Henrik Lissner 
							
						 
						
							
							
							
							
								
							
							
								526dc19eeb 
								
							 
						 
						
							
							
								
								Fix & redesign qutebrowser config  
							
							 
							
							
							
						 
						
							2021-02-02 00:53:30 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
							
							
								
							
							
								b7d49362a8 
								
							 
						 
						
							
							
								
								gitea.lfs.enable = true  
							
							 
							
							
							
						 
						
							2021-02-01 19:55:05 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
							
							
								
							
							
								ffb097ce0c 
								
							 
						 
						
							
							
								
								fail2ban: move maxretry default to jails  
							
							 
							
							... 
							
							
							
							Throws a "option 'maxretry' in section 'DEFAULT' already exists" error
on startup otherwise. 
							
						 
						
							2021-01-31 18:43:29 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
							
							
								
							
							
								25a87f24d9 
								
							 
						 
						
							
							
								
								Reduce gitea logging & disable basic auth for api  
							
							 
							
							... 
							
							
							
							- Disabled SQL logs because they quickly fill up the logs and aren't
  useful, currently. Also, smaller logs = easier job for fail2ban.
- Disabled basic auth because it's the least secure method of
  interacting with the gitea API. Tokens/oauth are better. 
							
						 
						
							2021-01-31 18:39:01 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
							
							
								
							
							
								c32a1846e0 
								
							 
						 
						
							
							
								
								Tweak fail2ban defaults  
							
							 
							
							
							
						 
						
							2021-01-31 18:39:01 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
							
							
								
							
							
								68fa845a73 
								
							 
						 
						
							
							
								
								Add comments & remove redundant config  
							
							 
							
							... 
							
							
							
							IS_TLS_ENABLED = true is implied if HOST's port is 465 
							
						 
						
							2021-01-31 18:20:17 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
							
							
								
							
							
								78d85018b0 
								
							 
						 
						
							
							
								
								Fix redundant nginx directive  
							
							 
							
							... 
							
							
							
							And typo. Should be 128k, not 1k! 
							
						 
						
							2021-01-30 17:10:25 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
							
							
								
							
							
								fe4a34a9e3 
								
							 
						 
						
							
							
								
								Harden nginx defaults  
							
							 
							
							
							
						 
						
							2021-01-30 17:07:52 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
							
							
								
							
							
								2da00f3ad5 
								
							 
						 
						
							
							
								
								fail2ban: speed up gitea/bitwarden jails  
							
							 
							
							... 
							
							
							
							These services log to syslog, so a log file doesn't exist, meaning
fail2ban must scan the whole journal to seek authentication failure
logs, which is slow! By specifying a journalmatch, it significantly
narrows the scope of their searches. 
							
						 
						
							2021-01-30 06:04:38 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
							
							
								
							
							
								d380e06cba 
								
							 
						 
						
							
							
								
								Make fail2ban defaults less forgiving  
							
							 
							
							
							
						 
						
							2021-01-30 04:52:13 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
							
							
								
							
							
								24d5a426f5 
								
							 
						 
						
							
							
								
								Clean up modules/desktop/media/daw.nix  
							
							 
							
							
							
						 
						
							2021-01-30 02:39:00 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
							
							
								
							
							
								f88552ad64 
								
							 
						 
						
							
							
								
								Add modules/services/syncthing.nix  
							
							 
							
							... 
							
							
							
							Generalizes the module so it's not so Henrik-centric. I know,
blasphemous, but the world only sometimes revolves around me.
Also, adds a new, much simpler config for syncthing. 
							
						 
						
							2021-01-26 23:00:01 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
							
							
								
							
							
								41ac027216 
								
							 
						 
						
							
							
								
								Add modules/backup.nix  
							
							 
							
							... 
							
							
							
							A rudimentary backup and restoration system. 
							
						 
						
							2021-01-26 23:00:01 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
							
							
								
							
							
								dd62442c09 
								
							 
						 
						
							
							
								
								Install ripgrep in zsh module  
							
							 
							
							
							
						 
						
							2021-01-26 22:58:47 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
							
							
								
							
							
								be343218e9 
								
							 
						 
						
							
							
								
								Add modules/desktop/browsers/brave.nix  
							
							 
							
							
							
						 
						
							2021-01-26 22:58:47 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
							
							
								
							
							
								5ceb72ddee 
								
							 
						 
						
							
							
								
								Remove services.gitea.disableRegistration default  
							
							 
							
							... 
							
							
							
							This can be done in the host file, once its ready to disable
registration. 
							
						 
						
							2021-01-26 22:58:47 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
							
							
								
							
							
								e703bd374d 
								
							 
						 
						
							
							
								
								New ssh pubkey & redesign 'hey push'  
							
							 
							
							... 
							
							
							
							Remote rebuilding requires root access, but I don't want root ssh
access (even by ssh key) to be a permanent fixture of my servers.  So
I've changed 'hey push' to copy my remote user's `authorized_keys` to
/root/.ssh/ temporarily, until the rebuild is complete. It is removed
afterwards.
This should be done non-destructively in the future, but it suits my
needs for now. 
							
						 
						
							2021-01-26 22:56:50 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
							
							
								
							
							
								69d730f89d 
								
							 
						 
						
							
							
								
								Add agenix  
							
							 
							
							... 
							
							
							
							Indexes all *.age files in $HOST/secrets/ 
							
						 
						
							2021-01-22 20:01:55 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
							
							
								
							
							
								a1ab0811bb 
								
							 
						 
						
							
							
								
								Refactor  
							
							 
							
							
							
						 
						
							2021-01-20 01:28:30 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								096a60d61f 
								
							 
						 
						
							
							
								
								services/nginx: add main user to nginx group  
							
							 
							
							
							
						 
						
							2021-01-02 00:26:07 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								bca8c84ab3 
								
							 
						 
						
							
							
								
								Minor refactors & readme revision  
							
							 
							
							
							
						 
						
							2021-01-02 00:26:00 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								608b3472b9 
								
							 
						 
						
							
							
								
								security.acme.acceptTerms = true  
							
							 
							
							... 
							
							
							
							So we don't have to later. 
							
						 
						
							2021-01-02 00:24:20 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								177a7eec6f 
								
							 
						 
						
							
							
								
								Add services/fail2ban module  
							
							 
							
							... 
							
							
							
							With bitwarden_rs & gitea filters 
							
						 
						
							2021-01-01 21:19:06 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								25f0d8044a 
								
							 
						 
						
							
							
								
								Minor refactors  
							
							 
							
							
							
						 
						
							2020-12-31 19:34:11 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								13afdacb45 
								
							 
						 
						
							
							
								
								Initial password "nixos"  
							
							 
							
							... 
							
							
							
							Instead of "nix". Will be changed immediately post-install anyway. 
							
						 
						
							2020-12-31 17:31:29 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								e74a392d76 
								
							 
						 
						
							
							
								
								Add modules/shell/bitwarden module  
							
							 
							
							... 
							
							
							
							For bitwarden-cli 
							
						 
						
							2020-12-21 22:46:17 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								dfcb990be4 
								
							 
						 
						
							
							
								
								More comments; add to shiro README.org  
							
							 
							
							
							
						 
						
							2020-12-21 22:38:06 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								203629c476 
								
							 
						 
						
							
							
								
								Add modules.shell.pass.passwordStoreDir option  
							
							 
							
							
							
						 
						
							2020-12-21 22:38:06 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								9572aa99a6 
								
							 
						 
						
							
							
								
								Default gitea to sqlite  
							
							 
							
							... 
							
							
							
							Most portable default. 
							
						 
						
							2020-12-19 23:02:46 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								807b76e640 
								
							 
						 
						
							
							
								
								hosts/ao: finish bitwarden config  
							
							 
							
							
							
						 
						
							2020-12-19 08:05:05 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								9d257c8e55 
								
							 
						 
						
							
							
								
								Bump  
							
							 
							
							
							
						 
						
							2020-12-19 04:31:58 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								c9efc8c9e0 
								
							 
						 
						
							
							
								
								Add basic bitwarden service module  
							
							 
							
							
							
						 
						
							2020-12-18 23:42:52 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								426eedea86 
								
							 
						 
						
							
							
								
								Switch to emacsPgtkGcc  
							
							 
							
							... 
							
							
							
							And bump emacs-overlay 
							
						 
						
							2020-11-27 13:58:06 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								64a065ef47 
								
							 
						 
						
							
							
								
								Use inkscape from unstable branch  
							
							 
							
							
							
						 
						
							2020-11-17 15:28:05 -05:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								d5c807a4f9 
								
							 
						 
						
							
							
								
								Move to nixpkgs/master  
							
							 
							
							... 
							
							
							
							For that 5.9.2 kernel goodness. Since I can track nixpkgs myself, I'm
using nixpkgs/master now (and twice, so I can track them at separate
rates).
Though, for now, nixpkgs == nixpkgs.unstable 
							
						 
						
							2020-10-30 01:41:35 -04:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								afea2c28d8 
								
							 
						 
						
							
							
								
								Remove dependency on killall in bspwmrc  
							
							 
							
							
							
						 
						
							2020-10-26 14:05:10 -04:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								f0bd026007 
								
							 
						 
						
							
							
								
								Fix polybar+bspwm onReload handler  
							
							 
							
							
							
						 
						
							2020-10-26 14:04:52 -04:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								804011f538 
								
							 
						 
						
							
							
								
								Refactor flake  
							
							 
							
							
							
						 
						
							2020-10-26 05:48:12 -04:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								d8730b6d30 
								
							 
						 
						
							
							
								
								Fix GTK config  
							
							 
							
							
							
						 
						
							2020-10-26 00:28:37 -04:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								86a8f40ea2 
								
							 
						 
						
							
							
								
								Minor comment revision  
							
							 
							
							
							
						 
						
							2020-10-25 15:52:50 -04:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								ccdeb4cb8d 
								
							 
						 
						
							
							
								
								Move fonts to theme  
							
							 
							
							
							
						 
						
							2020-10-25 15:52:50 -04:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								b81f38aa07 
								
							 
						 
						
							
							
								
								Fix zsh syntax highlighting in first line  
							
							 
							
							... 
							
							
							
							Due to unterminated code. 
							
						 
						
							2020-10-25 15:52:50 -04:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								7e6c26fd9c 
								
							 
						 
						
							
							
								
								Minor refactors  
							
							 
							
							
							
						 
						
							2020-10-25 15:52:50 -04:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								14e2aada30 
								
							 
						 
						
							
							
								
								Refactor theme system, add 'hey theme' & reload handlers  
							
							 
							
							... 
							
							
							
							Themes can now be swapped with 'hey theme NAME', or reloaded with the
reloadTheme script. 
							
						 
						
							2020-10-25 15:52:50 -04:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								c50a51f987 
								
							 
						 
						
							
							
								
								Rename fluorescence -> alucard  
							
							 
							
							... 
							
							
							
							Since it's dracula inspired 'n all... 
							
						 
						
							2020-10-23 20:53:34 -04:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								2736c461a1 
								
							 
						 
						
							
							
								
								Add services/teamviewer module  
							
							 
							
							
							
						 
						
							2020-10-21 15:49:45 -04:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								3da2c0c62e 
								
							 
						 
						
							
							
								
								Bump  
							
							 
							
							
							
						 
						
							2020-10-20 15:31:00 -04:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								a282ce48ae 
								
							 
						 
						
							
							
								
								Switch to emacsGcc  
							
							 
							
							
							
						 
						
							2020-10-20 15:30:54 -04:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								ffed225e8d 
								
							 
						 
						
							
							
								
								Slightly smaller icons in rofi  
							
							 
							
							
							
						 
						
							2020-10-17 23:40:07 -04:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Henrik Lissner 
							
						 
						
							
							
								
								
							
							
							
								
							
							
								8f57daf4bd 
								
							 
						 
						
							
							
								
								Minor refactors  
							
							 
							
							
							
						 
						
							2020-10-17 23:40:07 -04:00