Henrik Lissner
ddf772a4d8
Add adl module and packages
2021-02-09 22:00:17 -05:00
Henrik Lissner
f4a0da4d87
Use wally-cli & new hardware.keyboard.zsa module for ergodx
2021-02-06 23:33:09 -05:00
Henrik Lissner
8d39061f48
qutebrowser: add bitwarden integration & polish
...
+ Add bitwarden integration
+ Polish xkcd userstyle (to better match the alucard theme)
+ Rethink qutebrowser keybinds. Some were redundant, others misplaced.
2021-02-06 01:26:06 -05:00
Henrik Lissner
fd4932ea88
Use unstable neovim
2021-02-05 18:31:36 -05:00
Henrik Lissner
deb071d556
qutebrowser: mitigate flash of white between page loads
2021-02-05 18:31:13 -05:00
Henrik Lissner
299257cfd4
Upgrade to qutebrowser 2.0.1
...
+ Refactor config (again).
+ Accommodate new Brave adblocker.
+ Polish UI settings (overlay scrollbar)
+ Remove outdated userstyles (some of these sites offer dark modes now)
2021-02-02 04:08:01 -05:00
Henrik Lissner
9f856bbe47
Simplify qutebrowser config
2021-02-02 04:08:01 -05:00
Henrik Lissner
526dc19eeb
Fix & redesign qutebrowser config
2021-02-02 00:53:30 -05:00
Henrik Lissner
b7d49362a8
gitea.lfs.enable = true
2021-02-01 19:55:05 -05:00
Henrik Lissner
ffb097ce0c
fail2ban: move maxretry default to jails
...
Throws a "option 'maxretry' in section 'DEFAULT' already exists" error
on startup otherwise.
2021-01-31 18:43:29 -05:00
Henrik Lissner
25a87f24d9
Reduce gitea logging & disable basic auth for api
...
- Disabled SQL logs because they quickly fill up the logs and aren't
useful, currently. Also, smaller logs = easier job for fail2ban.
- Disabled basic auth because it's the least secure method of
interacting with the gitea API. Tokens/oauth are better.
2021-01-31 18:39:01 -05:00
Henrik Lissner
c32a1846e0
Tweak fail2ban defaults
2021-01-31 18:39:01 -05:00
Henrik Lissner
68fa845a73
Add comments & remove redundant config
...
IS_TLS_ENABLED = true is implied if HOST's port is 465
2021-01-31 18:20:17 -05:00
Henrik Lissner
78d85018b0
Fix redundant nginx directive
...
And typo. Should be 128k, not 1k!
2021-01-30 17:10:25 -05:00
Henrik Lissner
fe4a34a9e3
Harden nginx defaults
2021-01-30 17:07:52 -05:00
Henrik Lissner
2da00f3ad5
fail2ban: speed up gitea/bitwarden jails
...
These services log to syslog, so a log file doesn't exist, meaning
fail2ban must scan the whole journal to seek authentication failure
logs, which is slow! By specifying a journalmatch, it significantly
narrows the scope of their searches.
2021-01-30 06:04:38 -05:00
Henrik Lissner
d380e06cba
Make fail2ban defaults less forgiving
2021-01-30 04:52:13 -05:00
Henrik Lissner
24d5a426f5
Clean up modules/desktop/media/daw.nix
2021-01-30 02:39:00 -05:00
Henrik Lissner
f88552ad64
Add modules/services/syncthing.nix
...
Generalizes the module so it's not so Henrik-centric. I know,
blasphemous, but the world only sometimes revolves around me.
Also, adds a new, much simpler config for syncthing.
2021-01-26 23:00:01 -05:00
Henrik Lissner
41ac027216
Add modules/backup.nix
...
A rudimentary backup and restoration system.
2021-01-26 23:00:01 -05:00
Henrik Lissner
dd62442c09
Install ripgrep in zsh module
2021-01-26 22:58:47 -05:00
Henrik Lissner
be343218e9
Add modules/desktop/browsers/brave.nix
2021-01-26 22:58:47 -05:00
Henrik Lissner
5ceb72ddee
Remove services.gitea.disableRegistration default
...
This can be done in the host file, once its ready to disable
registration.
2021-01-26 22:58:47 -05:00
Henrik Lissner
e703bd374d
New ssh pubkey & redesign 'hey push'
...
Remote rebuilding requires root access, but I don't want root ssh
access (even by ssh key) to be a permanent fixture of my servers. So
I've changed 'hey push' to copy my remote user's `authorized_keys` to
/root/.ssh/ temporarily, until the rebuild is complete. It is removed
afterwards.
This should be done non-destructively in the future, but it suits my
needs for now.
2021-01-26 22:56:50 -05:00
Henrik Lissner
69d730f89d
Add agenix
...
Indexes all *.age files in $HOST/secrets/
2021-01-22 20:01:55 -05:00
Henrik Lissner
a1ab0811bb
Refactor
2021-01-20 01:28:30 -05:00
Henrik Lissner
096a60d61f
services/nginx: add main user to nginx group
2021-01-02 00:26:07 -05:00
Henrik Lissner
bca8c84ab3
Minor refactors & readme revision
2021-01-02 00:26:00 -05:00
Henrik Lissner
608b3472b9
security.acme.acceptTerms = true
...
So we don't have to later.
2021-01-02 00:24:20 -05:00
Henrik Lissner
177a7eec6f
Add services/fail2ban module
...
With bitwarden_rs & gitea filters
2021-01-01 21:19:06 -05:00
Henrik Lissner
25f0d8044a
Minor refactors
2020-12-31 19:34:11 -05:00
Henrik Lissner
13afdacb45
Initial password "nixos"
...
Instead of "nix". Will be changed immediately post-install anyway.
2020-12-31 17:31:29 -05:00
Henrik Lissner
e74a392d76
Add modules/shell/bitwarden module
...
For bitwarden-cli
2020-12-21 22:46:17 -05:00
Henrik Lissner
dfcb990be4
More comments; add to shiro README.org
2020-12-21 22:38:06 -05:00
Henrik Lissner
203629c476
Add modules.shell.pass.passwordStoreDir option
2020-12-21 22:38:06 -05:00
Henrik Lissner
9572aa99a6
Default gitea to sqlite
...
Most portable default.
2020-12-19 23:02:46 -05:00
Henrik Lissner
807b76e640
hosts/ao: finish bitwarden config
2020-12-19 08:05:05 -05:00
Henrik Lissner
9d257c8e55
Bump
2020-12-19 04:31:58 -05:00
Henrik Lissner
c9efc8c9e0
Add basic bitwarden service module
2020-12-18 23:42:52 -05:00
Henrik Lissner
426eedea86
Switch to emacsPgtkGcc
...
And bump emacs-overlay
2020-11-27 13:58:06 -05:00
Henrik Lissner
64a065ef47
Use inkscape from unstable branch
2020-11-17 15:28:05 -05:00
Henrik Lissner
d5c807a4f9
Move to nixpkgs/master
...
For that 5.9.2 kernel goodness. Since I can track nixpkgs myself, I'm
using nixpkgs/master now (and twice, so I can track them at separate
rates).
Though, for now, nixpkgs == nixpkgs.unstable
2020-10-30 01:41:35 -04:00
Henrik Lissner
afea2c28d8
Remove dependency on killall in bspwmrc
2020-10-26 14:05:10 -04:00
Henrik Lissner
f0bd026007
Fix polybar+bspwm onReload handler
2020-10-26 14:04:52 -04:00
Henrik Lissner
804011f538
Refactor flake
2020-10-26 05:48:12 -04:00
Henrik Lissner
d8730b6d30
Fix GTK config
2020-10-26 00:28:37 -04:00
Henrik Lissner
86a8f40ea2
Minor comment revision
2020-10-25 15:52:50 -04:00
Henrik Lissner
ccdeb4cb8d
Move fonts to theme
2020-10-25 15:52:50 -04:00
Henrik Lissner
b81f38aa07
Fix zsh syntax highlighting in first line
...
Due to unterminated code.
2020-10-25 15:52:50 -04:00
Henrik Lissner
7e6c26fd9c
Minor refactors
2020-10-25 15:52:50 -04:00