Commit Graph

1236 Commits

Author SHA1 Message Date
0645422e16
users/nixos: update Nix caches 2023-06-27 15:58:02 +08:00
c1e40bf01b
config: add dotenv for production 2023-06-27 15:24:43 +08:00
dda6b4bb7b
config: fix foo-dogsquared name 2023-06-27 13:17:11 +08:00
f746fe36c7
users/foo-dogsquared: refactor Zellij layout 2023-06-27 12:57:29 +08:00
e76a881aee
hosts/plover: update Wireguard routing 2023-06-27 12:54:29 +08:00
4dcb82c72b
hosts/plover: update PostgreSQL cert config 2023-06-27 12:53:50 +08:00
1e2d251e1d
hosts/plover: harden Bind systemd service 2023-06-28 00:19:06 +08:00
d98527c89b
hosts/plover: update Bind config for dynamic updates 2023-06-27 22:56:18 +08:00
df589b1915
users/foo-dogsquared: update Bash config
Also, the Wezterm shell integration is now fixed. Hoorah!
2023-06-24 10:27:13 +08:00
d1b6376948
programs/wezterm: update shell init config 2023-06-24 10:26:56 +08:00
7ea15ea9fa
profiles/dev: remove extra Bash functions
It turns out fzf has some niceties with history and file selection which
is closer to how I imagine it. PRETTY NICE!

But it does override my Atuin configuration which doesn't have its shell
integration enabled. It does have some conflict with the Wezterm
shell integration. This is a problem for future me to deal with.
2023-06-23 18:15:05 +08:00
4cbb300dae
users/foo-dogsquared: update Zellij configuration 2023-06-23 18:14:41 +08:00
1e75e43c5a
profiles/dev: remove Nix profile upgrade user service
It's not useful for much so we're removing it.
2023-06-23 17:13:52 +08:00
795723c17f
profiles/dev: add Zellij configuration 2023-06-23 17:12:43 +08:00
f73108e4e6
profiles/dev: add lazygit configuration 2023-06-23 17:12:31 +08:00
3dfb75a9d4
profiles/dev: add fzf configuration 2023-06-23 17:12:10 +08:00
dc01a2d2f1
hosts/graphical-installer: re-disable wireless module
I forgot why it's there. Now I remember. :)
2023-06-23 15:44:19 +08:00
87e01e119c
config: create declarative home-manager user management 2023-06-23 15:43:26 +08:00
4e428bf8e4
config: update the image output extra modules 2023-06-23 11:47:06 +08:00
c81038e609
hosts/graphical-installer: update config 2023-06-23 11:46:37 +08:00
218e5cd724
hosts/bootstrap: update config 2023-06-23 11:46:21 +08:00
c6d2ca1465
docs: add section for declarative hosts management 2023-06-23 10:24:35 +08:00
9ee20751e7
config: remove NixOS module from nixos-generators
It is only meant for generation and not for deployment. Learnt that the
hard way.
2023-06-23 00:28:48 +08:00
9f2452ec6e
config: add deploy subtable for declarative images
It accepts keys used as arguments for deployment settings with
deploy-rs. This should make deployment a little bit easier for me
instead of manually creating a deploy entry every time.
2023-06-23 00:26:04 +08:00
36e2a817ae
hosts/plover: fix Wireguard firewall settings 2023-06-22 23:17:28 +08:00
482e90efaa
hosts/plover: update zone file to include self-hosted DNS server 2023-06-22 22:52:17 +08:00
06207e16f0
git: remove linguist attributes 2023-06-22 18:07:44 +08:00
2688064651
hosts/plover: add TLS support for PostgreSQL 2023-06-22 18:05:54 +08:00
4e23ffa6c4
docs: update project setup notes
With the right configuration alongside system
2023-06-22 18:04:02 +08:00
ff3dd9d3f7
hosts/plover: update nameserver list
With the right configuration alongside systemd-resolved, it shouldn't be
much of a problem.
2023-06-22 18:03:21 +08:00
9cfe72a62c
docs: update Plover config notes 2023-06-22 18:02:23 +08:00
4b2777cda2
hosts/plover: change network attribute name
It is somewhat not great naming at first.
2023-06-22 18:01:19 +08:00
eb1003f7e6
hosts/plover: change DNS server to Bind9
CoreDNS doesn't have dynamic updates available yet (though there are PRs
and discussions for it) so we'll have to go with something that has it.
Also, it provides an opportunity for me to use the de-facto software for
this.
2023-06-22 17:56:47 +08:00
1760a6cfc9
config: remove GCP key from cluster 2023-06-22 11:13:45 +08:00
4022f9b43c
hosts/plover: open custom Atuin sync server 2023-06-22 11:12:58 +08:00
03ca6722e9
chore: reformat codebase 2023-06-22 11:12:43 +08:00
0bba6e7898
shell.nix: reformat the application list 2023-06-22 11:11:37 +08:00
9ef86934ea
lib/images: make system attribute as a requirement 2023-06-22 11:11:14 +08:00
5972fb48fc
shells/cloud: add Terraform 2023-06-22 11:10:37 +08:00
55eb4d8c0c
hosts/plover: initialize Terraform configuration 2023-06-22 11:06:43 +08:00
241e2080f2
config: make configurable nixpkgs channel for images
Now we can finally easily declare the nixpkgs channel for individual
images. This is nice once I've expanded the images for other purposes
such as physical hosts (for homelabbing).

Unfortunately, this is where I realized that stable channels are not
exactly "Debian-stable" and the best way to handle security is to have
an update cadence that is relatively quick.
2023-06-22 11:01:41 +08:00
a0219f6260
hosts/plover: move GRUB config to Hetzner hardware config 2023-06-20 19:57:06 +08:00
f033756d6f
config: modularize image creation functions
Additionally, I have also made a declarative version of the project
cluster with a neat little file at `images.toml`. This is way better for
individually referring to hosts from the host directory compared to the
old way.
2023-06-20 19:57:00 +08:00
5a8cdc5769
hosts/plover: disable DNSSEC
It's giving me trouble for now. Ideally, this should be configured with
the individual interfaces that is giving me the troubles.
2023-06-20 09:56:40 +08:00
492de3bc92
flake.lock: update inputs
Flake lock file updates:

• Updated input 'deploy':
    'github:serokell/deploy-rs/65211db63ba1199f09b4c9f27e5eba5ec50d76ac' (2023-06-05)
  → 'github:serokell/deploy-rs/724463b5a94daa810abfc64a4f87faef4e00f984' (2023-06-14)
• Updated input 'devshell':
    'github:numtide/devshell/6b2554d28d46bfa6e24b941e999a145760dad0e1' (2023-06-05)
  → 'github:numtide/devshell/fd6223370774dd9c33354e87a007004b5fd36442' (2023-06-13)
• Updated input 'emacs-overlay':
    'github:nix-community/emacs-overlay/d248cdbbc9799d0cff8550e4fb4267bfac66e992' (2023-06-13)
  → 'github:nix-community/emacs-overlay/37ab2cb6a09245809e862dde7ed9adcd5b83d62d' (2023-06-19)
• Updated input 'emacs-overlay/nixpkgs-stable':
    'github:NixOS/nixpkgs/d3bb401dcfc5a46ce51cdfb5762e70cc75d082d2' (2023-06-10)
  → 'github:NixOS/nixpkgs/c7ff1b9b95620ce8728c0d7bd501c458e6da9e04' (2023-06-16)
• Updated input 'helix-editor':
    'github:helix-editor/helix/37fcd160db610feb4a910a3c587cc73a3a2e6635' (2023-06-13)
  → 'github:helix-editor/helix/06d63d6ac1644ce57d6a90b53ea4f832e67ab2a9' (2023-06-19)
• Updated input 'home-manager':
    'github:nix-community/home-manager/b01eb1eb3b579c74e6a4189ef33cc3fa24c40613' (2023-06-12)
  → 'github:nix-community/home-manager/0480dabc99e1b669ebe909949180fa2786e733cd' (2023-06-18)
• Updated input 'home-manager/nixpkgs':
    'github:nixos/nixpkgs/7409480d5c8584a1a83c422530419efe4afb0d19' (2023-06-05)
  → 'github:nixos/nixpkgs/75a5ebf473cd60148ba9aec0d219f72e5cf52519' (2023-06-11)
• Updated input 'neovim-nightly-overlay':
    'github:nix-community/neovim-nightly-overlay/93812683925c91d5b5c020ef6b49e86c8352b1d7' (2023-06-13)
  → 'github:nix-community/neovim-nightly-overlay/0e9b38f09c214547d4a20e053cdb9c8a07e5ed61' (2023-06-19)
• Updated input 'neovim-nightly-overlay/hercules-ci-effects':
    'github:hercules-ci/hercules-ci-effects/657935127398706754113c1cea5800798ecb99a7' (2023-06-07)
  → 'github:hercules-ci/hercules-ci-effects/04e4ab63b9eed2452edee1bb698827e1cb8265c6' (2023-06-15)
• Updated input 'neovim-nightly-overlay/hercules-ci-effects/hercules-ci-agent':
    'github:hercules-ci/hercules-ci-agent/febf6540ed5fd55812933c159e59742743277b30' (2023-06-07)
  → 'github:hercules-ci/hercules-ci-agent/7192b83935ab292a8e894db590dfd44f976e183b' (2023-06-14)
• Updated input 'neovim-nightly-overlay/hercules-ci-effects/hercules-ci-agent/flake-parts':
    'github:hercules-ci/flake-parts/dcc36e45d054d7bb554c9cdab69093debd91a0b5' (2023-04-01)
  → 'github:hercules-ci/flake-parts/71fb97f0d875fd4de4994dfb849f2c75e17eb6c3' (2023-06-01)
• Updated input 'neovim-nightly-overlay/hercules-ci-effects/hercules-ci-agent/haskell-flake':
    'github:srid/haskell-flake/26852ade574c712bc3912ad28de52b0c4cf7d4cb' (2023-03-13)
  → 'github:srid/haskell-flake/74210fa80a49f1b6f67223debdbf1494596ff9f2' (2023-05-22)
• Updated input 'neovim-nightly-overlay/hercules-ci-effects/hercules-ci-agent/nixpkgs':
    'github:NixOS/nixpkgs/e3652e0735fbec227f342712f180f4f21f0594f2' (2023-03-30)
  → 'github:NixOS/nixpkgs/75a5ebf473cd60148ba9aec0d219f72e5cf52519' (2023-06-11)
• Updated input 'neovim-nightly-overlay/neovim-flake':
    'github:neovim/neovim/a7e5d4238a00d5bfa5809b2860047eca2d565e62?dir=contrib' (2023-06-12)
  → 'github:neovim/neovim/8c9dab3e0d788d44c8a2fee83a6193f5955c814e?dir=contrib' (2023-06-18)
• Updated input 'nix-ld':
    'github:Mic92/nix-ld/29f15b1f7e37810689974ef169496c51f6403a1b' (2023-04-26)
  → 'github:Mic92/nix-ld/3abd605e56b5b34ec630bb10ba85f98c93cc05b2' (2023-06-15)
• Removed input 'nix-ld/utils'
• Updated input 'nixos-generators':
    'github:nix-community/nixos-generators/122dcc32cadf14c5015aa021fae8882c5058263a' (2023-06-05)
  → 'github:nix-community/nixos-generators/a54683aa7eff00ee5b33dec225525d0eb6ab02de' (2023-06-16)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/75a5ebf473cd60148ba9aec0d219f72e5cf52519' (2023-06-11)
  → 'github:NixOS/nixpkgs/04af42f3b31dba0ef742d254456dc4c14eedac86' (2023-06-17)
• Updated input 'nixpkgs-stable':
    'github:NixOS/nixpkgs/d3bb401dcfc5a46ce51cdfb5762e70cc75d082d2' (2023-06-10)
  → 'github:NixOS/nixpkgs/c7ff1b9b95620ce8728c0d7bd501c458e6da9e04' (2023-06-16)
• Updated input 'nur':
    'github:nix-community/NUR/94fef86877519157112e10809689b3ae9c2738c2' (2023-06-13)
  → 'github:nix-community/NUR/3700be70d38f57b41e5426879db59241806a6708' (2023-06-19)
• Updated input 'rust-overlay':
    'github:oxalica/rust-overlay/e279547de84413ca1a65cec3f0f879709c8c65eb' (2023-06-13)
  → 'github:oxalica/rust-overlay/86302751ef371597d48951983e1a2f04fe78d4ff' (2023-06-19)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/cb85e297937af1bd1434cf5f85a3f86a21dc8207' (2023-06-11)
  → 'github:Mic92/sops-nix/1634d2da53f079e7f5924efa7a96511cd9596f81' (2023-06-18)
• Updated input 'sops-nix/nixpkgs-stable':
    'github:NixOS/nixpkgs/ef24b2fa0c5f290a35064b847bc211f25cb85c88' (2023-06-10)
  → 'github:NixOS/nixpkgs/e2e2059d19668dab1744301b8b0e821e3aae9c99' (2023-06-17)
2023-06-19 12:30:23 +08:00
57d897ac82
hosts/ni: update personal VPN config 2023-06-19 12:28:33 +08:00
23e00d0472
config: remove foo-dogsquared's binary cache
It is pretty outdated and the CI didn't able to build the packages for
some time now (that I'm lazy to fix). Not to mention, some of them are
being upstreamed to nixpkgs so the need to use this is low. Also, it
causes the build to have some errors.
2023-06-19 12:26:25 +08:00
fceb1afa7f
users/foo-dogsquared: use own Atuin sync server 2023-06-16 13:16:12 +08:00
f6c88f8dc1
gnome-shell-extension-fly-pie: 20 -> 21 2023-06-16 13:14:02 +08:00
6b5ca3fb69
gnome-shell-extension-burn-my-windows: 31 -> 34 2023-06-16 13:12:44 +08:00