diff --git a/.github/workflows/flake-health-checks.yml b/.github/workflows/flake-health-checks.yml index 7899203..fdbe490 100644 --- a/.github/workflows/flake-health-checks.yml +++ b/.github/workflows/flake-health-checks.yml @@ -20,22 +20,3 @@ jobs: skip-push: "true" - uses: actions/checkout@v4 - run: nix flake check --accept-flake-config - - run: nix ./utils/attic-push.bash - # build-checks: - # name: "Build nix outputs" - # runs-on: ubuntu-latest - # steps: - # - uses: DeterminateSystems/nix-installer-action@main - # - name: Setup Attic cache - # uses: ryanccn/attic-action@v0 - # with: - # endpoint: ${{ secrets.ATTIC_ENDPOINT }} - # cache: ${{ secrets.ATTIC_CACHE }} - # token: ${{ secrets.ATTIC_TOKEN }} - # skip-push: "true" - # - uses: actions/checkout@v4 - # - name: Build all outputs - # run: nix run git+https://nayeonie.com/ahuston-0/flake-update-diff -- --build . - # - name: Push to Attic - # run: nix ./utils/attic-push.bash - # continue-on-error: true diff --git a/.github/workflows/flake-update.yml b/.github/workflows/flake-update.yml index b50bb41..5f5691f 100644 --- a/.github/workflows/flake-update.yml +++ b/.github/workflows/flake-update.yml @@ -11,8 +11,11 @@ jobs: steps: - name: Checkout repository uses: actions/checkout@v4 - - name: Install nix - uses: https://github.com/DeterminateSystems/nix-installer-action@main + - name: Get Latest Determinate Nix Installer binary + id: latest-installer + uses: sigyl-actions/gitea-action-get-latest-release@main + with: + repository: ahuston-0/determinate-nix-installer - name: Setup Attic cache uses: ryanccn/attic-action@v0 with: @@ -20,6 +23,10 @@ jobs: cache: ${{ secrets.ATTIC_CACHE }} token: ${{ secrets.ATTIC_TOKEN }} skip-push: "true" + - name: Install nix + uses: https://github.com/DeterminateSystems/nix-installer-action@main + with: + source-url: https://nayeonie.com/ahuston-0/determinate-nix-mirror/releases/download/${{ steps.latest-installer.outputs.release }}/nix-installer-x86_64-linux - name: Get pre-snapshot of evaluations run: nix ./utils/eval-to-drv.sh pre - name: Update flake.lock @@ -100,9 +107,6 @@ jobs: pr-labels: | # Labels to be set on the PR dependencies automated - - name: Push to Attic - run: nix ./utils/attic-push.bash - continue-on-error: true - name: Print PR number run: | echo "Pull request number is ${{ steps.create-pull-request.outputs.pull-request-number }}." diff --git a/.github/workflows/nix-fmt.yml b/.github/workflows/nix-fmt.yml index f94cbea..6ef5915 100644 --- a/.github/workflows/nix-fmt.yml +++ b/.github/workflows/nix-fmt.yml @@ -20,6 +20,3 @@ jobs: skip-push: "true" - uses: actions/checkout@v4 - run: nix fmt -- --check . - - name: Push to Attic - run: nix ./utils/attic-push.bash - continue-on-error: true diff --git a/flake.nix b/flake.nix index 72660e5..e0b6d06 100644 --- a/flake.nix +++ b/flake.nix @@ -5,17 +5,17 @@ substituters = [ "https://cache.nixos.org/?priority=1&want-mass-query=true" "https://nix-community.cachix.org/?priority=10&want-mass-query=true" - "https://attic.nayeonie.com/nix-cache" + #"https://attic.nayeonie.com/nix-cache" ]; trusted-substituters = [ "https://cache.nixos.org" "https://nix-community.cachix.org" - "https://attic.nayeonie.com/nix-cache" + #"https://attic.nayeonie.com/nix-cache" ]; trusted-public-keys = [ "cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=" "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=" - "nix-cache:grGRsHhqNDhkEuTODvHJXYmoCClntC+U8XAJQzwMaZM=" + #"nix-cache:grGRsHhqNDhkEuTODvHJXYmoCClntC+U8XAJQzwMaZM=" ]; trusted-users = [ "root" ]; allow-import-from-derivation = true; diff --git a/systems/artemision/private-wifi.nix b/systems/artemision/private-wifi.nix new file mode 100644 index 0000000..6c3a8ea --- /dev/null +++ b/systems/artemision/private-wifi.nix @@ -0,0 +1,19 @@ +{ ... }: +{ + networking.nameservers = [ + "9.9.9.9" + "1.1.1.1" + "192.168.76.1" + ]; + + services.resolved = { + enable = true; + dnssec = "false"; + domains = [ "~." ]; + fallbackDns = [ + "1.1.1.1#one.one.one.one" + "1.0.0.1#one.one.one.one" + ]; + dnsovertls = "true"; + }; +} diff --git a/systems/artemision/wifi.nix b/systems/artemision/wifi.nix index a7b6f6f..ef6949f 100644 --- a/systems/artemision/wifi.nix +++ b/systems/artemision/wifi.nix @@ -1,9 +1,13 @@ -{ config, ... }: +{ config, lib, ... }: let always = 100; home = 99; + public_wifi = false; in { + imports = lib.optionals (!public_wifi) [ + ./private-wifi.nix + ]; networking.wireless = { enable = true; secretsFile = config.sops.secrets."wifi-env".path; @@ -24,29 +28,13 @@ in "24HuFios".pskRaw = "ext:PASS_longboat_home"; "Verizon_ZLHQ3H".pskRaw = "ext:PASS_angie"; "Fios-Qn3RB".pskRaw = "ext:PASS_parkridge"; - "optimumwifi" = { }; - "CableWiFi" = { }; + #"optimumwifi" = { }; + #"CableWiFi" = { }; "JPMCVisitor" = { }; + #"Hilton Honors" = { }; }; }; - networking.nameservers = [ - "9.9.9.9" - "1.1.1.1" - "192.168.76.1" - ]; - - services.resolved = { - enable = true; - dnssec = "true"; - domains = [ "~." ]; - fallbackDns = [ - "1.1.1.1#one.one.one.one" - "1.0.0.1#one.one.one.one" - ]; - dnsovertls = "true"; - }; - sops = { defaultSopsFile = ./secrets.yaml; secrets = { diff --git a/systems/palatine-hill/attic/default.nix b/systems/palatine-hill/attic/default.nix index 64b4a3d..1b3580a 100644 --- a/systems/palatine-hill/attic/default.nix +++ b/systems/palatine-hill/attic/default.nix @@ -10,6 +10,10 @@ attic-client ]; + systemd.services.atticd.environment = { + RUST_LOG = "INFO"; + }; + services = { atticd = { enable = true; @@ -34,6 +38,9 @@ bucket = "cache-nix-dot"; endpoint = "https://minio.nayeonie.com"; }; + garbage-collection = { + interval = "5 minutes"; + }; # Warning: If you change any of the values here, it will be # difficult to reuse existing chunks for newly-uploaded NARs diff --git a/users/alice/home/git.nix b/users/alice/home/git.nix index 849bf29..4f79be1 100644 --- a/users/alice/home/git.nix +++ b/users/alice/home/git.nix @@ -3,6 +3,7 @@ { programs.git = { enable = true; + lfs.enable = true; signing = { key = "5EFFB75F7C9B74EAA5C4637547940175096C1330"; signByDefault = true; @@ -28,6 +29,8 @@ color.ui = true; init.defaultBranch = "main"; format.signoff = true; + pack.windowMemory = "2g"; + pack.packSizeLimit = "1g"; }; }; }