Henrik Lissner
78d85018b0
Fix redundant nginx directive
...
And typo. Should be 128k, not 1k!
2021-01-30 17:10:25 -05:00
Henrik Lissner
fe4a34a9e3
Harden nginx defaults
2021-01-30 17:07:52 -05:00
Henrik Lissner
2da00f3ad5
fail2ban: speed up gitea/bitwarden jails
...
These services log to syslog, so a log file doesn't exist, meaning
fail2ban must scan the whole journal to seek authentication failure
logs, which is slow! By specifying a journalmatch, it significantly
narrows the scope of their searches.
2021-01-30 06:04:38 -05:00
Henrik Lissner
d380e06cba
Make fail2ban defaults less forgiving
2021-01-30 04:52:13 -05:00
Henrik Lissner
24d5a426f5
Clean up modules/desktop/media/daw.nix
2021-01-30 02:39:00 -05:00
Henrik Lissner
f88552ad64
Add modules/services/syncthing.nix
...
Generalizes the module so it's not so Henrik-centric. I know,
blasphemous, but the world only sometimes revolves around me.
Also, adds a new, much simpler config for syncthing.
2021-01-26 23:00:01 -05:00
Henrik Lissner
41ac027216
Add modules/backup.nix
...
A rudimentary backup and restoration system.
2021-01-26 23:00:01 -05:00
Henrik Lissner
dd62442c09
Install ripgrep in zsh module
2021-01-26 22:58:47 -05:00
Henrik Lissner
be343218e9
Add modules/desktop/browsers/brave.nix
2021-01-26 22:58:47 -05:00
Henrik Lissner
5ceb72ddee
Remove services.gitea.disableRegistration default
...
This can be done in the host file, once its ready to disable
registration.
2021-01-26 22:58:47 -05:00
Henrik Lissner
e703bd374d
New ssh pubkey & redesign 'hey push'
...
Remote rebuilding requires root access, but I don't want root ssh
access (even by ssh key) to be a permanent fixture of my servers. So
I've changed 'hey push' to copy my remote user's `authorized_keys` to
/root/.ssh/ temporarily, until the rebuild is complete. It is removed
afterwards.
This should be done non-destructively in the future, but it suits my
needs for now.
2021-01-26 22:56:50 -05:00
Henrik Lissner
69d730f89d
Add agenix
...
Indexes all *.age files in $HOST/secrets/
2021-01-22 20:01:55 -05:00
Henrik Lissner
a1ab0811bb
Refactor
2021-01-20 01:28:30 -05:00
Henrik Lissner
096a60d61f
services/nginx: add main user to nginx group
2021-01-02 00:26:07 -05:00
Henrik Lissner
bca8c84ab3
Minor refactors & readme revision
2021-01-02 00:26:00 -05:00
Henrik Lissner
608b3472b9
security.acme.acceptTerms = true
...
So we don't have to later.
2021-01-02 00:24:20 -05:00
Henrik Lissner
177a7eec6f
Add services/fail2ban module
...
With bitwarden_rs & gitea filters
2021-01-01 21:19:06 -05:00
Henrik Lissner
25f0d8044a
Minor refactors
2020-12-31 19:34:11 -05:00
Henrik Lissner
13afdacb45
Initial password "nixos"
...
Instead of "nix". Will be changed immediately post-install anyway.
2020-12-31 17:31:29 -05:00
Henrik Lissner
e74a392d76
Add modules/shell/bitwarden module
...
For bitwarden-cli
2020-12-21 22:46:17 -05:00
Henrik Lissner
dfcb990be4
More comments; add to shiro README.org
2020-12-21 22:38:06 -05:00
Henrik Lissner
203629c476
Add modules.shell.pass.passwordStoreDir option
2020-12-21 22:38:06 -05:00
Henrik Lissner
9572aa99a6
Default gitea to sqlite
...
Most portable default.
2020-12-19 23:02:46 -05:00
Henrik Lissner
807b76e640
hosts/ao: finish bitwarden config
2020-12-19 08:05:05 -05:00
Henrik Lissner
9d257c8e55
Bump
2020-12-19 04:31:58 -05:00
Henrik Lissner
c9efc8c9e0
Add basic bitwarden service module
2020-12-18 23:42:52 -05:00
Henrik Lissner
426eedea86
Switch to emacsPgtkGcc
...
And bump emacs-overlay
2020-11-27 13:58:06 -05:00
Henrik Lissner
64a065ef47
Use inkscape from unstable branch
2020-11-17 15:28:05 -05:00
Henrik Lissner
d5c807a4f9
Move to nixpkgs/master
...
For that 5.9.2 kernel goodness. Since I can track nixpkgs myself, I'm
using nixpkgs/master now (and twice, so I can track them at separate
rates).
Though, for now, nixpkgs == nixpkgs.unstable
2020-10-30 01:41:35 -04:00
Henrik Lissner
afea2c28d8
Remove dependency on killall in bspwmrc
2020-10-26 14:05:10 -04:00
Henrik Lissner
f0bd026007
Fix polybar+bspwm onReload handler
2020-10-26 14:04:52 -04:00
Henrik Lissner
804011f538
Refactor flake
2020-10-26 05:48:12 -04:00
Henrik Lissner
d8730b6d30
Fix GTK config
2020-10-26 00:28:37 -04:00
Henrik Lissner
86a8f40ea2
Minor comment revision
2020-10-25 15:52:50 -04:00
Henrik Lissner
ccdeb4cb8d
Move fonts to theme
2020-10-25 15:52:50 -04:00
Henrik Lissner
b81f38aa07
Fix zsh syntax highlighting in first line
...
Due to unterminated code.
2020-10-25 15:52:50 -04:00
Henrik Lissner
7e6c26fd9c
Minor refactors
2020-10-25 15:52:50 -04:00
Henrik Lissner
14e2aada30
Refactor theme system, add 'hey theme' & reload handlers
...
Themes can now be swapped with 'hey theme NAME', or reloaded with the
reloadTheme script.
2020-10-25 15:52:50 -04:00
Henrik Lissner
c50a51f987
Rename fluorescence -> alucard
...
Since it's dracula inspired 'n all...
2020-10-23 20:53:34 -04:00
Henrik Lissner
2736c461a1
Add services/teamviewer module
2020-10-21 15:49:45 -04:00
Henrik Lissner
3da2c0c62e
Bump
2020-10-20 15:31:00 -04:00
Henrik Lissner
a282ce48ae
Switch to emacsGcc
2020-10-20 15:30:54 -04:00
Henrik Lissner
ffed225e8d
Slightly smaller icons in rofi
2020-10-17 23:40:07 -04:00
Henrik Lissner
8f57daf4bd
Minor refactors
2020-10-17 23:40:07 -04:00
Henrik Lissner
b7c00a985c
Refactor modules/themes/fluorescence
...
Extract functionality, remove redundant wallpaper logic, and simplify
wallpaper options.
2020-10-17 23:40:06 -04:00
Henrik Lissner
c172f7cef3
Fix inputrc & wgetrc locations
...
These are config files, not data files.
2020-10-16 20:18:00 -04:00
Henrik Lissner
92fa038b78
Smaller rofi icons
2020-10-16 17:35:44 -04:00
Henrik Lissner
5e0aae921a
Revert 496919a
...
Otherwise 'hey re' will never see the new config.
2020-10-16 17:32:18 -04:00
Henrik Lissner
daf5ecca37
Fix rofi icons
...
I no longer install/use nerd fonts.
2020-10-16 15:48:42 -04:00
Henrik Lissner
496919a995
Use binDir in PATH
...
Makes the config a little more portable, but makes it harder to work on
binscripts (you'd have to 'hey re' on every change). I have another way
around that, but I'll push that later.
2020-10-15 15:29:16 -04:00