Commit graph

390 commits

Author SHA1 Message Date
magic_rb 4e549e10d0
Firewall changes on blowhole
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-03-02 21:56:49 +01:00
magic_rb e8d7047549
Microvm nftable changes on blowhole
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-03-02 21:56:30 +01:00
magic_rb 6554cc6e89
Increase user watch limits on blowhole
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-03-02 21:55:59 +01:00
magic_rb 4a76762457
Reformat klipper.nix on blowhole
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-03-02 21:55:23 +01:00
magic_rb 7a3eb83855
Make use of ifstate on omen in microvm.nix
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-03-02 21:54:46 +01:00
magic_rb 4b8ef0d6db
Reformat omen impermenance
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-03-02 21:49:42 +01:00
magic_rb 3a2db36829
Rollback omen kernel to 6.6 due to kernel panics
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-03-02 21:48:28 +01:00
magic_rb 1401b7e042
Update Nomads docker forcefully to avoid runc CVE
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-03-02 21:48:07 +01:00
magic_rb b87986d6d7
Accept blowhole minecraft port
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-02-11 16:21:25 +01:00
magic_rb 7de68b7864
Disable hydra substitution for now
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-02-11 01:24:52 +01:00
magic_rb 7de31b611c
Add thingiverse-downloader
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-02-11 01:08:33 +01:00
magic_rb 990c6cb222
Increase stepper current
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-02-11 01:06:12 +01:00
magic_rb ee7fee6595
Trying to make Hydra work
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-02-10 17:56:56 +01:00
magic_rb 9f4c8832db
Use bypassed consul for klipper too
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-02-09 20:04:51 +01:00
magic_rb 216ad9b677
Omen firewall updates
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-02-09 20:03:02 +01:00
magic_rb b86de7ccf5
Properly bypass Hashicorp stuff being non-free now
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-02-09 19:38:04 +01:00
magic_rb 980c9f4cb7
Move X11 layout settings
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-02-09 19:35:47 +01:00
magic_rb e1eef717b0
Allow non-free consul for now
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-02-09 15:40:00 +01:00
magic_rb 4cc46ade9a
Klipper adjustments
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-01-31 15:30:30 +01:00
magic_rb b78b4ce5be
Fix evaluation due to usage of optinal secrets in blowhole
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-01-22 10:00:14 +01:00
magic_rb 1ea62e80e2
Fix up klipper
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-01-22 00:44:41 +01:00
magic_rb d925c68f58
Add service to deploy home-assistant pyscript scripts
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-01-22 00:44:17 +01:00
magic_rb b7d82b950c
Disable vault agent kodi mount
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-01-22 00:43:34 +01:00
magic_rb b71e57e8af
Disable specialisations for omen, makes eval too long
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-01-20 22:59:44 +01:00
magic_rb 843047ea40
Fixed wrongly picked changes in omen
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-01-18 21:13:36 +01:00
magic_rb f111b87b14
Statically pin podman default network subnet on omen
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-01-18 14:10:57 +01:00
magic_rb 53e7c51b94
Restore podman iptable rules after nftable restart on omen
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-01-18 14:09:59 +01:00
magic_rb 97d1ff5896
Remormat notnft module
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-01-18 13:16:00 +01:00
magic_rb 82774bc978
Add start stop hooks to notnftables
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-01-18 13:15:30 +01:00
magic_rb 39d36d5457
Add ssh-remote-access
Signed-off-by: magic_rb <magic_rb@redalder.org>
2023-12-30 19:42:55 +01:00
magic_rb 97ea6ffe4a
Disable CAP_SYS_NICE hack for steam
Signed-off-by: magic_rb <magic_rb@redalder.org>
2023-12-24 17:02:07 +01:00
magic_rb 9413748603
Add no-nvidia and nouveau specialization on omen
Signed-off-by: magic_rb <magic_rb@redalder.org>
2023-12-24 17:01:41 +01:00
magic_rb 69eb47c2a1
Add PrismLauncher to impermenance on omen
Signed-off-by: magic_rb <magic_rb@redalder.org>
2023-12-24 17:01:15 +01:00
magic_rb e9f0b6b896
Add time to login notifications
Signed-off-by: magic_rb <magic_rb@redalder.org>
2023-12-23 20:18:30 +01:00
magic_rb 6331357b45
Add login notify module
Signed-off-by: magic_rb <magic_rb@redalder.org>
2023-12-23 20:01:59 +01:00
magic_rb 680004abdf
Unblock altra ZFS version
Signed-off-by: magic_rb <magic_rb@redalder.org>
2023-12-10 16:01:50 +01:00
magic_rb ffed2f4fd0
Fix XDG portal selection
Signed-off-by: magic_rb <magic_rb@redalder.org>
2023-12-10 16:01:32 +01:00
magic_rb 843357e9ab
Bump altra's kernel to latest
Signed-off-by: magic_rb <magic_rb@redalder.org>
2023-12-10 15:28:28 +01:00
magic_rb 1d39c23d0b
Bump toothpicks kernel to latest
Signed-off-by: magic_rb <magic_rb@redalder.org>
2023-12-10 15:28:06 +01:00
magic_rb ad6a5f6784
Add disk monitoring to blowhole
Signed-off-by: magic_rb <magic_rb@redalder.org>
2023-12-03 20:00:10 +01:00
magic_rb b284c90451
Finally get gamescope working properly in Steam
Signed-off-by: magic_rb <magic_rb@redalder.org>
2023-11-25 17:59:48 +01:00
magic_rb 89afaf89c1
Disable a thing in ZFS which can cause file corruption
Signed-off-by: magic_rb <magic_rb@redalder.org>
2023-11-25 17:59:27 +01:00
magic_rb 0ca5e9e4aa
Fix creation of /dev/ttyZigbee on blowhole
Signed-off-by: magic_rb <magic_rb@redalder.org>
2023-11-25 17:50:38 +01:00
magic_rb 15908ba927
Give gamescope cap_sys_nice so it can renice itself
Signed-off-by: magic_rb <magic_rb@redalder.org>
2023-11-25 17:49:53 +01:00
magic_rb 52faaea7ac
Add output sync config for omen (works REALLY badly f you NVidia)
Signed-off-by: magic_rb <magic_rb@redalder.org>
2023-11-24 15:24:06 +01:00
magic_rb 1955d32b7c
Omen no longer needs weird NFS patch
Signed-off-by: magic_rb <magic_rb@redalder.org>
2023-11-20 09:59:06 +01:00
magic_rb 8cb85d620f Merge branch 'flake-update' 2023-11-19 23:18:38 +01:00
magic_rb e3312566ba
Clean up imports on omen
Signed-off-by: magic_rb <magic_rb@redalder.org>
2023-11-19 12:30:53 +01:00
magic_rb 57087a3400
Add Hydra as a substituter
Signed-off-by: magic_rb <magic_rb@redalder.org>
2023-11-19 12:28:10 +01:00
magic_rb 2ca3b3f6d1
Apparently IWD doesn't do DHCP by default because who needs DHCP
Signed-off-by: magic_rb <magic_rb@redalder.org>
2023-11-19 12:26:10 +01:00
magic_rb 82369662a4 Remove boot.loader.grub.version on toothpick as it does nothing
Signed-off-by: magic_rb <richard@brezak.sk>
2023-11-18 13:55:50 +01:00
magic_rb 0d37adfb9b Disable scripted DHCP on omen completely
Signed-off-by: magic_rb <richard@brezak.sk>
2023-11-18 13:55:50 +01:00
magic_rb eba5c967ca Add NixOS state version for omen microvm
Signed-off-by: magic_rb <richard@brezak.sk>
2023-11-18 13:55:50 +01:00
magic_rb 705eeea37d Fix deprecated usage of nix.allowedUsers on altra
Signed-off-by: magic_rb <richard@brezak.sk>
2023-11-18 13:55:15 +01:00
magic_rb 37af8fca1e Update state version on omen
Signed-off-by: magic_rb <richard@brezak.sk>
2023-11-18 13:55:15 +01:00
magic_rb 26b1be45a2 Fix incorrect usages of getExe
Signed-off-by: magic_rb <richard@brezak.sk>
2023-11-18 13:55:15 +01:00
magic_rb e8a2007a29
Rip out Matlab
Signed-off-by: magic_rb <magic_rb@redalder.org>
2023-11-03 20:23:05 +01:00
magic_rb c54d257319
Make use of /nix/tmp on omen
Signed-off-by: magic_rb <magic_rb@redalder.org>
2023-11-03 20:12:56 +01:00
magic_rb 366e2c34a3
Apply kernel patch for NFSv4 SELinux issue
Signed-off-by: magic_rb <magic_rb@redalder.org>
2023-11-03 20:12:03 +01:00
magic_rb fd97d611f6
Fix usage of rolling_datasets on omen
Signed-off-by: magic_rb <magic_rb@redalder.org>
2023-11-03 20:11:43 +01:00
magic_rb 2b11913dc9
Better pin zigbee dongle serial device
Signed-off-by: magic_rb <richard@brezak.sk>
2023-10-23 23:30:38 +02:00
magic_rb 671aff30e4
Delete ical2org completely
Signed-off-by: magic_rb <richard@brezak.sk>
2023-10-22 16:56:31 +02:00
magic_rb e59817b20f
Persist more stuff on omen
Signed-off-by: magic_rb <richard@brezak.sk>
2023-10-22 00:34:04 +02:00
magic_rb 880ffeec87
Fix evaluation without secrets
Signed-off-by: magic_rb <richard@brezak.sk>
2023-10-21 17:46:17 +02:00
magic_rb 23c7002368
Mount old versions of home on omen
Signed-off-by: magic_rb <richard@brezak.sk>
2023-10-18 14:30:17 +02:00
magic_rb 60622f12cc
Add hledger to omen
Signed-off-by: magic_rb <richard@brezak.sk>
2023-10-16 14:57:43 +02:00
magic_rb 9e3c0ff11f
Fix path to secrets on altra
Signed-off-by: magic_rb <richard@brezak.sk>
2023-10-10 14:11:58 +02:00
magic_rb ec32e1c1a9
Add rolling_dataset overlay to omen
Signed-off-by: magic_rb <richard@brezak.sk>
2023-10-07 22:50:25 +02:00
magic_rb cf4e2472cd
Add experimental numen stuff into omen
Signed-off-by: magic_rb <richard@brezak.sk>
2023-10-07 22:49:56 +02:00
magic_rb 9549ef1003
Pin interface to specific name in microvm-extras
Signed-off-by: magic_rb <richard@brezak.sk>
2023-10-07 22:49:16 +02:00
magic_rb 05cf178c7a
Assign default values to service attrs in microvm-extras
Signed-off-by: magic_rb <richard@brezak.sk>
2023-10-07 22:48:54 +02:00
magic_rb c16147f323
Don't include containers in microvm-extras for now
Signed-off-by: magic_rb <richard@brezak.sk>
2023-10-07 22:48:39 +02:00
magic_rb 6175d518ce
Fix bug in notnftables where dontFlush wasn't being respected
Signed-off-by: magic_rb <richard@brezak.sk>
2023-10-07 22:48:01 +02:00
magic_rb 52d2b22844
Use path instead of export in nftables service on blowhole
Signed-off-by: magic_rb <richard@brezak.sk>
2023-10-07 22:47:29 +02:00
magic_rb ca4775b49e
Move firewall and test microvm out into seperate files on omen
Signed-off-by: magic_rb <richard@brezak.sk>
2023-10-07 22:45:51 +02:00
magic_rb 985d7ea696
Switch the dhcp server on blowhole to kea
Signed-off-by: magic_rb <richard@brezak.sk>
2023-10-07 22:44:42 +02:00
magic_rb f59ae5dc71
Make use of rolling_datasets on omen
Signed-off-by: magic_rb <richard@brezak.sk>
2023-10-07 22:43:51 +02:00
magic_rb 85db381a7e
Fixup altra's mountpoints
Signed-off-by: magic_rb <richard@brezak.sk>
2023-10-07 22:40:28 +02:00
magic_rb e49ef5e713
Disable monitoring on blowhole
Signed-off-by: magic_rb <richard@brezak.sk>
2023-10-07 22:29:46 +02:00
magic_rb efeb5579db
Persist .password-store on omen
Signed-off-by: magic_rb <richard@brezak.sk>
2023-10-07 20:59:19 +02:00
magic_rb 8db1c182ef
Update blowhole
Signed-off-by: magic_rb <richard@brezak.sk>
2023-10-07 15:45:26 +02:00
magic_rb b8f01a4d15
Persist more things on omen
Signed-off-by: magic_rb <richard@brezak.sk>
2023-10-06 15:07:13 +02:00
magic_rb 40245f35ca
Update flake
Signed-off-by: magic_rb <richard@brezak.sk>
2023-10-06 15:01:20 +02:00
MagicRB 5490245849
Persist mre stuff, mostly caches
Signed-off-by: MagicRB <richard@brezak.sk>
2023-10-04 00:08:03 +02:00
MagicRB d9161d3b7d
Persist SchildiChat
Signed-off-by: MagicRB <richard@brezak.sk>
2023-10-03 23:49:15 +02:00
MagicRB 245e6d891b
Matlab, ew, stuff
Signed-off-by: MagicRB <richard@brezak.sk>
2023-10-03 23:49:04 +02:00
MagicRB 260a917558
Add omen impermenance
Signed-off-by: MagicRB <richard@brezak.sk>
2023-10-03 16:55:14 +02:00
Magic_RB 580fec0979
Update flake.lock
Signed-off-by: Magic_RB <magic_rb@redalder.org>
2023-09-28 14:42:44 +02:00
Magic_RB 34bb23c67f
Initial implementation of microvm-extras
Signed-off-by: Magic_RB <magic_rb@redalder.org>
2023-09-28 10:31:25 +02:00
Magic_RB 6a36890077
Add matlab...
Signed-off-by: Magic_RB <magic_rb@redalder.org>
2023-09-16 16:42:21 +02:00
Magic_RB 61bab3a8bf
Fix backup issue on blowhole
Signed-off-by: Magic_RB <magic_rb@redalder.org>
2023-09-16 16:41:41 +02:00
Magic_RB 9d390511eb
Auto mount second sdcard too
Signed-off-by: Magic_RB <magic_rb@redalder.org>
2023-09-16 16:41:21 +02:00
Magic_RB 9b371b8662
Add InfluxDB provisioning script
Signed-off-by: Magic_RB <magic_rb@redalder.org>
2023-09-03 18:03:00 +02:00
Magic_RB 410b6c0838
Expose some services to semi wan
Signed-off-by: Magic_RB <magic_rb@redalder.org>
2023-09-02 23:19:01 +02:00
Magic_RB 5f9b37a2ca
Add a ~s0ix~ test script to the ~liveusb~ system
Signed-off-by: Magic_RB <magic_rb@redalder.org>
2023-09-02 16:43:44 +02:00
Magic_RB 36120abf6b
Update filesystems for omen
Signed-off-by: Magic_RB <magic_rb@redalder.org>
2023-09-02 16:43:30 +02:00
Magic_RB fd2ce42d15
Setup grok parsing for apache and nginx
Signed-off-by: Magic_RB <magic_rb@redalder.org>
2023-07-28 20:06:11 +02:00
Magic_RB b7cdd44967
Increase dnscrypt-proxy cache size to 32768
Signed-off-by: Magic_RB <magic_rb@redalder.org>
2023-07-28 14:34:00 +02:00
Magic_RB 9268fe52af
Allow more ports for synapse-proxy apache
Signed-off-by: Magic_RB <magic_rb@redalder.org>
2023-07-28 00:23:33 +02:00
Magic_RB 6bb313137b
Allow more workers for synapse-proxy apache
Signed-off-by: Magic_RB <magic_rb@redalder.org>
2023-07-28 00:23:16 +02:00