Commit graph

1712 commits

Author SHA1 Message Date
Bruno BELANYI df809a24f8 nixos: services: postgresql: persist data 2024-11-28 23:41:27 +00:00
Bruno BELANYI e68aa49f29 nixos: services: podgrab: persist data 2024-11-28 23:41:27 +00:00
Bruno BELANYI df917ad9f0 nixos: services: pirate: persist data 2024-11-28 23:41:27 +00:00
Bruno BELANYI 3068850c5c nixos: services: pdf-edit: persist data 2024-11-28 23:41:27 +00:00
Bruno BELANYI 0842666f67 nixos: services: paperless: persist data 2024-11-28 23:41:27 +00:00
Bruno BELANYI 420ea0dbbf nixos: services: nextcloud: persist data 2024-11-28 23:41:27 +00:00
Bruno BELANYI 18b078ae09 nixos: services: nginx: persist SSL certificates 2024-11-28 23:41:27 +00:00
Bruno BELANYI 2854952f0b nixos: services: navidrome: persist data 2024-11-28 23:41:27 +00:00
Bruno BELANYI f09db97960 nixos: services: monitoring: persist data 2024-11-28 23:41:27 +00:00
Bruno BELANYI fce6fd6e79 nixos: services: mealie: persist data 2024-11-28 23:41:27 +00:00
Bruno BELANYI dbc919e3d8 nixos: services: matrix: persist data 2024-11-28 22:05:27 +00:00
Bruno BELANYI 19c4586073 nixos: services: lohr: persist data 2024-11-28 22:05:27 +00:00
Bruno BELANYI c07d3f4c0b nixos: services: komga: persist data 2024-11-28 22:05:27 +00:00
Bruno BELANYI 79274dac40 nixos: services: jellyfin: persist data 2024-11-28 22:05:27 +00:00
Bruno BELANYI dc0d753625 nixos: services: indexers: persist data 2024-11-28 22:05:27 +00:00
Bruno BELANYI 72ffc1c25a nixos: services: grocy: persist data 2024-11-28 22:05:27 +00:00
Bruno BELANYI 88f8f8a6cd nixos: services: gitea: persist repositories 2024-11-28 22:05:27 +00:00
Bruno BELANYI 8c5ada0d6d nixos: services: forgejo: persist repositories 2024-11-28 22:05:27 +00:00
Bruno BELANYI 0ac6fef308 nixos: services: flood: persist data 2024-11-28 22:05:27 +00:00
Bruno BELANYI 34592cfd52 nixos: services: fail2ban: persist data 2024-11-28 22:05:27 +00:00
Bruno BELANYI 075a52f8db nixos: services: calibre-web: persist library 2024-11-28 22:05:27 +00:00
Bruno BELANYI f2b5290df7 nixos: services: blog: persist website data 2024-11-28 22:05:27 +00:00
Bruno BELANYI e74aceee24 nixos: services: audiobookshelf: persist data 2024-11-28 22:05:27 +00:00
Bruno BELANYI 110aef16e4 nixos: services: aria: persist data 2024-11-28 22:05:27 +00:00
Bruno BELANYI 5efdd891db nixos: services: ssh-server: persist host keys 2024-11-28 22:05:27 +00:00
Bruno BELANYI 4be4f5e3cd nixos: hardware: networking persist connections 2024-11-28 20:29:14 +00:00
Bruno BELANYI 7e568c29ce nixos: hardware: bluetooth: persist connections 2024-11-28 20:19:49 +00:00
Bruno BELANYI d0a7ec4d81 nixos: system: podman: persist data 2024-11-28 20:19:49 +00:00
Bruno BELANYI 828621041a nixos: system: docker: persist data 2024-11-28 20:19:49 +00:00
Bruno BELANYI 0f2109c4b0 WIP: nixos: system: add persist
This is the module that takes care of configuring impermanence at the
system level.

WIP:
    * address FIXMEs
    * activate home-manager persistence?
        * set `programs.fuse.userAllowOther = true;` ?
    * point `age` to persisted paths [1] ?
    * make sure all services and modules are persisted correctly...

[1]: b1d18d25b8
2024-11-28 20:19:22 +00:00
Bruno BELANYI 05fdbcdb76 flake: add 'impermanence' 2024-11-28 19:59:41 +00:00
Bruno BELANYI e03db8642a nixos: system: packages: remove 'wget'
All checks were successful
ci/woodpecker/push/check Pipeline was successful
2024-11-28 19:59:41 +00:00
Bruno BELANYI 9fc7d32481 home: tmux: add sloppy window switching bindings
All checks were successful
ci/woodpecker/push/check Pipeline was successful
Another set of bindings which were setup by `tmux-sensible`, that I want
to enable explicitly to avoid issues when it is disabled by default.
2024-11-28 18:39:10 +00:00
Bruno BELANYI b38658405a home: tmux: add binding to refresh configuration
Don't rely on `tmux-sensible` to set it up.
2024-11-28 18:39:09 +00:00
Bruno BELANYI da3c29bbaf home: xdg: add comment about 'tig'
To explain why I didn't modify it as part of my `$XDG_STATE_HOME`
migration in fbd3b70d61.
2024-11-28 12:07:52 +00:00
Bruno BELANYI 8b61af1ac3 home: xdg: remove 'gdb' directory
I have an actual module to configure `gdb`, and it uses
`$XDG_STATE_HOME` anyway...
2024-11-28 12:07:12 +00:00
Bruno BELANYI e8a41187e7 home: xdg: create 'HISTFILE' parent directory
In fbd3b70d61, I forgot to modify the
`.keep` file to be created in `$XDG_STATE_HOME/bash/`.
2024-11-28 12:06:03 +00:00
Bruno BELANYI 83da7ba9c8 home: tmux: explicitly disable mouse support
All checks were successful
ci/woodpecker/push/check Pipeline was successful
It's disabled by default, but make it explicit :-).
2024-11-28 11:24:34 +00:00
Bruno BELANYI f2168378fc home: direnv: lib: also watch '.python-version'
All checks were successful
ci/woodpecker/push/check Pipeline was successful
It's used by `uv` as a kind of configuration file, so watch it as well.
2024-11-27 15:12:10 +00:00
Bruno BELANYI e39fef275c nixos: services: paperless: use 'environmentFile'
All checks were successful
ci/woodpecker/push/check Pipeline was successful
That way I don't have to configure all services to make use of it.

Someday I'll find the will to add the `postgresql.service` dependency
upstream, truly removing the need to configure any service at all.
2024-11-27 12:05:41 +00:00
Bruno BELANYI fe49e47026 flake: bump inputs 2024-11-27 12:02:29 +00:00
Bruno BELANYI 6a5c4a627a nixos: services: pyload: add fail2ban jail
All checks were successful
ci/woodpecker/push/check Pipeline was successful
2024-11-20 21:06:17 +01:00
Bruno BELANYI 7f0cd6612e nixos: services: paperless: remove MKL work-around
Instead, rely on the upstream service's work-around [1].

This will reduce the amount of package builds I need to do when updating
my server...

[1]: https://github.com/NixOS/nixpkgs/pull/299008

This reverts commit e2ec4d3032.
2024-11-20 21:06:17 +01:00
Bruno BELANYI 2ffbc13513 flake: bump inputs 2024-11-20 21:06:17 +01:00
Bruno BELANYI 60050113bc nixos: services: nginx: modify example
All checks were successful
ci/woodpecker/push/check Pipeline was successful
Now that `websocketLocations` exists, it makes little sense to use
`proxyWebsockets` in an example, so use a different one.
2024-11-19 16:03:38 +00:00
Bruno BELANYI 6a1a35a384 nixos: services: migrate to 'websocketsLocations' 2024-11-19 16:03:38 +00:00
Bruno BELANYI e9d96138d5 nixos: services: nginx: add 'websocketsLocations'
This accounts for the overwhelming majority of my usage of
`extraConfig`.
2024-11-19 16:03:38 +00:00
Bruno BELANYI ae230b5df7 hosts: porthos: services: enable collabora
All checks were successful
ci/woodpecker/push/check Pipeline was successful
2024-11-19 15:58:48 +01:00
Bruno BELANYI 138d4d2bd9 nixos: services: nextcloud: add collabora
This needs to be configured through the "Nextcloud Office" app,
specifically the WOPI setting is important for security (I put both the
external IP, as well as `::1` and `127.0.0.1`).
2024-11-19 15:58:48 +01:00
Bruno BELANYI ab8a5daefe hosts: porthos: secrets: acme: use OVH API
All checks were successful
ci/woodpecker/push/check Pipeline was successful
I switched registrar, as OVH was ~4x cheaper.

This needs a small change to the module to both refer to OVH instead of
Gandi in the documentation, and make use of the correct API.

I also needed to disable the propagation check, as it looks like OVH is
slower than Gandi, and leads to spurious errors...
2024-11-14 22:19:35 +01:00