Commit graph

80 commits

Author SHA1 Message Date
Henrik Lissner 5c29620dee Harden & optimize networking settings 2021-02-21 10:27:17 -05:00
Henrik Lissner 0f0f314643 Add noexec & size=25% to tmpfs on /tmp
Also auto-enable boot.cleanTmpDir if boot.tmpOnTmpfs is off. /tmp
shouldn't be treated as persistent storage!
2021-02-20 20:50:25 -05:00
Henrik Lissner 3f72e498d6 hosts/{kuro,shiro}: harden storage/backup mounts
Removing unneeded privileges from backup mounts.

Also adds noatime to nfs mounts for slight improvement in throughput.
2021-02-20 18:53:49 -05:00
Henrik Lissner 1ea4dea1d1 Add modules/desktop/apps/signal 2021-02-20 17:53:37 -05:00
Henrik Lissner dfbb3442a0 hosts/kuro: update readme
+ zfs commands no longer apply
+ add mount commands for /usr/store
2021-02-15 15:37:27 -05:00
Henrik Lissner 7d6d44486f hosts/ao: update secret 2021-02-15 13:16:18 -05:00
Henrik Lissner 021d50670c hosts/ao: fix typo in nginx config 2021-02-14 19:20:54 -05:00
Henrik Lissner bb6e4121f3 ao: cache static assets & turn off proxy buffering
Also increase clientMaxBodySize, since I big files could be uploaded
over HTTP.
2021-02-13 15:28:27 -05:00
Henrik Lissner c2efad829d kuro: add /usr/store mount
And automount it (and /usr/drive)
2021-02-12 11:21:29 -05:00
Henrik Lissner 0b1ed32aaf Add/revise comments 2021-02-09 22:06:01 -05:00
Henrik Lissner ddf772a4d8 Add adl module and packages 2021-02-09 22:00:17 -05:00
Henrik Lissner be5d10a008 Move hw modules cfg to hardware-configuration.nix's 2021-02-02 04:08:01 -05:00
Henrik Lissner 930312b650 hosts/kuro: remove ZFS drives & support
I've moved this storage to an offsite NAS, so I don't need this on kuro.
2021-02-02 04:07:58 -05:00
Henrik Lissner ca5876dba2 hosts/{kuro,shiro}: add NFS share 2021-02-02 00:55:34 -05:00
Henrik Lissner 526dc19eeb Fix & redesign qutebrowser config 2021-02-02 00:53:30 -05:00
Henrik Lissner e0c0006554 hosts/ao: gitea.disableRegistration = true
And remove redundant config.
2021-02-01 19:50:55 -05:00
Henrik Lissner 68fa845a73 Add comments & remove redundant config
IS_TLS_ENABLED = true is implied if HOST's port is 465
2021-01-31 18:20:17 -05:00
Henrik Lissner fe4a34a9e3 Harden nginx defaults 2021-01-30 17:07:52 -05:00
Henrik Lissner 2c3b2b1294 hosts/kuro: remove asic kernel module
No longer needed now that we're on 5.10 (with built in support for my
2.5G network card).
2021-01-29 14:22:52 -05:00
Henrik Lissner a7e7b1703a hosts/{ao,shiro}: tweak cpu governors 2021-01-29 14:07:05 -05:00
Henrik Lissner 1455114778 hosts/shiro: update module list 2021-01-26 23:00:01 -05:00
Henrik Lissner f88552ad64 Add modules/services/syncthing.nix
Generalizes the module so it's not so Henrik-centric. I know,
blasphemous, but the world only sometimes revolves around me.

Also, adds a new, much simpler config for syncthing.
2021-01-26 23:00:01 -05:00
Henrik Lissner 8fd332dcc4 Add nofail option to zfs filesystems
So they don't prevent startup when zfs fails to mount non-essential
drives, like it currently does with 2.0.1 for some reason.
2021-01-26 22:58:47 -05:00
Henrik Lissner d0309c51a0 hosts/ao: rewrite & use agenix 2021-01-26 22:58:47 -05:00
Henrik Lissner d1e987c4ba hosts/kuro: set default browser to brave
Testing the waters. Firefox's occasional crashes and freezes are a
bother.
2021-01-26 22:58:47 -05:00
Henrik Lissner 101effe2da
kuro: replace pass with bitwarden CLI
First step to switch to bitwarden; currently hosted on ao, but haven't
finalized ao's config yet.
2021-01-02 00:27:15 -05:00
Henrik Lissner 0b549caada
Update linode config 2020-12-31 17:34:39 -05:00
Henrik Lissner 2302f1291a
Update generic linode config 2020-12-31 01:59:04 -05:00
Henrik Lissner e74a392d76
Add modules/shell/bitwarden module
For bitwarden-cli
2020-12-21 22:46:17 -05:00
Henrik Lissner dfcb990be4
More comments; add to shiro README.org 2020-12-21 22:38:06 -05:00
Henrik Lissner cca95276d1
aka -> kiiro
Not using aka for the time being. Not an NixOS machine though.
2020-12-19 08:05:34 -05:00
Henrik Lissner 807b76e640
hosts/ao: finish bitwarden config 2020-12-19 08:05:05 -05:00
Henrik Lissner 96a262d81b
hosts/ao: tweak nginx configs 2020-12-19 03:25:04 -05:00
Henrik Lissner e0a127386f
hosts/ao: update services.gitea config
services.gitea.extraConfig was replaced with *.settings.
2020-12-19 02:49:46 -05:00
Henrik Lissner c376499be8
hosts/ao: update hardware config
No longer has an external drive (now that I have a NAS).

And broadcom config isn't needed anyway (I never use wifi with this
system).
2020-12-19 02:49:15 -05:00
Henrik Lissner adc7490733
Fix ao config 2020-12-18 23:42:24 -05:00
Henrik Lissner 0d902a00ac
Update linode instructions 2020-11-17 15:27:50 -05:00
Henrik Lissner d5c807a4f9
Move to nixpkgs/master
For that 5.9.2 kernel goodness. Since I can track nixpkgs myself, I'm
using nixpkgs/master now (and twice, so I can track them at separate
rates).

Though, for now, nixpkgs == nixpkgs.unstable
2020-10-30 01:41:35 -04:00
Henrik Lissner 804011f538
Refactor flake 2020-10-26 05:48:12 -04:00
Henrik Lissner 0256f547b0
EDITOR=nvim 2020-10-25 15:52:50 -04:00
Henrik Lissner 14e2aada30
Refactor theme system, add 'hey theme' & reload handlers
Themes can now be swapped with 'hey theme NAME', or reloaded with the
reloadTheme script.
2020-10-25 15:52:50 -04:00
Henrik Lissner 2736c461a1
Add services/teamviewer module 2020-10-21 15:49:45 -04:00
Henrik Lissner 6d8e303501
Fix parted commands for ssd's in kuro readme 2020-10-15 15:54:53 -04:00
Henrik Lissner 6bb0d2766b
Fix brightness control on shiro 2020-10-15 03:42:02 -04:00
Henrik Lissner 1b84a3c047
Minor tweaks/refactors 2020-10-14 13:48:38 -04:00
Henrik Lissner a75c64d04a
Rewrite to use flakes
This puts a hard dependency on 20.09, but that's to be expected.
2020-10-11 01:31:33 -04:00
Henrik Lissner 75c928e00e
Enable node module on kuro 2020-05-15 20:56:59 -04:00
Henrik Lissner 8a3ccf4326
Use ssh-agent for ssh, instead of gpg 2020-04-27 19:20:50 -04:00
Henrik Lissner ab82036ebe
Update luks config (for 20.03) 2020-04-24 01:02:08 -04:00
Henrik Lissner b0997d6dcb
Update kuro config 2020-04-24 00:51:41 -04:00