nix/README.md

177 lines
7 KiB
Markdown
Raw Normal View History

2023-07-01 11:51:07 +02:00
# NixOS Configuration Repository
2023-09-23 15:41:18 +02:00
## NOTE: These configs expect this repo to be cloned to `/etc/nixos/git/`
2023-12-21 09:18:32 +01:00
* Clone this repo
```
sudo git clone https://git.sysctl.io/albert/nix /etc/nixos/git
2023-12-21 09:19:23 +01:00
sudo chown -R albert:root /etc/nixos/git
2023-12-21 09:18:32 +01:00
# or, with wallpapers
sudo git clone --recursive https://git.sysctl.io/albert/nix /etc/nixos/git
2023-12-21 09:19:23 +01:00
sudo chown -R albert:root /etc/nixos/git
2023-12-21 09:18:32 +01:00
```
2023-09-15 11:27:38 +02:00
2023-09-21 07:43:49 +02:00
* Installing a system from the ISO:
```
2023-09-22 03:45:07 +02:00
nixos-install <Hostname> [<Username>]
2023-12-21 09:18:32 +01:00
# or
2023-11-27 04:59:26 +01:00
./docs/install.sh <Hostname> [<Username>]
```
2023-09-23 15:32:23 +02:00
* Post install:
```
nix develop -c /etc/nixos/git/docs/setup.sh
```
2023-10-13 03:58:39 +02:00
2023-09-23 15:42:49 +02:00
![Gruv'd Hyprland](./docs/screenshot.png "Hyprland with a Gruvboxy theme")
2023-07-01 11:51:07 +02:00
---
2023-12-20 05:13:02 +01:00
# Host Specific
2023-12-21 08:52:00 +01:00
## framework-server To Do List
2023-12-25 00:26:14 +01:00
* [ ] Fix Gotify notifications (Jellyfin)
2023-12-12 06:46:58 +01:00
* [ ] Add a /Storage btrfs subvolume for Docker
2023-12-21 09:18:32 +01:00
* [ ] Need to set up a new PGP key for use with ProtonMail
2023-12-11 04:38:20 +01:00
* [ ] Try this https://www.ntop.org/products/traffic-analysis/ntop/
2023-12-18 09:50:52 +01:00
* [ ] Podman mgiration - Potentially use nix-defined containers.
2023-12-03 13:48:39 +01:00
2023-08-15 04:05:06 +02:00
# To Do List
2023-12-20 05:13:02 +01:00
## General
2023-12-26 04:07:53 +01:00
* [ ] Look into NixOS Containers - [Link](https://nixos.wiki/wiki/NixOS_Containers)
2023-12-14 05:54:03 +01:00
* [ ] nixified.ai - https://github.com/nixified-ai/flake
2023-10-02 01:26:35 +02:00
* [ ] Try lazy.vim - [Link](https://www.lazyvim.org/)
2023-12-26 04:43:55 +01:00
* [ ] Security hardening / scans / etc
2023-09-19 10:39:24 +02:00
* [ ] Edit the hosts file
2023-12-26 10:10:31 +01:00
* [ ] Try Distorbox - [Link](https://distrobox.it/)
2023-12-20 05:13:02 +01:00
2023-12-20 13:46:06 +01:00
## Forgejo
* [ ] Set up actions/forgejo-release - [Link](https://code.forgejo.org/actions/forgejo-release)
2023-12-20 05:13:02 +01:00
## Home-Manager
* [ ] Figure out what the home-manager `account` options are for.
2023-12-11 08:45:00 +01:00
* [ ] home-manager/common/software/cli/bash.nix - Break this out for theming -- Currently statically set to 'gruvbox'
2023-08-26 14:33:56 +02:00
* [ ] emacs
* [ ] Add bracket auto-completion
* [ ] Find a way to have magit save login credentials
2023-12-26 03:31:01 +01:00
* [ ] xfce4 configs - `~/.config/xfce4`
2023-12-20 05:13:02 +01:00
# Desktop / GUI To Do List
* [ ] vscodium and user-config.js file?
2023-12-23 01:56:41 +01:00
* extensionsFromVscodeMarketplace
* https://github.com/jasoncrevier/nixos-config/blob/main/home-manager/home.nix
* https://nixos.wiki/wiki/Visual_Studio_Code
2023-12-23 01:58:00 +01:00
* https://github.com/nix-community/nix-vscode-extensions
2023-08-15 12:21:32 +02:00
* [ ] rofi - bitwarden-cli / bitwarden-menu ([Link](https://search.nixos.org/packages?channel=23.05&show=bitwarden-menu&from=0&size=50&sort=relevance&type=packages&query=bitwarden))
2023-12-20 05:13:02 +01:00
* [ ] Try this - Nix colors - [Link](https://github.com/Misterio77/nix-colors)
* [ ] Or this - stylix - [Link](https://github.com/danth/stylix)
* [ ] Find a way to remove all default search engines in Firefox (Google, Amazon, etc)
2023-12-26 09:46:07 +01:00
* [ ] Try out kde2nix - [Link](https://github.com/nix-community/kde2nix)
2023-12-20 05:13:02 +01:00
2023-09-21 06:15:42 +02:00
Completed ToDo List [here](docs/complete.md)
2023-09-23 15:41:18 +02:00
---
# Information
### Home Manager
* Home Manager Documentation - [Link](https://nix-community.github.io/home-manager/index.html)
* Home Manager Options Search - [Link](https://mipmip.github.io/home-manager-option-search/)
### NixOS
2023-12-17 13:07:03 +01:00
* nix.dev - Official Nix Documentation - [Link](https://nix.dev/)
2023-09-23 15:41:18 +02:00
* NixOS Documentation - Stable - [Link](https://nixos.org/manual/nixos/stable/)
* NixOS Packages / Options Search - [Link](https://search.nixos.org/)
* Nix User Repository (NUR) Search - [Link](https://nur.nix-community.org/)
* ARM NixOS Building - [Link](https://nixos.wiki/wiki/NixOS_on_ARM#NixOS_installation_.26_configuration)
2023-10-06 05:52:40 +02:00
* NixOS Manual - [Link](https://nixos.org/manual/nix/unstable/introduction)
2023-09-23 15:41:18 +02:00
### Useful Links
* FlakeHub - [Link](https://flakehub.com)
2023-12-17 13:00:34 +01:00
* Flakestry.dev - [Link](https://flakestry.dev/)
2023-09-23 15:41:18 +02:00
* Track a Nixpkgs PR - [Link](https://nixpk.gs/pr-tracker.html)
* Awesome-Hyprland - [Link](https://github.com/hyprland-community/awesome-hyprland)
### Examples
* Tons of good examples here - [Link](https://github.com/Mic92/dotfiles/blob/main/nixos/modules/)
* NixOS Flakes Intro Guide - [Link](https://nixos-and-flakes.thiscute.world/)
### Theming
* Neofetch Themes - [Link](https://github.com/Chick2D/neofetch-themes/)
* gruvbox-factory - [Link](https://github.com/paulopacitti/gruvbox-factory)
* Hyprland Gruvboxy - [Link](https://github.com/0bCdian/Hyprland_dotfiles/tree/gruvboxy)
2023-12-16 01:02:47 +01:00
* Stylix - [Link](https://github.com/danth/stylix)
* Nix colors - [Link](https://github.com/Misterio77/nix-colors)
2023-09-23 15:41:18 +02:00
---
# Theming
* To change system-wide themes, see [theming.md](docs/theming.md)
2023-08-15 04:05:06 +02:00
---
2023-09-23 15:41:18 +02:00
# Lanzaboote / SecureBoot
* Instructions here - [Link](https://git.sysctl.io/Mirrors/lanzaboote/src/branch/master/docs/QUICK_START.md)
1. Create your keys: `sbctl create-keys`
2. Verify your machine is ready for SecureBoot: `sbctl verify` - Everything except `*-bzImage.efi` are signed
3. Enter Secureboot Setup mode in your EFI Settings on the motherboard (F10)
* Security -> SecureBoot -> Set to Enabled and "Reset to Setup Mode" and exit
4. Enroll the keys: `sbctl enroll-keys --microsoft`
* If you wish, you can select `--tpm-eventlog`, but checksums will change later (ie, at a kernel rebuild)
5. Reboot and verify you are activated: `bootctl status`
# Manual: GPG Keys
1. Import the user private key: `gpg --import gpg/users/albert/privkey.asc`
2. Mark it as trusted: `gpg --edit-key albert@sysctl.io`, then type `trust`, then `5`
3. On each new machine, run `sudo nix-shell -p ssh-to-pgp --run "ssh-to-pgp -i /etc/ssh/ssh_host_rsa_key -o /etc/nixos/git/keys/hosts/$(hostname).asc"`
* This will output the identifier you add to `.sops.yaml`
* Move `HOSTNAME.asc` to `keys/hosts/` and upload to git and rename accordingly.
# Secrets
1. Run `nix-develop` in `/etc/nixos/git` to import new keys
2. To edit a file: `sops secrets/file.yml"`
3. When you add a new machine, you must update the secrets files encryption.
* Run `sops updatekeys secrets/file.yaml` and commit the change.
2023-10-05 08:07:38 +02:00
# Troubleshooting
2023-12-15 02:41:35 +01:00
1. To troubleshoot disko issues, this command can come in handy:
2023-10-05 08:07:38 +02:00
```
nix eval .#nixosConfigurations.[CONFIG_NAME].config.disko.devices._config
```
2023-08-15 04:05:06 +02:00
2023-09-19 10:39:24 +02:00
# Directory Structure
2023-09-18 09:29:17 +02:00
```
2023-09-29 06:09:10 +02:00
├── docs
2023-09-18 09:29:17 +02:00
├── home-manager
│   ├── common
│   │   ├── desktops
2023-09-29 06:09:10 +02:00
│   │   │   ├── gnome
2023-09-29 07:11:38 +02:00
│   │   │   │ ├── common
2023-09-29 06:09:10 +02:00
│   │   │   │   └── themes
2023-12-15 02:41:35 +01:00
│   │   │   ├── hyprland
│   │   │   │ ├── common
│   │   │   │   └── themes
│   │   │   └── xfce
2023-12-15 08:24:48 +01:00
│   │   │   ├── common
2023-09-29 06:09:10 +02:00
│   │   │   └── themes
2023-09-18 09:29:17 +02:00
│   │   └── software
│   │   ├── cli
│   │   │   └── themes
│   │   └── gui
│   │   └── themes
│   ├── hosts
│   └── users
├── keys
│   ├── hosts
│   ├── ssh
│   └── users
├── lib
├── nixos
│   ├── common
│   │   ├── desktops
│   │   │   ├── gnome
2023-12-15 02:41:35 +01:00
│   │   │   ├── hyprland
│   │   │   └── xfce
2023-09-18 09:29:17 +02:00
│   │   ├── modules
│   │   ├── services
│   │   └── software
│   │   ├── cli
│   │   └── gui
│   ├── hosts
│   └── users
├── secrets
└── wallpapers
2023-12-10 10:54:57 +01:00
```