Commit Graph

434 Commits

Author SHA1 Message Date
de8beb9780
programs/distrobox: remove settingsFile option 2023-10-18 09:16:25 +08:00
7f06e6a677
programs/distrobox: remove assertion
It seems to be more suitable as a program module.
2023-10-18 09:13:42 +08:00
af54c3570a
programs/distrobox: improve quoting for generated settings 2023-10-18 09:13:18 +08:00
5bd11ed430
programs/distrobox: init 2023-10-17 18:52:44 +08:00
8fb9770882
services/vouch-proxy: escape service names for systemd 2023-10-17 18:33:02 +08:00
ec0fe7dec8
services/vouch-proxy: fix permissions for generated secrets 2023-10-14 14:03:40 +08:00
5657a5e023
services/vouch-proxy: use system user for service
This enables integration with secrets such as sops-nix instead of the
previous service config of being a dynamic user.
2023-10-14 11:06:23 +08:00
d43708983a
services/wezterm-mux-server: update service hardening options
It should be less strict overall with the ProtectHome= settings.
2023-10-14 11:05:46 +08:00
6012556a3d
services/wezterm-mux-server: revert to system user for service
I don't know how to completely make it isolated AND working.
2023-10-14 11:05:17 +08:00
7daea6c427
services/vouch-proxy: update service config 2023-10-13 14:24:44 +08:00
3ee04bb812
chore: reformat codebase 2023-10-09 20:48:01 +08:00
7d55e45f70
services/vouch-proxy: add some more hardening options 2023-10-09 20:46:06 +08:00
2dbb3ed68c
services/vouch-proxy: restructure for multiple instances
This resolves some cases where the admin does not have all of their
users within the protected domain and some in others.
2023-10-09 20:43:13 +08:00
bd478aebc7
profiles/dev: add Dive for virtualization submodule 2023-10-09 22:32:13 +08:00
5152bae032
services/vouch-proxy: add more systemd directives 2023-10-09 22:31:27 +08:00
b4b64fa50b
services/vouch-proxy: improve conditional settings file option 2023-10-07 20:42:52 +08:00
069723d38a
services/wezterm-mux-server: hardcode user and group
With DynamicUser directive, it should be easy to make this usable.
2023-10-06 13:48:12 +08:00
86d8878fab
services/vouch-proxy: init 2023-10-07 20:41:14 +08:00
12bb71be20
services/wezterm-mux-server: improve code 2023-10-05 10:23:09 +08:00
c410ece05a
treewide: remove options attribute for modules 2023-10-02 14:26:11 +08:00
9654d7f551
programs/blender: reformat and update description 2023-09-25 22:06:51 +08:00
cd3cf148b9
programs/blender: fix Blender system resources directory
Also improve the way how Blender resources are joined. It isn't the
most idiomiatic code but we can improve it.
2023-09-25 15:29:56 +08:00
5f73ab74e9
programs/blender: fix erroneous attribute 2023-09-24 19:21:24 +08:00
f1c271cb59
profiles/browsers: update Firefox configuration 2023-09-24 19:20:52 +08:00
a874567898
programs/blender: init NixOS module 2023-09-23 22:29:03 +08:00
5808d7bc6c
profiles/browsers: add "Google Container" add-on 2023-09-23 20:27:17 +08:00
6fc14f8358
workflows/a-happy-gnome: update and refactor module 2023-09-19 13:50:47 +08:00
72272d9d01
tasks/multimedia-archive: enable Archivebox service part 2023-09-19 13:50:30 +08:00
1ceda1c216
tasks/backup-archive: change daily time schedule 2023-09-19 13:01:55 +08:00
c0d1efd1e3
profiles/dev: add hardware utilities 2023-09-18 17:57:18 +08:00
d920a9349f
profiles/browsers: add Chromium browser to system packages 2023-09-18 14:43:02 +08:00
ce0e92906f
profiles/browser: add browser extensions for Firefox native extensions 2023-09-16 16:31:17 +08:00
3cc4998ab7
profiles/browsers: add Bitwarden extension for Firefox 2023-09-16 16:18:25 +08:00
c8dc2b57ce
profiles/dev: replace exa with eza
Unmaintained and also in a state of being removed in nixpkgs.
2023-09-15 12:54:49 +08:00
e83cbded5d
profiles/browsers: init system-wide browser profile 2023-09-14 13:25:03 +08:00
8cf08e3f29
profiles/dev: add quilt 2023-09-11 18:19:18 +08:00
19ba7b9a5a
workflows/a-happy-gnome: restructure dconf config folder structure 2023-09-09 08:02:37 +08:00
cc81b17370
workflows/a-happy-gnome: add custom keybinding for recording 2023-09-06 05:46:04 +08:00
263e1f929e
workflows/a-happy-gnome: move profile into dconf package
This prevents the need to use an internal attribute so it's all good.
2023-09-06 05:45:04 +08:00
7dacbe6963
chore: reformat codebase 2023-08-31 09:59:56 +08:00
03e1918194
docs: update Mosey Branch project notes 2023-08-22 10:12:48 +08:00
df19265030
workflows/mosey-branch: remove unnecessary symbolic link 2023-08-22 10:12:23 +08:00
08202d1bab
programs/pop-launcher: update NixOS module
Now it assumes the package is patched to search its plugins and scripts
on its store path.
2023-08-22 09:18:58 +08:00
6b9f8d3b24
workflows/mosey-branch: revise template filenames
Just to make it less confusing.
2023-08-21 21:45:37 +08:00
f122e650c6
workflows/mosey-branch: change i18n setup to ibus 2023-08-21 21:40:19 +08:00
6661eca6a3
workflows/mosey-branch: revise desktop session package 2023-08-21 21:39:58 +08:00
3fb009f61b
workflows/mosey-branch: add gnome-session systemd units 2023-08-21 21:39:25 +08:00
3e4570e265
workflows/mosey-branch: add gnome-session sessions in system 2023-08-21 21:37:15 +08:00
4d637cc249
workflows/mosey-branch/desktop-session: fix build config 2023-08-21 21:36:20 +08:00
285bcb29a2
workflows/mosey-branch: update session script install location 2023-08-21 21:35:50 +08:00
76904cfeb1
workflows/mosey-branch: update session script 2023-08-21 19:12:46 +08:00
b80a0c50aa
workflows/mosey-branch/desktop-session: 2023-08-13 -> 2023-08-21 2023-08-21 15:44:37 +08:00
68e7eb29cf
workflows/mosey-branch: add debug option on module 2023-08-21 15:42:40 +08:00
01003d8293
workflows/mosey-branch: refactor custom desktop session package 2023-08-21 15:42:08 +08:00
9644f90dba
workflows/mosey-branch: build custom session script in package 2023-08-21 15:41:21 +08:00
a4d78f5ed3
profiles/i18n: update fcitx5 configuration 2023-08-21 12:13:30 +08:00
a88b0ff208
profiles/dev: add basic monitoring tools 2023-08-19 15:25:15 +08:00
609040329a
workflows/mosey-branch: update systemd units 2023-08-18 22:29:27 +08:00
ebafb21bfd
workflows/mosey-branch: add desktop files for core services
We're just imitating how GNOME sets up its components.
2023-08-18 22:26:36 +08:00
9d8324cf19
workflows/mosey-branch: fix build script 2023-08-14 11:21:39 +08:00
85a025f2df
workflows/mosey-branch: add core components unit files 2023-08-14 11:21:06 +08:00
2b07d44ebe
workflows/mosey-branch: update build script to accept components command 2023-08-14 11:20:12 +08:00
0225342a05
workflows/mosey-branch: create desktop session files package
This should make it easier to manage the custom desktop files with the
usual toolchain for configuring and installing custom desktop files
(i.e., Meson). While this could be done with Nix, some parts of
installing files is easier with Meson.

Who knows, it might be reverted because my Nix-fu is pretty weak right
now.
2023-08-12 15:46:03 +08:00
fa698a64cc
workflows/mosey-branch: init
It's not yet fully working and the design is not yet complete. The
foundation should be set with the custom gnome-session configuration
though.
2023-08-11 15:42:34 +08:00
0e6f3cea8c
profiles/desktop: add game controller drivers for hardware submodule 2023-08-04 05:29:56 +08:00
415cd10f9b
profiles/gaming: add game controller drivers 2023-08-04 05:28:59 +08:00
9c20c6675a
config: update font-related attributes from its deprecated versions 2023-07-29 13:21:20 +08:00
ac39b4cc58
services/wezterm-mux-server: add user and group option
The errors are most likely from wezterm-mux-server trying to start a
shell. This could be configured but it is better to treat this service
similarly to SSH servers.
2023-07-28 08:35:07 +08:00
6dcbb30e4a
config: change internal variable used for checking 2023-07-28 08:30:12 +08:00
f34d793bb6
services/wezterm-mux-server: update hardening settings 2023-07-27 22:21:30 +08:00
9d75a4101f
services/wezterm-mux-server: update service dependency 2023-07-27 13:35:38 +08:00
3c4aef00d4
modules: convert module description to RFC0072-style 2023-07-27 11:13:39 +08:00
22b8cc86e9
profiles/filesystem: add cluster-wide default setup option 2023-07-24 15:23:05 +08:00
cf92d4584c
profiles/filesystem: add personal webstorage setup 2023-07-24 15:18:28 +08:00
8777fc06e8
profiles/filesystem: add setups namespace
There will be added options that are not exactly filesystem setups.
2023-07-24 15:15:55 +08:00
2b87602a67
workflows/a-happy-gnome: add Nautilus extensions 2023-07-21 13:11:57 +08:00
44ccbea7e1
services/wezterm-mux-server: init module 2023-07-20 10:40:04 +08:00
402d58c3da
profiles/server: remove tmux config
There are upcoming options to set up something like Distant or Wezterm
mux server and it is pretty redundant now. It is preferred to set this
into a separate module or just a part of the host.
2023-07-20 10:24:13 +08:00
28faf41a1c
chore: reformat codebase 2023-07-19 17:27:33 +08:00
e4eed3568a
profiles/dev: disable command-not-found
It should fix the conflict between nix-index and command-not-found.
2023-07-16 19:04:19 +08:00
815be385a2
profiles/desktop: move programs.nix-index to dev profile
We now use the NixOS module for it, too.
2023-07-16 18:12:18 +08:00
b33b7a00c9
profiles/dev: add lsof to default dev packages 2023-07-16 15:32:15 +08:00
22e07b8fa4
profiles/dev: replace Docker with Podman 2023-07-16 15:28:32 +08:00
be66567fec
workflows/a-happy-gnome: update extension list 2023-07-14 22:29:00 +08:00
d524444ae0
modules: manually import the modules
This allows for an easier separation of the private modules compared to
the old `importModules` function. It is also easier to use.
2023-07-14 13:14:14 +08:00
8d41d0b764
workflows/a-happy-gnome: fix isInternal usage 2023-07-14 10:51:03 +08:00
426e4e360a
tasks: refactor with path prefix 2023-07-05 13:14:38 +08:00
240515ed3b
tasks: add prefix for sops secrets key path 2023-07-05 13:04:52 +08:00
245b19e663
profiles/gaming: update games and add comments 2023-07-05 11:42:46 +08:00
fdd723ca33
config: convert to lib.getSecrets 2023-07-05 11:38:58 +08:00
4af6d64ef2
profiles/dev: enable envfs service 2023-06-30 10:47:17 +08:00
5754583ce0
programs/wezterm: remove conditionals for shell init
`programs.bash.enable` is apparently removed.
2023-06-29 12:30:03 +08:00
e4b5dec7c1
profiles/server: update preference for several values 2023-06-28 14:02:35 +08:00
d42b74b1e9
profiles/server: update journald log retention
Instead of using a service to force it out, we're using the appropriate
journald settings instead.
2023-06-28 14:01:48 +08:00
d98527c89b
hosts/plover: update Bind config for dynamic updates 2023-06-27 22:56:18 +08:00
d1b6376948
programs/wezterm: update shell init config 2023-06-24 10:26:56 +08:00
1e75e43c5a
profiles/dev: remove Nix profile upgrade user service
It's not useful for much so we're removing it.
2023-06-23 17:13:52 +08:00
3ccdbf3b31
workflows/a-happy-gnome: add gnome-decoder to application list 2023-06-11 12:28:07 +08:00
f882f64989
profiles/server: install additional man-pages 2023-06-11 12:27:37 +08:00
9d99235d94
profiles/gaming: add Steam and its hardware support 2023-06-08 21:16:19 +08:00
59bfa0e9d4
profiles/gaming: add games submodule 2023-06-08 20:00:19 +08:00
bf92556c53
workflows/a-happy-gnome: add Gradience to default app list 2023-06-08 12:17:17 +08:00
33af690062
profiles/desktop: remove Airwave from Wine submodule
It requires to download certain things first which is not easily
available apparently so we'll remove it for now.
2023-06-08 12:15:41 +08:00
ca57681f01
profiles/vpn: init NixOS module 2023-06-06 12:11:47 +08:00
80400c215a
profiles/gaming: init NixOS module 2023-06-06 12:11:25 +08:00
a1b498f273
profiles/desktop: update fetchurl attributes 2023-06-05 12:04:24 +08:00
1ca789bd86
profiles/desktop: update app list for Wine submodule 2023-06-05 17:44:11 +08:00
d939fb3833
tasks/multimedia-archive: add links for gallery-dl
I don't use this task as much as I did this past few weeks but I like to
think this is a shoddier version of following them. An handwritten OPML
should be the better alternative.
2023-05-27 17:47:38 +08:00
ac8a6f94ed
profiles/dev: add extra manpages to system environment 2023-05-20 14:44:53 +08:00
b0e33cc16f
workflows/a-happy-gnome: add adw-gtk3 and Handbrake 2023-05-15 22:11:03 +08:00
ccaaf760d6
workflows/a-happy-gnome: alphabetize package lists 2023-05-09 10:48:00 +08:00
34bda33d8f
workflows/a-happy-gnome: add Flowtime into extra apps list 2023-05-02 12:33:42 +08:00
7084277687
tasks/multimedia-archive: refactor and update list 2023-05-02 08:06:48 +08:00
de656d2bd4
profiles/dev: update upgrade profile service 2023-03-14 08:03:40 +08:00
ef64840c58
profiles/server: add unattended system upgrades as a subcategory 2023-03-11 12:20:22 +08:00
1429b02552
workflows/a-happy-gnome: update desktop and network configuration 2023-03-09 11:12:15 +08:00
7801c09e94
tasks/backup-archive: update public key 2023-03-03 17:16:53 +08:00
0c62da0f7f
profiles/dev: add git-filter-repo to Git toolbelt 2023-03-03 17:16:15 +08:00
6329dd4546
workflows/a-happy-gnome: add eyedropper application 2023-02-25 10:02:14 +08:00
f0682c1f5e
profiles/server: update log cleaner service 2023-02-22 11:29:28 +08:00
ff1927deb5
hosts/ni: update DNS routing for VPN internal network 2023-02-14 11:02:50 +08:00
7edaec8b60
profiles/dev: add Wireshark 2023-02-11 09:01:31 +08:00
0e16da4c45
profiles/server: set UTC as the preferred timezone 2023-02-10 10:15:37 +08:00
ae787f8fcc
config: update comments on config 2023-02-09 14:50:11 +08:00
e54c3dce3d
tasks/backup-archive: rotate private key 2023-02-07 18:29:30 +08:00
ad7a75800b
workflows/a-happy-gnome: update timeout to 20 seconds 2023-02-06 19:35:22 +08:00
bbe083cd6a
workflows/a-happy-gnome: reduce extra configuration 2023-02-05 16:24:34 +08:00
5d23c751f3 profiles/server: convert part of OpenSSH config to settings attribute 2023-01-29 12:03:44 +08:00
e5066837bf profiles/server: upgrade Linux hardened kernel to 6.1
It's a necessity since it will throw an error being the Linux kernel 6.0
reaching end-of-life upstream.
2023-01-29 12:02:49 +08:00
25709b4208 config: remove nix-alien flake input
The latest update failed and that reminded me I mostly use steam-run now
which is more reliable and becoming my go-to tool for running unpatched
binaries in NixOS.
2023-01-29 10:11:14 +08:00
1fd834d2f0 profiles/dev: add applications and fix weekly upgrade service 2023-01-19 20:32:25 +08:00
e26831b756 tasks/backup-archive: update private key 2023-01-18 20:18:22 +08:00
093271368f themes/a-happy-gnome: update "Burn my Windows" settings
I'm a sucker for these subtle window effects.
2023-01-17 21:34:54 +08:00
df6e209723 profiles/dev: add more applications to shell submodule 2023-01-17 21:34:54 +08:00
c63ae20e35 secrets/backup-archive: update structure 2023-01-12 22:03:03 +08:00
b237755736 profiles/server: update config 2023-01-12 22:03:03 +08:00
be405897a6 profiles/server: add tmux 2023-01-12 22:03:03 +08:00
e7bcce4ef6 tasks/backup-archive: assign different passwords for different repos 2023-01-11 13:16:02 +08:00
b6071b0e0e tasks/backup-archive: update job name for remote backup 2023-01-09 13:57:46 +08:00
da827c6e30 tasks/backup-archive: update repo path and repo password 2023-01-07 16:59:17 +08:00
4c34a87366 chore: reformat codebase 2023-01-07 16:06:34 +08:00
85e1914025 config: replace Borgbase with Hetzner storage box for Borg repos 2023-01-07 10:52:31 +08:00
ef53cbead0 profiles/i18n: remove goldendict
Needs qtwebkit which will require a big rebuilding (to my computer).
2022-12-31 19:15:16 +08:00
a8e7de9eec profiles/server: disable mutable users 2022-12-28 14:13:23 +08:00
59461cc416 config: refactor BorgBackup service 2022-12-17 11:17:31 +08:00
3d85142bb2 profiles/desktop: add steam-run application 2022-12-12 14:20:20 +08:00
Gabriel Arazas
e8a1dc2fd9 config: update more comments 2022-12-10 18:47:41 +08:00
Gabriel Arazas
8b47e08c1a profiles/server: update comments 2022-12-06 15:55:23 +08:00
Gabriel Arazas
6bc62988ef profiles/dev: add github-cli and update comments 2022-12-06 15:55:23 +08:00
Gabriel Arazas
05b1c62adf tasks/backup-archive: change default settings 2022-12-06 15:55:23 +08:00