| Commit message (Collapse) | Author | Files | Lines |
|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Can be used that way:
```
colmena exec --impure -v --on do-rproxy -- 'systemctl status nginx'
```
or
```
colmena --impure apply dry-activate --on synology-vm
```
|
|
|
|
All the terraform configuration is managed within one state instead of
having multiple state for each components. This might not be the best
practice but it simplifies things for me.
Now, all I need to do is to run `nix run .#tf -- plan` and I can see
what will be changed for all the resources that I care about.
|
|
|
|
|
|
Ensure we install the bin package, so that we can use the 1password
extension (we need a signed binary for that).
|
|
|
|
Add a new machine on DigitalOcean and provision it using terraform +
nixos-anywhere. This takes care of bringing the machine up on nixos
completely, and use a static SSH host key in order to configure
wireguard at the same time.
|
|
|
|
This is the first step in a large refactoring to use flake-parts, and to
automatically imports hosts based on paths.
|
|
|
|
This does not import the history of the previous repository.
|
|
In order to keep the flake readable, the various scripts managed by nix
are now moved to their own files under `nix/scripts`.
|
|
|
|
This is a VM running on the Synology NAS. For now it only run
`gitolite`, but we may host additional services in the future.
|
|
This is to avoid using relative paths, which is always annoying to get
right.
|
|
The key is still stored in 1password, and we add a script to
synchronize the key to the host.
The existing keys have been rekeyed with the new key.
|
|
|
|
|
|
Refactor the configuration to ensure we generate the configuration for
pre-commit hooks properly in the devShell.
|
|
|
|
|
|
|
|
Store custom packages under `customPackages` to make it easier to
distinct them from the rest of the packages.
|
|
To get a more recent version of the llm python tool and the anthropic
module, we need to build the packages ourselves.
Refactor how we're building overlays to make it easier to add new
packages using the `pkgsUnstable` set.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
`nixfmt-rfc-style' replaces `nixfmt-classic'. It's actively
maintained, but also changes the style, so this commit touches all the
files in the repository.
|
|
|
|
The configuration was not regenerated properly.
|
|
|
|
|
|
it will be easier to break down some configs.
|
|
|
|
|
|
|
|
The configuration of the various hosts and home-manager was becoming a
bit complex for no valid reasons. Try to simplify this a bit.
|
|
|
|
|
|
|
|
The linux VM runs with UTM, and it has a very basic configuration for
now.
|
|
|
|
This is the first step to re-enable installing custom scripts. The next
step will be to rename `tools` to `packages`, and then if needed I will
be able to support overlays.
|
|
|
|
|
|
The firefox packages for darwin are broken.
`bandithedoge/nixpkgs-firefox-darwin` provides an overlay to install
the package on darwin.
Add some specific configurations to make firefox work as I want out of
the box.
We also add NUR to install some firefox extensions (ublock, 1password).
|
|
Move the host configuration to `flake/hosts.nix` to follow what we did
with `devshell`.
|
|
Update to 23.11 for both nix and home-manager.
Break down the flake in multiple parts (hosts, devshell) so that they
are easier to maintain. The main reason to start this is because `nix
flake check` was failing, the flake was not correct.
|
|
I only have one host (the macbook air) to configure.
|
|
|
|
|
|
|
|
|
|
|
|
I don't use terraform anymore and GCP services, so I can get rid of
everything there.
|
|
Parse the file that contains all the leases assigned by dnsmasq, and
create a static HTML page from it. This can be served by nginx to make
it easy to see what IP is assigned to a machine, and which machines are
currently on the network.
|
|
|
|
To prevent the unit to be triggered multiple times if the host has
already rebooted, we create a gate file when we're done running, and
before running, we check if the file exists.
Enable the service on tahoe.
Don't restart the unit when its definition has changed.
|
|
Instead of using agenix for all the secrets, I can use homeage for
secrets that are related to my user sessions.
Secrets by default will be store under `~/.secrets'. They are encrypted
using `age' and to decrypt them, a key is expected to be located under
`~/.age/key.txt'.
The last place where I was using `pass' (and so GPG too) was for the
secrets for `mbsync': this change adds a secret for fastmail to the
repository and update `mbsync' configuration to use it.
|
|
I'm rewriting them in go and they are not ready to be used yet.
|
|
There's no need to be on unstable, I prefer break things only twice a
year instead of every time I run an update ...
|
|
Don't pin, just use latest.
|
|
|
|
|
|
A new module `sendsms` is added to send SMS when the host reboots. It's
triggered by systemd when the host boots and once the network is
available.
|
|
Drone's CI configuration is in YAML and can contain multiple
configurations (documents). By default the check does not allow this, so
let's update the configuration by adding the flag
`--allow-multiple-documents`.
|
|
|
|
I was not using it.
|
|
|
|
To use it, run:
```
nix flake init -t github:fcuny/world#rust
```
|
|
|
|
Add a new input to the flake configuration to install `gh-ssh-keys`.
|
|
naersk makes it simple to build rust project in nix.
For this to work, `mkSystem` and `mkHomeManagerConfiguration` needs to
pass naersk to my overlays.
I dropped the support to run the tools with `nix run .#tools...`: I
don't use this in practice and it's not making things simpler.
I dropped `nix-linter` from the check, it's reporting many errors
without helping me to fix them.
|
|
|
|
|
|
When rebuilding the host (through `nixos-rebuild switch --flake`) I
don't want to rebuild also my home-manager configuration. I want these
to be two different steps.
I rebuild the home-manager configuration more frequently and it's a
waste of time and CPU to rebuild the world every time.
This is a pretty large refactoring:
- move checks back into the flake: if I modify a check, the
configuration for `pre-commits` is not regenerated, as the file with the
checks is not monitored with `direnv` (I could probably configure it for
it, but not now)
- remove `home.nix` from the host level configuration
- introduce a `mkHomeManagerConfiguration` function to manage the
different user@host
- fix a warning with the rust overlay
|
|
This improve the readability of the flake configuration, the check can
be in their own module.
|
|
I'll go and refactor correctly and properly the support for rust
packages, this is not working and I'm doing something stupid.
|
|
There has to be a nicer way, and I might just completely drop golang
support anyway in this repo.
|
|
The flake naersk is used to build rust crates with nix.
Change-Id: Ia1c95de34fe802ae6a6b623dc169ca502fa72f12
|
|
Installing the rust overlay to get the various tools installed. This is
done by a new module for home-manager, and is installed only on my
laptop at the moment.
Change-Id: I80c1633ca04da82f4321a0687a05d1df7c523702
|
|
Add a mechanism to run checks for go (fmt/mod tidy) and one for
terraform.
Fix the configuration for shellcheck (it was not checking the files).
Change-Id: I1d250b96bd22838eddf624fda6b4d78d5da3e39f
Reviewed-on: https://cl.fcuny.net/c/world/+/715
Tested-by: CI
Reviewed-by: Franck Cuny <franck@fcuny.net>
|
|
Change-Id: I63fc8fd81679457f7dbeafc2bd10c0eded0de991
Reviewed-on: https://cl.fcuny.net/c/world/+/707
Tested-by: CI
Reviewed-by: Franck Cuny <franck@fcuny.net>
|
|
Configure the way we import these packages the same way, that way it's
consistent and easy to use.
Change-Id: I0e218f8fe9dd4cd2045bfee11c80de84ff769fe1
Reviewed-on: https://cl.fcuny.net/c/world/+/703
Tested-by: CI
Reviewed-by: Franck Cuny <franck@fcuny.net>
|
|
Since I have configured the pre-commit hooks, I can use them instead of
my custom scripts: less things to maintain and easier to read output.
Change-Id: Ic833ec88ed9fbcbe52b1b1680f978da3a5a08b31
Reviewed-on: https://cl.fcuny.net/c/world/+/681
Tested-by: CI
Reviewed-by: Franck Cuny <franck@fcuny.net>
|
|
Add pre-commit hooks for:
- trailing white spaces
- new lines at the end of files
Change-Id: I02b5c125064b1cc43e3dfcd7504f60df50846c36
Reviewed-on: https://cl.fcuny.net/c/world/+/593
Tested-by: CI
Reviewed-by: Franck Cuny <franck@fcuny.net>
|
|
And configure them to run nixpkgs-fmt and shellcheck.
Change-Id: I0aa2025e368b80c5e7d90a4dc05448494525e31e
Reviewed-on: https://cl.fcuny.net/c/world/+/590
Reviewed-by: Franck Cuny <franck@fcuny.net>
Tested-by: CI
|
|
Change-Id: I22fad8e0dcdc7c678ea4d7b9235fa5fe4fcdd84d
Reviewed-on: https://cl.fcuny.net/c/world/+/589
Reviewed-by: Franck Cuny <franck@fcuny.net>
Tested-by: CI
|
|
This is more readable.
Change-Id: Ibdb6cf2f880f8fe3be80f9049bdf18b2d9120b91
Reviewed-on: https://cl.fcuny.net/c/world/+/587
Reviewed-by: Franck Cuny <franck@fcuny.net>
Tested-by: CI
|
|
For now the only system we support with nix is linux on x86.
Change-Id: Ia7d6173ab0be674e9be706f9c0eb02937aa87ac6
Reviewed-on: https://cl.fcuny.net/c/world/+/586
Reviewed-by: Franck Cuny <franck@fcuny.net>
Tested-by: CI
|
|
This name is more specific (f is for flake in this case).
Change-Id: Iaad98d8325b81cfe1af8b692ef7cd13586f251e6
Reviewed-on: https://cl.fcuny.net/c/world/+/585
Reviewed-by: Franck Cuny <franck@fcuny.net>
Tested-by: CI
|
|
Change-Id: I8cb6cfcc89fd2c4167a99a27f8e50d954bacdf6a
Reviewed-on: https://cl.fcuny.net/c/world/+/584
Tested-by: CI
Reviewed-by: Franck Cuny <franck@fcuny.net>
|
|
Change-Id: Iea045c74a32dc26b9a39da79f49308a85ec237cc
Reviewed-on: https://cl.fcuny.net/c/world/+/446
Tested-by: CI
Reviewed-by: Franck Cuny <franck@fcuny.net>
|
|
Change-Id: Ie98ad07ac4de61fc25f9a9821fb5617d12ea5f70
Reviewed-on: https://cl.fcuny.net/c/world/+/442
Tested-by: CI
Reviewed-by: Franck Cuny <franck@fcuny.net>
|
|
I can now run `nix run .#ci.shellcheck` to validate the shell scripts
with shellcheck in the repository.
The pipeline in buildKite will need to be updated.
Change-Id: Ia52ede86adfa58c9615b0f9e290ef5d5b8adb303
Reviewed-on: https://cl.fcuny.net/c/world/+/409
Tested-by: CI
Reviewed-by: Franck Cuny <franck@fcuny.net>
|
|
Change-Id: Ifc199c19e80f0c4f6beb5d04d981580c8edaadf6
Reviewed-on: https://cl.fcuny.net/c/world/+/405
Tested-by: CI
Reviewed-by: Franck Cuny <franck@fcuny.net>
|
|
Add a script for CI to check that all the files are formatted correctly.
This is done by using `treefmt' with a configuration for go and nix
files (for now).
Running `nix run .#ci.fmt' in the repository will check all the files,
and fail if there's any problems. It will not modify any files.
The pipeline in builKite needs to be updated to run that command.
Change-Id: Iec91163f1ab56ceb0cfff6db8f8ce93367ebeefe
Reviewed-on: https://cl.fcuny.net/c/world/+/403
Tested-by: CI
Reviewed-by: Franck Cuny <franck@fcuny.net>
|
|
This was done by running `nixpkgs-fmt .'.
Change-Id: I4ea6c1e759bf468d08074be2111cbc7af72df295
Reviewed-on: https://cl.fcuny.net/c/world/+/404
Tested-by: CI
Reviewed-by: Franck Cuny <franck@fcuny.net>
|
|
NixOS 22.05 was released last month. Bump the versions for both nixos
and home-manager.
I also need to make a few changes for this update work (packages were
renamed, options were addded to tailscale, ...)
Change-Id: I84ed9f21915b769c9f7b8e21988b2b021715c982
Reviewed-on: https://cl.fcuny.net/c/world/+/365
Tested-by: CI
Reviewed-by: Franck Cuny <franck@fcuny.net>
|
|
Make the default system be x86-linux.
Change-Id: I13e00e4d4cb8b7c49cc549509e37a6d0f022a051
Reviewed-on: https://cl.fcuny.net/c/world/+/299
Reviewed-by: Franck Cuny <franck@fcuny.net>
|
|
Change-Id: If1e608b89b39bd5a53a37b873833a7ea881cb418
Reviewed-on: https://cl.fcuny.net/c/world/+/298
Reviewed-by: Franck Cuny <franck@fcuny.net>
|
|
This is not working as I want.
Change-Id: I5c2a96c77585b84fb68bcd661773a3056a0288f4
Reviewed-on: https://cl.fcuny.net/c/world/+/170
Reviewed-by: Franck Cuny <franck@fcuny.net>
|
|
Change-Id: Ib2792fa8c3f861d290f2495a10672cdfd11c48d9
|
|
Integrate properly the tool `dnsupdate` with flake.nix, by adding a
default.nix inside its directory.
Having all the tools under a directory named `tools` is easier to reason
about. I don't need a go.mod at the top level directory either, each
tool will have its own.
|
|
There's no need to have a flake.nix for the notes, we can use the same
mechanism as for the blog and resume.
Add a README so I remember how to use this in the future.
|
|
Integrate the resume with the rest of the repository, as I did for the
blog in the previous commit.
Added a script to copy the resume in the static directory of the blog.
|
|
There's no need to have multiple `flake.nix` in the repository. Make the
blog part of the flake configuration at the root level of the
repository, delete the one in the blog, and update the documentation.
|
|
Running `nix run .#dnsupdate` will execute the program to ensure the
configuration is correct.
|
|
This is not working great so far.
|
|
home-manager configuration is used as a module, we don't have two
different ways to configure the host anymore.
|
|
Install and configure some programs only on trusted machines. On trusted
machines, my mails, GPG and a few other things are configured. A machine
where this is not needed on a regular basis to get things done don't
need that much information.
Also rename `desktop/trust` to `trusted`, in case we want these packages
on a host that is not a desktop, and `trusted` is a better description.
|
|
The variable is used to define the kind of machine we're managing.
`isDesktop` is a bit more descriptive.
We import `devel` for all machines, and we fine tune which packages we
want to install based on the value of `isDesktop`.
|
|
I don't need this for now, as I've replace music-organizer with beets.
|
|
|
|
|
|
NUR is the nux user repository, which provides additional packages.
|
|
|
|
This will be used to store secrets in the repository.
|
|
aptos is my laptop (dell xps 13'). This adds the initial configuration
for it.
|
|
We need the community overlay to get the pure GTK port of Emacs for now.
|
|
|
|
|
|
|
|
I'm still struggling with documentation, and I'd rather have something
simple that works rather than smart and does not work.
The configuration for the host imports the modules that are relevant to
that host (in the case of carmel, desktop and systems).
For the home-manager, I create a profile "desktop" that contains stuff
related to a desktop (i3, etc), and it includes the module "common" that
contains stuff that I want on any machines (so that in the future, for
a machine that is a server, the home manager will only import "common").
|
|
Let's first configure the xserver in the desktop module, then we can
have a configuration for i3 in the home-manager.
|
|
This configuration is working, and I'm still unclear of how this is
supposed to be done correctly. Might need to iterate a few more times.
|
|
|
|
|
|
|
|
Initial configuration for the desktop (carmel).
|
