Commit graph

2079 commits

Author SHA1 Message Date
Henrik Lissner e703bd374d New ssh pubkey & redesign 'hey push'
Remote rebuilding requires root access, but I don't want root ssh
access (even by ssh key) to be a permanent fixture of my servers.  So
I've changed 'hey push' to copy my remote user's `authorized_keys` to
/root/.ssh/ temporarily, until the rebuild is complete. It is removed
afterwards.

This should be done non-destructively in the future, but it suits my
needs for now.
2021-01-26 22:56:50 -05:00
Henrik Lissner 69d730f89d Add agenix
Indexes all *.age files in $HOST/secrets/
2021-01-22 20:01:55 -05:00
Henrik Lissner c92199848c Add flake templates and defaultApp
defaultApp lets you use bin/hey via nix run.
2021-01-22 20:01:55 -05:00
Henrik Lissner a1ab0811bb Refactor 2021-01-20 01:28:30 -05:00
Henrik Lissner 0152e1a95f Bump emacs-overlay, nixos-hardware, nixpkgs-unstable 2021-01-20 01:04:02 -05:00
Henrik Lissner cf85294497 bin/mov2gif: fix comments; use cached-nix-shell 2021-01-20 00:44:35 -05:00
Henrik Lissner ab1640e486 Update license year 2021-01-20 00:44:17 -05:00
Henrik Lissner 101effe2da
kuro: replace pass with bitwarden CLI
First step to switch to bitwarden; currently hosted on ao, but haven't
finalized ao's config yet.
2021-01-02 00:27:15 -05:00
Henrik Lissner 096a60d61f
services/nginx: add main user to nginx group 2021-01-02 00:26:07 -05:00
Henrik Lissner bca8c84ab3
Minor refactors & readme revision 2021-01-02 00:26:00 -05:00
Henrik Lissner 608b3472b9
security.acme.acceptTerms = true
So we don't have to later.
2021-01-02 00:24:20 -05:00
Henrik Lissner 2a678d2b75
Register as flake template
First step to generalizing this repo. Makes it easier to deploy. Later I
may move my host configs to another repo.
2021-01-02 00:24:14 -05:00
Henrik Lissner 177a7eec6f
Add services/fail2ban module
With bitwarden_rs & gitea filters
2021-01-01 21:19:06 -05:00
Henrik Lissner 25f0d8044a
Minor refactors 2020-12-31 19:34:11 -05:00
Henrik Lissner 86a7b8ab79
Bump emacs-overlay, nixos-hardware, nixpkgs-unstable 2020-12-31 19:32:50 -05:00
Henrik Lissner 0b549caada
Update linode config 2020-12-31 17:34:39 -05:00
Henrik Lissner 13afdacb45
Initial password "nixos"
Instead of "nix". Will be changed immediately post-install anyway.
2020-12-31 17:31:29 -05:00
Henrik Lissner 2302f1291a
Update generic linode config 2020-12-31 01:59:04 -05:00
Henrik Lissner e74a392d76
Add modules/shell/bitwarden module
For bitwarden-cli
2020-12-21 22:46:17 -05:00
Henrik Lissner 6b43fcb14d
Add unzip to base utilities 2020-12-21 22:38:06 -05:00
Henrik Lissner dfcb990be4
More comments; add to shiro README.org 2020-12-21 22:38:06 -05:00
Henrik Lissner 203629c476
Add modules.shell.pass.passwordStoreDir option 2020-12-21 22:38:06 -05:00
Henrik Lissner 8ffe76912f
Bump emacs-overlay, home-manager, nixpkgs-unstable
emacs-overlay    66d2a58 -> aa95116
home-manager     1a7f190 -> 2b1892e
nixpkgs-unstable 453c116 -> e55f772
2020-12-20 20:16:01 -05:00
Henrik Lissner a7c9a87d5d
bin/hey: use $HOSTNAME (but fall back to $HOST) 2020-12-20 20:16:01 -05:00
Henrik Lissner aa350a6a5c
bin/hey: add {sh,repl} commands 2020-12-20 20:16:00 -05:00
Henrik Lissner f8e2746e7e
Add shell.nix 2020-12-20 20:16:00 -05:00
Henrik Lissner 9572aa99a6
Default gitea to sqlite
Most portable default.
2020-12-19 23:02:46 -05:00
Henrik Lissner cca95276d1
aka -> kiiro
Not using aka for the time being. Not an NixOS machine though.
2020-12-19 08:05:34 -05:00
Henrik Lissner 807b76e640
hosts/ao: finish bitwarden config 2020-12-19 08:05:05 -05:00
Henrik Lissner 9d257c8e55
Bump 2020-12-19 04:31:58 -05:00
Henrik Lissner 96a262d81b
hosts/ao: tweak nginx configs 2020-12-19 03:25:04 -05:00
Henrik Lissner 725b1aa8ed
Add two more helpful links to README 2020-12-19 02:57:52 -05:00
Henrik Lissner e0a127386f
hosts/ao: update services.gitea config
services.gitea.extraConfig was replaced with *.settings.
2020-12-19 02:49:46 -05:00
Henrik Lissner c376499be8
hosts/ao: update hardware config
No longer has an external drive (now that I have a NAS).

And broadcom config isn't needed anyway (I never use wifi with this
system).
2020-12-19 02:49:15 -05:00
Henrik Lissner c9efc8c9e0
Add basic bitwarden service module 2020-12-18 23:42:52 -05:00
Henrik Lissner 864a0cb5e0
Reduce false positives with zman alias 2020-12-18 23:42:48 -05:00
Henrik Lissner adc7490733
Fix ao config 2020-12-18 23:42:24 -05:00
Henrik Lissner 20d6118177
Zhu Li, do the thing!
Critical hotfix is critical.
2020-12-12 14:11:31 -05:00
Henrik Lissner c079e1f0f9
Super important readme edits
Because important.
2020-12-11 19:08:53 -05:00
Henrik Lissner 5219b82ae3
Bump emacs-overlay, nixos-hardware, nixpkgs-unstable
emacs-overlay:    74292b5 -> 5921b68
nixos-hardware:   40ade7c -> 87522b2
nixpkgs-unstable: c6f7e1f -> c60bf87
2020-12-11 18:24:49 -05:00
Henrik Lissner 5866008d0c
Fix bin/{mov2gif,bspwm/presel}
Shifting the first is no longer necessary for nix-shell scripts.
2020-11-27 13:59:12 -05:00
Henrik Lissner 426eedea86
Switch to emacsPgtkGcc
And bump emacs-overlay
2020-11-27 13:58:06 -05:00
Henrik Lissner 121b57192c
Bump
emacs-overlay     a98ec6e -> a3a0f12
nixos-hardware    46a68df -> 40ade7c
nixpkgs-unstable  fcc6849 -> c6f7e1f
2020-11-23 02:25:28 -05:00
Henrik Lissner 64a065ef47
Use inkscape from unstable branch 2020-11-17 15:28:05 -05:00
Henrik Lissner 0d902a00ac
Update linode instructions 2020-11-17 15:27:50 -05:00
Henrik Lissner d5c807a4f9
Move to nixpkgs/master
For that 5.9.2 kernel goodness. Since I can track nixpkgs myself, I'm
using nixpkgs/master now (and twice, so I can track them at separate
rates).

Though, for now, nixpkgs == nixpkgs.unstable
2020-10-30 01:41:35 -04:00
Henrik Lissner 8f46696789
Update screenshot links 2020-10-26 14:18:12 -04:00
Henrik Lissner afea2c28d8
Remove dependency on killall in bspwmrc 2020-10-26 14:05:10 -04:00
Henrik Lissner f0bd026007
Fix polybar+bspwm onReload handler 2020-10-26 14:04:52 -04:00
Henrik Lissner 804011f538
Refactor flake 2020-10-26 05:48:12 -04:00