ambroisie/nix-config
ambroisie/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
609 commits 9 branches 0 tags 3.7 MiB
Commit graph

609 commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Bruno BELANYI b3aa737e28 flake: bump inputs 2021-10-04 14:45:41 +02:00
Bruno BELANYI ac76d8ae68 home: tmux: add tmux service 
The service definition is pretty awful, but it deals with the secure
socket correctly...

This avoids having a small lapse when starting the very first shell of a
session, which must first launch the server.
 2021-09-30 16:58:44 +02:00
Bruno BELANYI 3ec99d4c0e home: tmux: make history longer 
We got tons of RAM!
 2021-09-30 16:47:52 +02:00
Bruno BELANYI e4bd59b82b home: wm: i3: launch tmux when starting terminal 
Similarly to the `zsh` snippet, launch tmux unless I explicitly do not
want it.

The reason I also add it in `i3` is to make the launch happen sooner,
and to avoid doing double work on some shell startup shenanigans if I
can.
 2021-09-30 15:38:43 +02:00
Bruno BELANYI 3d0a73fffd home: zsh: launch tmux when starting a shell 2021-09-30 15:34:16 +02:00
Bruno BELANYI cdabd4fb5d home: vim: switch back to gruvbox theme 
Onedark is too annoying to deal with, and I still like gruvbox's colors
best.
 2021-09-29 18:50:33 +02:00
Bruno BELANYI 4be248ee22 flake: bump inputs 2021-09-29 17:37:15 +02:00
Bruno BELANYI 88ae4abca0 profiles: gtk: new best practices for dconf 2021-09-27 17:07:47 +02:00
Bruno BELANYI 55541abd17 modules: secrets: fix permission for grafana 2021-09-26 23:09:33 +02:00
Bruno BELANYI b9786398a7 modules: secrets: fix permission of 'matrix/mail' 2021-09-26 23:09:33 +02:00
Bruno BELANYI 5fd82472bf modules: secrets: add 'owner' logic 2021-09-26 23:09:33 +02:00
Bruno BELANYI 8968e30e62 modules: secrets: remove 'with lib;' 2021-09-26 23:09:33 +02:00
Bruno BELANYI 0b580b61e7 secrets: move into 'modules' 2021-09-26 23:09:33 +02:00
Bruno BELANYI c32be8ac02 project: bootstrap: retrieve agenix key 2021-09-26 23:09:33 +02:00
Bruno BELANYI 8eef7c260e ci: use 'nix flake check' 
Now that I am using agenix, secrets stays encrypted at rest.
 2021-09-26 23:09:33 +02:00
Bruno BELANYI 172e29db69 flake: remove 'git-crypt' 2021-09-26 23:09:33 +02:00
Bruno BELANYI 3d0d19d9a1 secrets: remove git-crypt 2021-09-26 23:09:33 +02:00
Bruno BELANYI e64fdcf38b secrets: remove git-crypt secrets 2021-09-26 23:09:33 +02:00
Bruno BELANYI 414c27ee63 modules: services: nginx: sso: use runtime secrets 2021-09-26 23:09:33 +02:00
Bruno BELANYI 7257f3156e machines: porthos: services: switch to agenix 
The prep-work should be done now, time to hit the switch.
 2021-09-26 23:09:32 +02:00
Bruno BELANYI c7766afe90 modules: services: nginx: allow sso secret files 
This is in preparation of the migration to agenix, which does not allow
access to the secrets at build time.
 2021-09-26 23:09:32 +02:00
Bruno BELANYI dc5a44ce82 home: put modules into folders 2021-09-26 23:09:32 +02:00
Bruno BELANYI 5b0e0bcbc2 home: terminal: put modules into folders 2021-09-26 23:09:32 +02:00
Bruno BELANYI b90629fdd9 home: x: put modules into folders 2021-09-26 23:09:32 +02:00
Bruno BELANYI acc23ab684 home: wm: put modules into folders 2021-09-26 23:09:32 +02:00
Bruno BELANYI 544aec0d91 home: mail: put modules into folders 2021-09-26 23:09:32 +02:00
Bruno BELANYI a12b629dc3 home: firefox: put modules into folders 2021-09-26 23:09:32 +02:00
Bruno BELANYI f61f11ba29 profiles: put modules into folders 2021-09-26 23:09:32 +02:00
Bruno BELANYI b46b918295 modules: services: drone: split into files 
This is cleaner to read.
 2021-09-26 23:09:32 +02:00
Bruno BELANYI ac90c5b11a modules: services: put modules into folders 2021-09-26 23:09:32 +02:00
Bruno BELANYI 836b54b8eb modules: hardware: put modules into folders 2021-09-26 23:09:32 +02:00
Bruno BELANYI 7bec7ae0f9 modules: system: put modules into folders 2021-09-26 23:09:32 +02:00
Bruno BELANYI d5b09c48ef modules: programs: put modules into folders 2021-09-26 23:09:32 +02:00
Bruno BELANYI c88fa91671 modules: home: put into folder 2021-09-26 23:09:32 +02:00
Bruno BELANYI f09ba6b5be machines: porthos: users: use clear-text ssh key 2021-09-26 23:09:32 +02:00
Bruno BELANYI 33d539ed4f modules: system: users: use agenix secrets 2021-09-26 23:09:32 +02:00
Bruno BELANYI 91abacd0f6 modules: services: wireguard: use agenix secrets 2021-09-26 23:09:32 +02:00
Bruno BELANYI 16d3cd9f81 modules: services: nginx: use 'credentialsFile' 
In preparation for the migration to agenix.
 2021-09-26 23:09:32 +02:00
Bruno BELANYI 7d37701811 modules: services: matrix: use 'mailConfigFile' 
In preparation of the migration to agenix.
 2021-09-26 23:09:32 +02:00
Bruno BELANYI 4643690b43 modules: services: paperless: use 'secretKeyFile' 
In preparation for the migration to agenix.
 2021-09-26 23:09:32 +02:00
Bruno BELANYI 5579baecfb modules: services: nextcloud: use 'credentialsfile' 
In preparation for the migration to agenix.
 2021-09-26 23:09:32 +02:00
Bruno BELANYI 9d8da4d2b2 modules: services: miniflux: use 'credentialsFiles' 
In preparation for the migration to agenix.
 2021-09-26 23:09:32 +02:00
Bruno BELANYI da63787874 modules: services: transmission: secrets w/ file 
In preparation for the migration to using agenix.
 2021-09-26 23:09:31 +02:00
Bruno BELANYI 98034a5410 secrets: register agenix secrets automatically 2021-09-26 23:09:31 +02:00
Bruno BELANYI 8664781da7 secrets: migrate to agenix 
It is finally time to graduate to an actually secure, stateless
solution.
 2021-09-26 23:09:31 +02:00
Bruno BELANYI abf526ae3c secrets: import 'agenix' module 2021-09-25 13:31:43 +02:00
Bruno BELANYI 7273f2102a flake: add 'agenix' 2021-09-25 13:30:51 +02:00
Bruno BELANYI 963c86c66f home: remove unused 'secrets' module 2021-09-25 13:27:01 +02:00
Bruno BELANYI f3519e845f home: ssh: add missing 'mkIf cfg.enable' 2021-09-24 01:21:57 +02:00
Bruno BELANYI 8ba1746be4 home: remove unused arguments 2021-09-24 01:21:57 +02:00