Bruno BELANYI
e4bd59b82b
home: wm: i3: launch tmux when starting terminal
...
Similarly to the `zsh` snippet, launch tmux unless I explicitly do not
want it.
The reason I also add it in `i3` is to make the launch happen sooner,
and to avoid doing double work on some shell startup shenanigans if I
can.
2021-09-30 15:38:43 +02:00
Bruno BELANYI
3d0a73fffd
home: zsh: launch tmux when starting a shell
2021-09-30 15:34:16 +02:00
Bruno BELANYI
cdabd4fb5d
home: vim: switch back to gruvbox theme
...
Onedark is too annoying to deal with, and I still like gruvbox's colors
best.
2021-09-29 18:50:33 +02:00
Bruno BELANYI
4be248ee22
flake: bump inputs
2021-09-29 17:37:15 +02:00
Bruno BELANYI
88ae4abca0
profiles: gtk: new best practices for dconf
2021-09-27 17:07:47 +02:00
Bruno BELANYI
55541abd17
modules: secrets: fix permission for grafana
2021-09-26 23:09:33 +02:00
Bruno BELANYI
b9786398a7
modules: secrets: fix permission of 'matrix/mail'
2021-09-26 23:09:33 +02:00
Bruno BELANYI
5fd82472bf
modules: secrets: add 'owner' logic
2021-09-26 23:09:33 +02:00
Bruno BELANYI
8968e30e62
modules: secrets: remove 'with lib;'
2021-09-26 23:09:33 +02:00
Bruno BELANYI
0b580b61e7
secrets: move into 'modules'
2021-09-26 23:09:33 +02:00
Bruno BELANYI
c32be8ac02
project: bootstrap: retrieve agenix key
2021-09-26 23:09:33 +02:00
Bruno BELANYI
8eef7c260e
ci: use 'nix flake check'
...
Now that I am using agenix, secrets stays encrypted at rest.
2021-09-26 23:09:33 +02:00
Bruno BELANYI
172e29db69
flake: remove 'git-crypt'
2021-09-26 23:09:33 +02:00
Bruno BELANYI
3d0d19d9a1
secrets: remove git-crypt
2021-09-26 23:09:33 +02:00
Bruno BELANYI
e64fdcf38b
secrets: remove git-crypt secrets
2021-09-26 23:09:33 +02:00
Bruno BELANYI
414c27ee63
modules: services: nginx: sso: use runtime secrets
2021-09-26 23:09:33 +02:00
Bruno BELANYI
7257f3156e
machines: porthos: services: switch to agenix
...
The prep-work should be done now, time to hit the switch.
2021-09-26 23:09:32 +02:00
Bruno BELANYI
c7766afe90
modules: services: nginx: allow sso secret files
...
This is in preparation of the migration to agenix, which does not allow
access to the secrets at build time.
2021-09-26 23:09:32 +02:00
Bruno BELANYI
dc5a44ce82
home: put modules into folders
2021-09-26 23:09:32 +02:00
Bruno BELANYI
5b0e0bcbc2
home: terminal: put modules into folders
2021-09-26 23:09:32 +02:00
Bruno BELANYI
b90629fdd9
home: x: put modules into folders
2021-09-26 23:09:32 +02:00
Bruno BELANYI
acc23ab684
home: wm: put modules into folders
2021-09-26 23:09:32 +02:00
Bruno BELANYI
544aec0d91
home: mail: put modules into folders
2021-09-26 23:09:32 +02:00
Bruno BELANYI
a12b629dc3
home: firefox: put modules into folders
2021-09-26 23:09:32 +02:00
Bruno BELANYI
f61f11ba29
profiles: put modules into folders
2021-09-26 23:09:32 +02:00
Bruno BELANYI
b46b918295
modules: services: drone: split into files
...
This is cleaner to read.
2021-09-26 23:09:32 +02:00
Bruno BELANYI
ac90c5b11a
modules: services: put modules into folders
2021-09-26 23:09:32 +02:00
Bruno BELANYI
836b54b8eb
modules: hardware: put modules into folders
2021-09-26 23:09:32 +02:00
Bruno BELANYI
7bec7ae0f9
modules: system: put modules into folders
2021-09-26 23:09:32 +02:00
Bruno BELANYI
d5b09c48ef
modules: programs: put modules into folders
2021-09-26 23:09:32 +02:00
Bruno BELANYI
c88fa91671
modules: home: put into folder
2021-09-26 23:09:32 +02:00
Bruno BELANYI
f09ba6b5be
machines: porthos: users: use clear-text ssh key
2021-09-26 23:09:32 +02:00
Bruno BELANYI
33d539ed4f
modules: system: users: use agenix secrets
2021-09-26 23:09:32 +02:00
Bruno BELANYI
91abacd0f6
modules: services: wireguard: use agenix secrets
2021-09-26 23:09:32 +02:00
Bruno BELANYI
16d3cd9f81
modules: services: nginx: use 'credentialsFile'
...
In preparation for the migration to agenix.
2021-09-26 23:09:32 +02:00
Bruno BELANYI
7d37701811
modules: services: matrix: use 'mailConfigFile'
...
In preparation of the migration to agenix.
2021-09-26 23:09:32 +02:00
Bruno BELANYI
4643690b43
modules: services: paperless: use 'secretKeyFile'
...
In preparation for the migration to agenix.
2021-09-26 23:09:32 +02:00
Bruno BELANYI
5579baecfb
modules: services: nextcloud: use 'credentialsfile'
...
In preparation for the migration to agenix.
2021-09-26 23:09:32 +02:00
Bruno BELANYI
9d8da4d2b2
modules: services: miniflux: use 'credentialsFiles'
...
In preparation for the migration to agenix.
2021-09-26 23:09:32 +02:00
Bruno BELANYI
da63787874
modules: services: transmission: secrets w/ file
...
In preparation for the migration to using agenix.
2021-09-26 23:09:31 +02:00
Bruno BELANYI
98034a5410
secrets: register agenix secrets automatically
2021-09-26 23:09:31 +02:00
Bruno BELANYI
8664781da7
secrets: migrate to agenix
...
It is finally time to graduate to an actually secure, stateless
solution.
2021-09-26 23:09:31 +02:00
Bruno BELANYI
abf526ae3c
secrets: import 'agenix' module
2021-09-25 13:31:43 +02:00
Bruno BELANYI
7273f2102a
flake: add 'agenix'
2021-09-25 13:30:51 +02:00
Bruno BELANYI
963c86c66f
home: remove unused 'secrets' module
2021-09-25 13:27:01 +02:00
Bruno BELANYI
f3519e845f
home: ssh: add missing 'mkIf cfg.enable'
2021-09-24 01:21:57 +02:00
Bruno BELANYI
8ba1746be4
home: remove unused arguments
2021-09-24 01:21:57 +02:00
Bruno BELANYI
313b0c23a9
modules: remove unused arguments
2021-09-24 01:21:57 +02:00
Bruno BELANYI
176d95d890
machines: remove unused arguments
2021-09-24 01:21:57 +02:00
Bruno BELANYI
b398481ba3
pkgs: remove unused arguments
2021-09-24 01:21:57 +02:00