| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
| |
For machines with full disk encryption, we can remotely unlock them from
bree. A systemd timer will run every 10 minutes and check if we need to
unlock the host. If we need to, it will SSH and provide the passphrase
to unlock the disk(s).
|
| | |
|
| | |
|
| | |
|
| |
|
|
| |
This reverts commit 3b47113c28c5180d4d5d710e3c1fe74f95aa7226.
|
| | |
|
| | |
|
| |
|
|
|
| |
Enable the module on the VM, and backup the git repositories both to the
NAS and to a GCS bucket.
|
| |
|
|
|
|
|
|
|
|
| |
The new module is for NAS clients, where we specify the server and the
paths to mount locally.
We add a new secret to have the username of the `nas' user.
We mount the backups volume from the NAS under `/data/backups` on the
VM.
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
|
|
|
| |
The configuration for home-manager is set using `home-manager' directly,
instead of applying updates all at once (OS and home-manager).
|
| |
|
|
|
| |
Refactor a bit the configuration, which should simplify the management
and usage of secrets from now on.
|
| | |
|
| |
|
|
|
|
|
|
|
|
| |
All the modules that are needed for home-manager should be under
`home/`, and each host will have a `host.nix` where the modules are
enabled as needed. Later on we can create some profiles to make it
easier to consume the configuration.
I apply this only to tahoe for now, as the amount of packages needed for
my user are pretty limited.
|
| |
|
|
| |
Also install mosh and ensure the firewall opens the correct ports.
|
| | |
|
|
|
This is the start of yet another refactoring of the configuration.
Sound configuration is moving to a module, and we enable it as needed at
the host level. It takes care of configuring pipewire and install the
packages needed too.
This module is applied to the laptop and the desktop.
|