aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* simplify hosts managementFranck Cuny2025-10-2414-204/+145
|
* move a few more things back as profilesFranck Cuny2025-10-239-51/+53
|
* enable tailscale on 2 machinesFranck Cuny2025-10-232-0/+3
|
* configure tailscale openID clientFranck Cuny2025-10-231-0/+25
|
* add a profile for tailscaleFranck Cuny2025-10-231-0/+9
| | | | will be used by nixos machines.
* webfinger setup to support tailscaleFranck Cuny2025-10-231-43/+94
| | | | | Based on https://tailscale.com/kb/1240/sso-custom-oidc and https://github.com/randomnetcat/nix-configs/blob/f1963827395d6c82a7e64267fde9b0c82da02380/hosts/bear/auth/default.nix#L134
* simplify darwin configurationFranck Cuny2025-10-2311-159/+118
| | | | Remove a bunch of files and consolidate everything into the host's file.
* move keycloak and forgejo on rivendellFranck Cuny2025-10-1820-93/+90
| | | | | I had to rekey all the secrets. Updated the documentation for both how to setup forgejo and keycloak.
* configure wireguard for rivendellFranck Cuny2025-10-186-0/+105
|
* move the disk configuration for rivendell as a profileFranck Cuny2025-10-183-1/+9
|
* introduce a module for baremetal machinesFranck Cuny2025-10-133-5/+19
|
* introduce a module for digital ocean dropletFranck Cuny2025-10-135-71/+81
|
* move modules under nixosFranck Cuny2025-10-134-24/+22
|
* delete unused moduleFranck Cuny2025-10-131-70/+0
|
* consistent home-manager configuration for all nixos hostsFranck Cuny2025-10-137-52/+21
|
* enable fish in the user moduleFranck Cuny2025-10-133-5/+2
|
* nixos-hardware does not have an input nixpkgsFranck Cuny2025-10-121-1/+0
|
* make the remote unlock bits a nix moduleFranck Cuny2025-10-125-59/+68
| | | | Move all the hardware configuration for rivendell into the default.nix.
* initial setup for the framework destkop (named rivendell)Franck Cuny2025-10-128-0/+236
|
* configure podman for all nixos machinesFranck Cuny2025-10-094-4/+1
|
* import home-manager.nix and user.nix by default on nixosFranck Cuny2025-10-095-4/+2
|
* automatically import home-manager.nix for all hostsFranck Cuny2025-10-096-5/+1
|
* don't import fonts.nixFranck Cuny2025-10-091-1/+0
| | | | This has been merged in the desktop.nix module.
* more simplification of the configurationFranck Cuny2025-10-096-49/+36
|
* move common modules under modules/Franck Cuny2025-10-0913-22/+16
| | | | Simplify the import on the various hosts.
* fix DNS configurationFranck Cuny2025-10-061-3/+0
| | | | DNSOverTLS does not work by default. Will figure this out later.
* nix configuration is applied by default to nixos machinesFranck Cuny2025-10-065-12/+10
|
* getting fancy!Franck Cuny2025-10-061-2/+2
|
* flake.lock: UpdateFranck Cuny2025-09-271-31/+31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Flake lock file updates: • Updated input 'darwin': 'github:lnl7/nix-darwin/536f951efb1ccda9b968e3c9dee39fbeb6d3fdeb' (2025-06-12) → 'github:lnl7/nix-darwin/1fef4404de4d1596aa5ab2bd68078370e1b9dcdb' (2025-09-09) • Updated input 'disko': 'github:nix-community/disko/c8a0e78d86b12ea67be6ed0f7cae7f9bfabae75a' (2025-09-07) → 'github:nix-community/disko/67ff9807dd148e704baadbd4fd783b54282ca627' (2025-09-19) • Updated input 'emacs-overlay': 'github:nix-community/emacs-overlay/eabe03335ec98f151eefcdbe859abacfeea5e7f5' (2025-09-07) → 'github:nix-community/emacs-overlay/f7be96f6f80ba65df30222d9a5cfadf26cf62355' (2025-09-27) • Updated input 'emacs-overlay/nixpkgs-stable': 'github:NixOS/nixpkgs/50ab793786d9de88ee30ec4e4c24fb4236fc2674' (2025-06-30) → 'github:NixOS/nixpkgs/25e53aa156d47bad5082ff7618f5feb1f5e02d01' (2025-09-25) • Updated input 'home-manager': 'github:nix-community/home-manager/07fc025fe10487dd80f2ec694f1cd790e752d0e8' (2025-08-31) → 'github:nix-community/home-manager/3b955f5f0a942f9f60cdc9cacb7844335d0f21c3' (2025-09-21) • Updated input 'nixpkgs': 'github:nixos/nixpkgs/fe83bbdde2ccdc2cb9573aa846abe8363f79a97a' (2025-09-04) → 'github:nixos/nixpkgs/25e53aa156d47bad5082ff7618f5feb1f5e02d01' (2025-09-25) • Updated input 'nixpkgsUnstable': 'github:nixos/nixpkgs/8eb28adfa3dc4de28e792e3bf49fcf9007ca8ac9' (2025-09-05) → 'github:nixos/nixpkgs/e643668fd71b949c53f8626614b21ff71a07379d' (2025-09-24) • Updated input 'nur': 'github:nix-community/NUR/2a5f8b6e0e101a9ef38f08cf4cdfda4745b1ee28' (2025-09-07) → 'github:nix-community/NUR/b12d9127abe1fde785f751ddcf046b6707f53990' (2025-09-27) • Updated input 'pre-commit-hooks': 'github:cachix/git-hooks.nix/ab82ab08d6bf74085bd328de2a8722c12d97bd9d' (2025-09-07) → 'github:cachix/git-hooks.nix/54df955a695a84cd47d4a43e08e1feaf90b1fd9b' (2025-09-17) • Updated input 'treefmt-nix': 'github:numtide/treefmt-nix/1aabc6c05ccbcbf4a635fb7a90400e44282f61c4' (2025-08-31) → 'github:numtide/treefmt-nix/5eda4ee8121f97b218f7cc73f5172098d458f1d1' (2025-09-24)
* start to refactor nixos modulesFranck Cuny2025-09-1215-84/+74
|
* move common modules together and simplify importsFranck Cuny2025-09-084-4/+9
|
* Revert "move droplet specific settings to its own module"Franck Cuny2025-09-086-92/+67
| | | | This reverts commit 3b47113c28c5180d4d5d710e3c1fe74f95aa7226.
* move droplet specific settings to its own moduleFranck Cuny2025-09-086-67/+92
|
* move deployment bits to colmena declarationFranck Cuny2025-09-073-16/+24
|
* flake.lock: UpdateFranck Cuny2025-09-071-14/+14
| | | | | | | | | | | | | | | | | Flake lock file updates: • Updated input 'my-go-tools': 'git+https://code.fcuny.net/fcuny/x?ref=refs/heads/main&rev=0fb5af8a16909066c11dc282cf43373e721051dc' (2025-09-06) → 'git+https://code.fcuny.net/fcuny/x?ref=refs/heads/main&rev=7b1b4d9071d0ae365ee5d7c7f607111a8ee44fae' (2025-09-07) • Updated input 'my-site': 'git+https://code.fcuny.net/fcuny/fcuny.net?ref=refs/heads/main&rev=0afe70a31740367df42fc21c8cbd1916ca19fd01' (2025-09-07) → 'git+https://code.fcuny.net/fcuny/fcuny.net?ref=refs/heads/main&rev=1544bbf7ed702ab7dc91c65d41e6a60943b53ec8' (2025-09-07) • Updated input 'nur': 'github:nix-community/NUR/7334ae5b17c81cd8732199d3cd2af27d417de05c' (2025-09-07) → 'github:nix-community/NUR/2a5f8b6e0e101a9ef38f08cf4cdfda4745b1ee28' (2025-09-07) • Updated input 'terranix': 'github:terranix/terranix/d1d1f186c9de5c58475e11bab219bc0467fb0b4d' (2025-08-23) → 'github:terranix/terranix/924573fa6587ac57b0d15037fbd2d3f0fcdf17fb' (2025-09-07)
* the resume is in HTMLFranck Cuny2025-09-071-2/+0
|
* flake.lock: UpdateFranck Cuny2025-09-071-7/+7
| | | | | | | | | | | Flake lock file updates: • Updated input 'my-site': 'git+https://code.fcuny.net/fcuny/fcuny.net?ref=refs/heads/main&rev=7475c2345793efaac97834945115fb8c9066cc12' (2025-09-07) → 'git+https://code.fcuny.net/fcuny/fcuny.net?ref=refs/heads/main&rev=0afe70a31740367df42fc21c8cbd1916ca19fd01' (2025-09-07) • Updated input 'nur': 'github:nix-community/NUR/ea513d12a9e8c9ce41655f901765cff76835b592' (2025-09-07) → 'github:nix-community/NUR/7334ae5b17c81cd8732199d3cd2af27d417de05c' (2025-09-07)
* flake.lock: UpdateFranck Cuny2025-09-071-35/+35
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Flake lock file updates: • Updated input 'disko': 'github:nix-community/disko/545aba02960caa78a31bd9a8709a0ad4b6320a5c' (2025-07-21) → 'github:nix-community/disko/c8a0e78d86b12ea67be6ed0f7cae7f9bfabae75a' (2025-09-07) • Updated input 'emacs-overlay': 'github:nix-community/emacs-overlay/dd8fa9020d078fc96ff0dd4c1a7bff14b19aee62' (2025-08-10) → 'github:nix-community/emacs-overlay/eabe03335ec98f151eefcdbe859abacfeea5e7f5' (2025-09-07) • Updated input 'flake-parts': 'github:hercules-ci/flake-parts/af66ad14b28a127c5c0f3bbb298218fc63528a18' (2025-08-06) → 'github:hercules-ci/flake-parts/4524271976b625a4a605beefd893f270620fd751' (2025-09-01) • Updated input 'home-manager': 'github:nix-community/home-manager/fc3add429f21450359369af74c2375cb34a2d204' (2025-07-27) → 'github:nix-community/home-manager/07fc025fe10487dd80f2ec694f1cd790e752d0e8' (2025-08-31) • Updated input 'my-go-tools': 'git+https://code.fcuny.net/fcuny/x?ref=refs/heads/main&rev=1072ca15a6357623b5260f951cec323635cb73e4' (2025-08-24) → 'git+https://code.fcuny.net/fcuny/x?ref=refs/heads/main&rev=0fb5af8a16909066c11dc282cf43373e721051dc' (2025-09-06) • Updated input 'my-site': 'git+https://code.fcuny.net/fcuny/fcuny.net?ref=refs/heads/main&rev=25fa2237ba8a96a86bf5db30baa597a5b25168d7' (2025-09-06) → 'git+https://code.fcuny.net/fcuny/fcuny.net?ref=refs/heads/main&rev=7475c2345793efaac97834945115fb8c9066cc12' (2025-09-07) • Updated input 'nixpkgs': 'github:nixos/nixpkgs/fc756aa6f5d3e2e5666efcf865d190701fef150a' (2025-08-08) → 'github:nixos/nixpkgs/fe83bbdde2ccdc2cb9573aa846abe8363f79a97a' (2025-09-04) • Updated input 'nixpkgsUnstable': 'github:nixos/nixpkgs/85dbfc7aaf52ecb755f87e577ddbe6dbbdbc1054' (2025-08-09) → 'github:nixos/nixpkgs/8eb28adfa3dc4de28e792e3bf49fcf9007ca8ac9' (2025-09-05) • Updated input 'nur': 'github:nix-community/NUR/203c285f8ad8faf047660044bd40049dfe98974d' (2025-08-21) → 'github:nix-community/NUR/ea513d12a9e8c9ce41655f901765cff76835b592' (2025-09-07) • Updated input 'pre-commit-hooks': 'github:cachix/git-hooks.nix/9c52372878df6911f9afc1e2a1391f55e4dfc864' (2025-08-05) → 'github:cachix/git-hooks.nix/ab82ab08d6bf74085bd328de2a8722c12d97bd9d' (2025-09-07) • Updated input 'treefmt-nix': 'github:numtide/treefmt-nix/7d81f6fb2e19bf84f1c65135d1060d829fae2408' (2025-08-10) → 'github:numtide/treefmt-nix/1aabc6c05ccbcbf4a635fb7a90400e44282f61c4' (2025-08-31)
* move things aroundFranck Cuny2025-09-067-97/+45
|
* run my personal website on the dropletFranck Cuny2025-09-064-26/+210
|
* install correct version of colmenaFranck Cuny2025-09-042-1/+2
|
* initial attempt at using colmena to deploy nixos configurationsFranck Cuny2025-09-016-4/+154
| | | | | | | | | | | | Can be used that way: ``` colmena exec --impure -v --on do-rproxy -- 'systemctl status nginx' ``` or ``` colmena --impure apply dry-activate --on synology-vm ```
* disable some ML related featuresFranck Cuny2025-09-011-0/+2
| | | | https://news.ycombinator.com/item?id=45076771
* configure keycloak with terraformFranck Cuny2025-09-015-0/+193
|
* clean up flake and .envrcFranck Cuny2025-08-312-6/+12
|
* my website will be managed in an external repositoryFranck Cuny2025-08-3115-444/+0
|
* install firefox extension 'clearurls'Franck Cuny2025-08-311-0/+1
|
* manage terraform configuration with terranixFranck Cuny2025-08-3130-636/+397
| | | | | | | | | All the terraform configuration is managed within one state instead of having multiple state for each components. This might not be the best practice but it simplifies things for me. Now, all I need to do is to run `nix run .#tf -- plan` and I can see what will be changed for all the resources that I care about.
* add terranixFranck Cuny2025-08-302-0/+64
|
* move eshell configuration to its own fileFranck Cuny2025-08-303-18/+36
|
* switch to nginxFranck Cuny2025-08-306-76/+77
| | | | | For some reasons, I can't get compression to work with Caddy, and I don't get much benefit from it in the first place anyway.
* use eza in eshellFranck Cuny2025-08-292-3/+10
|
* make `nomad-prod` work for all production nomad cellsFranck Cuny2025-08-291-2/+27
| | | | We also want to get access to cells in ASH.
* fix path for where to find rust binariesFranck Cuny2025-08-291-1/+1
|
* use better naming convention for the SSH certificateFranck Cuny2025-08-291-2/+2
|
* additional configuration for direnvFranck Cuny2025-08-281-3/+5
|
* add home-manager settings for rustFranck Cuny2025-08-285-2/+30
|
* relax some suggestions for firefoxFranck Cuny2025-08-251-3/+3
|
* configure cape and corfu correctlyFranck Cuny2025-08-251-2/+14
| | | | | The main important part is disabling the automatic completion from ispell, and rely instead on `cape-dict'.
* run `goget` on `go.fcuny.net`Franck Cuny2025-08-248-6/+194
|
* open firewall ports for forgejo and keycloakFranck Cuny2025-08-242-0/+4
|
* add to firefox more policies and settingsFranck Cuny2025-08-246-40/+211
|
* split-up firefox configurationFranck Cuny2025-08-2113-72/+165
| | | | | Ensure we install the bin package, so that we can use the 1password extension (we need a signed binary for that).
* initial configuration for firefoxFranck Cuny2025-08-204-0/+74
|
* initial configuration for fail2banFranck Cuny2025-08-204-1/+19
| | | | | We need to ensure the firewall is enabled and let's ensure that we open the port for SSH.
* bump sapi to 1.2.10Franck Cuny2025-08-181-2/+2
|
* fix work related configuration for 1passwordFranck Cuny2025-08-181-9/+5
|
* Revert "delete another un-needed file"Franck Cuny2025-08-181-0/+1
| | | | This reverts commit f6f2ba9369086036f93cf58b0e3b9e88c57a34b0.
* add dysk on linux machinesFranck Cuny2025-08-171-0/+1
|
* add a wrapper for forgejo admin commandsFranck Cuny2025-08-171-1/+14
|
* enable forgejo dumpFranck Cuny2025-08-171-0/+3
|
* a few more network related sysctlFranck Cuny2025-08-171-0/+2
|
* create a new systemd slice for critical servicesFranck Cuny2025-08-174-16/+91
|
* add catppuccin mocha theme for alacritty and starshipFranck Cuny2025-08-173-1/+99
|
* after experimenting with fido, I still prefer verticoFranck Cuny2025-08-162-3/+5
|
* move mpv/yt-dlp configuration to their own filesFranck Cuny2025-08-163-3/+39
|
* configure podmanFranck Cuny2025-08-141-0/+8
|
* add keycloak for OAuth, runbooks, and finish forgejo setupFranck Cuny2025-08-1410-44/+156
|
* initial setup for forgejo and caddyFranck Cuny2025-08-128-6/+96
|
* add a script to apply DNS terraformFranck Cuny2025-08-121-0/+7
|
* fix script to update do-rproxyFranck Cuny2025-08-121-1/+1
|
* rekey some secrets and deleted unused onesFranck Cuny2025-08-129-34/+30
|
* more simplificationsFranck Cuny2025-08-1212-128/+126
|
* remove unused variableFranck Cuny2025-08-121-1/+0
|
* move secrets to their own files and delete unused profileFranck Cuny2025-08-126-58/+62
|
* delete unused packageFranck Cuny2025-08-122-55/+0
|
* move profile for home-manager under programsFranck Cuny2025-08-125-4/+4
|
* profiles for darwinFranck Cuny2025-08-126-95/+85
|
* profiles for doc, fish, and remove unused profilesFranck Cuny2025-08-127-19/+19
|
* add nameservers configuration to network profileFranck Cuny2025-08-122-6/+6
|
* add a profile for fontsFranck Cuny2025-08-123-8/+8
|
* move git server profile closer to host configFranck Cuny2025-08-122-1/+1
|
* move hardware config closer to the host configFranck Cuny2025-08-122-1/+1
|
* add profiles for darwin and remote builderFranck Cuny2025-08-125-4/+8
|
* add profiles for security, firewalls, and usersFranck Cuny2025-08-127-15/+24
|
* add a profile for bootFranck Cuny2025-08-124-8/+11
|
* use podman for containers on nixosFranck Cuny2025-08-125-4/+7
|
* add profile for motdFranck Cuny2025-08-124-2/+2
|
* create profiles for networkd and nix's GCFranck Cuny2025-08-126-18/+28
|
* move disks configuration to the host' directoryFranck Cuny2025-08-124-2/+57
|
* profile for toolsFranck Cuny2025-08-124-17/+21
|
* profile for sshdFranck Cuny2025-08-124-4/+21
|
* import localeFranck Cuny2025-08-124-7/+13
|
* delete LLM related stuff for nowFranck Cuny2025-08-1212-219/+1
|
* move each machine configuration to a folderFranck Cuny2025-08-126-66/+51
| | | | | This will give me a bit more flexibility to configure things per machine in the future.
* users -> homeFranck Cuny2025-08-1239-45/+45
|
* directories firstFranck Cuny2025-08-121-0/+2
|
* setup wireguard tunnel between the VM and DO hostsFranck Cuny2025-08-104-0/+43
|
* update the message for the helper scripts to build/switchFranck Cuny2025-08-101-4/+16
|
* update a few .envrcFranck Cuny2025-08-102-0/+15
|
* don't ignore .envrc file with gitFranck Cuny2025-08-101-1/+0
|
* manage a DigitalOcean virtual machine with nixosFranck Cuny2025-08-1019-149/+321
| | | | | | | Add a new machine on DigitalOcean and provision it using terraform + nixos-anywhere. This takes care of bringing the machine up on nixos completely, and use a static SSH host key in order to configure wireguard at the same time.
* flake.lock: UpdateFranck Cuny2025-08-101-30/+30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Flake lock file updates: • Updated input 'agenix': 'github:ryantm/agenix/531beac616433bac6f9e2a19feb8e99a22a66baf' (2025-06-17) → 'github:ryantm/agenix/9edb1787864c4f59ae5074ad498b6272b3ec308d' (2025-08-05) • Updated input 'disko': 'github:nix-community/disko/83c4da299c1d7d300f8c6fd3a72ac46cb0d59aae' (2025-06-26) → 'github:nix-community/disko/545aba02960caa78a31bd9a8709a0ad4b6320a5c' (2025-07-21) • Updated input 'emacs-overlay': 'github:nix-community/emacs-overlay/517a698702b3614beb761c91d34df6382b465b59' (2025-07-01) → 'github:nix-community/emacs-overlay/dd8fa9020d078fc96ff0dd4c1a7bff14b19aee62' (2025-08-10) • Updated input 'flake-parts': 'github:hercules-ci/flake-parts/77826244401ea9de6e3bac47c2db46005e1f30b5' (2025-07-01) → 'github:hercules-ci/flake-parts/af66ad14b28a127c5c0f3bbb298218fc63528a18' (2025-08-06) • Updated input 'home-manager': 'github:nix-community/home-manager/366f00797b1efb70f2882d3da485e3c10fd3d557' (2025-06-24) → 'github:nix-community/home-manager/fc3add429f21450359369af74c2375cb34a2d204' (2025-07-27) • Updated input 'nixpkgs': 'github:nixos/nixpkgs/b43c397f6c213918d6cfe6e3550abfe79b5d1c51' (2025-06-29) → 'github:nixos/nixpkgs/fc756aa6f5d3e2e5666efcf865d190701fef150a' (2025-08-08) • Updated input 'nixpkgsUnstable': 'github:nixos/nixpkgs/3016b4b15d13f3089db8a41ef937b13a9e33a8df' (2025-06-30) → 'github:nixos/nixpkgs/85dbfc7aaf52ecb755f87e577ddbe6dbbdbc1054' (2025-08-09) • Updated input 'pre-commit-hooks': 'github:cachix/git-hooks.nix/16ec914f6fb6f599ce988427d9d94efddf25fe6d' (2025-06-24) → 'github:cachix/git-hooks.nix/9c52372878df6911f9afc1e2a1391f55e4dfc864' (2025-08-05) • Updated input 'pre-commit-hooks/flake-compat': 'github:edolstra/flake-compat/0f9255e01c2351cc7d116c072cb317785dd33b33' (2023-10-04) → 'github:edolstra/flake-compat/9100a0f413b0c601e0533d1d94ffd501ce2e7885' (2025-05-12) • Updated input 'treefmt-nix': 'github:numtide/treefmt-nix/ac8e6f32e11e9c7f153823abc3ab007f2a65d3e1' (2025-06-26) → 'github:numtide/treefmt-nix/7d81f6fb2e19bf84f1c65135d1060d829fae2408' (2025-08-10)
* write the terraform configuration in HCLFranck Cuny2025-08-0913-180/+423
| | | | | | This will become more tricky over time. Using HCL is not as elegant and forces me to learn yet another DSL, but this will be easier to debug if I'm stuck with something I don't know how to do.
* change emacs theme and simplify whitespace configurationFranck Cuny2025-08-091-5/+2
|
* add the SSH key for the remote builderFranck Cuny2025-08-0912-20/+42
| | | | All the secrets were rekeyed.
* ignore terraform cachesFranck Cuny2025-08-031-0/+2
|
* absolute path for loading minimal profileFranck Cuny2025-08-031-1/+1
|
* attempt at configuring the remote builder on the VMFranck Cuny2025-08-033-0/+45
|
* add a home-manager module for 1passwordFranck Cuny2025-07-296-42/+170
| | | | The module takes care of configuring the 1password SSH agent.
* correct syntax for importsFranck Cuny2025-07-281-1/+1
|
* enable tmuxFranck Cuny2025-07-282-0/+22
|
* add MOTD for serversFranck Cuny2025-07-272-0/+11
|
* moved every programs under users/programsFranck Cuny2025-07-2617-214/+240
| | | | Configurations specific to work are managed in the work profile.
* fix alacritty configurationFranck Cuny2025-07-261-1/+1
|
* move emacs configuration under users/programs/emacsFranck Cuny2025-07-2610-7/+6
| | | | This is more consistent.
* add themes in toml format for alacrittyFranck Cuny2025-07-264-91/+120
| | | | | | | | | It's easier to just drop the themes in toml format in the alacritty directory and link them instead of trying to constantly convert them into the nix configuration. Switch the theme to catppuccin-latte (dark) theme for now. Add window decoration back.
* tweak a bit more the configuration for alacrittyFranck Cuny2025-07-251-12/+41
|
* move bats to programsFranck Cuny2025-07-252-1/+1
|
* add a module for backupsFranck Cuny2025-07-254-0/+237
| | | | | Enable the module on the VM, and backup the git repositories both to the NAS and to a GCS bucket.
* add a script to build the VMFranck Cuny2025-07-251-0/+7
|
* add a module for mounting CIFS volumesFranck Cuny2025-07-255-0/+112
| | | | | | | | | | The new module is for NAS clients, where we specify the server and the paths to mount locally. We add a new secret to have the username of the `nas' user. We mount the backups volume from the NAS under `/data/backups` on the VM.
* enable cloudflared on the vmFranck Cuny2025-07-251-0/+15
|
* add configuration for alacrittyFranck Cuny2025-07-252-1/+63
|
* fix configuration for work machineFranck Cuny2025-07-243-12/+11
| | | | | | The hostname is capitalized so let's also capitalize the filename! The overlays are not under `customPackages` anymore.
* install gh only on work machineFranck Cuny2025-07-213-15/+20
|
* keep organizing into modules and profilesFranck Cuny2025-07-2112-115/+173
|
* move all profiles, modules, and flakes to top-levelFranck Cuny2025-07-2130-33/+44
|
* move user configurations to top-levelFranck Cuny2025-07-2120-5/+5
|
* install minimal home-manager profile on the VMFranck Cuny2025-07-212-1/+21
|
* make the configuration more specificFranck Cuny2025-07-216-158/+141
|
* install helpers for dockerFranck Cuny2025-07-211-0/+1
|
* move machines definitions to top-levelFranck Cuny2025-07-214-8/+8
|
* import nix profile in the server profileFranck Cuny2025-07-212-15/+6
|
* move nix configuration to its own profileFranck Cuny2025-07-213-70/+49
|
* fix the import path for local configsFranck Cuny2025-07-211-1/+1
|
* simplify starship prompts a bitFranck Cuny2025-07-211-10/+8
|
* organize installed packages by languagesFranck Cuny2025-07-211-20/+29
|
* easier to read import pathsFranck Cuny2025-07-212-4/+4
|
* refactoring to use flake-parts and automatic imports of hostsFranck Cuny2025-07-2150-789/+915
| | | | | This is the first step in a large refactoring to use flake-parts, and to automatically imports hosts based on paths.
* add docker helpers and clean up some dependenciesFranck Cuny2025-07-172-2/+1
|
* configure the nixbld GID in the host configuration directlyFranck Cuny2025-07-172-2/+3
|
* build and deploy my personal website on the VMFranck Cuny2025-07-177-30/+92
|
* import my website under `src`Franck Cuny2025-07-1414-0/+473
| | | | This does not import the history of the previous repository.
* create common network configuration for nixosFranck Cuny2025-07-142-0/+42
|
* enable starship's module hostname only for sshFranck Cuny2025-07-131-1/+1
|
* ensure binaries are called with the correct packageFranck Cuny2025-07-131-3/+3
|
* drop org-bulletsFranck Cuny2025-07-132-7/+0
|
* add a small note about DNS configurationFranck Cuny2025-07-131-0/+11
|
* manage DNS configuration with tofuFranck Cuny2025-07-132-25/+202
|
* store backups locally and remotelyFranck Cuny2025-07-074-13/+49
| | | | | | | | | | It might be useful to have a local backup so that I don't need to pull it from the remote bucket. It is useful to be able to quickly browse and see what's in the backup, and having to go to GCS for that is a waste of resources. Export environment variables to make it easier to interact with the local repository.
* add scripts related to terraformFranck Cuny2025-07-072-0/+80
|
* move scripts managed by nix out of the flakeFranck Cuny2025-07-076-66/+90
| | | | | In order to keep the flake readable, the various scripts managed by nix are now moved to their own files under `nix/scripts`.
* add a few tags to org-modeFranck Cuny2025-07-061-0/+15
|
* simplify the org-capture template for nowFranck Cuny2025-07-061-1/+1
|
* configure org-capture properlyFranck Cuny2025-07-061-8/+19
|
* more tweaks for org and denoteFranck Cuny2025-07-062-5/+15
|
* tweak configuration for both org and denoteFranck Cuny2025-07-061-6/+49
|
* set fill-column correctly in git-commit-modeFranck Cuny2025-07-061-0/+1
|
* add secrets and configurations for cloudflaredFranck Cuny2025-07-066-1/+36
|
* various fixes for nix 25.05Franck Cuny2025-07-063-47/+56
|
* flake.lock: UpdateFranck Cuny2025-07-011-30/+30
| | | | | | | | | | | | | | | | | | | | | | | Flake lock file updates: • Updated input 'agenix': 'github:ryantm/agenix/4835b1dc898959d8547a871ef484930675cb47f1' (2025-05-18) → 'github:ryantm/agenix/531beac616433bac6f9e2a19feb8e99a22a66baf' (2025-06-17) • Updated input 'emacs-overlay': 'github:nix-community/emacs-overlay/6557758212b4056fa0b3d65c537a3a8e503090ed' (2025-06-03) → 'github:nix-community/emacs-overlay/517a698702b3614beb761c91d34df6382b465b59' (2025-07-01) • Updated input 'emacs-overlay/nixpkgs-stable': 'github:NixOS/nixpkgs/78add7b7abb61689e34fc23070a8f55e1d26185b' (2025-05-28) → 'github:NixOS/nixpkgs/50ab793786d9de88ee30ec4e4c24fb4236fc2674' (2025-06-30) • Updated input 'nixpkgsUnstable': 'github:nixos/nixpkgs/910796cabe436259a29a72e8d3f5e180fc6dfacc' (2025-05-31) → 'github:nixos/nixpkgs/3016b4b15d13f3089db8a41ef937b13a9e33a8df' (2025-06-30) • Updated input 'pre-commit-hooks': 'github:cachix/git-hooks.nix/80479b6ec16fefd9c1db3ea13aeb038c60530f46' (2025-05-16) → 'github:cachix/git-hooks.nix/16ec914f6fb6f599ce988427d9d94efddf25fe6d' (2025-06-24) • Updated input 'treefmt-nix': 'github:numtide/treefmt-nix/1f3f7b784643d488ba4bf315638b2b0a4c5fb007' (2025-05-26) → 'github:numtide/treefmt-nix/ac8e6f32e11e9c7f153823abc3ab007f2a65d3e1' (2025-06-26)
* switch to 25.05Franck Cuny2025-07-011-3/+3
|
* add some docs about backupsFranck Cuny2025-06-301-0/+13
|
* backup the VM to Google Cloud StorageFranck Cuny2025-06-307-37/+72
| | | | For now we only backup git repositories.
* add configuration for vm-synologyFranck Cuny2025-06-308-0/+274
| | | | | This is a VM running on the Synology NAS. For now it only run `gitolite`, but we may host additional services in the future.
* only include some home-manager configurations on DarwinFranck Cuny2025-06-301-2/+2
|
* minor tweaksFranck Cuny2025-06-122-2/+4
|
* move emacs configuration at the top levelFranck Cuny2025-06-129-2/+7
|
* stop using relative paths for secretsFranck Cuny2025-06-121-3/+3
|
* simplify how we're managing templates for `llm`Franck Cuny2025-06-125-9/+20
| | | | | | | | Add the variable `configPath` to home-manager, to map directly to the top level configuration of the current user (`./configs/users/$user'). Add a function to generate the mapping for all the templates we need for the `llm` CLI.
* remove one of my keys from the secretsFranck Cuny2025-06-121-6/+3
|
* pass `self` to the home-manager modulesFranck Cuny2025-06-123-12/+25
| | | | | This is to avoid using relative paths, which is always annoying to get right.
* use a dedicated SSH key for agenixFranck Cuny2025-06-126-19/+41
| | | | | | | The key is still stored in 1password, and we add a script to synchronize the key to the host. The existing keys have been rekeyed with the new key.
* configure `aspell` properly to work with EmacsFranck Cuny2025-06-124-10/+4
|
* try a smaller fontFranck Cuny2025-06-111-1/+1
|
* add configuration for text modes to EmacsFranck Cuny2025-06-115-2/+140
|
* tweak a bit weztermFranck Cuny2025-06-091-15/+37
|
* use agenix to manage some secretsFranck Cuny2025-06-088-11/+64
| | | | | | | | | | | I have some secrets that I want to manage for my user without having to rely on 1password, and ensure proper rotation everywhere when needed. For now we only have two secrets (one for `llm` and another one is the API key for anthropic for Emacs). Will document the process better in the near future.
* install agenix againFranck Cuny2025-06-082-2/+91
|
* structure emacs configurationFranck Cuny2025-06-087-460/+545
|
* flake.lock: UpdateFranck Cuny2025-06-021-21/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | Flake lock file updates: • Updated input 'emacs-overlay': 'github:nix-community/emacs-overlay/f02060c00ccf9a7ce3786ee69e1ffdcd10fcdf9a' (2025-05-12) → 'github:nix-community/emacs-overlay/6557758212b4056fa0b3d65c537a3a8e503090ed' (2025-06-03) • Updated input 'emacs-overlay/nixpkgs-stable': 'github:NixOS/nixpkgs/0c0bf9c057382d5f6f63d54fd61f1abd5e1c2f63' (2025-05-09) → 'github:NixOS/nixpkgs/78add7b7abb61689e34fc23070a8f55e1d26185b' (2025-05-28) • Updated input 'home-manager': 'github:nix-community/home-manager/c61bfe3ae692f42ce688b5865fac9e0de58e1387' (2025-04-15) → 'github:nix-community/home-manager/d5f1f641b289553927b3801580598d200a501863' (2025-05-19) • Updated input 'nixpkgs': 'github:nixos/nixpkgs/26d499fc9f1d567283d5d56fcf367edd815dba1d' (2025-04-12) → 'github:nixos/nixpkgs/78d9f40fd6941a1543ffc3ed358e19c69961d3c1' (2025-06-01) • Updated input 'nixpkgsUnstable': 'github:nixos/nixpkgs/8a2f738d9d1f1d986b5a4cd2fd2061a7127237d7' (2025-04-23) → 'github:nixos/nixpkgs/910796cabe436259a29a72e8d3f5e180fc6dfacc' (2025-05-31) • Updated input 'pre-commit-hooks': 'github:cachix/git-hooks.nix/dcf5072734cb576d2b0c59b2ac44f5050b5eac82' (2025-03-22) → 'github:cachix/git-hooks.nix/80479b6ec16fefd9c1db3ea13aeb038c60530f46' (2025-05-16) • Updated input 'treefmt-nix': 'github:numtide/treefmt-nix/8d404a69efe76146368885110f29a2ca3700bee6' (2025-04-18) → 'github:numtide/treefmt-nix/1f3f7b784643d488ba4bf315638b2b0a4c5fb007' (2025-05-26)
* Revert "switch from wezterm to alacritty again"Franck Cuny2025-06-021-46/+57
| | | | This reverts commit 59a5acde4140a51588c28fa36f8f4d45b5458d6f.
* more configuration for emacsFranck Cuny2025-06-021-220/+343
|
* add things related to projects / rgFranck Cuny2025-05-221-22/+33
|
* more refactoring, move things upFranck Cuny2025-05-222-55/+61
|
* more configuration for emacsFranck Cuny2025-05-192-4/+7
|
* reorganize more configurationsFranck Cuny2025-05-191-38/+59
|
* keybindings for flymake + copy some environment variablesFranck Cuny2025-05-191-2/+7
|
* move settings related to backups togetherFranck Cuny2025-05-191-2/+4
|
* switch from wezterm to alacritty againFranck Cuny2025-05-161-57/+46
|
* show tabsFranck Cuny2025-05-141-1/+1
|
* align comments and add back function to rename buffersFranck Cuny2025-05-141-24/+41
|
* initial configuration for gptel and aidermacsFranck Cuny2025-05-141-0/+31
|
* update gitignoreFranck Cuny2025-05-141-0/+2
|
* adjust whitespace mode configurationFranck Cuny2025-05-141-2/+1
|
* more emacs packagesFranck Cuny2025-05-121-11/+9
|
* small tweaks for how to list packages to installFranck Cuny2025-05-125-41/+19
|
* emacs: dired+whitespacesFranck Cuny2025-05-121-3/+20
|
* install a few more toolsFranck Cuny2025-05-122-2/+7
|
* fish alias to ssh to edge machinesFranck Cuny2025-05-121-0/+2
|
* theme for weztermFranck Cuny2025-05-121-4/+2
|
* working emacs configuration managed with nixFranck Cuny2025-05-123-481/+270
|
* remove GHA, run the checks / tests with pre-commitsFranck Cuny2025-05-105-68/+0
|
* add flake-checker to pre-commit hooksFranck Cuny2025-05-101-43/+47
| | | | | Refactor the configuration to ensure we generate the configuration for pre-commit hooks properly in the devShell.
* add utmctl to pathFranck Cuny2025-05-091-0/+3
|
* do not try to be smartFranck Cuny2025-05-091-22/+14
|
* Revert "flake.lock: Update"Franck Cuny2025-05-051-18/+18
| | | | This reverts commit 271e5def8335f93b8fa7ed4b05a3da3af94f798e.
* flake.lock: UpdateFranck Cuny2025-05-041-18/+18
| | | | | | | | | | | | | | | | | | | | | | | Flake lock file updates: • Updated input 'emacs-overlay': 'github:nix-community/emacs-overlay/43f387b97b21770d8dbf7e575cc93792d9e5dde9' (2025-04-29) → 'github:nix-community/emacs-overlay/ee6f3f6077dc9504f27801203dcd1b610608aa6a' (2025-05-05) • Updated input 'emacs-overlay/nixpkgs-stable': 'github:NixOS/nixpkgs/26245db0cb552047418cfcef9a25da91b222d6c7' (2025-04-27) → 'github:NixOS/nixpkgs/537ee98218704e21ea465251de512ab6bbb9012e' (2025-05-03) • Updated input 'home-manager': 'github:nix-community/home-manager/c61bfe3ae692f42ce688b5865fac9e0de58e1387' (2025-04-15) → 'github:nix-community/home-manager/50eee705bbdbac942074a8c120e8194185633675' (2025-05-02) • Updated input 'nixpkgs': 'github:nixos/nixpkgs/26d499fc9f1d567283d5d56fcf367edd815dba1d' (2025-04-12) → 'github:nixos/nixpkgs/537ee98218704e21ea465251de512ab6bbb9012e' (2025-05-03) • Updated input 'nixpkgsUnstable': 'github:nixos/nixpkgs/8a2f738d9d1f1d986b5a4cd2fd2061a7127237d7' (2025-04-23) → 'github:nixos/nixpkgs/979daf34c8cacebcd917d540070b52a3c2b9b16e' (2025-05-04) • Updated input 'treefmt-nix': 'github:numtide/treefmt-nix/8d404a69efe76146368885110f29a2ca3700bee6' (2025-04-18) → 'github:numtide/treefmt-nix/29ec5026372e0dec56f890e50dbe4f45930320fd' (2025-05-02)
* load environment variables properlyFranck Cuny2025-05-042-5/+3
| | | | | we were only loading the one for aspell, but not the $PATH. We actually don't need the one for aspell.
* some tweaks for weztermFranck Cuny2025-05-011-1/+7
|
* restore weztermFranck Cuny2025-05-011-0/+61
|
* drop homebrewFranck Cuny2025-04-301-23/+0
|
* add more aliases for ssh to various environmentsFranck Cuny2025-04-301-1/+13
|
* no need for a desktop configurationFranck Cuny2025-04-302-1/+1
|
* update ssh alias for prod hostFranck Cuny2025-04-301-1/+1
|
* disable more GUI elementsFranck Cuny2025-04-291-3/+10
|
* don't install packages via homebrewFranck Cuny2025-04-297-22/+38
| | | | | | | We can install everything through nix at this point. Add a helper function to check the type of the machine so we can install some packages for work vs. personal.
* don't use dape with emacsFranck Cuny2025-04-292-14/+0
|
* install element-desktop via nixFranck Cuny2025-04-293-1/+7
|
* flake supports multiple architectureFranck Cuny2025-04-291-53/+137
|
* add headers to elisp filesFranck Cuny2025-04-292-0/+18
|
* initial import of emacs configFranck Cuny2025-04-298-8/+607
|
* use some binary cachesFranck Cuny2025-04-281-0/+8
|
* revert the lock file to a version that workedFranck Cuny2025-04-281-12/+12
|
* flake.lock: UpdateFranck Cuny2025-04-281-6/+6
| | | | | | | | | | | Flake lock file updates: • Updated input 'nixpkgs': 'github:nixos/nixpkgs/5630cf13cceac06cefe9fc607e8dfa8fb342dde3' (2025-04-24) → 'github:nixos/nixpkgs/26245db0cb552047418cfcef9a25da91b222d6c7' (2025-04-27) • Updated input 'treefmt-nix': 'github:numtide/treefmt-nix/8d404a69efe76146368885110f29a2ca3700bee6' (2025-04-18) → 'github:numtide/treefmt-nix/763f1ce0dd12fe44ce6a5c6ea3f159d438571874' (2025-04-28)
* add a script `nomad-prod` to open the nomad ui for the production cellsFranck Cuny2025-04-281-0/+26
|
* Merge pull request #19 from ↵Franck Cuny2025-04-283-3/+3
|\ | | | | | | | | fcuny/dependabot/github_actions/DeterminateSystems/nix-installer-action-17 Bump DeterminateSystems/nix-installer-action from 16 to 17
| * Bump DeterminateSystems/nix-installer-action from 16 to 17dependabot[bot]2025-04-283-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [DeterminateSystems/nix-installer-action](https://github.com/determinatesystems/nix-installer-action) from 16 to 17. - [Release notes](https://github.com/determinatesystems/nix-installer-action/releases) - [Commits](https://github.com/determinatesystems/nix-installer-action/compare/v16...v17) --- updated-dependencies: - dependency-name: DeterminateSystems/nix-installer-action dependency-version: '17' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
* | Merge pull request #18 from fcuny/update_flake_lock_actionFranck Cuny2025-04-281-9/+9
|\ \ | |/ |/| Update flake.lock
| * chore: update flakegithub-actions[bot]2025-04-271-9/+9
|/ | | | | | | | | | | | | | Flake lock file updates: • Updated input 'home-manager': 'github:nix-community/home-manager/c61bfe3ae692f42ce688b5865fac9e0de58e1387?narHash=sha256-iyn/WBYDc7OtjSawbegINDe/gIkok888kQxk3aVnkgg%3D' (2025-04-15) → 'github:nix-community/home-manager/dd26f75fb4ec1c731d4b1396eaf4439ce40a91c1?narHash=sha256-eqSo9ugzsqhFgaDFYUZj943nurlX4L6f%2BAW0skJ4W%2BM%3D' (2025-04-25) • Updated input 'nixpkgs': 'github:nixos/nixpkgs/26d499fc9f1d567283d5d56fcf367edd815dba1d?narHash=sha256-FHlSkNqFmPxPJvy%2B6fNLaNeWnF1lZSgqVCl/eWaJRc4%3D' (2025-04-12) → 'github:nixos/nixpkgs/5630cf13cceac06cefe9fc607e8dfa8fb342dde3?narHash=sha256-FQoi3R0NjQeBAsEOo49b5tbDPcJSMWc3QhhaIi9eddw%3D' (2025-04-24) • Updated input 'nixpkgsUnstable': 'github:nixos/nixpkgs/8a2f738d9d1f1d986b5a4cd2fd2061a7127237d7?narHash=sha256-sPwcCYuiEopaafePqlG826tBhctuJsLx/mhKKM5Fmjo%3D' (2025-04-23) → 'github:nixos/nixpkgs/f771eb401a46846c1aebd20552521b233dd7e18b?narHash=sha256-ITSpPDwvLBZBnPRS2bUcHY3gZSwis/uTe255QgMtTLA%3D' (2025-04-24)
* use correct hostname for the flakeFranck Cuny2025-04-251-1/+1
|
* automatically add packages to the overlaysFranck Cuny2025-04-243-13/+14
| | | | | Store custom packages under `customPackages` to make it easier to distinct them from the rest of the packages.
* drop justFranck Cuny2025-04-245-27/+1
|
* build python packages for llmFranck Cuny2025-04-248-19/+138
| | | | | | | | To get a more recent version of the llm python tool and the anthropic module, we need to build the packages ourselves. Refactor how we're building overlays to make it easier to add new packages using the `pkgsUnstable` set.
* add more shell aliases for nix commandsFranck Cuny2025-04-243-27/+7
|
* install tools with nix instead of brewFranck Cuny2025-04-213-3/+3
|
* clean up justfile and rename aliasesFranck Cuny2025-04-202-60/+2
|
* don't need devShellFranck Cuny2025-04-204-160/+70
|
* run nix flake check on CIFranck Cuny2025-04-201-0/+2
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-12-06 10:23:58 +0000