dotfiles/README.org

• magic_rb's dotfiles
  • License
    • Exceptions
  • NixOS
    • Modules
      • acme-sh
      • grafana
      • hashicorp-envoy
      • hashicorp
      • influx-provisioning
      • microvm-extras-host and microvm-extras
      • netboot-xyz
      • notify-login
      • notnft
      • notnft-ns
      • telegraf

magic_rb's dotfiles

License

All files unless otherwise stated are licensed under the LGPL-v3.0 license. Please refer to COPYING and COPYING.LESSER for more information.

Exceptions

The LGPL-v3.0 does not apply to you copying out a insignificant part of the source code, general rule of thumb is "If it's less than 32 lines and/or doesn't constitute a big self contained part, it's licensed under the MIT license." If you need clarification please contact @magic_rb:matrix.redalder.org on matrix.

NixOS

Modules

acme-sh

• source code: /magic_rb/dotfiles/src/commit/828a7b9bab7e6b1d18cdb56812af77fbb39508e6/nixos/modules/acme-sh.nix

Modified version of module originally from Serokell. It allows to easy fetch and access certificates, facilitated by `acme-sh`. Can be used in tandem with any program which can load certificates from files.

grafana

• source code: /magic_rb/dotfiles/src/commit/828a7b9bab7e6b1d18cdb56812af77fbb39508e6/nixos/modules/grafana.nix

Very simplified version of module originally from nixpkgs.

This module is currently unused, untested, and may be removed or completely reworked soon.

hashicorp-envoy

• source code: /magic_rb/dotfiles/src/commit/828a7b9bab7e6b1d18cdb56812af77fbb39508e6/nixos/modules/hashicorp-envoy.nix

Allows deploying Envoy proxies that can integrate with the Consul Connect service mesh. Used to hook klipper into the rest of my infrastructure.

This module is deprecated and will be removed soon. I'm switching away from Hashicorp Nomad+Consul and towards k3s+Istio and therefore won't have a need for this module.

hashicorp

• source code: /magic_rb/dotfiles/src/commit/828a7b9bab7e6b1d18cdb56812af77fbb39508e6/nixos/modules/hashicorp.nix

Runs Hashicorp Vault, Consul and Nomad. Would probably work with OpenBao too, but this has not yet been tested.

influx-provisioning

• source code: /magic_rb/dotfiles/src/commit/828a7b9bab7e6b1d18cdb56812af77fbb39508e6/nixos/modules/influx-provisioning.nix

Crudely provisions InfluxDB.

This module is deprecated and will be removed soon. It was originally created when I thought I would be switching away from Terraform completely. Now I know I will be switching to OpenTofu.

microvm-extras-host and microvm-extras

• source code: /magic_rb/dotfiles/src/commit/828a7b9bab7e6b1d18cdb56812af77fbb39508e6/nixos/modules/microvm-extras-host.nix, /magic_rb/dotfiles/src/commit/828a7b9bab7e6b1d18cdb56812af77fbb39508e6/nixos/modules/microvm-extras.nix

Intended to somewhat simulate a service mesh using microvm.nix and clever nftable rules. Turned out to be too much work and both will be removed.

netboot-xyz

• source code: /magic_rb/dotfiles/src/commit/828a7b9bab7e6b1d18cdb56812af77fbb39508e6/nixos/modules/netboot-xyz.nix

Adds netboot.xyz to GRUB, supports both EFI and BIOS. Used on my server in case of catastrophic root pool failure.

notify-login

• source code: /magic_rb/dotfiles/src/commit/828a7b9bab7e6b1d18cdb56812af77fbb39508e6/nixos/modules/notify-login.nix

Send notifications over Matrix, when an SSH session is opened/closed.

notnft

• source code: /magic_rb/dotfiles/src/commit/828a7b9bab7e6b1d18cdb56812af77fbb39508e6/nixos/modules/notnft.nix

Alternative implementation of upstream notnft module, which is part of the much larger nixos-router repository.

notnft-ns

• source code: /magic_rb/dotfiles/src/commit/828a7b9bab7e6b1d18cdb56812af77fbb39508e6/nixos/modules/notnft-ns.nix

Newer implementation of the notnft module, this one supports network namespaces.

telegraf

• source code: /magic_rb/dotfiles/src/commit/828a7b9bab7e6b1d18cdb56812af77fbb39508e6/nixos/modules/telegraf.nix

Very simplified version of module originally from nixpkgs.

This module is currently unused, untested, and may be removed or completely reworked soon.