 2023-10-14 11:25:26 +08:00
1ad6e7e8c5
hosts/plover: fix Grafana provider strings in settings 2023-10-14 11:14:44 +08:00
107241f553
hosts/plover: fix duplicate nginx shared memory zone 2023-10-14 11:14:09 +08:00
5657a5e023
services/vouch-proxy: use system user for service
This enables integration with secrets such as sops-nix instead of the
previous service config of being a dynamic user.
2023-10-14 11:06:23 +08:00
d43708983a
services/wezterm-mux-server: update service hardening options
It should be less strict overall with the ProtectHome= settings.
2023-10-14 11:05:46 +08:00
6012556a3d
services/wezterm-mux-server: revert to system user for service
I don't know how to completely make it isolated AND working.
2023-10-14 11:05:17 +08:00
9527896251
hosts/plover: update Grafana and PostgreSQL integration 2023-10-14 11:01:57 +08:00
7430d992f2
hosts/plover: fix nginx code for Grafana server 2023-10-13 16:55:39 +08:00
2632b75bf2
hosts/plover: properly add nginx upstreams
Even though this is unlikely to be scaled further, we're just being good
sysadmins (or at least roleplaying as one).
2023-10-13 16:48:02 +08:00
7daea6c427
services/vouch-proxy: update service config 2023-10-13 14:24:44 +08:00
025a3b5db4
hosts/plover: update secrets 2023-10-13 14:24:23 +08:00