2023-07-01 11:51:07 +02:00
# NixOS Configuration Repository
2023-09-23 15:41:18 +02:00
## NOTE: These configs expect this repo to be cloned to `/etc/nixos/git/`
2023-09-15 11:27:38 +02:00
2023-09-21 07:43:49 +02:00
* Installing a system from the ISO:
```
2023-09-22 03:45:07 +02:00
nixos-install < Hostname > [< Username > ]
2023-09-21 07:43:49 +02:00
```
2023-11-27 04:59:26 +01:00
or
```
./docs/install.sh < Hostname > [< Username > ]
```
2023-09-23 15:32:23 +02:00
* Post install:
```
nix develop -c /etc/nixos/git/docs/setup.sh
```
2023-10-13 03:58:39 +02:00
2023-09-23 15:42:49 +02:00
![Gruv'd Hyprland ](./docs/screenshot.png "Hyprland with a Gruvboxy theme" )
2023-07-01 11:51:07 +02:00
---
2023-12-03 13:48:39 +01:00
# framework-server ToDo List
2023-12-03 14:19:09 +01:00
* [x] minio is broken
2023-12-03 14:30:09 +01:00
* [x] No updates on Lemmy
2023-12-03 13:48:39 +01:00
* [ ] cannot send email on port 25 - [Link ](https://docker-mailserver.github.io/docker-mailserver/latest/config/security/understanding-the-ports/ )
2023-12-03 14:19:09 +01:00
* [x] traccar not seeing phone
2023-12-03 13:48:39 +01:00
* [ ] duplicati needs database repairs
2023-12-07 06:59:47 +01:00
* [ ] osaka-linode-01 unable to connect to Headscale
2023-12-03 14:19:09 +01:00
* [x] Matrix is unable to send/receive pictures
* [ ] Go through old sysctl.io cronjob and import what's neccesary
2023-12-05 04:50:42 +01:00
* [ ] Back up pass.sysctl.io to memory stick (gpg encrypted csv file)
2023-12-07 06:59:47 +01:00
* [x] Get Gnome Remote Desktop / XRDP working
* [ ] Migrate to Protonmail, use the PM mail bridge docker container (Nix pkg?)
2023-12-07 07:02:51 +01:00
* [ ] https://github.com/shenxn/protonmail-bridge-docker#initialization
2023-12-03 13:48:39 +01:00
2023-12-04 04:01:12 +01:00
# Raspberry Pi ToDo List
* [ ] nixos-rpi4-01 - Replace japan-rpi4
* crontab entry for rsyncing storage to /mnt/sda,b,c
* [ ] nixos-rpi4-02 - Replace piaware-rpi4
* Container running piaware software
2023-08-15 04:05:06 +02:00
# To Do List
2023-12-01 06:00:17 +01:00
* [ ] Try Attic - A self-hosted Nix Binary Cache server - [Link ](https://discourse.nixos.org/t/introducing-attic-a-self-hostable-nix-binary-cache-server/24343 )
2023-12-01 05:35:45 +01:00
* [ ] Try [compose2nix ](https://github.com/aksiksi/compose2nix ) - Docker Compose to Nix converter
2023-11-30 06:56:08 +01:00
* [ ] Make a dashboard for all Nixified devices (online status)
2023-11-27 04:59:26 +01:00
* [ ] Try deploy-rs - [Link ](https://github.com/serokell/deploy-rs )
2023-10-12 14:54:41 +02:00
* [ ] Set up actions/forgejo-release - [Link ](https://code.forgejo.org/actions/forgejo-release )
2023-10-02 01:26:35 +02:00
* [ ] Try lazy.vim - [Link ](https://www.lazyvim.org/ )
2023-09-23 15:32:23 +02:00
* [ ] Look into hosting a binary cache locally - [Link ](https://nixos.wiki/wiki/Binary_Cache )
2023-10-16 05:39:39 +02:00
* [x] vscode / emacs
2023-09-22 04:00:07 +02:00
* Add the nix lsp - [Link ](https://github.com/nix-community/rnix-lsp )
2023-08-31 07:54:16 +02:00
* [ ] Find a way to remove all default search engines in Firefox (Google, Amazon, etc)
* [ ] Figure out what the home-manager `account` options are for.
2023-08-31 03:59:55 +02:00
* [ ] Security hardening
2023-09-19 10:39:24 +02:00
* [ ] Edit the hosts file
2023-09-29 03:15:06 +02:00
* [ ] cronjobs
2023-08-30 16:35:25 +02:00
* [ ] Change wallpaper at a certain time of day
2023-09-29 03:15:06 +02:00
* [ ] Automatic git pull of this repo
2023-08-26 14:33:56 +02:00
* [ ] emacs
* [ ] Add bracket auto-completion
2023-08-29 05:08:37 +02:00
* [ ] Find a way to have magit save login credentials
2023-09-23 15:32:23 +02:00
* [ ] btrfs snapshots?
2023-08-16 05:57:53 +02:00
* [ ] vscodium and user-config.js file?
2023-08-15 12:21:32 +02:00
* [ ] rofi - bitwarden-cli / bitwarden-menu ([Link](https://search.nixos.org/packages?channel=23.05& show=bitwarden-menu& from=0& size=50& sort=relevance& type=packages& query=bitwarden))
2023-10-12 14:54:41 +02:00
* [ ] Server migration
* Do federated things need to be available externally?
* Pixelfed
* Mastodon
* Lemmy
* Sepearate backend/frontend
* Matrix
* Separate baackend/frontend
* Outbound ports
* traefik (80, 443)
* traccar (5055 tcp/udp)
* Can probably bring back internally, both devices will be internal to Headscale
* jitsi-jvb (10000 udp, 4443 tcp)
* minecraft (25565)
* vintage-story (42420)
* mailserver
- "25:25" # SMTP (explicit TLS => STARTTLS)
- "465:465" # ESMTP (implicit TLS)
- "587:587" # ESMTP (explicit TLS => STARTTLS)
- "143:143" # IMAP4 (explicit TLS => STARTTLS)
- "993:993" # IMAP4 (implicit TLS)
- "4190:4190" # Sieve support
* tor-relay (9001, 9030) - Probably not hosting for legal reasons
2023-10-13 03:27:41 +02:00
* headscale-derp (3478/udp, 1443/tcp) - Most likely can't host due to limitations of DERP/xinetd
* Headscale needs to be available externally
2023-10-12 14:54:41 +02:00
2023-08-27 11:55:51 +02:00
2023-09-21 06:15:42 +02:00
Completed ToDo List [here ](docs/complete.md )
2023-09-23 15:41:18 +02:00
---
# Information
### Home Manager
* Home Manager Documentation - [Link ](https://nix-community.github.io/home-manager/index.html )
* Home Manager Options Search - [Link ](https://mipmip.github.io/home-manager-option-search/ )
### NixOS
* NixOS Documentation - Stable - [Link ](https://nixos.org/manual/nixos/stable/ )
* NixOS Packages / Options Search - [Link ](https://search.nixos.org/ )
* Nix User Repository (NUR) Search - [Link ](https://nur.nix-community.org/ )
* ARM NixOS Building - [Link ](https://nixos.wiki/wiki/NixOS_on_ARM#NixOS_installation_.26_configuration )
2023-10-06 05:52:40 +02:00
* NixOS Manual - [Link ](https://nixos.org/manual/nix/unstable/introduction )
2023-09-23 15:41:18 +02:00
### Useful Links
* FlakeHub - [Link ](https://flakehub.com )
* Track a Nixpkgs PR - [Link ](https://nixpk.gs/pr-tracker.html )
* Awesome-Hyprland - [Link ](https://github.com/hyprland-community/awesome-hyprland )
### Examples
* Tons of good examples here - [Link ](https://github.com/Mic92/dotfiles/blob/main/nixos/modules/ )
* NixOS Flakes Intro Guide - [Link ](https://nixos-and-flakes.thiscute.world/ )
### Theming
* Neofetch Themes - [Link ](https://github.com/Chick2D/neofetch-themes/ )
* gruvbox-factory - [Link ](https://github.com/paulopacitti/gruvbox-factory )
* Hyprland Gruvboxy - [Link ](https://github.com/0bCdian/Hyprland_dotfiles/tree/gruvboxy )
---
# Theming
* To change system-wide themes, see [theming.md ](docs/theming.md )
2023-08-15 04:05:06 +02:00
---
2023-09-23 15:41:18 +02:00
# Lanzaboote / SecureBoot
* Instructions here - [Link ](https://git.sysctl.io/Mirrors/lanzaboote/src/branch/master/docs/QUICK_START.md )
1. Create your keys: `sbctl create-keys`
2. Verify your machine is ready for SecureBoot: `sbctl verify` - Everything except `*-bzImage.efi` are signed
3. Enter Secureboot Setup mode in your EFI Settings on the motherboard (F10)
* Security -> SecureBoot -> Set to Enabled and "Reset to Setup Mode" and exit
4. Enroll the keys: `sbctl enroll-keys --microsoft`
* If you wish, you can select `--tpm-eventlog` , but checksums will change later (ie, at a kernel rebuild)
5. Reboot and verify you are activated: `bootctl status`
# Manual: GPG Keys
1. Import the user private key: `gpg --import gpg/users/albert/privkey.asc`
2. Mark it as trusted: `gpg --edit-key albert@sysctl.io` , then type `trust` , then `5`
3. On each new machine, run `sudo nix-shell -p ssh-to-pgp --run "ssh-to-pgp -i /etc/ssh/ssh_host_rsa_key -o /etc/nixos/git/keys/hosts/$(hostname).asc"`
* This will output the identifier you add to `.sops.yaml`
* Move `HOSTNAME.asc` to `keys/hosts/` and upload to git and rename accordingly.
# Secrets
1. Run `nix-develop` in `/etc/nixos/git` to import new keys
2. To edit a file: `sops secrets/file.yml"`
3. When you add a new machine, you must update the secrets files encryption.
* Run `sops updatekeys secrets/file.yaml` and commit the change.
2023-10-05 08:07:38 +02:00
# Troubleshooting
1. To troubleshoot issues, this command can come in handy:
```
nix eval .#nixosConfigurations.[CONFIG_NAME].config.disko.devices._config
```
2023-08-15 04:05:06 +02:00
2023-09-19 10:39:24 +02:00
# Directory Structure
2023-09-18 09:29:17 +02:00
```
2023-09-29 06:09:10 +02:00
├── docs
2023-09-18 09:29:17 +02:00
├── home-manager
│ ├── common
│ │ ├── desktops
2023-09-29 06:09:10 +02:00
│ │ │ ├── gnome
2023-09-29 07:11:38 +02:00
│ │ │ │ ├── common
2023-09-29 06:09:10 +02:00
│ │ │ │ └── themes
2023-09-29 06:12:42 +02:00
│ │ │ │ ├── default
2023-09-29 06:09:10 +02:00
│ │ │ │ └── gruvbox
2023-09-18 09:29:17 +02:00
│ │ │ └── hyprland
2023-09-29 06:09:10 +02:00
│ │ │ ├── common
│ │ │ └── themes
│ │ │ ├── default
│ │ │ └── gruvbox
2023-09-18 09:29:17 +02:00
│ │ └── software
│ │ ├── cli
│ │ │ └── themes
│ │ │ ├── default
│ │ │ └── gruvbox
│ │ └── gui
│ │ └── themes
2023-09-29 06:09:10 +02:00
│ │ ├── default
2023-09-18 09:29:17 +02:00
│ │ └── gruvbox
│ ├── hosts
│ └── users
├── keys
│ ├── hosts
│ ├── ssh
│ └── users
├── lib
├── nixos
│ ├── common
│ │ ├── desktops
│ │ │ ├── gnome
│ │ │ └── hyprland
│ │ ├── modules
│ │ ├── services
│ │ └── software
│ │ ├── cli
│ │ └── gui
│ ├── hosts
│ └── users
├── secrets
└── wallpapers
2023-09-29 06:09:10 +02:00
├── default
2023-09-18 09:29:17 +02:00
└── gruvbox
```
2023-08-28 05:08:58 +02:00
# Other
* Waybar inspirations
* https://github.com/Pipshag/dotfiles_nord
* https://github.com/hajosattila/dotfiles/
* https://gist.github.com/toger5/3a509d9a9d7ebba1e02205b00449ccff