about summary refs log tree commit diff
Commit message (Collapse)AuthorAgeFilesLines
* chore: update flakegithub-actions[bot]2024-02-121-15/+15
| | | | | | | | | | | | | | | | | | | | Flake lock file updates: • Updated input 'firefox-darwin': 'github:bandithedoge/nixpkgs-firefox-darwin/d839feb516758ad28bc1cef43008d55e749c1d6a' (2024-02-04) → 'github:bandithedoge/nixpkgs-firefox-darwin/121995525d845657b2fea5d7a2b93f0f28540b43' (2024-02-11) • Updated input 'nixpkgs': 'github:nixos/nixpkgs/25e3d4c0d3591c99929b1ec07883177f6ea70c9d' (2024-02-01) → 'github:nixos/nixpkgs/20f65b86b6485decb43c5498780c223571dd56ef' (2024-02-09) • Updated input 'nur': 'github:nix-community/NUR/5b2e8b3cb4404e60da0c4f64f9c17feae02132e8' (2024-02-04) → 'github:nix-community/NUR/4acc83adfbe8844fdab0b3cc916394c4391379ea' (2024-02-11) • Updated input 'pre-commit-hooks': 'github:cachix/pre-commit-hooks.nix/7c54e08a689b53c8a1e5d70169f2ec9e2a68ffaf' (2024-01-28) → 'github:cachix/pre-commit-hooks.nix/0db2e67ee49910adfa13010e7f012149660af7f0' (2024-02-07) • Updated input 'treefmt-nix': 'github:numtide/treefmt-nix/c6153c2a3ff4c38d231e3ae99af29b87f1df5901' (2024-01-28) → 'github:numtide/treefmt-nix/ac599dab59a66304eb511af07b3883114f061b9d' (2024-02-07)
* chore: update flakegithub-actions[bot]2024-02-041-27/+27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Flake lock file updates: • Updated input 'darwin': 'github:lnl7/nix-darwin/0108864c15bb68ad57d17fb2e7d3a3e025751d79' (2024-01-28) → 'github:lnl7/nix-darwin/bdbae6ecff8fcc322bf6b9053c0b984912378af7' (2024-02-02) • Updated input 'firefox-darwin': 'github:bandithedoge/nixpkgs-firefox-darwin/61c35a7992e8a540571ae21459f1c6b1c084a773' (2024-02-02) → 'github:bandithedoge/nixpkgs-firefox-darwin/d839feb516758ad28bc1cef43008d55e749c1d6a' (2024-02-04) • Updated input 'flake-parts': 'github:hercules-ci/flake-parts/07f6395285469419cf9d078f59b5b49993198c00' (2024-01-11) → 'github:hercules-ci/flake-parts/b253292d9c0a5ead9bc98c4e9a26c6312e27d69f' (2024-02-01) • Updated input 'flake-parts/nixpkgs-lib': 'github:NixOS/nixpkgs/b0d36bd0a420ecee3bc916c91886caca87c894e9?dir=lib' (2023-12-30) → 'github:NixOS/nixpkgs/97b17f32362e475016f942bbdfda4a4a72a8a652?dir=lib' (2024-01-29) • Updated input 'home-manager': 'github:nix-community/home-manager/10cd9c53115061aa6a0a90aad0b0dde6a999cdb9' (2024-01-19) → 'github:nix-community/home-manager/652fda4ca6dafeb090943422c34ae9145787af37' (2024-02-03) • Updated input 'nixpkgs': 'github:nixos/nixpkgs/a77ab169a83a4175169d78684ddd2e54486ac651' (2024-01-24) → 'github:nixos/nixpkgs/25e3d4c0d3591c99929b1ec07883177f6ea70c9d' (2024-02-01) • Updated input 'nur': 'github:nix-community/NUR/55de3834d91a4fe68ba2b54253827546d20de133' (2024-02-02) → 'github:nix-community/NUR/5b2e8b3cb4404e60da0c4f64f9c17feae02132e8' (2024-02-04) • Updated input 'pre-commit-hooks': 'github:cachix/pre-commit-hooks.nix/f56597d53fd174f796b5a7d3ee0b494f9e2285cc' (2024-01-20) → 'github:cachix/pre-commit-hooks.nix/7c54e08a689b53c8a1e5d70169f2ec9e2a68ffaf' (2024-01-28) • Updated input 'treefmt-nix': 'github:numtide/treefmt-nix/fbef7c773be115ed33f37e97256a9e8f6312b925' (2024-01-26) → 'github:numtide/treefmt-nix/c6153c2a3ff4c38d231e3ae99af29b87f1df5901' (2024-01-28)
* additional settings for firefoxFranck Cuny2024-02-021-2/+16
|
* chore: update flakegithub-actions[bot]2024-02-021-9/+9
| | | | | | | | | | | | | | Flake lock file updates: • Updated input 'darwin': 'github:lnl7/nix-darwin/3ac7acd32db4f7111015e8d5349ff6067df01bf6' (2024-01-21) → 'github:lnl7/nix-darwin/0108864c15bb68ad57d17fb2e7d3a3e025751d79' (2024-01-28) • Updated input 'nixpkgs': 'github:nixos/nixpkgs/d2003f2223cbb8cd95134e4a0541beea215c1073' (2024-01-19) → 'github:nixos/nixpkgs/a77ab169a83a4175169d78684ddd2e54486ac651' (2024-01-24) • Updated input 'treefmt-nix': 'github:numtide/treefmt-nix/8cd95da6c30852adb2a06c4b6bdacfe8b64a0a35' (2024-01-19) → 'github:numtide/treefmt-nix/fbef7c773be115ed33f37e97256a9e8f6312b925' (2024-01-26)
* more Mac stuffFranck Cuny2024-02-021-0/+12
|
* install kubectlFranck Cuny2024-02-021-0/+6
|
* some Mac stuffFranck Cuny2024-02-021-0/+3
|
* install envoyFranck Cuny2024-02-021-0/+1
| | | | I'm doing some prototyping with it.
* install firefoxFranck Cuny2024-02-028-3/+143
| | | | | | | | | | | The firefox packages for darwin are broken. `bandithedoge/nixpkgs-firefox-darwin` provides an overlay to install the package on darwin. Add some specific configurations to make firefox work as I want out of the box. We also add NUR to install some firefox extensions (ublock, 1password).
* run CI commands in a nix shellFranck Cuny2024-01-261-2/+2
|
* print various environments variable from CIFranck Cuny2024-01-264-1/+38
| | | | | | | | | | | | | | | | | | | CI is currently failing with the following error: ``` go: errors parsing go.mod: /home/runner/work/world/world/go.mod:3: invalid go version '1.21.4': must match format 1.23 ``` From [1]: > Before Go 1.21, the initial release of a Go toolchain was version 1.N, not 1.N.0 which makes me think that I'm CI is running with a version of go older than 1.21, while I specify 1.21 in my nix config. If that's the case, something is not correct in the CI environment and I should fix it. Hopefully the script will give me the information I need to debug this. [1] https://go.dev/doc/toolchain#version
* fail if the token is missingFranck Cuny2024-01-251-0/+1
|
* delete some unused codeFranck Cuny2024-01-255-179/+0
|
* bump the version of goFranck Cuny2024-01-251-1/+1
|
* gha-billing: how many minutes are left in the cycleFranck Cuny2024-01-252-0/+106
|
* build binaries and run commands on CIFranck Cuny2024-01-221-0/+3
|
* add build information to `flake-info`Franck Cuny2024-01-221-1/+23
|
* add more commands to devshell's menuFranck Cuny2024-01-221-0/+12
|
* build all the binaries using a MakefileFranck Cuny2024-01-226-7/+41
| | | | | | | | | | | Add a Makefile to build the local binaries. Rename all the commands without a dash. We can build the commands with `make all` or by being explicit, for example `make bin/x509-info`. Add a common package to keep track of build information (commit and build date) so we can reuse the same pattern across all the commands.
* disable linter for yamlFranck Cuny2024-01-211-1/+5
| | | | | | | This is causing `nix flake check` to fail on CI, and I don't know why. I don't have issues locally. Commenting this out until I have a fix.
* fix linter issuesFranck Cuny2024-01-212-15/+12
|
* add gomod to dependabotFranck Cuny2024-01-211-0/+4
|
* a tool to print information about a x509 certificateFranck Cuny2024-01-212-0/+207
|
* delete all the templatesFranck Cuny2024-01-2115-274/+1
| | | | | This is too much work to maintain, and I'm going to put all my tools and scripts in this repository, so I won't need that anymore.
* chore: update flakegithub-actions[bot]2024-01-211-34/+34
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Flake lock file updates: • Updated input 'darwin': 'github:lnl7/nix-darwin/0dd382b70c351f528561f71a0a7df82c9d2be9a4' (2024-01-03) → 'github:lnl7/nix-darwin/3ac7acd32db4f7111015e8d5349ff6067df01bf6' (2024-01-21) • Updated input 'devshell': 'github:numtide/devshell/d45f45b634c624d2be705973b2af3b9bec29deff' (2024-01-11) → 'github:numtide/devshell/83cb93d6d063ad290beee669f4badf9914cc16ec' (2024-01-15) • Updated input 'futils': 'github:numtide/flake-utils/4022d587cbbfd70fe950c1e2083a02621806a725' (2023-12-04) → 'github:numtide/flake-utils/1ef2e671c3b0c19053962c07dbda38332dcebf26' (2024-01-15) • Updated input 'home-manager': 'github:nix-community/home-manager/5f0ab0eedc6ede69beb8f45561ffefa54edc6e65' (2024-01-11) → 'github:nix-community/home-manager/10cd9c53115061aa6a0a90aad0b0dde6a999cdb9' (2024-01-19) • Updated input 'nixpkgs': 'github:nixos/nixpkgs/3dc440faeee9e889fe2d1b4d25ad0f430d449356' (2024-01-10) → 'github:nixos/nixpkgs/d2003f2223cbb8cd95134e4a0541beea215c1073' (2024-01-19) • Updated input 'pre-commit-hooks': 'github:cachix/pre-commit-hooks.nix/274ae3979a0eacae422e1bbcf63b8b7a335e1114' (2024-01-12) → 'github:cachix/pre-commit-hooks.nix/f56597d53fd174f796b5a7d3ee0b494f9e2285cc' (2024-01-20) • Updated input 'pre-commit-hooks/flake-compat': 'github:edolstra/flake-compat/35bb57c0c8d8b62bbfd284272c928ceb64ddbde9' (2023-01-17) → 'github:edolstra/flake-compat/0f9255e01c2351cc7d116c072cb317785dd33b33' (2023-10-04) • Updated input 'pre-commit-hooks/flake-utils': 'github:numtide/flake-utils/a1720a10a6cfe8234c0e93907ffe81be440f4cef' (2023-05-31) → 'github:numtide/flake-utils/4022d587cbbfd70fe950c1e2083a02621806a725' (2023-12-04) • Updated input 'pre-commit-hooks/gitignore': 'github:hercules-ci/gitignore.nix/a20de23b925fd8264fd7fad6454652e142fd7f73' (2022-08-14) → 'github:hercules-ci/gitignore.nix/43e1aa1308018f37118e34d3a9cb4f5e75dc11d5' (2023-12-29) • Updated input 'pre-commit-hooks/nixpkgs-stable': 'github:NixOS/nixpkgs/c37ca420157f4abc31e26f436c1145f8951ff373' (2023-06-03) → 'github:NixOS/nixpkgs/3dc440faeee9e889fe2d1b4d25ad0f430d449356' (2024-01-10) • Updated input 'treefmt-nix': 'github:numtide/treefmt-nix/04f25d7bec9fb29d2c3bacaa48a3304840000d36' (2024-01-07) → 'github:numtide/treefmt-nix/8cd95da6c30852adb2a06c4b6bdacfe8b64a0a35' (2024-01-19)
* initial version of the flake-info commandFranck Cuny2024-01-213-0/+139
| | | | | A tool to display information about a flake. For now we shows all the inputs and when they were updated last.
* install some go related programsFranck Cuny2024-01-211-2/+9
|
* install netnewswireFranck Cuny2024-01-211-0/+1
|
* build(deps): bump cachix/install-nix-action from 24 to 25dependabot[bot]2024-01-162-2/+2
| | | | | | | | | | | | | | Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 24 to 25. - [Release notes](https://github.com/cachix/install-nix-action/releases) - [Commits](https://github.com/cachix/install-nix-action/compare/v24...v25) --- updated-dependencies: - dependency-name: cachix/install-nix-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
* chore: update flakegithub-actions[bot]2024-01-141-24/+42
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Flake lock file updates: • Updated input 'devshell': 'github:numtide/devshell/44ddedcbcfc2d52a76b64fb6122f209881bd3e1e' (2023-12-05) → 'github:numtide/devshell/d45f45b634c624d2be705973b2af3b9bec29deff' (2024-01-11) • Added input 'devshell/flake-utils': 'github:numtide/flake-utils/4022d587cbbfd70fe950c1e2083a02621806a725' (2023-12-04) • Added input 'devshell/flake-utils/systems': 'github:nix-systems/default/da67096a3b9bf56a91d16901293e51ba5b49a27e' (2023-04-09) • Updated input 'devshell/nixpkgs': 'github:NixOS/nixpkgs/9952d6bc395f5841262b006fbace8dd7e143b634' (2023-02-26) → 'github:NixOS/nixpkgs/63143ac2c9186be6d9da6035fa22620018c85932' (2024-01-02) • Removed input 'devshell/systems' • Updated input 'flake-parts': 'github:hercules-ci/flake-parts/88a2cd8166694ba0b6cb374700799cec53aef527' (2024-01-01) → 'github:hercules-ci/flake-parts/07f6395285469419cf9d078f59b5b49993198c00' (2024-01-11) • Updated input 'home-manager': 'github:nix-community/home-manager/7e398b3d76bc1503171b1364c9d4a07ac06f3851' (2024-01-01) → 'github:nix-community/home-manager/5f0ab0eedc6ede69beb8f45561ffefa54edc6e65' (2024-01-11) • Updated input 'nixpkgs': 'github:nixos/nixpkgs/c1be43e8e837b8dbee2b3665a007e761680f0c3d' (2024-01-05) → 'github:nixos/nixpkgs/3dc440faeee9e889fe2d1b4d25ad0f430d449356' (2024-01-10) • Updated input 'pre-commit-hooks': 'github:cachix/pre-commit-hooks.nix/9d3d7e18c6bc4473d7520200d4ddab12f8402d38' (2023-12-30) → 'github:cachix/pre-commit-hooks.nix/274ae3979a0eacae422e1bbcf63b8b7a335e1114' (2024-01-12) • Updated input 'treefmt-nix': 'github:numtide/treefmt-nix/e434da615ef74187ba003b529cc72f425f5d941e' (2024-01-02) → 'github:numtide/treefmt-nix/04f25d7bec9fb29d2c3bacaa48a3304840000d36' (2024-01-07)
* chore: update flakegithub-actions[bot]2024-01-071-18/+18
| | | | | | | | | | | | | | | | | | | | | | | Flake lock file updates: • Updated input 'darwin': 'github:lnl7/nix-darwin/1a41453cba42a3a1af2fff003be455ddbd75386c' (2023-12-31) → 'github:lnl7/nix-darwin/0dd382b70c351f528561f71a0a7df82c9d2be9a4' (2024-01-03) • Updated input 'flake-parts': 'github:hercules-ci/flake-parts/34fed993f1674c8d06d58b37ce1e0fe5eebcb9f5' (2023-12-01) → 'github:hercules-ci/flake-parts/88a2cd8166694ba0b6cb374700799cec53aef527' (2024-01-01) • Updated input 'flake-parts/nixpkgs-lib': 'github:NixOS/nixpkgs/e92039b55bcd58469325ded85d4f58dd5a4eaf58?dir=lib' (2023-11-29) → 'github:NixOS/nixpkgs/b0d36bd0a420ecee3bc916c91886caca87c894e9?dir=lib' (2023-12-30) • Updated input 'home-manager': 'github:nix-community/home-manager/d5824a76bc6bb93d1dce9ebbbcb09a9b6abcc224' (2023-12-23) → 'github:nix-community/home-manager/7e398b3d76bc1503171b1364c9d4a07ac06f3851' (2024-01-01) • Updated input 'nixpkgs': 'github:nixos/nixpkgs/d02d818f22c777aa4e854efc3242ec451e5d462a' (2023-12-25) → 'github:nixos/nixpkgs/c1be43e8e837b8dbee2b3665a007e761680f0c3d' (2024-01-05) • Updated input 'treefmt-nix': 'github:numtide/treefmt-nix/2961375283668d867e64129c22af532de8e77734' (2023-12-19) → 'github:numtide/treefmt-nix/e434da615ef74187ba003b529cc72f425f5d941e' (2024-01-02)
* chore: update flakegithub-actions[bot]2024-01-011-9/+9
| | | | | | | | | | | | | | Flake lock file updates: • Updated input 'darwin': 'github:lnl7/nix-darwin/010a625bd74bc623153344f52f71cc965b31d75a' (2023-12-22) → 'github:lnl7/nix-darwin/1a41453cba42a3a1af2fff003be455ddbd75386c' (2023-12-31) • Updated input 'nixpkgs': 'github:nixos/nixpkgs/d65bceaee0fb1e64363f7871bc43dc1c6ecad99f' (2023-12-20) → 'github:nixos/nixpkgs/d02d818f22c777aa4e854efc3242ec451e5d462a' (2023-12-25) • Updated input 'pre-commit-hooks': 'github:cachix/pre-commit-hooks.nix/007a45d064c1c32d04e1b8a0de5ef00984c419bc' (2023-12-13) → 'github:cachix/pre-commit-hooks.nix/9d3d7e18c6bc4473d7520200d4ddab12f8402d38' (2023-12-30)
* chore: update flakegithub-actions[bot]2023-12-261-12/+12
| | | | | | | | | | | | | | | | | Flake lock file updates: • Updated input 'darwin': 'github:lnl7/nix-darwin/4b9b83d5a92e8c1fbfd8eb27eda375908c11ec4d' (2023-11-24) → 'github:lnl7/nix-darwin/010a625bd74bc623153344f52f71cc965b31d75a' (2023-12-22) • Updated input 'home-manager': 'github:nix-community/home-manager/1488651d02c1a7a15e284210f0d380a62d8d8cef' (2023-12-17) → 'github:nix-community/home-manager/d5824a76bc6bb93d1dce9ebbbcb09a9b6abcc224' (2023-12-23) • Updated input 'nixpkgs': 'github:nixos/nixpkgs/40c3c94c241286dd2243ea34d3aef8a488f9e4d0' (2023-12-15) → 'github:nixos/nixpkgs/d65bceaee0fb1e64363f7871bc43dc1c6ecad99f' (2023-12-20) • Updated input 'treefmt-nix': 'github:numtide/treefmt-nix/d06b70e5163a903f19009c3f97770014787a080f' (2023-12-13) → 'github:numtide/treefmt-nix/2961375283668d867e64129c22af532de8e77734' (2023-12-19)
* build(deps): bump cachix/install-nix-action from 23 to 24dependabot[bot]2023-12-191-1/+1
| | | | | | | | | | | | | | Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 23 to 24. - [Release notes](https://github.com/cachix/install-nix-action/releases) - [Commits](https://github.com/cachix/install-nix-action/compare/v23...v24) --- updated-dependencies: - dependency-name: cachix/install-nix-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
* add goreleaser to go templateFranck Cuny2023-12-199-70/+147
|
* chore: update flakegithub-actions[bot]2023-12-171-6/+6
| | | | | | | | | | | Flake lock file updates: • Updated input 'home-manager': 'github:nix-community/home-manager/6761b8188b860f374b457eddfdb05c82eef9752f' (2023-12-10) → 'github:nix-community/home-manager/1488651d02c1a7a15e284210f0d380a62d8d8cef' (2023-12-17) • Updated input 'nixpkgs': 'github:nixos/nixpkgs/cf28ee258fd5f9a52de6b9865cdb93a1f96d09b7' (2023-12-12) → 'github:nixos/nixpkgs/40c3c94c241286dd2243ea34d3aef8a488f9e4d0' (2023-12-15)
* jless is useful to inspect JSON filesFranck Cuny2023-12-151-0/+1
|
* remove rust template, add GHA to go templateFranck Cuny2023-12-1512-179/+71
|
* format yamlFranck Cuny2023-12-151-1/+3
|
* various fixes for errors reported by deadnixFranck Cuny2023-12-1510-29/+9
|
* enable deadnix for pre-commit hookFranck Cuny2023-12-141-2/+1
| | | | Now that I've deleted all unused code, I can run this properly.
* delete another un-needed fileFranck Cuny2023-12-141-1/+0
|
* delete more unused configurationsFranck Cuny2023-12-145-132/+10
|
* update the main documentationFranck Cuny2023-12-148-619/+12
| | | | Delete unused/outdated documentations.
* use the `update-flake-lock` to update nix flakesFranck Cuny2023-12-141-15/+19
| | | | This is a better code than whatever I was doing in the first place.
* use devshell to build / switch the configurationFranck Cuny2023-12-142-21/+18
|
* build(deps): bump actions/checkout from 3 to 4dependabot[bot]2023-12-141-1/+1
| | | | | | | | | | | | | | | Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v3...v4) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
* pre-commit delegates all the work to treefmtFranck Cuny2023-12-142-21/+22
| | | | Clean up the yaml file for the GHA.
* testFranck Cuny2023-12-142-1/+2
|
* flake.lock: UpdateFranck Cuny2023-12-141-24/+24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Flake lock file updates: • Updated input 'devshell': 'github:numtide/devshell/c3bd77911391eb1638af6ce773de86da57ee6df5' (2023-12-04) → 'github:numtide/devshell/44ddedcbcfc2d52a76b64fb6122f209881bd3e1e' (2023-12-05) • Updated input 'futils': 'github:numtide/flake-utils/ff7b65b44d01cf9ba6a71320833626af21126384' (2023-09-12) → 'github:numtide/flake-utils/4022d587cbbfd70fe950c1e2083a02621806a725' (2023-12-04) • Updated input 'home-manager': 'github:nix-community/home-manager/aeb2232d7a32530d3448318790534d196bf9427a' (2023-11-24) → 'github:nix-community/home-manager/6761b8188b860f374b457eddfdb05c82eef9752f' (2023-12-10) • Updated input 'nixpkgs': 'github:nixos/nixpkgs/933d7dc155096e7575d207be6fb7792bc9f34f6d' (2023-12-02) → 'github:nixos/nixpkgs/cf28ee258fd5f9a52de6b9865cdb93a1f96d09b7' (2023-12-12) • Updated input 'pre-commit-hooks': 'github:cachix/pre-commit-hooks.nix/e5ee5c5f3844550c01d2131096c7271cec5e9b78' (2023-11-25) → 'github:cachix/pre-commit-hooks.nix/007a45d064c1c32d04e1b8a0de5ef00984c419bc' (2023-12-13) • Updated input 'pre-commit-hooks/flake-utils': 'github:numtide/flake-utils/4022d587cbbfd70fe950c1e2083a02621806a725' (2023-12-04) → 'github:numtide/flake-utils/a1720a10a6cfe8234c0e93907ffe81be440f4cef' (2023-05-31) • Updated input 'pre-commit-hooks/nixpkgs-stable': 'github:NixOS/nixpkgs/6386d8aafc28b3a7ed03880a57bdc6eb4465491d' (2023-12-02) → 'github:NixOS/nixpkgs/c37ca420157f4abc31e26f436c1145f8951ff373' (2023-06-03) • Updated input 'treefmt-nix': 'github:numtide/treefmt-nix/e82f32aa7f06bbbd56d7b12186d555223dc399d1' (2023-11-12) → 'github:numtide/treefmt-nix/d06b70e5163a903f19009c3f97770014787a080f' (2023-12-13)
* install vlc and transmissionFranck Cuny2023-12-141-1/+3
|
* simplify the layoutFranck Cuny2023-12-1410-2/+2
|
* build(deps): bump cachix/install-nix-action from 23 to 24dependabot[bot]2023-12-141-1/+1
| | | | | | | | | | | | | | Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 23 to 24. - [Release notes](https://github.com/cachix/install-nix-action/releases) - [Commits](https://github.com/cachix/install-nix-action/compare/v23...v24) --- updated-dependencies: - dependency-name: cachix/install-nix-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
* delete even more unused configurationsFranck Cuny2023-12-0955-16533/+7
|
* install kind / configure the dockFranck Cuny2023-12-081-3/+8
|
* delete configuration for old machinesFranck Cuny2023-12-0832-680/+0
| | | | These machines are gone, no need to keep the configuration around.
* build(deps): bump cachix/install-nix-action from 23 to 24dependabot[bot]2023-12-041-1/+1
| | | | | | | | | | | | | | Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 23 to 24. - [Release notes](https://github.com/cachix/install-nix-action/releases) - [Commits](https://github.com/cachix/install-nix-action/compare/v23...v24) --- updated-dependencies: - dependency-name: cachix/install-nix-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
* clean up the build scriptFranck Cuny2023-12-041-6/+3
| | | | As suggested by shellcheck.
* add a CI configuration for this repoFranck Cuny2023-12-041-0/+28
|
* additional cleanup for flakesFranck Cuny2023-12-043-43/+57
| | | | | Move the host configuration to `flake/hosts.nix` to follow what we did with `devshell`.
* add nixd as a LSP for nix.Franck Cuny2023-12-041-0/+1
|
* update to 23.11 and break down flakesFranck Cuny2023-12-044-140/+264
| | | | | | | | Update to 23.11 for both nix and home-manager. Break down the flake in multiple parts (hosts, devshell) so that they are easier to maintain. The main reason to start this is because `nix flake check` was failing, the flake was not correct.
* formatting a few files with treefmtFranck Cuny2023-12-035-16/+14
|
* flake.lock: UpdateFranck Cuny2023-12-031-13/+13
| | | | | | | | | | | | | | Flake lock file updates: • Updated input 'darwin': 'github:lnl7/nix-darwin/afe83cbc2e673b1f08d32dd0f70df599678ff1e7' (2023-10-27) → 'github:lnl7/nix-darwin/4b9b83d5a92e8c1fbfd8eb27eda375908c11ec4d' (2023-11-24) • Updated input 'home-manager': 'github:nix-community/home-manager/07682fff75d41f18327a871088d20af2710d4744' (2023-09-19) → 'github:nix-community/home-manager/28535c3a34d79071f2ccb68671971ce0c0984d7e' (2023-11-19) • Updated input 'pre-commit-hooks': 'github:cachix/pre-commit-hooks.nix/ea758da1a6dcde6dc36db348ed690d09b9864128' (2023-11-06) → 'github:cachix/pre-commit-hooks.nix/e5ee5c5f3844550c01d2131096c7271cec5e9b78' (2023-11-25)
* install github's monaspace [1] fontsFranck Cuny2023-11-201-0/+2
| | | | [1] https://monaspace.githubnext.com
* don't need to install emacs' pGTK variantFranck Cuny2023-11-061-1/+0
|
* flake.lock: UpdateFranck Cuny2023-11-061-12/+12
| | | | | | | | | | | | | | | | | Flake lock file updates: • Updated input 'darwin': 'github:lnl7/nix-darwin/4496ab26628c5f43d2a5c577a06683c753e32fe2' (2023-09-12) → 'github:lnl7/nix-darwin/afe83cbc2e673b1f08d32dd0f70df599678ff1e7' (2023-10-27) • Updated input 'home-manager': 'github:nix-community/home-manager/9787dffff5d315c9593d3f9fb0f9bf2097e1b57b' (2023-09-11) → 'github:nix-community/home-manager/07682fff75d41f18327a871088d20af2710d4744' (2023-09-19) • Updated input 'nixpkgs': 'github:NixOS/nixpkgs/e5f018cf150e29aac26c61dac0790ea023c46b24' (2023-09-12) → 'github:NixOS/nixpkgs/aeefe2054617cae501809b82b44a8e8f7be7cc4b' (2023-11-05) • Updated input 'pre-commit-hooks': 'github:cachix/pre-commit-hooks.nix/4f883a76282bc28eb952570afc3d8a1bf6f481d7' (2023-09-10) → 'github:cachix/pre-commit-hooks.nix/ea758da1a6dcde6dc36db348ed690d09b9864128' (2023-11-06)
* clean up flake.nix by removing unused configurationsFranck Cuny2023-11-062-130/+7
| | | | I only have one host (the macbook air) to configure.
* install a few more toolsFranck Cuny2023-11-061-0/+3
|
* use 1password ssh agentFranck Cuny2023-11-062-6/+4
| | | | Enable ssh configuration on darwin.
* add a script to update local machineFranck Cuny2023-11-061-0/+24
|
* install a few more CLIFranck Cuny2023-11-061-2/+4
|
* add a couple of aliases for gitFranck Cuny2023-11-061-0/+5
|
* add 1password key and format some filesFranck Cuny2023-11-062-7/+4
|
* build(deps): bump actions/checkout from 3 to 4 (#1)dependabot[bot]2023-09-181-1/+1
| | | | | | | | | | | | | | | | Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v3...v4) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* add ssh key from 1passowrd and sign commitsFranck Cuny2023-09-143-5/+14
|
* flake.lock: UpdateFranck Cuny2023-09-141-193/+3
| | | | | | | | | | | | | | | | | Flake lock file updates: • Removed input 'emacs-overlay' • Removed input 'emacs-overlay/flake-utils' • Removed input 'emacs-overlay/flake-utils/systems' • Removed input 'emacs-overlay/nixpkgs' • Removed input 'emacs-overlay/nixpkgs-stable' • Removed input 'naersk' • Removed input 'naersk/nixpkgs' • Removed input 'nur' • Removed input 'rust' • Removed input 'rust/flake-utils' • Removed input 'rust/flake-utils/systems' • Removed input 'rust/nixpkgs'
* flake.lock: UpdateFranck Cuny2023-09-141-33/+33
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Flake lock file updates: • Updated input 'agenix': 'github:ryantm/agenix/d8c973fd228949736dedf61b7f8cc1ece3236792' (2023-07-24) → 'github:ryantm/agenix/20deb735cc405831ba04a0088fecb3887aa255c0' (2023-09-14) • Updated input 'darwin': 'github:lnl7/nix-darwin/511177ffe8226c78c9cf6a92a7b5f2df3684956b' (2023-08-17) → 'github:lnl7/nix-darwin/4496ab26628c5f43d2a5c577a06683c753e32fe2' (2023-09-12) • Updated input 'emacs-overlay': 'github:nix-community/emacs-overlay/d532507e854bbfb3f311a9f30dcbffaeceeff83f' (2023-09-11) → 'github:nix-community/emacs-overlay/918199aeaa2c9b9d0f73e304a187a05b99fd9050' (2023-09-14) • Updated input 'emacs-overlay/flake-utils': 'github:numtide/flake-utils/f9e7cf818399d17d347f847525c5a5a8032e4e44' (2023-08-23) → 'github:numtide/flake-utils/ff7b65b44d01cf9ba6a71320833626af21126384' (2023-09-12) • Updated input 'emacs-overlay/nixpkgs': 'github:NixOS/nixpkgs/db9208ab987cdeeedf78ad9b4cf3c55f5ebd269b' (2023-09-08) → 'github:NixOS/nixpkgs/3a2786eea085f040a66ecde1bc3ddc7099f6dbeb' (2023-09-11) • Updated input 'emacs-overlay/nixpkgs-stable': 'github:NixOS/nixpkgs/4c8cf44c5b9481a4f093f1df3b8b7ba997a7c760' (2023-09-10) → 'github:NixOS/nixpkgs/e5f018cf150e29aac26c61dac0790ea023c46b24' (2023-09-12) • Updated input 'futils': 'github:numtide/flake-utils/f9e7cf818399d17d347f847525c5a5a8032e4e44' (2023-08-23) → 'github:numtide/flake-utils/ff7b65b44d01cf9ba6a71320833626af21126384' (2023-09-12) • Updated input 'naersk/nixpkgs': 'github:NixOS/nixpkgs/78058d810644f5ed276804ce7ea9e82d92bee293' (2023-09-10) → 'github:NixOS/nixpkgs/1697b7d480449b01111e352021f46e5879e47643' (2023-09-13) • Updated input 'nixpkgs': 'github:NixOS/nixpkgs/4c8cf44c5b9481a4f093f1df3b8b7ba997a7c760' (2023-09-10) → 'github:NixOS/nixpkgs/e5f018cf150e29aac26c61dac0790ea023c46b24' (2023-09-12) • Updated input 'nur': 'github:nix-community/NUR/edcd2fecb43eb52963423348caa1301e443eb392' (2023-09-12) → 'github:nix-community/NUR/cb2b66a5b85eef0465c7202aaed38773a8c7e4c8' (2023-09-14) • Updated input 'rust': 'github:oxalica/rust-overlay/f77e108350b821d62b7c2ee43fe411a9f4738099' (2023-09-11) → 'github:oxalica/rust-overlay/7c4f46f0b3597e3c4663285e6794194e55574879' (2023-09-14)
* more configuration for darwinFranck Cuny2023-09-147-60/+93
|
* build(deps): bump cachix/install-nix-action from 22 to 23 (#2)dependabot[bot]2023-09-141-1/+1
| | | | | | | | | | | | | | | Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 22 to 23. - [Release notes](https://github.com/cachix/install-nix-action/releases) - [Commits](https://github.com/cachix/install-nix-action/compare/v22...v23) --- updated-dependencies: - dependency-name: cachix/install-nix-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* add configuration for the M2 macbook airFranck Cuny2023-09-113-1/+57
|
* some changes to GitHub actionFranck Cuny2023-08-272-24/+4
|
* remove custom toolsFranck Cuny2023-08-218-459/+2
|
* add a couple of github actionsFranck Cuny2023-08-202-0/+53
|
* disable unifi and promtail/loki on tahoeFranck Cuny2023-08-201-3/+9
| | | | Add a new network interface on the host (10Gb).
* remove `sendsms` from tahoeFranck Cuny2023-08-201-2/+0
|
* flake updateFranck Cuny2023-07-281-36/+36
|
* switching back to alacritty + tmuxFranck Cuny2023-07-283-16/+23
| | | | kitty is not clicking for me. I still prefer tmux.
* add fonts specificallyFranck Cuny2023-07-081-1/+5
| | | | | | For some reasons, while google-fonts install noto, emacs was unable to find it (but was able to find source code pro). List the fonts explicitly to make emacs happy.
* add pantalaimon, a proxy for matrixFranck Cuny2023-07-082-0/+19
| | | | This is so I can use emacs as a client for matrix.
* update settings for nixos 23.05Franck Cuny2023-07-061-2/+4
| | | | | | | | Fix the following error: ``` trace: warning: The option `services.openssh.permitRootLogin' defined in `/nix/store/l0n3297c7znfapx32a6av1c26yj042j4-source/profiles/server.nix' has been renamed to `services.openssh.settings.PermitRootLogin'. trace: warning: The option `services.openssh.passwordAuthentication' defined in `/nix/store/l0n3297c7znfapx32a6av1c26yj042j4-source/profiles/server.nix' has been renamed to `services.openssh.settings.PasswordAuthentication'. ```
* enable zsh for all profilesFranck Cuny2023-07-062-2/+1
|
* add x509-info back to the list of toolsFranck Cuny2023-07-054-5/+196
|
* update nixos and home-manager to 23.05Franck Cuny2023-07-055-52/+145
|
* various updates related to music collectionFranck Cuny2023-07-053-15/+87
|
* change monospace font back to source code proFranck Cuny2023-06-083-4/+3
|
* profiles/git: ignore python bytecodeFranck Cuny2023-06-021-0/+1
|
* profiles/dev: set MYPY_CACHE_DIRFranck Cuny2023-06-021-0/+1
|
* profiles/dev: install virtualenvFranck Cuny2023-06-021-0/+1
|
* profiles/waybar: highlight text when one or more unit has failedFranck Cuny2023-06-021-0/+1
|
* workstation: more tweaks for the UI and fontsFranck Cuny2023-05-296-14/+12
|
* profiles/default: fix the GC configurationFranck Cuny2023-05-281-1/+1
| | | | | | I got the settings wrong. The `weekly` applies to `nix.gc.dates`, which is for how often the GC should run. While `nix.gc.options` is to delete content in the store older than 14 days (in my case).
* profiles/zsh: change prezto's themeFranck Cuny2023-05-281-1/+1
|
* tools/waybar-systemd-units: get a list of failed systemd unitsFranck Cuny2023-05-285-1/+114
| | | | | | | | Get a list of failed systemd units (both user and systems), and generate an output compatible to what waybar expects. Refer to https://github.com/Alexays/Waybar/wiki/Module:-Custom for more details about the format.
* font: switch to Roboto for system font and JetBrain for monospaceFranck Cuny2023-05-285-66/+30
|
* home/waybar: change the style to be a bit more readableFranck Cuny2023-05-231-33/+19
|
* profiles/workstation: stop using dark mode + preztoFranck Cuny2023-05-1611-170/+28
|
* home/ssh: add rsync.net to the match blockFranck Cuny2023-05-121-0/+6
|
* profiles/monitoring: a bunch of fixesFranck Cuny2023-05-124-4/+4
|
* profiles/nginx: set the default port to 8080Franck Cuny2023-05-121-1/+8
| | | | | | If we don't set a default port, with `statusPage` enabled, we can't start nginx on the router, since we also need to bind to port 80 for the stream.
* profiles/loki: fix a few configuration errorsFranck Cuny2023-05-123-6/+5
|
* profiles/monitoring: move loki to a profileFranck Cuny2023-05-126-118/+105
| | | | | Add a nginx virtualhost for loki too, so that we can use a valid SSL certificate.
* profiles/monitoring: move promtail to a profileFranck Cuny2023-05-127-73/+56
|
* profiles/monitoring: move node exporter to a profileFranck Cuny2023-05-127-22/+9
|
* hosts/carmel: fix proxy_pass configurationFranck Cuny2023-05-121-2/+2
|
* home/carmel: move router's configuration to a profileFranck Cuny2023-05-124-87/+90
|
* profiles/default: list installed packages in /etc/installed-packagesFranck Cuny2023-05-121-1/+10
|
* hosts/tahoe: move network configuration to default.nixFranck Cuny2023-05-122-32/+20
|
* hosts/aptos: move network configuration to default.nixFranck Cuny2023-05-122-31/+19
|
* hosts: move around backup configurationFranck Cuny2023-05-124-50/+49
|
* profiles/backup: fix path to the ssh keysFranck Cuny2023-05-121-2/+2
|
* profiles/backup: configure the backup serverFranck Cuny2023-05-125-90/+50
| | | | | It creates the user, ensure sftp is configured correctly, and rsync the backups to rsync.net once a day.
* ops: remove everything under opsFranck Cuny2023-05-127-312/+0
| | | | | I don't use terraform anymore and GCP services, so I can get rid of everything there.
* profiles/syncthing: move the old moduleFranck Cuny2023-05-106-54/+45
|
* profiles/seedbox: move transmission to itFranck Cuny2023-05-103-63/+49
| | | | | Note that this is not used by anything yet, as a password needs to be set first.
* profiles/samba: fix variableFranck Cuny2023-05-101-1/+1
|
* profiles/samba: convert the old module as a profileFranck Cuny2023-05-105-57/+34
|
* hosts/tahoe: move avahi configuration hereFranck Cuny2023-05-104-31/+10
|
* profiles/git-server: fix path for the backupFranck Cuny2023-05-101-1/+1
|
* profiles/git-server: move gitolite and cgitFranck Cuny2023-05-106-159/+130
|
* profiles/music-server: fix backup configurationFranck Cuny2023-05-101-2/+2
|
* profiles/music-server: moved navidromeFranck Cuny2023-05-105-61/+41
|
* profiles/unifi: fix variableFranck Cuny2023-05-101-1/+1
|
* modules/services: remove unifi properlyFranck Cuny2023-05-101-1/+0
|
* profiles/unifi: move the module to a profileFranck Cuny2023-05-104-72/+39
| | | | | Get rid of configuration that was duplicated (a lot of things are already handled by the upstream module).
* modules/unifi: fix the configurationFranck Cuny2023-05-091-8/+3
| | | | The wrong certificate was served.
* hosts/tahoe: don't load transmissionFranck Cuny2023-05-091-4/+0
| | | | I need to set a password.
* hosts/tahoe: fix boot configurationFranck Cuny2023-05-091-1/+1
|
* profiles/nginx: move common configuration to a profileFranck Cuny2023-05-098-47/+36
| | | | | | Both tahoe and carmel are using nginx, and we can simplify the configuration by moving common parts to the profile and have these hosts import it.
* tahoe: move the initrd codeFranck Cuny2023-05-083-36/+14
| | | | It's the only host that uses this code.
* profiles: clean up the importsFranck Cuny2023-05-084-3/+3
| | | | The hosts should be explicit about what to import.
* modules/tahoe: remove duplicated declaration for user 'nas'Franck Cuny2023-05-081-7/+0
|
* modules/wireguard: move the module to the right locationFranck Cuny2023-05-082-4/+4
|
* profile/acme: default DNS provider is gandiFranck Cuny2023-05-0811-36/+64
| | | | | | | | | | Add the API key for gandi to the secrest, create a profile for acme with my defaults. The profile is loaded by tahoe since that's where our services are running on. Update all the servers in nginx to listen on their wireguard interface.
* module for homelabFranck Cuny2023-05-084-0/+23
|
* home: get rid of mail / gpg modulesFranck Cuny2023-05-077-172/+0
| | | | I don't use GPG anymore and I don't read mail in Emacs anymore.
* profiles/workstation: move element (matrix client)Franck Cuny2023-05-074-13/+2
|
* profiles/laptop: more tweaksFranck Cuny2023-05-071-1/+2
|
* profiles/xps9300: add more settingsFranck Cuny2023-05-063-2/+29
| | | | Coming from https://github.com/NixOS/nixos-hardware/blob/51559e691f1493a26f94f1df1aaf516bb507e78b/dell/xps/13-9300/default.nix
* profiles/workstation: move sway to the workstation profileFranck Cuny2023-05-066-36/+24
|
* profiles/gtk: configure dark mode properlyFranck Cuny2023-05-061-6/+2
| | | | | | | | | | | | | Without this I was seeing the following error: ``` Unknown key Settings in /home/fcuny/.config/gtk-3.0/settings.ini ``` And the configuration contained: ``` [Settings] Settings=gtk-application-prefer-dark-theme=1 ```
* profiles/laptop: set correct governor for tlpFranck Cuny2023-05-061-2/+3
| | | | | | | | | I was getting: ``` Error in configuration at CPU_SCALING_GOVERNOR_ON_AC="schedutil": governor not available. Skipped. ``` Restore to the previous configuration.
* profiles/default: larger font on the console for all hostsFranck Cuny2023-05-062-10/+10
| | | | Easier on my eyes.
* home/profiles: move (almost) all modules to profilesFranck Cuny2023-05-0581-1530/+973
| | | | | This is a major refactor, similar to what was done for the hosts, but in a single commit.
* profiles/default: users are immutableFranck Cuny2023-05-022-3/+3
|
* profiles/server: move boot loader configurationFranck Cuny2023-05-023-18/+9
|
* profiles: consolidates common networking bitsFranck Cuny2023-05-0212-57/+26
| | | | This remove ssh on workstations. I also drop mosh since I don't use it.
* profiles/default: move stuff related to bootFranck Cuny2023-05-026-16/+16
|
* profiles: move things around for btrfsFranck Cuny2023-05-0212-27/+26
|
* profiles/hardware: create a few profiles related to hardwareFranck Cuny2023-05-0218-125/+29
|
* profiles/default: move default packages thereFranck Cuny2023-05-023-55/+45
|
* profiles/default: more consolidationFranck Cuny2023-05-0210-89/+76
|
* profiles/workstation: add font configurationsFranck Cuny2023-05-024-46/+31
|
* profiles: create default and serverFranck Cuny2023-05-026-8/+28
| | | | | | | | | | The NAS and the router are "servers", and we create a base profile for them. We add a default profile that will set things that are common to all my hosts, and we start with the locales. Update tahoe/carmel to use the server profile.
* profiles/workstation: consolidate sound related configurationsFranck Cuny2023-05-025-40/+25
|
* profiles/workstation: moved more things aroundFranck Cuny2023-05-017-51/+18
|
* profiles/laptop: consolidate services related to laptopFranck Cuny2023-05-016-44/+14
|
* profiles/workstation: reduce the number of moving partsFranck Cuny2023-05-012-13/+14
| | | | | | | | There's too many moving parts and layers of abstractions, for no benefits: I only have to manage 3-4 machines. Going to create profiles, move things there, and stop with the `enable` pattern.
* home/packages: rewrite scripts to use writeShellApplicationFranck Cuny2023-04-302-19/+25
| | | | | This function produces a shell script with dependencies, set the PATH, set some SHELLOPTS, and check the script with shellcheck.
* home/packages: add a wrapper for restic on the nasFranck Cuny2023-04-301-0/+16
| | | | | This is to call restic on the nas from a remote machine. It sets variables and run everything via sudo.
* modules/rclone: delete the module and cleanupFranck Cuny2023-04-306-55/+1
| | | | | I'm not using rclone anymore and I'm not storing the backups to GCS buckets either.
* modules/security: move ssh configuration to a dedicated moduleFranck Cuny2023-04-302-14/+19
|
* hosts/tahoe: enable rsync-ing backups to rsync.netFranck Cuny2023-04-303-0/+9
|
* modules/backup: add a module for rsyncFranck Cuny2023-04-302-0/+59
| | | | | The NAS will rsync all the backups to rsync.net. This new module creates a systemd unit and timer to do this task.
* modules/security: add ssh key for rsync.net to known hostsFranck Cuny2023-04-291-0/+4
|
* modules/boot: always clean up /tmp on bootFranck Cuny2023-04-292-3/+1
|
* modules/system: add ssh keys for known hostsFranck Cuny2023-04-291-0/+10
| | | | These keys are stable, they can be set on every hosts.
* hosts/tahoe: disable rcloneFranck Cuny2023-04-291-1/+0
| | | | | Backups are not synchronized with rclone to gcloud, but instead with rsync to rsync.net.
* hosts/tahoe: update settings related to resticFranck Cuny2023-04-291-14/+5
| | | | | The path to the restic repository has changed, and we are a bit more specific about the paths we want to backup.
* hosts/aptos: configure backups properlyFranck Cuny2023-04-291-8/+16
| | | | | | | Configure correctly the systemd unit to run restic on aptos. Be more specific about the paths we want to backup, instead of backing up '/home' and maintaining a large exclusion list.
* modules/restic: handle extra options and remove unused settingsFranck Cuny2023-04-291-11/+9
| | | | | | | | | | | For a host to use a repository from a remote machine, we need to configure options for the CLI. For this we add a new setting `extraOptions` where we can define the sftp command. Remove the setting for the user that will run restic, since it's always 'root' in our situation. Clean some descriptions.
* hosts/tahoe: rename account for backup and enable sftp for itFranck Cuny2023-04-293-7/+21
| | | | | | | | | | | | | The dedicated account for backup should be named 'backup', as it's more generic. While it's a system account, I still need to be able to log in the host remotely with sftp, so we give it a UID (991). The account needs to be able to sftp to tahoe in order to store the backups from remote hosts. However we don't want this user to get a shell and be able to browse the host, so we configure sshd to chroot the user to where the backups are stored.
* hosts/aptos: do backups over sftp with a dedicated ssh keyFranck Cuny2023-04-233-1/+10
|
* modules/services: more cleanupFranck Cuny2023-04-231-2/+0
|
* modules/drone: clean this properlyFranck Cuny2023-04-233-14/+0
|
* hosts/tahoe: create a new user specifically for backupsFranck Cuny2023-04-231-0/+11
| | | | | | This is the user I'll be using to do my backups. This is a system user, and there's only one public key added to it. This key is only used for backups and will be managed in this repository.
* modules/services: delete unused servicesFranck Cuny2023-04-236-326/+0
| | | | I'm not using anymore sourcegraph drone and gitea.
* hosts/carmel: enable promtailFranck Cuny2023-04-231-1/+5
|
* modules/monitoring: set the host's name as a label for promtailFranck Cuny2023-04-231-2/+2
|
* hosts/tahoe: loki and prometheus listen only on the wg0 interfaceFranck Cuny2023-04-234-11/+40
| | | | | | | I don't want to have to deal with authentication and TLS certificates for these endpoints. If they are only listening on the wireguard interface I can trust that only authorized hosts are sending traffic to these endpoints. I trust what's running on these machines.
* modules/monitoring: consolidate all monitoring services togetherFranck Cuny2023-04-2312-6689/+37
| | | | | This will help to organize and structure monitoring modules a bit better.
* modules/grafana: add loki as a source to grafanaFranck Cuny2023-04-231-6/+13
|
* modules/services: add loki and promtailFranck Cuny2023-04-235-0/+178
|
* nginx: remove the grafana dashboard providerFranck Cuny2023-04-181-6/+0
| | | | | This is now handled by https://git.fcuny.net/monitoring/commit/?id=b4abbf2d86d06d243b639d06a576f542f3dd5824
* hosts/carmel: don't log dns queries in dnsmasqFranck Cuny2023-04-151-1/+0
| | | | This is way too verbose
* hosts/carmel: start dnsmasq once network interfaces are onlineFranck Cuny2023-04-151-0/+7
|
* hosts/carmel: don't release DHCP lease on wan interfaceFranck Cuny2023-04-151-0/+3
| | | | No need to release the lease if we are rebooting.
* home/alacritty: smaller fontFranck Cuny2023-04-131-1/+1
|
* home/shell: alias to show DHCP leasesFranck Cuny2023-04-131-0/+1
|
* modules/grafana: delete the dashboard for the routerFranck Cuny2023-04-131-3784/+0
| | | | It's now managed in https://git.fcuny.net/monitoring/
* hosts/carmel: serve the leases on port 8067Franck Cuny2023-04-061-4/+7
| | | | | Bind to the wireguard interface, and use the port 8067 (67 is the port used for DHCP requests).
* hosts/carmel: run dnsmasql-to-html when leases changeFranck Cuny2023-04-061-1/+4
| | | | | | The option `dhcp-script` can be used to run a script every time a new lease is added or deleted. We configure this option to run the script that generates a static HTML file with the leases.
* tools/dnsmasq-leases-html: create a HTML page with leases from dnsmasqFranck Cuny2023-04-066-1/+172
| | | | | | | Parse the file that contains all the leases assigned by dnsmasq, and create a static HTML page from it. This can be served by nginx to make it easy to see what IP is assigned to a machine, and which machines are currently on the network.
* monitoring: small fixesFranck Cuny2023-04-052-1177/+0
|
* hosts/carmel: the wireguard interface is trustedFranck Cuny2023-04-051-1/+1
|
* modules/prometheus: fix IP addressesFranck Cuny2023-04-051-29/+7
|
* wireguard: fix configuration of a few hostsFranck Cuny2023-04-051-7/+2
|
* hosts/carmel: add wireguard keyFranck Cuny2023-04-054-2/+25
|
* hosts/carmel: drop checkReversePathFranck Cuny2023-04-051-3/+0
| | | | This is managed in the tailscale module.
* hosts/carmel: enable tailscaleFranck Cuny2023-04-051-0/+2
|
* hosts/carmel: more options for dnsmasqFranck Cuny2023-04-031-0/+2
|
* hosts/carmel: add a few more options for dnsmasqFranck Cuny2023-04-031-0/+6
|
* hosts/carmel: enable prometheus exporter for DNSmasqFranck Cuny2023-04-031-0/+5
|
* hosts/carmel: reconfigure the host as a routerFranck Cuny2023-04-0314-118/+233
| | | | | | | | | | | | I'm not using it as a desktop, and the current router is getting old and will likely fail in the near future. It's also a debian machine configured manually, so let's reconfigure carmel as our new router. There are three NICs in the host: 2 are 10Gb and one is 1Gb. The 1Gb will be used as the upstream interface, and one of the 10Gb will be for the LAN. There are 2 VLANs to configure: one for IoT devices and one for guest.
* flake: fix URL for sendsmsFranck Cuny2023-04-022-7/+7
|
* home/wayland: tweaks for mako and wofiFranck Cuny2023-03-312-1/+7
|
* home/sway: start sway and ssh-agent properlyFranck Cuny2023-03-314-14/+20
| | | | | I only need to run sway and the ssh-agent on a workstation (desktop or laptop). Start these two processes when the window manager starts.
* modules/sendsms: gate the unit with a fileFranck Cuny2023-03-276-6/+210
| | | | | | | | | | To prevent the unit to be triggered multiple times if the host has already rebooted, we create a gate file when we're done running, and before running, we check if the file exists. Enable the service on tahoe. Don't restart the unit when its definition has changed.
* modules/console: fix syntaxFranck Cuny2023-03-261-1/+1
|
* modules/console: larger font for EVERYONEFranck Cuny2023-03-262-9/+3
|
* hosts/tahoe: set a larger font for the TTYsFranck Cuny2023-03-261-0/+8
|
* modules/cgit: get rid of double quotesFranck Cuny2023-03-191-2/+2
|
* home/matrix: switch back to elementFranck Cuny2023-03-191-5/+1
| | | | fractal requires the gnome key chain but I got rid of it.
* home/fonts: be more consistent in my choicesFranck Cuny2023-03-184-9/+13
| | | | | | - source code pro for monospace - dejavu sans for sans serif - dejavu serif for serif
* hosts: it's time to switch to schedutilFranck Cuny2023-03-152-2/+4
|
* home/sway: a bunch of small tweaksFranck Cuny2023-03-143-16/+12
|
* modules/fonts: add more fontsFranck Cuny2023-03-141-3/+14
|
* home/mpv: more configuration tweaksFranck Cuny2023-03-141-0/+7
|
* home/shell: a few more tweaks to zshFranck Cuny2023-03-143-2/+5
|
* hosts/tahoe: set the consoleMode to "max"Franck Cuny2023-03-141-0/+3
|
* home/git: some cleanupFranck Cuny2023-03-133-17/+5
| | | | | | - add a comment for each ssh-key that is not stored on a yubikey - simplify the git commit template - remove some extra config that I don't need
* home/passage: delete all references to password-storeFranck Cuny2023-03-132-28/+5
| | | | | | I completely replaced the usage of `pass' with `passage'. There's no need to keep a mapping file at this point, since my interaction with the git server is through ssh.
* home/alacritty: better (to me) colorsFranck Cuny2023-03-121-0/+28
|
* home/shell: aliases and cleaner promptFranck Cuny2023-03-122-1/+2
|
* home/yubikey: install (and run) yubikey-touch-detectorFranck Cuny2023-03-121-1/+25
| | | | | | | | This is a useful tool to know when I'm supposed to touch my yubikey (sometimes I forget that some actions require that). Also configure a systemd unit to run it, and configure it to send a notification to the desktop (at the moment this is consumed by mako).
* home/secrets: delete the one for gcloudFranck Cuny2023-03-122-4/+1
| | | | Turns out I don't need this one!
* tools: delete dns-updaterFranck Cuny2023-03-127-882/+0
| | | | The code has moved to https://git.fcuny.net/dns-updater/
* home/gpg: disable the agentFranck Cuny2023-03-111-1/+1
| | | | | I do not need an agent anymore, since I don't need to decrypt anything in GPG at this point!
* home/yt-dlp: update configurationFranck Cuny2023-03-111-1/+3
|
* home/zsh: load ssh-agent before swayFranck Cuny2023-03-111-1/+2
| | | | We need to start the ssh agent (if needed) before we start sway.
* home/swaybar: add an indicator for systemd unitFranck Cuny2023-03-112-3/+38
| | | | | Reports the number of systemd units (user and systems) that are in failed state.
* home/shell: switch the default shell back to zshFranck Cuny2023-03-119-9/+49
| | | | | | | | I keep running into issues when using fish: I'm not familiar with the syntax and I don't use it enough that it sticks. I also need to google stuff regularly to figure out how things are supposed to work. This is annoying enough that the supposed benefits of fish are not worth it for me.
* secrets: move aptos' gcloud secrets to homeageFranck Cuny2023-03-114-8/+7
| | | | This secret is not needed system wide, I only need it to run some tools.
* secrets: use homeage to manage secrets for home-managerFranck Cuny2023-03-115-5/+47
| | | | | | | | | | | | | Instead of using agenix for all the secrets, I can use homeage for secrets that are related to my user sessions. Secrets by default will be store under `~/.secrets'. They are encrypted using `age' and to decrypt them, a key is expected to be located under `~/.age/key.txt'. The last place where I was using `pass' (and so GPG too) was for the secrets for `mbsync': this change adds a secret for fastmail to the repository and update `mbsync' configuration to use it.
* home/gnome: no more keyringFranck Cuny2023-03-106-31/+2
| | | | | | I used the keyring only to start the GPG agent and unlock the ssh keys. But since I'm storing the ssh keys on yubikeys and I don't use GPG, I can remove it.
* home/pass: configure passage properlyFranck Cuny2023-03-101-15/+2
| | | | | | | | | I need to be explicit about the path to the identity file. Since I'm switching from pass to passage, I also want to disable the automatic synchronization of the repository, and I don't need to have a wrapper for git to push the secrets (I push through ssh now instead of HTTPS).
* documentation: clean upFranck Cuny2023-03-103-68/+29
| | | | | | | | Delete gnome's keyring documentation, I will not be using it anymore, so no need to keep this around. Add documentation about how to manage secrets, and clean up wireguard's documentation.
* hosts/tahoe: delete unused secretsFranck Cuny2023-03-103-5/+0
|
* hosts/tahoe: re-key all the secrets with age identitiesFranck Cuny2023-03-1012-32/+41
| | | | | | | This is using the public keys from: - my user on my laptop - the root user on tahoe - the backup key stored on the USB drive
* hosts/aptos: re-key all the secrets with age identitiesFranck Cuny2023-03-106-18/+19
| | | | | | | This is now using the public keys from various age keys: - one for my user on the laptop - one for the root user on the laptop - one backup key stored on the USB drive