71 Commits

Author SHA1 Message Date
Richie Cahill
5398ab38c9 moved locale.nix to modules dir 2024-04-10 19:11:09 -04:00
Richie Cahill
e822f2d89c ran nix fmt 2024-04-10 19:11:09 -04:00
Your Name
c2465c6b9c central locale setting 2024-04-10 19:11:09 -04:00
46a605d12e
initial artemision changes (#116)
* Add artemision

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* blank config.nix for alice

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* move alice config

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* move alice config

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* fix slack (artemision)

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* fix unipicker (artemision)

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* fix vscode (artemision)

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* add wired-notify (not currently working, artemision)

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* change formatter to nixfmt-rfc-style

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* update lock

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* initial format

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* artemision settings

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* add artemision files

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* artemision initial setup

* artemision initial setup

* sops generation

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* sops updates

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* sops updates

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* fix breaking changes, add framework module

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* formatting and friends

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* add boot, mutable users is true

* fmt

* Add desktop/framework dependencies

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* enable sops

* sops/ethernet fixes

* update subs

* cache key fix & mutable users

* temp neovim

* zsh changes

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* dependency fixes, zsh.nix

* zsh fixes for home-manager

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* minor zsh fixes

* minor zsh/home fixes

* cleanup

* typo from merge

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* formatting

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* remove owner

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* non-server :)

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* add display manager

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* switch to gdm

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* wayland errors

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* fix formatting

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* remove ZFS unstable

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* zsh reorg

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* wayland enable

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* add boot partition options

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* wayland agian

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* nix format

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

---------

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>
Co-authored-by: ahuston-0 <alice.huston@gmail.com>
2024-03-24 14:21:28 -04:00
bc7034e7e2 typo in optimise
Signed-off-by: ahuston-0 <aliceghuston@gmail.com>
2024-03-24 13:09:22 -04:00
c35ee793a1 add space optimizations for servers
Signed-off-by: ahuston-0 <aliceghuston@gmail.com>
2024-03-24 13:09:22 -04:00
ff3704a945 add space optimizations for servers
Signed-off-by: ahuston-0 <aliceghuston@gmail.com>
2024-03-24 13:09:22 -04:00
b77a34415d
Add attic cache (#117)
* add attic

* change formatter to nixfmt-rfc-style

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* update lock

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* initial format

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* move back to postgres

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* fix attic

* fix signing key

* formatting

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

---------

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>
2024-03-24 13:08:42 -04:00
9d82282556
Feature/adding jeeves (#112)
* Feature/factorio (#109)

* add factorio

* add factorio server

* add new user

* fixed typo

* jeeves base

* allow jeeves to be built into an ISO

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* server-side fixes

* Disable sops on jeeves temporarily

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* fix flake.nix inputs

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* add sops for jeeves

* update jeeves age key

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* efi variables fix?

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* updating sops

* remove alice

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* remove richie

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* usbguard :(

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* remove iso from image

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* add alice zt

* restore home-manager

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* fix comment

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* add jeeves key

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* restore original config

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* revert canTouchEfiVariables

keeping it in line with other servers

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* removed working-config.nix

* Get rid of dummy user

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* change formatter to nixfmt-rfc-style

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* update lock

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* added plex

* initial format

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* removed lib.mkDefault from PermitRootLogin

---------

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>
Co-authored-by: Dennis <52411861+DerDennisOP@users.noreply.github.com>
Co-authored-by: Richie Cahill <richie@tmmworkshop.com>
2024-03-17 21:55:48 -04:00
1a8a2fa394
Feature/rfc 0166 fmt (#113)
* change formatter to nixfmt-rfc-style

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Add rfc-style fmt'ing

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

---------

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>
2024-03-03 18:06:28 -05:00
Dennis
e732499201 Feature/factorio (#109)
* add factorio

* add factorio server

* add new user

* fixed typo
2024-03-02 11:09:32 +01:00
Dennis
d28098ac8d Feature/factorio (#108)
* add factorio

* add factorio server

* add new user
2024-02-19 22:03:16 +01:00
889ce92247 fixup/redis mem (#90)
* add sysctl params

* Fix early startup issue w/ autopull

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Update flake.lock

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* add dependency for autopull

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* move autopull dependency

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* nix environment is weird :(

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

---------

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>
2024-02-18 00:27:02 -05:00
Dennis
b2366d9a44 some changes (#104)
* some changes

* remove watchdog

* add cloud mail

* fix typo

* add mc-server

* add mc-server

* fix devtools
2024-02-18 06:11:47 +01:00
Dennis
4c4801d6a8 remove nix-index-database from rpi (#95)
* remove nix-index-database from rpi

* Udev fix

* flake update

* add git alias

* Remove unused flake input

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

---------

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>
Co-authored-by: Fabius <fabius2001@hotmail.de>
Co-authored-by: ahuston-0 <aliceghuston@gmail.com>
2024-02-17 15:51:38 +01:00
Richie Cahill
afa35e6c4a formatted jeeves-jr (#98) 2024-02-15 17:09:03 -05:00
12830a9d5c Fix hydra directory (#89)
Signed-off-by: ahuston-0 <aliceghuston@gmail.com>
2024-02-10 16:39:33 -05:00
Dennis
c13cec9d0a temp fix for outline (#82) 2024-02-07 00:51:31 +01:00
5d8ad216a4 fix boot partition (#80) 2024-02-06 18:06:56 -05:00
Dennis
52c421a45f fix autopull (#79)
* fix autopull

* add deadnix

* fix git
2024-02-06 23:58:33 +01:00
Dennis
3b70b4ea60 remove git-lfs from palentine-hill (#78)
* remove git-lfs from palentine-hill

* fix secrets
2024-02-06 22:46:13 +01:00
Dennis
d020ef2189 Created fabius user (raspberry pi 5). Changed flake.nix. (#76)
* Created fabius user (raspberry pi 5). Changed flake.nix.

* add custom iso type

* change to crossPkgs

* add crossCompile aarch64
2024-02-06 20:35:02 +01:00
Dennis
4c1e86907a dennis the formatter (#75)
* dennis the formatter

* changed comment

* fixup
2024-02-05 22:45:43 +01:00
4e6bdd2ff5 Disable mutable-users, fix passwords globally (#71)
* updated passwd

* Disable mutable-users

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* fix password config

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* change secrets

---------

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>
Co-authored-by: Richie Cahill <richie@tmmworkshop.com>
Co-authored-by: Dennis Wuitz <dennish@wuitz.de>
2024-02-03 23:24:45 +01:00
Dennis
66fb506e26 remove sieve script# (#62) 2024-02-03 16:00:35 -05:00
Dennis
320e2225ce change allowed-uris (#57) 2024-02-02 00:46:47 -05:00
Dennis
9f863eac6e add allowed-uris (#56) 2024-02-02 00:31:40 -05:00
Dennis
4c7ba8e68e changes to pg (#52) 2024-02-01 22:25:10 -05:00
241c66f5ec enable external SMTP for hydra (#49)
* external SMTP for hydra

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* nix-serve sops

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* add binary cache

* add hydra jobs

* cleanup (#50)

* finish up cleanup branch merge

* switched back to nixpkgs-fmt

* add nixpkgs-fmt to hydrajobs.build

---------

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>
Co-authored-by: Dennis Wuitz <dennish@wuitz.de>
Co-authored-by: Dennis <52411861+DerDennisOP@users.noreply.github.com>
2024-02-01 22:50:14 +01:00
Dennis
10ed0c633b add hydra (#48) 2024-02-01 05:24:04 +01:00
Dennis
6d54aec60c add dynamic system generation (#46) 2024-01-30 12:37:13 -05:00
32de223070 Add ARC/FFMPEG requirements (#44)
Signed-off-by: ahuston-0 <aliceghuston@gmail.com>
2024-01-27 12:00:32 -05:00
Dennis
66be96ebff add desktopians (#43) 2024-01-27 16:05:35 +01:00
Richie Cahill
2305974694 removing unnecessary code (#41)
* removing unnecessary code

* replaced some of the code

* removed endlessh-go from jeeves-jr
2024-01-16 18:49:03 -05:00
Richie Cahill
5af2c60bdb Securing jeevesjr (#39)
* secured openssh

* removing MaxSessions

* setup endlessh

* set openssh logging to VERBOSE

* fix

* got MaxSessions working

* set ClientAliveCountMax

* setup usbguard

* updated central openssh settings

* added sysstat service

* add auditd

* testing lynis setting

* fixed typo

* setup login.defs

* removed login.defs

* updated ChallengeResponseAuthentication to no

* made LogLevel a Default

Co-authored-by: Dennis <52411861+DerDennisOP@users.noreply.github.com>

---------

Co-authored-by: Dennis <52411861+DerDennisOP@users.noreply.github.com>
2024-01-13 22:20:01 -05:00
fb3128b5ae Disable podman, fix topgrade config (#34)
Signed-off-by: ahuston-0 <aliceghuston@gmail.com>
2024-01-09 11:11:00 -05:00
Richie Cahill
4abf1a806e Adding zeroteir to jeeves jr (#26)
* added test.* to .gitignore

* adding zerotier to jeeves-jr

* added comments to .gitignore
2024-01-07 16:28:09 -05:00
Richie Cahill
9c58bc47c4 Adding packages (#24)
* adding-packages

* removed TODO

* removed usbutils and     speedtest-cli
2024-01-06 17:08:43 -05:00
ec7a51f254 Add smartmontools to global program list, alice config changes (#19)
* Update ssh keys, home-manager packages

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Add smartmontools to the global program list

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Fix formatting

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

---------

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>
2024-01-03 22:08:16 +01:00
Dennis
db67a9d7e5 Feature email server (#14)
* formatting

* update

* add mailserver

* flake update
2024-01-02 16:30:08 +01:00
477b4cf466 Add autopull service for testing & pre-commit-hooks (#4)
* configure programs for photon

* sops fix

* Add flake-update-service for testing

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Add sops config

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* add photon password

* Fix user password

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* actually fix user config

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* change password for user dennis

* removed user password

* fixed yaml secrets

* yaml is silly, fix my yamls pls

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* quickfix

* Enforce systemdboot on palatine-hill

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* reconfigure photon

* Fix ZFS config on palatine-hill

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Fix systemd-boot on palatine-hill

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* sops update-keys

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Fix botched merge

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Add custom ssh command

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Fix option name, add package dependency

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Fix option name, add dependency

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* ssh-key path to str

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Fix git command

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Set up nixpkgs.fmt

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Allow autopull to trigger a rebuild

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Revert triggerRebuild on palatine-hill, add clarifying comment

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Attempt pre-commit hooks

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Increase pull frequency

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Fix duplicate flake-utils url

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Add fmt hook

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* add nix-flake-check hook

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Remove unnecessary flake-utils import by name

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Trying to setup inputs for nix-pre-commit

Co-authored-by: Dennis <52411861+DerDennisOP@users.noreply.github.com>

* Fixing input with flake inputs

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* make autopull service default and fix flake check hook

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Remove pre-commit-config.yml from gitignore

that decision seems to be something from one of my previous attempts at
this. Given that the config is needed for this to work it only makes
sense to have it.

/.pre-commit-config.yaml
/.pre-commit-config.yaml

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Rollback previous commit. yml file is a softlink

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

---------

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>
Co-authored-by: Dennis Wuitz <dennish@wuitz.de>
Co-authored-by: Dennis <52411861+DerDennisOP@users.noreply.github.com>
2024-01-01 12:41:32 -05:00
Dennis
d5bd40ed67 gitea ldap connection (#13)
* gitea ldap connection

* name change
2024-01-01 16:38:17 +01:00
67bc474739 Fix found for docker haproxy. Removing haproxy from nix config (#12)
Signed-off-by: ahuston-0 <aliceghuston@gmail.com>
2024-01-01 01:19:19 -05:00
Richie Cahill
96f8203cb4 Merge pull request #5 from RAD-Development/jeeves-jr
Seting up Jeeves jr
2023-12-29 15:25:11 -05:00
Richie Cahill
55b37120ec added zpool name 2023-12-29 15:02:48 -05:00
Dennis Wuitz
91e3cb92b5 update secrets 2023-12-29 21:01:19 +01:00
Dennis Wuitz
51e8302c29 add fail2ban 2023-12-29 20:54:12 +01:00
Richie Cahill
4d336ef7a3 removed invaled pool name 2023-12-29 14:48:16 -05:00
Richie Cahill
60442534f2 added hardware.nix 2023-12-29 13:46:49 -05:00
Richie Cahill
66fca9da44 made configuration.nix for jeeves-jr 2023-12-29 13:23:05 -05:00