Commit graph

2110 commits

Author SHA1 Message Date
Henrik Lissner dc5285b15c Update 'hey update' to reflect upstream changes
`nix flake update --update-input X` is now 'nix flake lock
--update-input X'
2021-04-13 20:30:00 -04:00
Henrik Lissner c02a524210 Bump 2021-04-13 20:29:48 -04:00
Henrik Lissner 6c0e02794b Add ledger for :lang ledger module 2021-04-13 20:29:48 -04:00
Henrik Lissner 5d24808a67 Add packages/fennel.nix 2021-03-16 12:36:15 -04:00
Henrik Lissner 8fe1fbb6e7 hosts/ao: refactor backups 2021-03-12 01:01:12 -05:00
Henrik Lissner aaba064089 bin/rofi/bwmenu: fix session persistence & TOTP field 2021-03-12 01:01:12 -05:00
Henrik Lissner 51d63a1829 Bump
* Updated agenix: github:ryantm/agenix/ed7e69bff3c17671349839f696e88e345eb9eb24 -> github:ryantm/agenix/9eb981eeb552e0856cb562b7643b311933a0e992
* Updated emacs-overlay: github:nix-community/emacs-overlay/063ee066b5095dd2f21f47c582b04024674974a8 -> github:nix-community/emacs-overlay/daa4b15755f6cccb462efed696abceee0994bb96
* Updated home-manager: github:rycee/home-manager/f45c7000d544f17e5499e2ae6b505b5f705c5d61 -> github:rycee/home-manager/040ea28e448a93d24540b7cf2eda4b25300c5ab1
* Updated nixos-hardware: github:nixos/nixos-hardware/c9b965a43e582765f797f8b75d50cb2874b30f30 -> github:nixos/nixos-hardware/831de9cac9ff2ea8cf4c3742020ea92e82ac8ac3
* Updated nixpkgs: github:NixOS/nixpkgs/ff96a0fa5635770390b184ae74debea75c3fd534 -> github:NixOS/nixpkgs/29b0d4d0b600f8f5dd0b86e3362a33d4181938f9
* Updated nixpkgs-unstable: github:NixOS/nixpkgs/07b0c7bc4104b87cb5223ec10e32b863d10768ad -> github:NixOS/nixpkgs/d02b1cc8ed29b6967119fd95267ee1a955015d59

Also, removed noexec from /tmp because it screws with build processes
that deploy/execute scripts to/out of /tmp, causing permission errors
while building.
2021-03-12 01:01:12 -05:00
Henrik Lissner 5d86b2a1a9 Improve context in diff hunk headings
Inspired by https://protesilaos.com/codelog/2021-01-26-git-diff-hunk-elisp-org/
2021-03-06 22:31:37 -05:00
Henrik Lissner 8a6bf347e9 agenix: use secrets in store
Rather than the local secrets, which won't be found if the remote has no
~/.config/dotfiles.
2021-03-03 22:23:50 -05:00
Henrik Lissner 9d90e3a822 Replace lib.paths with config.dotfiles.* 2021-03-01 20:43:12 -05:00
Henrik Lissner 2073f02083 Update README 2021-03-01 00:36:31 -05:00
Henrik Lissner 80c86bb44f bin/hey: minor refactors & doc revision 2021-02-28 22:31:04 -05:00
Henrik Lissner 6e80c04cd0 bin/hey: remove shell command
Doesn't serve any purpose.
2021-02-28 22:31:04 -05:00
Henrik Lissner ab2e052ba3 bin/hey: fix repl command
Now loads nixpkgs and dotfiles flake.
2021-02-28 22:30:58 -05:00
Henrik Lissner 9e15da7f36 Bump
* Updated home-manager: github:rycee/home-manager/e7b1491fb8dfb1d2bdb90432312e88d03c8d803d -> github:rycee/home-manager/f45c7000d544f17e5499e2ae6b505b5f705c5d61
* Updated nixpkgs-unstable: github:NixOS/nixpkgs/5240639ab6bc56824302d32e52753725aa9a963d -> github:NixOS/nixpkgs/07b0c7bc4104b87cb5223ec10e32b863d10768ad
* Updated nixos-hardware: github:nixos/nixos-hardware/115770eed0c0fa50c1277cd0f7fe0f15501dbc43 -> github:nixos/nixos-hardware/c9b965a43e582765f797f8b75d50cb2874b30f30
2021-02-28 20:13:42 -05:00
Henrik Lissner 776ae31d1a Use fetchFromGitHub to download adl 2021-02-28 20:13:42 -05:00
Henrik Lissner 2286d85a68 Rewrite backup services+timers 2021-02-28 20:13:42 -05:00
Henrik Lissner de7714e8d6 Add blender to graphics module 2021-02-28 14:26:48 -05:00
Henrik Lissner 0325968f12 Polish mock syncthing config 2021-02-28 14:26:48 -05:00
Henrik Lissner 1210a4b2ed Split up rsync aliases & improve comments 2021-02-28 14:26:48 -05:00
Henrik Lissner 44d03e762a hosts/kuro: add backups timer for personal files 2021-02-28 00:37:36 -05:00
Henrik Lissner dfe6055e54 Add -J to scp alias
Means omit mtime updates on symlinks -- always throws an error
otherwise.
2021-02-28 00:13:29 -05:00
Henrik Lissner 699e272643 hosts/ao: refactor nginx config 2021-02-27 23:03:59 -05:00
Henrik Lissner 8ca2cc66ba mkdir /run/backups/bitwarden_rs
Since the service fails to do it itself.
2021-02-27 15:30:02 -05:00
Henrik Lissner 6a4463ed8d Bump
* Updated agenix: github:ryantm/agenix/a704a85cbdceb5b6da2c29767dd7a1f446fde7a6 -> github:ryantm/agenix/ed7e69bff3c17671349839f696e88e345eb9eb24
* Updated nixpkgs-unstable: github:NixOS/nixpkgs/7866dda03a7e833db708a4adefa919c0bee1db1e -> github:NixOS/nixpkgs/5240639ab6bc56824302d32e52753725aa9a963d
* Updated home-manager: github:rycee/home-manager/da923602089501142855bbb3c276fbc36513eefb -> github:rycee/home-manager/e7b1491fb8dfb1d2bdb90432312e88d03c8d803d
2021-02-27 11:20:40 -05:00
Henrik Lissner 60e3b114db Resolve paths to yarn/npm 2021-02-27 11:20:16 -05:00
Henrik Lissner 294e20af3c Replace rcpd alias
Original wasn't very useful.
2021-02-27 11:20:00 -05:00
Henrik Lissner 9d87ac9d49 bin/hey gc: gc system profile first
Better UX to prompt for root password sooner.
2021-02-26 13:27:17 -05:00
Henrik Lissner 3c8481307b Add DOTFILES_BIN envvar 2021-02-26 13:20:46 -05:00
Henrik Lissner fcc7366f83 bin/hey: derive target host from --flake argument 2021-02-24 14:37:16 -05:00
Henrik Lissner 60ca8b192b bin/rofi/bwmenu: add --field whole support
Mostly for shell script interop, so each field doesn't have to be
independently fetched.
2021-02-24 14:35:16 -05:00
Henrik Lissner 705a1fa30d Add bin/rofi/bwmenu & sxhkd shortcuts for it
Bitwarden + rofi
2021-02-23 10:47:38 -05:00
Henrik Lissner 4f4e0de6a3 Correct NixOS version in readme 2021-02-22 22:44:52 -05:00
Henrik Lissner c883524efc Replace backup module with built-in solutions
May not be as universal, but is more certain to work correctly than my
hacked up version that I'm not so invested in.
2021-02-22 10:40:22 -05:00
Henrik Lissner c788855196 bin/hey: minor reformatting 2021-02-21 14:48:04 -05:00
Henrik Lissner 8717c49b1e Move net.ipv4.icmp_echo_ignore_broadcasts to kuro/shiro 2021-02-21 14:47:40 -05:00
Henrik Lissner 4399411a35 hosts/shiro: x-systemd.idle-timeout=5min on NFS mount 2021-02-21 14:47:40 -05:00
Henrik Lissner b8e4813f09 Clean up & revise hardware-configuration comments 2021-02-21 14:47:40 -05:00
Henrik Lissner a0b65fdb9a Rename personal.nix -> home.nix
New name is more representative of my home network, which it was
designed for.
2021-02-21 14:47:40 -05:00
Henrik Lissner 77870b6a14 Auto gc on servers 2021-02-21 14:47:40 -05:00
Henrik Lissner 8c97c46f5d Disable sandbox, enable autoOptimiseStore 2021-02-21 10:27:17 -05:00
Henrik Lissner 30bf3e110f system.stateVersion = 21.05 2021-02-21 10:27:17 -05:00
Henrik Lissner 1d13fcc35a Bump
* Updated emacs-overlay: github:nix-community/emacs-overlay/2f4388220c02d963eb85a88d55d044c22e8a8218 -> github:NixOS/nixpkgs/063ee066b5095dd2f21f47c582b04024674974a8
* Updated nixpkgs-unstable: github:NixOS/nixpkgs/e0f6e514b1194dab73a627bced804805252befd1 -> github:NixOS/nixpkgs/7866dda03a7e833db708a4adefa919c0bee1db1e
* Updated home-manager: github:rycee/home-manager/2e795f3efd6265e3d538d4ee78bba773e1044340 -> github:rycee/home-manager/da923602089501142855bbb3c276fbc36513eefb
2021-02-21 10:27:17 -05:00
Henrik Lissner 5c29620dee Harden & optimize networking settings 2021-02-21 10:27:17 -05:00
Henrik Lissner 0f0f314643 Add noexec & size=25% to tmpfs on /tmp
Also auto-enable boot.cleanTmpDir if boot.tmpOnTmpfs is off. /tmp
shouldn't be treated as persistent storage!
2021-02-20 20:50:25 -05:00
Henrik Lissner 3f72e498d6 hosts/{kuro,shiro}: harden storage/backup mounts
Removing unneeded privileges from backup mounts.

Also adds noatime to nfs mounts for slight improvement in throughput.
2021-02-20 18:53:49 -05:00
Henrik Lissner 1ea4dea1d1 Add modules/desktop/apps/signal 2021-02-20 17:53:37 -05:00
Henrik Lissner 404e0c2881 Tweak rofi styles 2021-02-20 11:39:27 -05:00
Henrik Lissner ad2f0e6d7c Use ruby 2.7 in scripts 2021-02-18 00:26:59 -05:00
Henrik Lissner 117a417778 Fix rcp alias 2021-02-17 23:27:52 -05:00