Henrik Lissner
93cada691e
Remove celluloid
...
Unused and unneeded GUI for mpv.
2021-02-15 13:16:18 -05:00
Henrik Lissner
7d6d44486f
hosts/ao: update secret
2021-02-15 13:16:18 -05:00
Henrik Lissner
b9e7d7213c
bin/hey: add option docs & fix error handling
2021-02-15 13:16:18 -05:00
Henrik Lissner
82bab563cd
Fix incorrect hostname in flake URI on "hey ssh"
2021-02-14 19:23:13 -05:00
Henrik Lissner
4352f2362f
Remove nixpkgs-stable input
...
I don't use it. Likely won't.
2021-02-14 19:23:13 -05:00
Henrik Lissner
021d50670c
hosts/ao: fix typo in nginx config
2021-02-14 19:20:54 -05:00
Henrik Lissner
bb6e4121f3
ao: cache static assets & turn off proxy buffering
...
Also increase clientMaxBodySize, since I big files could be uploaded
over HTTP.
2021-02-13 15:28:27 -05:00
Henrik Lissner
b155537219
Rewrite bin/hey in ruby
...
Because bash is a pain at this (and planned) levels of complexity.
Also, better auto-documentation on 'hey {h,help,-h,--help}'
2021-02-13 15:28:27 -05:00
Henrik Lissner
66868d48ac
Bump
...
emacs-overlay: 0a78ce6 -> 372abc5
home-manager: 87e2ec3 -> 1ee1d01
nixos-hardware: 3657e7c -> 0cb5491
nixpkgs-stable: d4c29df -> 2394284
nixpkgs-unstable: f72648d -> ff96a0f
2021-02-13 12:19:40 -05:00
Henrik Lissner
c2efad829d
kuro: add /usr/store mount
...
And automount it (and /usr/drive)
2021-02-12 11:21:29 -05:00
Henrik Lissner
eb3f1c1e57
Add stable channel; switch to nixos-unstable; bump
2021-02-11 13:13:21 -05:00
Henrik Lissner
5c0a7339a5
Polish qutebrowser theme, integration, & config
2021-02-09 22:07:07 -05:00
Henrik Lissner
f3fc78dc04
Add emacs-everywhere support
2021-02-09 22:06:16 -05:00
Henrik Lissner
0b1ed32aaf
Add/revise comments
2021-02-09 22:06:01 -05:00
Henrik Lissner
80a78fe7a7
modules/desktop: add xorg.xwininfo package
2021-02-09 22:00:49 -05:00
Henrik Lissner
af7e92b98d
Add XDG_BIN_HOME to $PATH
2021-02-09 22:00:39 -05:00
Henrik Lissner
ddf772a4d8
Add adl module and packages
2021-02-09 22:00:17 -05:00
Henrik Lissner
f4a0da4d87
Use wally-cli & new hardware.keyboard.zsa module for ergodx
2021-02-06 23:33:09 -05:00
Henrik Lissner
8d39061f48
qutebrowser: add bitwarden integration & polish
...
+ Add bitwarden integration
+ Polish xkcd userstyle (to better match the alucard theme)
+ Rethink qutebrowser keybinds. Some were redundant, others misplaced.
2021-02-06 01:26:06 -05:00
Henrik Lissner
54058c7e47
config/git: set init.defaultBranch
...
To silence the warning.
2021-02-05 18:32:06 -05:00
Henrik Lissner
fd4932ea88
Use unstable neovim
2021-02-05 18:31:36 -05:00
Henrik Lissner
deb071d556
qutebrowser: mitigate flash of white between page loads
2021-02-05 18:31:13 -05:00
Henrik Lissner
299257cfd4
Upgrade to qutebrowser 2.0.1
...
+ Refactor config (again).
+ Accommodate new Brave adblocker.
+ Polish UI settings (overlay scrollbar)
+ Remove outdated userstyles (some of these sites offer dark modes now)
2021-02-02 04:08:01 -05:00
Henrik Lissner
9f856bbe47
Simplify qutebrowser config
2021-02-02 04:08:01 -05:00
Henrik Lissner
895a2daf92
system.stateVersion = 21.03
2021-02-02 04:08:01 -05:00
Henrik Lissner
be5d10a008
Move hw modules cfg to hardware-configuration.nix's
2021-02-02 04:08:01 -05:00
Henrik Lissner
930312b650
hosts/kuro: remove ZFS drives & support
...
I've moved this storage to an offsite NAS, so I don't need this on kuro.
2021-02-02 04:07:58 -05:00
Henrik Lissner
ca5876dba2
hosts/{kuro,shiro}: add NFS share
2021-02-02 00:55:34 -05:00
Henrik Lissner
526dc19eeb
Fix & redesign qutebrowser config
2021-02-02 00:53:30 -05:00
Henrik Lissner
b7d49362a8
gitea.lfs.enable = true
2021-02-01 19:55:05 -05:00
Henrik Lissner
e0c0006554
hosts/ao: gitea.disableRegistration = true
...
And remove redundant config.
2021-02-01 19:50:55 -05:00
Henrik Lissner
ffb097ce0c
fail2ban: move maxretry default to jails
...
Throws a "option 'maxretry' in section 'DEFAULT' already exists" error
on startup otherwise.
2021-01-31 18:43:29 -05:00
Henrik Lissner
25a87f24d9
Reduce gitea logging & disable basic auth for api
...
- Disabled SQL logs because they quickly fill up the logs and aren't
useful, currently. Also, smaller logs = easier job for fail2ban.
- Disabled basic auth because it's the least secure method of
interacting with the gitea API. Tokens/oauth are better.
2021-01-31 18:39:01 -05:00
Henrik Lissner
c32a1846e0
Tweak fail2ban defaults
2021-01-31 18:39:01 -05:00
Henrik Lissner
68fa845a73
Add comments & remove redundant config
...
IS_TLS_ENABLED = true is implied if HOST's port is 465
2021-01-31 18:20:17 -05:00
Henrik Lissner
78d85018b0
Fix redundant nginx directive
...
And typo. Should be 128k, not 1k!
2021-01-30 17:10:25 -05:00
Henrik Lissner
fe4a34a9e3
Harden nginx defaults
2021-01-30 17:07:52 -05:00
Henrik Lissner
2da00f3ad5
fail2ban: speed up gitea/bitwarden jails
...
These services log to syslog, so a log file doesn't exist, meaning
fail2ban must scan the whole journal to seek authentication failure
logs, which is slow! By specifying a journalmatch, it significantly
narrows the scope of their searches.
2021-01-30 06:04:38 -05:00
Henrik Lissner
0fb9406b75
Add bind package to default global packages
2021-01-30 04:52:16 -05:00
Henrik Lissner
d380e06cba
Make fail2ban defaults less forgiving
2021-01-30 04:52:13 -05:00
Henrik Lissner
24d5a426f5
Clean up modules/desktop/media/daw.nix
2021-01-30 02:39:00 -05:00
Henrik Lissner
af525f2514
bin/hey: forward -iApeq to nix-env
2021-01-29 23:09:17 -05:00
Henrik Lissner
622121d7da
Correct clone path in README
2021-01-29 14:23:18 -05:00
Henrik Lissner
2c3b2b1294
hosts/kuro: remove asic kernel module
...
No longer needed now that we're on 5.10 (with built in support for my
2.5G network card).
2021-01-29 14:22:52 -05:00
Henrik Lissner
a7e7b1703a
hosts/{ao,shiro}: tweak cpu governors
2021-01-29 14:07:05 -05:00
Henrik Lissner
1455114778
hosts/shiro: update module list
2021-01-26 23:00:01 -05:00
Henrik Lissner
f88552ad64
Add modules/services/syncthing.nix
...
Generalizes the module so it's not so Henrik-centric. I know,
blasphemous, but the world only sometimes revolves around me.
Also, adds a new, much simpler config for syncthing.
2021-01-26 23:00:01 -05:00
Henrik Lissner
41ac027216
Add modules/backup.nix
...
A rudimentary backup and restoration system.
2021-01-26 23:00:01 -05:00
Henrik Lissner
5443df10b9
Bump
2021-01-26 22:58:47 -05:00
Henrik Lissner
8fd332dcc4
Add nofail option to zfs filesystems
...
So they don't prevent startup when zfs fails to mount non-essential
drives, like it currently does with 2.0.1 for some reason.
2021-01-26 22:58:47 -05:00