aynish/helm
1
0
Fork 0
Code Pull requests Packages Projects Releases Activity
2140 commits 16 branches 0 tags 41 MiB
Commit graph

2140 commits

This branch
This branch
All branches
Author SHA1 Message Date
Henrik Lissner c805e9bedc Don't sign commits anymore 
There's not much point to it. It isn't foolproof and only slows down the
process.
 2021-01-26 22:58:47 -05:00
Henrik Lissner 64bec0f415 Generalize bin/hey 
It'll operate out of /etc/nixos or /etc/dotfiles, rather than where the
script lives. This allows it to be used for flakes instantiated from our
templates.
 2021-01-26 22:58:47 -05:00
Henrik Lissner abf2aeb689 bin/hey gc: clean up & delete leftover secrets 2021-01-26 22:58:47 -05:00
Henrik Lissner 3d3497d9e9 bin/hey push: clean up/stop redundant sudo prompts 2021-01-26 22:58:47 -05:00
Henrik Lissner dd62442c09 Install ripgrep in zsh module 2021-01-26 22:58:47 -05:00
Henrik Lissner d0309c51a0 hosts/ao: rewrite & use agenix 2021-01-26 22:58:47 -05:00
Henrik Lissner d1e987c4ba hosts/kuro: set default browser to brave 
Testing the waters. Firefox's occasional crashes and freezes are a
bother.
 2021-01-26 22:58:47 -05:00
Henrik Lissner be343218e9 Add modules/desktop/browsers/brave.nix 2021-01-26 22:58:47 -05:00
Henrik Lissner 07f82da2a2 bin/hey: revise comments & refactor 2021-01-26 22:58:47 -05:00
Henrik Lissner 82ee5bef6a bin/hey: add --option pure-eval no 
There are cases where impure evaluate is necessary or unavoidable.
 2021-01-26 22:58:47 -05:00
Henrik Lissner 5ceb72ddee Remove services.gitea.disableRegistration default 
This can be done in the host file, once its ready to disable
registration.
 2021-01-26 22:58:47 -05:00
Henrik Lissner e703bd374d New ssh pubkey & redesign 'hey push' 
Remote rebuilding requires root access, but I don't want root ssh
access (even by ssh key) to be a permanent fixture of my servers.  So
I've changed 'hey push' to copy my remote user's `authorized_keys` to
/root/.ssh/ temporarily, until the rebuild is complete. It is removed
afterwards.

This should be done non-destructively in the future, but it suits my
needs for now.
 2021-01-26 22:56:50 -05:00
Henrik Lissner 69d730f89d Add agenix 
Indexes all *.age files in $HOST/secrets/
 2021-01-22 20:01:55 -05:00
Henrik Lissner c92199848c Add flake templates and defaultApp 
defaultApp lets you use bin/hey via nix run.
 2021-01-22 20:01:55 -05:00
Henrik Lissner a1ab0811bb Refactor 2021-01-20 01:28:30 -05:00
Henrik Lissner 0152e1a95f Bump emacs-overlay, nixos-hardware, nixpkgs-unstable 2021-01-20 01:04:02 -05:00
Henrik Lissner cf85294497 bin/mov2gif: fix comments; use cached-nix-shell 2021-01-20 00:44:35 -05:00
Henrik Lissner ab1640e486 Update license year 2021-01-20 00:44:17 -05:00
Henrik Lissner 101effe2da
kuro: replace pass with bitwarden CLI 
First step to switch to bitwarden; currently hosted on ao, but haven't
finalized ao's config yet.
 2021-01-02 00:27:15 -05:00
Henrik Lissner 096a60d61f
services/nginx: add main user to nginx group 2021-01-02 00:26:07 -05:00
Henrik Lissner bca8c84ab3
Minor refactors & readme revision 2021-01-02 00:26:00 -05:00
Henrik Lissner 608b3472b9
security.acme.acceptTerms = true 
So we don't have to later.
 2021-01-02 00:24:20 -05:00
Henrik Lissner 2a678d2b75
Register as flake template 
First step to generalizing this repo. Makes it easier to deploy. Later I
may move my host configs to another repo.
 2021-01-02 00:24:14 -05:00
Henrik Lissner 177a7eec6f
Add services/fail2ban module 
With bitwarden_rs & gitea filters
 2021-01-01 21:19:06 -05:00
Henrik Lissner 25f0d8044a
Minor refactors 2020-12-31 19:34:11 -05:00
Henrik Lissner 86a7b8ab79
Bump emacs-overlay, nixos-hardware, nixpkgs-unstable 2020-12-31 19:32:50 -05:00
Henrik Lissner 0b549caada
Update linode config 2020-12-31 17:34:39 -05:00
Henrik Lissner 13afdacb45
Initial password "nixos" 
Instead of "nix". Will be changed immediately post-install anyway.
 2020-12-31 17:31:29 -05:00
Henrik Lissner 2302f1291a
Update generic linode config 2020-12-31 01:59:04 -05:00
Henrik Lissner e74a392d76
Add modules/shell/bitwarden module 
For bitwarden-cli
 2020-12-21 22:46:17 -05:00
Henrik Lissner 6b43fcb14d
Add unzip to base utilities 2020-12-21 22:38:06 -05:00
Henrik Lissner dfcb990be4
More comments; add to shiro README.org 2020-12-21 22:38:06 -05:00
Henrik Lissner 203629c476
Add modules.shell.pass.passwordStoreDir option 2020-12-21 22:38:06 -05:00
Henrik Lissner 8ffe76912f
Bump emacs-overlay, home-manager, nixpkgs-unstable 
emacs-overlay    66d2a58 -> aa95116
home-manager     1a7f190 -> 2b1892e
nixpkgs-unstable 453c116 -> e55f772
 2020-12-20 20:16:01 -05:00
Henrik Lissner a7c9a87d5d
bin/hey: use $HOSTNAME (but fall back to $HOST) 2020-12-20 20:16:01 -05:00
Henrik Lissner aa350a6a5c
bin/hey: add {sh,repl} commands 2020-12-20 20:16:00 -05:00
Henrik Lissner f8e2746e7e
Add shell.nix 2020-12-20 20:16:00 -05:00
Henrik Lissner 9572aa99a6
Default gitea to sqlite 
Most portable default.
 2020-12-19 23:02:46 -05:00
Henrik Lissner cca95276d1
aka -> kiiro 
Not using aka for the time being. Not an NixOS machine though.
 2020-12-19 08:05:34 -05:00
Henrik Lissner 807b76e640
hosts/ao: finish bitwarden config 2020-12-19 08:05:05 -05:00
Henrik Lissner 9d257c8e55
Bump 2020-12-19 04:31:58 -05:00
Henrik Lissner 96a262d81b
hosts/ao: tweak nginx configs 2020-12-19 03:25:04 -05:00
Henrik Lissner 725b1aa8ed
Add two more helpful links to README 2020-12-19 02:57:52 -05:00
Henrik Lissner e0a127386f
hosts/ao: update services.gitea config 
services.gitea.extraConfig was replaced with *.settings.
 2020-12-19 02:49:46 -05:00
Henrik Lissner c376499be8
hosts/ao: update hardware config 
No longer has an external drive (now that I have a NAS).

And broadcom config isn't needed anyway (I never use wifi with this
system).
 2020-12-19 02:49:15 -05:00
Henrik Lissner c9efc8c9e0
Add basic bitwarden service module 2020-12-18 23:42:52 -05:00
Henrik Lissner 864a0cb5e0
Reduce false positives with zman alias 2020-12-18 23:42:48 -05:00
Henrik Lissner adc7490733
Fix ao config 2020-12-18 23:42:24 -05:00
Henrik Lissner 20d6118177
Zhu Li, do the thing! 
Critical hotfix is critical.
 2020-12-12 14:11:31 -05:00
Henrik Lissner c079e1f0f9
Super important readme edits 
Because important.
 2020-12-11 19:08:53 -05:00