21 Commits

Author SHA1 Message Date
241c66f5ec enable external SMTP for hydra (#49)
* external SMTP for hydra

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* nix-serve sops

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* add binary cache

* add hydra jobs

* cleanup (#50)

* finish up cleanup branch merge

* switched back to nixpkgs-fmt

* add nixpkgs-fmt to hydrajobs.build

---------

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>
Co-authored-by: Dennis Wuitz <dennish@wuitz.de>
Co-authored-by: Dennis <52411861+DerDennisOP@users.noreply.github.com>
2024-02-01 22:50:14 +01:00
Dennis
66be96ebff add desktopians (#43) 2024-01-27 16:05:35 +01:00
Richie Cahill
2305974694 removing unnecessary code (#41)
* removing unnecessary code

* replaced some of the code

* removed endlessh-go from jeeves-jr
2024-01-16 18:49:03 -05:00
Richie Cahill
5af2c60bdb Securing jeevesjr (#39)
* secured openssh

* removing MaxSessions

* setup endlessh

* set openssh logging to VERBOSE

* fix

* got MaxSessions working

* set ClientAliveCountMax

* setup usbguard

* updated central openssh settings

* added sysstat service

* add auditd

* testing lynis setting

* fixed typo

* setup login.defs

* removed login.defs

* updated ChallengeResponseAuthentication to no

* made LogLevel a Default

Co-authored-by: Dennis <52411861+DerDennisOP@users.noreply.github.com>

---------

Co-authored-by: Dennis <52411861+DerDennisOP@users.noreply.github.com>
2024-01-13 22:20:01 -05:00
Dennis
db67a9d7e5 Feature email server (#14)
* formatting

* update

* add mailserver

* flake update
2024-01-02 16:30:08 +01:00
477b4cf466 Add autopull service for testing & pre-commit-hooks (#4)
* configure programs for photon

* sops fix

* Add flake-update-service for testing

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Add sops config

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* add photon password

* Fix user password

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* actually fix user config

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* change password for user dennis

* removed user password

* fixed yaml secrets

* yaml is silly, fix my yamls pls

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* quickfix

* Enforce systemdboot on palatine-hill

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* reconfigure photon

* Fix ZFS config on palatine-hill

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Fix systemd-boot on palatine-hill

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* sops update-keys

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Fix botched merge

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Add custom ssh command

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Fix option name, add package dependency

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Fix option name, add dependency

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* ssh-key path to str

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Fix git command

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Set up nixpkgs.fmt

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Allow autopull to trigger a rebuild

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Revert triggerRebuild on palatine-hill, add clarifying comment

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Attempt pre-commit hooks

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Increase pull frequency

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Fix duplicate flake-utils url

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Add fmt hook

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* add nix-flake-check hook

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Remove unnecessary flake-utils import by name

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Trying to setup inputs for nix-pre-commit

Co-authored-by: Dennis <52411861+DerDennisOP@users.noreply.github.com>

* Fixing input with flake inputs

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* make autopull service default and fix flake check hook

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Remove pre-commit-config.yml from gitignore

that decision seems to be something from one of my previous attempts at
this. Given that the config is needed for this to work it only makes
sense to have it.

/.pre-commit-config.yaml
/.pre-commit-config.yaml

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

* Rollback previous commit. yml file is a softlink

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>

---------

Signed-off-by: ahuston-0 <aliceghuston@gmail.com>
Co-authored-by: Dennis Wuitz <dennish@wuitz.de>
Co-authored-by: Dennis <52411861+DerDennisOP@users.noreply.github.com>
2024-01-01 12:41:32 -05:00
Dennis
d5bd40ed67 gitea ldap connection (#13)
* gitea ldap connection

* name change
2024-01-01 16:38:17 +01:00
Dennis Wuitz
51e8302c29 add fail2ban 2023-12-29 20:54:12 +01:00
774bd99550 Fix hostkeys, zfs autoscrub service
Signed-off-by: ahuston-0 <aliceghuston@gmail.com>
2023-12-29 11:42:31 -05:00
85cda756b8 Add hardened SSH config
Signed-off-by: ahuston-0 <aliceghuston@gmail.com>
2023-12-29 11:33:17 -05:00
Dennis Wuitz
78e428f3f3 reconfigure photon 2023-12-28 21:12:59 +01:00
Dennis Wuitz
889de1d88a changes to dennis home.nix 2023-12-26 10:45:54 +01:00
d29348ec64 Fix autoUpgrade
Signed-off-by: ahuston-0 <aliceghuston@gmail.com>
2023-12-25 16:51:58 -05:00
0d61dcd079 Fix gc options
Signed-off-by: ahuston-0 <aliceghuston@gmail.com>
2023-12-25 13:29:02 -05:00
Dennis Wuitz
7fcf8af4ad fix user public keys 2023-12-25 18:54:38 +01:00
Dennis Wuitz
e08f011d28 add home-manager 2023-12-25 03:39:20 +01:00
Dennis Wuitz
c6c879ddb4 first usable configuration 2023-12-24 20:09:35 +01:00
Dennis Wuitz
469038e980 switched modules to flakes 2023-12-24 18:48:52 +01:00
Dennis Wuitz
aca834a717 add basic user management 2023-12-23 08:27:00 +01:00
Dennis Wuitz
f2c3f279d5 add system palatine-hill 2023-12-23 07:39:10 +01:00
Dennis Wuitz
75405396d2 base configuration 2023-12-23 06:55:27 +01:00