Antoine Martin
e7219ae988
services: matrix: enable SSL traffic only
...
This is a requirement anyway for homeservers, and the `forceSSL` option
tried to create a redirect for non-SSL traffic, except the `listen`
option only provided SSL endpoints anyway, so this resulted in
additional rules in the nginx config looking like this:
server {
server_name matrix.alarsyo.net ;
location /.well-known/acme-challenge {
root /var/lib/acme/acme-challenge;
auth_basic off;
}
location / {
return 301 https://$host$request_uri ;
}
}
Which led to nginx listening on port 8000 (the default port in this
situation, I imagine)
2021-07-13 13:54:18 +02:00
Antoine Martin
c75458d8c9
services: bitwarden: only listen on local host
...
This was never a problem because the firewall did its job, but better
safe than sorry.
2021-07-13 13:34:26 +02:00
Antoine Martin
d2835ceb77
services: paperless: drop external traffic to docker
2021-07-13 13:22:21 +02:00
Antoine Martin
8eb1fe5001
services: paperless: restrict to Tailscale
2021-07-13 01:31:55 +02:00
Antoine Martin
f0e5e90c10
services: use wildcard certificate
...
Should have done this a long time ago
2021-07-13 01:08:01 +02:00
Antoine Martin
64d479e2ce
services: prometheus: keep metrics for 2 years
2021-07-12 22:12:03 +02:00
Antoine Martin
95733f9e05
services: paperless: setup reverse proxy
2021-07-12 22:11:41 +02:00
Antoine Martin
df3cffadaf
poseidon: enable docker and docker-compose
2021-07-12 22:11:38 +02:00
Antoine Martin
72f52cd06a
base: disable garbage collection
...
Some heavy flake shells with texlive were getting wiped, I can do this
by hand from time to time
2021-07-12 14:41:57 +02:00
Antoine Martin
16297d492c
flake.lock: Update
...
Flake input changes:
* Updated 'emacs-overlay': 'github:nix-community/emacs-overlay/c98b3a644b09550bf5e38cc796c4fdec190f0582' -> 'github:nix-community/emacs-overlay/c015a0e27baebe1e28ef3b030901adf564959611'
* Updated 'nixpkgs': 'github:NixOS/nixpkgs/9d1350d9d56411b685ff3de5839ed6728b1bf808' -> 'github:NixOS/nixpkgs/cf59fbd539681f5ec2f4a82cf77aae7ab827a03f'
* Updated 'nixpkgs-unstable': 'github:NixOS/nixpkgs/899ecadfc94809fec3374d4e4dafaae1399cfb7e' -> 'github:NixOS/nixpkgs/635a1954044fb0dfbcfd857e3289ab12feb41530'
2021-07-12 11:10:10 +02:00
Antoine Martin
049bb7d5d2
poseidon: enable tailscale
2021-07-10 16:48:53 +02:00
Antoine Martin
721a7cefa2
boreal: enable tailscale
2021-07-10 16:47:48 +02:00
Antoine Martin
e7d18c63c3
flake.lock: Update
...
Flake input changes:
* Updated 'emacs-overlay': 'github:nix-community/emacs-overlay/9fbb5e43ed6ea3b5b704f13b2169f5404c24113b' -> 'github:nix-community/emacs-overlay/c98b3a644b09550bf5e38cc796c4fdec190f0582'
* Updated 'nixpkgs': 'github:NixOS/nixpkgs/21b696caf392ad6fa513caf3327d0aa0430ffb72' -> 'github:NixOS/nixpkgs/9d1350d9d56411b685ff3de5839ed6728b1bf808'
* Updated 'nixpkgs-unstable': 'github:NixOS/nixpkgs/a6c2f5e6e7a0c5e99b841cf4c38be3b027bc9883' -> 'github:NixOS/nixpkgs/899ecadfc94809fec3374d4e4dafaae1399cfb7e'
2021-07-07 14:18:41 +02:00
Antoine Martin
7c8017af03
services: init nuage
2021-07-06 18:22:57 +02:00
Antoine Martin
26ea717eaa
boreal: don't power on bluetooth on boot
...
No longer needed now that I found my Logitech dongle
2021-07-05 12:30:19 +02:00
Antoine Martin
bb17432079
home: i3: remove NVIDIA firefox perf workaround
...
Not needed anymore since switching to a recent RTX card
2021-07-05 11:58:50 +02:00
Antoine Martin
af04fc4626
flake.lock: Update
...
Flake input changes:
* Updated 'emacs-overlay': 'github:nix-community/emacs-overlay/ab500b1977b48c2524d56fe1efcb5c7102319bf0' -> 'github:nix-community/emacs-overlay/9fbb5e43ed6ea3b5b704f13b2169f5404c24113b'
* Updated 'nixpkgs': 'github:NixOS/nixpkgs/f77036342e2b690c61c97202bf48f2ce13acc022' -> 'github:NixOS/nixpkgs/21b696caf392ad6fa513caf3327d0aa0430ffb72'
* Updated 'nixpkgs-unstable': 'github:NixOS/nixpkgs/920113a6e5e34e317c910b8477dd6cde88fcd202' -> 'github:NixOS/nixpkgs/a6c2f5e6e7a0c5e99b841cf4c38be3b027bc9883'
2021-07-05 11:29:01 +02:00
Antoine Martin
60b65f5037
boreal: switch network interface names
2021-07-01 22:19:51 +02:00
Antoine Martin
ed8048c194
flake.lock: Update
...
Flake input changes:
* Updated 'emacs-overlay': 'github:nix-community/emacs-overlay/4690423c87e4a106639aaf9358f2951f11bb615e' -> 'github:nix-community/emacs-overlay/ab500b1977b48c2524d56fe1efcb5c7102319bf0'
* Updated 'nixpkgs': 'github:NixOS/nixpkgs/0ccd0d91361dc42dd32ffcfafed1a4fc23d1c8b4' -> 'github:NixOS/nixpkgs/f77036342e2b690c61c97202bf48f2ce13acc022'
2021-06-29 01:11:49 +02:00
Antoine Martin
3084fa24b1
flake.lock: Update
...
Flake input changes:
* Updated 'emacs-overlay': 'github:nix-community/emacs-overlay/d8bf1e0a7aa41f8eb058760cb7ade8923bf683aa' -> 'github:nix-community/emacs-overlay/4690423c87e4a106639aaf9358f2951f11bb615e'
* Updated 'nixpkgs': 'github:NixOS/nixpkgs/6613a30c5e3ee59753181512b4bedd4121569925' -> 'github:NixOS/nixpkgs/0ccd0d91361dc42dd32ffcfafed1a4fc23d1c8b4'
* Updated 'nixpkgs-unstable': 'github:NixOS/nixpkgs/7c2d15627a3012c5e5af1d1664a53599687cf1d1' -> 'github:NixOS/nixpkgs/920113a6e5e34e317c910b8477dd6cde88fcd202'
2021-06-24 10:06:38 +02:00
Antoine Martin
a00a9fab73
home: tmux: display CPU in status bar
2021-06-21 18:42:56 +02:00
Antoine Martin
63db8cce42
home: tmux: use cpu plugin
2021-06-21 17:44:19 +02:00
Antoine Martin
86d9a119cf
home: tmux: use solarized plugin
2021-06-21 17:30:42 +02:00
Antoine Martin
997e82e10b
home: use 24h clock for tmux
2021-06-21 17:17:29 +02:00
Antoine Martin
cb3f46c75b
flake.lock: Update
...
Flake input changes:
* Updated 'emacs-overlay': 'github:nix-community/emacs-overlay/d9baacb691afe81a61b5b9f5fd42473710c59581' -> 'github:nix-community/emacs-overlay/d8bf1e0a7aa41f8eb058760cb7ade8923bf683aa'
* Updated 'home-manager': 'github:nix-community/home-manager/148d85ee8303444fb0116943787aa0b1b25f94df' -> 'github:nix-community/home-manager/35a24648d155843a4d162de98c17b1afd5db51e4'
* Updated 'nixpkgs': 'github:NixOS/nixpkgs/1f91fd1040667e9265a760b0347f8bc416249da7' -> 'github:NixOS/nixpkgs/6613a30c5e3ee59753181512b4bedd4121569925'
* Updated 'nixpkgs-unstable': 'github:NixOS/nixpkgs/6aa2bb6a818d12d4cf296f736263011611cf2610' -> 'github:NixOS/nixpkgs/7c2d15627a3012c5e5af1d1664a53599687cf1d1'
2021-06-21 11:04:38 +02:00
Antoine Martin
bcf896224e
pkgs: kaleidoscope-udev-rules: please ambroisie
2021-06-17 12:24:51 +02:00
Antoine Martin
0bea117289
boreal: don't backup nixpkgs repo
2021-06-17 10:58:24 +02:00
Antoine Martin
9a6b1c1095
boreal: don't backup rustc build artifacts
2021-06-17 02:47:34 +02:00
Antoine Martin
7f5c8519bf
base: move clang and bintools to base
2021-06-16 18:30:15 +02:00
Antoine Martin
f4ea038e70
flake.lock: Update
...
Flake input changes:
* Updated 'emacs-overlay': 'github:nix-community/emacs-overlay/ef23961671665991f36bb87d46b4b071e75ed6d5' -> 'github:nix-community/emacs-overlay/d9baacb691afe81a61b5b9f5fd42473710c59581'
* Updated 'nixpkgs': 'github:NixOS/nixpkgs/cedcf2565c6b982d703d67455199b09a3d905d86' -> 'github:NixOS/nixpkgs/1f91fd1040667e9265a760b0347f8bc416249da7'
* Updated 'nixpkgs-unstable': 'github:NixOS/nixpkgs/6a1ca229f5d811fc3fce512206d1eeb2ba7182c4' -> 'github:NixOS/nixpkgs/6aa2bb6a818d12d4cf296f736263011611cf2610'
2021-06-13 22:19:57 +02:00
Antoine Martin
9f3c4858c1
home: i3: fix spotify for good?
...
Spotify doesn't always behave as expected, adding
--no-auto-back-and-forth
seems to help
2021-06-11 13:45:51 +02:00
Antoine Martin
9c50a5fa47
flake.lock: Update
...
Flake input changes:
* Updated 'emacs-overlay': 'github:nix-community/emacs-overlay/7a60fbc3fbcd1ac549af35db2b54c53b0b99da6e' -> 'github:nix-community/emacs-overlay/ef23961671665991f36bb87d46b4b071e75ed6d5'
* Updated 'nixpkgs': 'github:NixOS/nixpkgs/60cce7e5e1fdf62421ef6d4184ee399b46209366' -> 'github:NixOS/nixpkgs/cedcf2565c6b982d703d67455199b09a3d905d86'
* Updated 'nixpkgs-unstable': 'github:NixOS/nixpkgs/3fcf9a6af852942cfb3319f7efc5cd11a9bae794' -> 'github:NixOS/nixpkgs/6a1ca229f5d811fc3fce512206d1eeb2ba7182c4'
2021-06-11 09:18:23 +02:00
Antoine Martin
cb24c49bbf
boreal: fix broken keyboard layout on linux 5.12
...
See keyboardio/Model01-Firmware#109 for details, enabling libinput
seems to solve the problem for now. Fingers crossed.
2021-06-10 04:40:45 +02:00
Antoine Martin
4601a972a2
boreal: install chrysalis and udev rules
2021-06-10 03:15:02 +02:00
Antoine Martin
f2b3d33421
pkgs: package kaleidoscope udev rules
2021-06-10 03:14:49 +02:00
Antoine Martin
e002b8482a
Revert "boreal: switch to linux latest"
...
This reverts commit 78b7e86ee4
.
2021-06-10 02:07:58 +02:00
Antoine Martin
b749ea464d
flake.lock: Update
...
Flake input changes:
* Updated 'emacs-overlay': 'github:nix-community/emacs-overlay/8e63b4865f49636c9d990d5946d3d8db132536ec' -> 'github:nix-community/emacs-overlay/7a60fbc3fbcd1ac549af35db2b54c53b0b99da6e'
* Updated 'nixpkgs': 'github:NixOS/nixpkgs/5de44c15758465f8ddf84d541ba300b48e56eda4' -> 'github:NixOS/nixpkgs/60cce7e5e1fdf62421ef6d4184ee399b46209366'
* Updated 'nixpkgs-unstable': 'github:NixOS/nixpkgs/790a4683b8e76834d2a18cafc4fc32bd3ccfa06a' -> 'github:NixOS/nixpkgs/3fcf9a6af852942cfb3319f7efc5cd11a9bae794'
2021-06-09 22:30:11 +02:00
Antoine Martin
568cd2ccd4
services: matrix: add SMS verification support
2021-06-09 15:37:35 +02:00
Antoine Martin
6c17c2d82c
services: matrix: move smtp port note out of secret
2021-06-09 14:57:51 +02:00
Antoine Martin
1b6258e363
services: matrix: add smtp server
2021-06-09 14:53:11 +02:00
Antoine Martin
3d658d1d21
flake.lock: Update
...
Flake input changes:
* Updated 'nixpkgs': 'github:NixOS/nixpkgs/aa576357673d609e618d87db43210e49d4bb1789' -> 'github:NixOS/nixpkgs/5de44c15758465f8ddf84d541ba300b48e56eda4'
* Updated 'nixpkgs-unstable': 'github:NixOS/nixpkgs/394fb1d6abbaef4d8720a9070f8515d6eb37c88d' -> 'github:NixOS/nixpkgs/790a4683b8e76834d2a18cafc4fc32bd3ccfa06a'
2021-06-06 18:27:55 +02:00
Antoine Martin
78b7e86ee4
boreal: switch to linux latest
2021-06-06 18:20:01 +02:00
Antoine Martin
60a292e009
flake.lock: Update
...
Flake input changes:
* Updated 'emacs-overlay': 'github:nix-community/emacs-overlay/fa30581319280c3f7201c49905e8fd4c7019e6ea' -> 'github:nix-community/emacs-overlay/8e63b4865f49636c9d990d5946d3d8db132536ec'
* Updated 'home-manager': 'github:nix-community/home-manager/fd5fbb0a241f644908cdf01ccd1821d0606fb4fd' -> 'github:nix-community/home-manager/148d85ee8303444fb0116943787aa0b1b25f94df'
* Updated 'nixpkgs': 'github:NixOS/nixpkgs/4c2e84394c0f372c019e941e95d6fbe21835719b' -> 'github:NixOS/nixpkgs/aa576357673d609e618d87db43210e49d4bb1789'
* Updated 'nixpkgs-unstable': 'github:NixOS/nixpkgs/239da47116274ee326a965d80b3ed1d3bf08af62' -> 'github:NixOS/nixpkgs/394fb1d6abbaef4d8720a9070f8515d6eb37c88d'
2021-06-05 22:25:42 +02:00
Antoine Martin
4ddee48800
services: lohr: latest commit
2021-06-04 17:40:56 +02:00
Antoine Martin
6865e30881
flake.lock: Update
...
Flake input changes:
* Updated 'home-manager': 'github:nix-community/home-manager/ab64dc32493996c24607eab2cae6663466ddfb8a' -> 'github:nix-community/home-manager/fd5fbb0a241f644908cdf01ccd1821d0606fb4fd'
* Updated 'nixpkgs': 'github:NixOS/nixpkgs/5237039cc1e7633a7697ed7999afd1f80d91ff14' -> 'github:NixOS/nixpkgs/4c2e84394c0f372c019e941e95d6fbe21835719b'
2021-06-04 15:32:57 +02:00
Antoine Martin
46df5d0642
services: transmission: use openFirewall setting
2021-06-03 00:33:52 +02:00
Antoine Martin
84b82a019b
boreal: add some packages to home
2021-06-02 19:04:45 +02:00
Antoine Martin
92372d9e2c
base: add bottom and dog to base programs
2021-06-02 19:04:37 +02:00
Antoine Martin
3c24d3b79d
boreal: switch beancount and fava to unstable
2021-06-02 18:09:22 +02:00
Antoine Martin
2685842e88
Revert "pkgs: temp package for fixed beancount deps"
...
This reverts commit 8dc5961c3a
.
2021-06-02 18:08:34 +02:00