aynish/helm
1
0
Fork 0
Code Pull requests Packages Projects Releases Activity
2102 commits 16 branches 0 tags 41 MiB
Commit graph

89 commits

Author SHA1 Message Date
Henrik Lissner 2286d85a68 Rewrite backup services+timers 2021-02-28 20:13:42 -05:00
Henrik Lissner 0325968f12 Polish mock syncthing config 2021-02-28 14:26:48 -05:00
Henrik Lissner 44d03e762a hosts/kuro: add backups timer for personal files 2021-02-28 00:37:36 -05:00
Henrik Lissner 699e272643 hosts/ao: refactor nginx config 2021-02-27 23:03:59 -05:00
Henrik Lissner 8717c49b1e Move net.ipv4.icmp_echo_ignore_broadcasts to kuro/shiro 2021-02-21 14:47:40 -05:00
Henrik Lissner 4399411a35 hosts/shiro: x-systemd.idle-timeout=5min on NFS mount 2021-02-21 14:47:40 -05:00
Henrik Lissner b8e4813f09 Clean up & revise hardware-configuration comments 2021-02-21 14:47:40 -05:00
Henrik Lissner a0b65fdb9a Rename personal.nix -> home.nix 
New name is more representative of my home network, which it was
designed for.
 2021-02-21 14:47:40 -05:00
Henrik Lissner 77870b6a14 Auto gc on servers 2021-02-21 14:47:40 -05:00
Henrik Lissner 5c29620dee Harden & optimize networking settings 2021-02-21 10:27:17 -05:00
Henrik Lissner 0f0f314643 Add noexec & size=25% to tmpfs on /tmp 
Also auto-enable boot.cleanTmpDir if boot.tmpOnTmpfs is off. /tmp
shouldn't be treated as persistent storage!
 2021-02-20 20:50:25 -05:00
Henrik Lissner 3f72e498d6 hosts/{kuro,shiro}: harden storage/backup mounts 
Removing unneeded privileges from backup mounts.

Also adds noatime to nfs mounts for slight improvement in throughput.
 2021-02-20 18:53:49 -05:00
Henrik Lissner 1ea4dea1d1 Add modules/desktop/apps/signal 2021-02-20 17:53:37 -05:00
Henrik Lissner dfbb3442a0 hosts/kuro: update readme 
+ zfs commands no longer apply
+ add mount commands for /usr/store
 2021-02-15 15:37:27 -05:00
Henrik Lissner 7d6d44486f hosts/ao: update secret 2021-02-15 13:16:18 -05:00
Henrik Lissner 021d50670c hosts/ao: fix typo in nginx config 2021-02-14 19:20:54 -05:00
Henrik Lissner bb6e4121f3 ao: cache static assets & turn off proxy buffering 
Also increase clientMaxBodySize, since I big files could be uploaded
over HTTP.
 2021-02-13 15:28:27 -05:00
Henrik Lissner c2efad829d kuro: add /usr/store mount 
And automount it (and /usr/drive)
 2021-02-12 11:21:29 -05:00
Henrik Lissner 0b1ed32aaf Add/revise comments 2021-02-09 22:06:01 -05:00
Henrik Lissner ddf772a4d8 Add adl module and packages 2021-02-09 22:00:17 -05:00
Henrik Lissner be5d10a008 Move hw modules cfg to hardware-configuration.nix's 2021-02-02 04:08:01 -05:00
Henrik Lissner 930312b650 hosts/kuro: remove ZFS drives & support 
I've moved this storage to an offsite NAS, so I don't need this on kuro.
 2021-02-02 04:07:58 -05:00
Henrik Lissner ca5876dba2 hosts/{kuro,shiro}: add NFS share 2021-02-02 00:55:34 -05:00
Henrik Lissner 526dc19eeb Fix & redesign qutebrowser config 2021-02-02 00:53:30 -05:00
Henrik Lissner e0c0006554 hosts/ao: gitea.disableRegistration = true 
And remove redundant config.
 2021-02-01 19:50:55 -05:00
Henrik Lissner 68fa845a73 Add comments & remove redundant config 
IS_TLS_ENABLED = true is implied if HOST's port is 465
 2021-01-31 18:20:17 -05:00
Henrik Lissner fe4a34a9e3 Harden nginx defaults 2021-01-30 17:07:52 -05:00
Henrik Lissner 2c3b2b1294 hosts/kuro: remove asic kernel module 
No longer needed now that we're on 5.10 (with built in support for my
2.5G network card).
 2021-01-29 14:22:52 -05:00
Henrik Lissner a7e7b1703a hosts/{ao,shiro}: tweak cpu governors 2021-01-29 14:07:05 -05:00
Henrik Lissner 1455114778 hosts/shiro: update module list 2021-01-26 23:00:01 -05:00
Henrik Lissner f88552ad64 Add modules/services/syncthing.nix 
Generalizes the module so it's not so Henrik-centric. I know,
blasphemous, but the world only sometimes revolves around me.

Also, adds a new, much simpler config for syncthing.
 2021-01-26 23:00:01 -05:00
Henrik Lissner 8fd332dcc4 Add nofail option to zfs filesystems 
So they don't prevent startup when zfs fails to mount non-essential
drives, like it currently does with 2.0.1 for some reason.
 2021-01-26 22:58:47 -05:00
Henrik Lissner d0309c51a0 hosts/ao: rewrite & use agenix 2021-01-26 22:58:47 -05:00
Henrik Lissner d1e987c4ba hosts/kuro: set default browser to brave 
Testing the waters. Firefox's occasional crashes and freezes are a
bother.
 2021-01-26 22:58:47 -05:00
Henrik Lissner 101effe2da
kuro: replace pass with bitwarden CLI 
First step to switch to bitwarden; currently hosted on ao, but haven't
finalized ao's config yet.
 2021-01-02 00:27:15 -05:00
Henrik Lissner 0b549caada
Update linode config 2020-12-31 17:34:39 -05:00
Henrik Lissner 2302f1291a
Update generic linode config 2020-12-31 01:59:04 -05:00
Henrik Lissner e74a392d76
Add modules/shell/bitwarden module 
For bitwarden-cli
 2020-12-21 22:46:17 -05:00
Henrik Lissner dfcb990be4
More comments; add to shiro README.org 2020-12-21 22:38:06 -05:00
Henrik Lissner cca95276d1
aka -> kiiro 
Not using aka for the time being. Not an NixOS machine though.
 2020-12-19 08:05:34 -05:00
Henrik Lissner 807b76e640
hosts/ao: finish bitwarden config 2020-12-19 08:05:05 -05:00
Henrik Lissner 96a262d81b
hosts/ao: tweak nginx configs 2020-12-19 03:25:04 -05:00
Henrik Lissner e0a127386f
hosts/ao: update services.gitea config 
services.gitea.extraConfig was replaced with *.settings.
 2020-12-19 02:49:46 -05:00
Henrik Lissner c376499be8
hosts/ao: update hardware config 
No longer has an external drive (now that I have a NAS).

And broadcom config isn't needed anyway (I never use wifi with this
system).
 2020-12-19 02:49:15 -05:00
Henrik Lissner adc7490733
Fix ao config 2020-12-18 23:42:24 -05:00
Henrik Lissner 0d902a00ac
Update linode instructions 2020-11-17 15:27:50 -05:00
Henrik Lissner d5c807a4f9
Move to nixpkgs/master 
For that 5.9.2 kernel goodness. Since I can track nixpkgs myself, I'm
using nixpkgs/master now (and twice, so I can track them at separate
rates).

Though, for now, nixpkgs == nixpkgs.unstable
 2020-10-30 01:41:35 -04:00
Henrik Lissner 804011f538
Refactor flake 2020-10-26 05:48:12 -04:00
Henrik Lissner 0256f547b0
EDITOR=nvim 2020-10-25 15:52:50 -04:00
Henrik Lissner 14e2aada30
Refactor theme system, add 'hey theme' & reload handlers 
Themes can now be swapped with 'hey theme NAME', or reloaded with the
reloadTheme script.
 2020-10-25 15:52:50 -04:00