nix/nixos-config
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
373 Commits 1 Branch 0 Tags
b5cdfc72932fecea688cfa9a216294c6f448d89f
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
niten b5cdfc7293 Added cashew, did some backplane yak shaving 2021-11-16 16:56:43 -08:00
niten c747746eee fixes for nutboy 2021-11-13 11:13:38 -08:00
niten d7ee19dd2f Added nutboy3 and nuttyclub 2021-11-13 10:30:58 -08:00
niten 1c059841e6 Added emply worldstream site-config 2021-11-05 07:07:21 -07:00
niten 2dd5407129 Tons of changes, I guess? 2021-11-05 07:06:08 -07:00
niten c31af09ede Nevermind, to import need config defined first 2021-11-02 09:40:51 -07:00
niten 566643e195 Move profiles from ./profile-config to ./profile 2021-11-02 09:34:26 -07:00
niten 79b05be7d3 Fixed sea-store:/export/projects, removed unnecesary submodules 2021-10-29 11:40:43 -07:00
niten 08766dfeb6 Partway to getting France back in the fold. Stuck on ACME certs. 2021-10-28 09:32:35 -07:00
niten 81aae5cd8d It's gitea-passwd 2021-10-19 13:22:21 -07:00
niten 9fd1cb9fc4 file -> files 2021-10-19 13:19:32 -07:00
niten f782c15aae Fixes for procul. 2021-10-19 13:16:13 -07:00
niten 8bd9b6f466 Require a master key. 2021-10-19 12:50:46 -07:00
niten 58f989b968 Bad var name. 2021-10-19 12:49:14 -07:00
niten 8459d63697 Some procul secrets are set elsewhere now. 2021-10-19 12:47:26 -07:00
niten 5383cea338 Networks aren't a function 2021-10-19 10:04:35 -07:00
niten 409f341fbb Daaamn NFS is a pain 2021-10-18 21:55:24 -07:00
niten 0a460f3374 Attempted to fix initrd-network 2021-10-18 09:07:49 -07:00
niten b1b5e69a1c instance.site -> instance.local-site 2021-10-18 08:46:38 -07:00
niten 3d5d7e389e Working mounted encrypted file system! Neat. 2021-10-18 08:40:35 -07:00
niten eef580d596 Create groups for encrypted filesystems 2021-10-18 07:19:13 -07:00
niten cbf87fe8cf Ensure mountpoints exist 2021-10-18 07:03:01 -07:00
niten 0a6f6b794d Various fixes to sea-store 2021-10-17 23:33:07 -07:00
niten 41951b56ea fs.filesystem, not filesystem 2021-10-17 23:17:43 -07:00
niten 44fcc8e262 Oops, mounts shouldn't be a list, should be attrs. 2021-10-17 23:16:46 -07:00
niten 56cea847f4 Try to get sea-store working 2021-10-17 23:12:49 -07:00
niten c9815b4caf Ooof, to -> To 2021-10-17 22:36:01 -07:00
niten 5fb426f365 Corrected typo 2021-10-17 22:34:22 -07:00
niten b9067e7f13 Add initial support for encrypted filesystems. 2021-10-17 22:10:26 -07:00
niten db108dde93 Give sea-camera a break, it's hitting too hard 2021-10-17 14:03:28 -07:00
niten 90dafdf8e1 Ensure proper perms for /var/hom 2021-10-17 14:00:42 -07:00
niten 8a260cf13b state should be noexec 2021-10-16 18:08:51 -07:00
niten 1be71b13ab Merged with upstream 2021-10-15 23:25:01 -07:00
niten a53807f888 Make sure backplane client homedir exists 2021-10-15 23:23:00 -07:00
niten 455bdf4942 Give socrates root 12G to work with. 2021-10-15 17:39:24 -07:00
niten 7cf751b013 Enable initrd ssh on limina 2021-10-15 15:37:04 -07:00
niten bd03f8c4f5 Include openssh as a dep 2021-10-15 15:23:41 -07:00
niten 18618c9c2a Apparently writeText doesn't exist in pkgs? 2021-10-15 15:22:21 -07:00
niten 210a19d12c writeTextFile -> writeText 2021-10-15 15:20:43 -07:00
niten 7ea906162e writeTextFile -> builtins.writeTextFile 2021-10-15 15:18:50 -07:00
niten 3bf763c124 This shit is so weird 2021-10-15 15:17:45 -07:00
niten a0fd17c9ca Fuckin FORCE it 2021-10-15 14:29:02 -07:00
niten c4fa73c8e7 Force empty secrets 2021-10-15 14:27:33 -07:00
niten 23d2a4de70 Just fuckin remove the whole thing 
bet this doesn't work
 2021-10-15 14:25:22 -07:00
niten 437203721b Ugh, extra n 2021-10-15 14:21:30 -07:00
niten 8a78f2d830 Ugh, (submodule ...) 2021-10-15 14:20:04 -07:00
niten 0c3fd5b522 Okay, let's make sure private-key-file is a string 2021-10-15 14:14:38 -07:00
niten bab995346e Make sure it's really a list of lists 2021-10-15 14:00:44 -07:00
niten 174abdf990 Corrected sshfp records. 
Also, though, is nixops not picking this up?
 2021-10-15 13:49:11 -07:00
niten 51546ec7fd Fiiiine, I'll just use a local fuckin file. 2021-10-15 12:57:48 -07:00
niten 0330f6ae78 Ahh fuck this wtf 2021-10-15 10:58:47 -07:00
niten 095876e12d Try again 2021-10-15 10:57:04 -07:00
niten c3fc069f34 Let's just verify... 2021-10-15 10:54:09 -07:00
niten ea8d7c9007 What if I hardcode the path? 2021-10-15 10:49:01 -07:00
niten 9b3333616d Was that just totally irrelevant? 2021-10-15 10:42:32 -07:00
niten b3258ad8a2 Try dumping the path...why is it refering to store 2021-10-15 10:40:10 -07:00
niten e6252d551a Fuck a secret then 2021-10-15 10:38:07 -07:00
niten 054ff9758c Sigh...try a fixed path again. 2021-10-15 10:36:16 -07:00
niten 870c90b679 These initrd secrets are annoying... 
Betting this won't work.
 2021-10-15 10:30:43 -07:00
niten 4e62739086 Oops, didn't escape the attr name. 2021-10-15 10:11:26 -07:00
niten 11f1560410 Ugh...it was a function. 2021-10-15 10:03:14 -07:00
niten b22b7083e7 Correct typo? 
Getting "A definition for option `fudo.secrets.host-secrets' is not of
type `attribute set of attribute set of submoduless'." But it is, I
don't get it. Maybe it's due to the typo?

Also, switch back to using secrets.
 2021-10-15 09:33:25 -07:00
niten 7264d98dd8 Move initrd host ssh key to host. 
Apparently the initrd is built on the host. That's perfect!
 2021-10-15 08:52:44 -07:00
niten 22999a8fa4 Maybe this will work? 2021-10-14 18:13:40 -07:00
niten f3bc3c2013 Let's try this again just to verify 2021-10-14 16:48:35 -07:00
niten 8a928d9e25 Move secrets to the right place 2021-10-14 16:39:43 -07:00
niten e4d4f6d7af toPath -> builtins.toPath 2021-10-14 16:37:45 -07:00
niten 2f42079265 Try again at using secrets 2021-10-14 16:36:30 -07:00
niten 36413c80cd Ugh, apparently not allowed... 2021-10-13 23:04:21 -07:00
niten 08bb0e339a Ehh, fuckin key is hard 
Might have to do something fancy
 2021-10-13 22:58:35 -07:00
niten 5f79252dd6 Secrets don't seem to work? 2021-10-13 22:04:49 -07:00
niten eb3ff0bfe0 Fixed variable name 2021-10-13 21:05:52 -07:00
niten 6a9ce2e118 Forgot semicolon 2021-10-13 21:03:43 -07:00
niten 24dc18ee81 Make all hosts' initrd network-accessible 
First attempt
 2021-10-13 17:23:47 -07:00
niten c310aeb414 Got a rogue interface on zbox, disable DHCP 2021-10-13 11:08:44 -07:00
niten 793c3c1363 Try removing 'noexec' flag on socrates fs. 
Maybe that's what is causing fonts to fail to build?
 2021-10-13 10:28:38 -07:00
niten 6ada43a205 Frick...flatMap -> concatMap 2021-10-13 10:02:21 -07:00
niten eae9e15c15 Oops, made the wrong map a concatMap. 2021-10-13 10:01:14 -07:00
niten 46469b739f File contains multi sshfp, not one. 2021-10-13 09:58:17 -07:00
niten 674c91354b Well that didn't work. 
Frickin docker, man.
 2021-10-13 09:16:52 -07:00
niten d27bb84cf0 Try using host dns from docker. 
I want the pihole image to access the parent host's dns-over-https
proxy, but ideally that proxy should only be exposed on 127.0.0.1.
According to
https://www.cloudsavvyit.com/14114/how-to-connect-to-localhost-within-a-docker-container/
I can alias the host in docker. Let's give it a shot.
 2021-10-13 09:05:14 -07:00
niten 35d172b279 Oops, missing semicolon 2021-10-13 08:41:46 -07:00
niten 248df221d8 No reason to put the HTTPS proxy on a public port 2021-10-13 08:34:48 -07:00
niten 76c0d49053 /nix must NOT be noexec 2021-10-13 00:23:14 -07:00
niten 72665ef874 limina-root -> limina-data 2021-10-13 00:06:54 -07:00
niten 283afec419 Changes for the new limina 2021-10-12 23:54:43 -07:00
niten 9c024fd9ee Need to specify a secret group and user 2021-10-12 17:34:23 -07:00
niten 7c08e0173e Need to use nixopsUnstable for flakes 2021-10-12 16:50:54 -07:00
niten 00ac387dfb Don't set the backplane passwd in limina.nix. 
It's done elsewhere.
 2021-10-12 14:43:14 -07:00
niten ac2e38040c Nonexistent variable: backplane-passwd -> backplane-passwd-source 2021-10-12 14:40:12 -07:00
niten b0c5b2bf6c Fix typo: password -> passwd 2021-10-12 14:38:23 -07:00
niten 478f502784 Version doesn't exist, I guess? 2021-10-12 14:08:05 -07:00
niten 4d4a274448 Include installed package list in /etc 2021-10-12 14:06:34 -07:00
niten cd50ed9580 Okay, include the fonts 2021-10-12 12:03:25 -07:00
niten 392fca4884 Double-definition 2021-10-11 15:23:04 -07:00
niten ce3bc96f87 As it turns out, don't need config lib pkgs 2021-10-11 15:19:10 -07:00
niten 8736fba4ec Merged with unhead changes 2021-10-11 15:04:51 -07:00
niten fbede93934 Trying to get this to build... 2021-10-11 15:04:06 -07:00
niten a323dbdd9c Working flake-based nixops config 2021-10-08 15:26:19 -07:00
niten 5a48c78b48 There's no reason for networks to be functions 2021-10-07 19:20:43 -07:00