albert/nix
albert/nix
1
0
Fork 0
Code Issues Pull requests Activity Actions
Repo for nix configuration files
1834 commits 1 branch 0 tags 10 MiB
Nix 85%
Shell 10%
JavaScript 5%
Find a file
iFargle 1d4727425c Update ssh keys for ssh
2023-10-07 15:36:42 +09:00
.forgejo/workflows Test 2023-10-04 22:24:22 +09:00
docs Update README 2023-09-29 13:32:51 +09:00
home-manager Test 2023-10-04 09:51:24 +09:00
keys Setup: albert@osaka-vultr-01 2023-10-06 14:18:59 +09:00
lib Update 2023-10-04 19:53:38 +09:00
nixos Update ssh keys for ssh 2023-10-07 15:36:42 +09:00
secrets Update secrets 2023-10-06 14:24:27 +09:00
.sops.yaml Add pgp key 2023-10-06 14:17:58 +09:00
flake.lock [ACTIONS] Flake Update 2023-10-04 13:18:21 +00:00
flake.nix Add Home Manager configuration for osaka-vultr-01 2023-10-06 13:28:45 +09:00
README.md Begin wg forwarder testing 2023-10-06 12:52:40 +09:00
shell.nix test 2023-09-23 09:05:32 +09:00

README.md

NixOS Configuration Repository

NOTE: These configs expect this repo to be cloned to /etc/nixos/git/

  • Installing a system from the ISO:
nixos-install <Hostname> [<Username>]
  • Post install:
nix develop -c /etc/nixos/git/docs/setup.sh
  • Sparse Checkout (for low RAM environments):
git clone --filter=blob:none --no-checkout https://git.sysctl.io/albert/nix git/
cd git/
git sparse-checkout set --cone docs/ home-manager/ keys/ssh/ lib/ nixos/ flake.lock flake.nix shell.nix
git checkout main

Gruv'd Hyprland

To Do List

  • Try lazy.vim - Link
  • Look into hosting a binary cache locally - Link
  • vscode / emacs
    • Add the nix lsp - Link
  • Find a way to remove all default search engines in Firefox (Google, Amazon, etc)
  • Figure out what the home-manager account options are for.
  • Security hardening
  • Edit the hosts file
  • cronjobs
    • Change wallpaper at a certain time of day
    • Automatic git pull of this repo
  • emacs
    • Add bracket auto-completion
    • Find a way to have magit save login credentials
  • btrfs snapshots?
  • vscodium and user-config.js file?
  • rofi - bitwarden-cli / bitwarden-menu (Link)

Completed ToDo List here

Information

Home Manager

  • Home Manager Documentation - Link
  • Home Manager Options Search - Link

NixOS

  • NixOS Documentation - Stable - Link
  • NixOS Packages / Options Search - Link
  • Nix User Repository (NUR) Search - Link
  • ARM NixOS Building - Link
  • NixOS Manual - Link

Useful Links

  • FlakeHub - Link
  • Track a Nixpkgs PR - Link
  • Awesome-Hyprland - Link

Examples

  • Tons of good examples here - Link
  • NixOS Flakes Intro Guide - Link

Theming

  • Neofetch Themes - Link
  • gruvbox-factory - Link
  • Hyprland Gruvboxy - Link

Theming

Lanzaboote / SecureBoot

  • Instructions here - Link
  1. Create your keys: sbctl create-keys
  2. Verify your machine is ready for SecureBoot: sbctl verify - Everything except *-bzImage.efi are signed
  3. Enter Secureboot Setup mode in your EFI Settings on the motherboard (F10)
    • Security -> SecureBoot -> Set to Enabled and "Reset to Setup Mode" and exit
  4. Enroll the keys: sbctl enroll-keys --microsoft
    • If you wish, you can select --tpm-eventlog, but checksums will change later (ie, at a kernel rebuild)
  5. Reboot and verify you are activated: bootctl status

Manual: GPG Keys

  1. Import the user private key: gpg --import gpg/users/albert/privkey.asc
  2. Mark it as trusted: gpg --edit-key albert@sysctl.io, then type trust, then 5
  3. On each new machine, run sudo nix-shell -p ssh-to-pgp --run "ssh-to-pgp -i /etc/ssh/ssh_host_rsa_key -o /etc/nixos/git/keys/hosts/$(hostname).asc"
    • This will output the identifier you add to .sops.yaml
    • Move HOSTNAME.asc to keys/hosts/ and upload to git and rename accordingly.

Secrets

  1. Run nix-develop in /etc/nixos/git to import new keys
  2. To edit a file: sops secrets/file.yml"
  3. When you add a new machine, you must update the secrets files encryption.
    • Run sops updatekeys secrets/file.yaml and commit the change.

Troubleshooting

  1. To troubleshoot issues, this command can come in handy:
 nix eval .#nixosConfigurations.[CONFIG_NAME].config.disko.devices._config

Directory Structure

├── docs
├── home-manager
│   ├── common
│   │   ├── desktops
│   │   │   ├── gnome
│   │   │   │   ├── common
│   │   │   │   └── themes
│   │   │   │       ├── default
│   │   │   │       └── gruvbox
│   │   │   └── hyprland
│   │   │       ├── common
│   │   │       └── themes
│   │   │           ├── default
│   │   │           └── gruvbox
│   │   └── software
│   │       ├── cli
│   │       │   └── themes
│   │       │       ├── default
│   │       │       └── gruvbox
│   │       └── gui
│   │           └── themes
│   │               ├── default
│   │               └── gruvbox
│   ├── hosts
│   └── users
├── keys
│   ├── hosts
│   ├── ssh
│   └── users
├── lib
├── nixos
│   ├── common
│   │   ├── desktops
│   │   │   ├── gnome
│   │   │   └── hyprland
│   │   ├── modules
│   │   ├── services
│   │   └── software
│   │       ├── cli
│   │       └── gui
│   ├── hosts
│   └── users
├── secrets
└── wallpapers
    ├── default
    └── gruvbox

Other