Commit Graph

475 Commits (4a8a7e0a4f3ecf18b6085cae3f910c3bd270e2e9)

Author SHA1 Message Date
Simon Bruder 4a8a7e0a4f
Use sops for secrets
Since I currently do not have access to sayuri, sayuri’s migration is
not done yet. The host keys and wg-home-private-key secret still have to
be added.
2021-04-06 14:05:48 +02:00
Simon Bruder b595aceb7c
initrd-ssh: Treat host-key as state
This also removes the explicit passing of the public key fingerprint to
the unlock script, since the host key is no longer available in pass.
Unlocking still works, since the keys are configured in modules/ssh.nix.
2021-04-06 11:45:04 +02:00
Simon Bruder aaaeb56f18
git: Add sops diff textconv 2021-04-06 11:36:08 +02:00
Simon Bruder 41f8d468b6
restic/system: Include /root and /etc 2021-04-06 10:47:05 +02:00
Simon Bruder a102f691a6
tools: Add ssh-to-pgp 2021-04-06 10:21:48 +02:00
Simon Bruder d253f74a06
sayuri: Fill in purpose section of readme
Also, next time try to spell FIXME the right way so I don’t notice this
months after setting the machine up.
2021-04-05 13:38:33 +02:00
Simon Bruder 5c4284d68c
fuuko: Add dnsmasq prometheus exporter 2021-04-05 13:18:43 +02:00
Simon Bruder 6f20d6300d
programs: Use unstable streamlink
Stramlink from 20.09 does not work (at least for low-latency twitch).
2021-04-05 11:50:31 +02:00
Simon Bruder d9a04d1f60
Update sources 2021-04-05 10:17:00 +02:00
Simon Bruder 97974a9616
programs: Add streamlink 2021-04-04 16:00:14 +02:00
Simon Bruder 4e3c1ad6fa
Update sources 2021-04-04 15:49:02 +02:00
Simon Bruder 3b96a823ee
programs: Use (lib)qalculate(-gtk) from unstable
In 20.09’s version currency conversion is broken.
2021-04-04 15:46:35 +02:00
Simon Bruder c26539e607
fuuko/prometheus: Actually show node name in alerts 2021-04-04 14:34:44 +02:00
Simon Bruder 37f95b3d79
ssh: Add global known hosts
Fixes #47.
2021-04-04 11:29:31 +02:00
Simon Bruder 1b08afd515
fuuko/gitea: Also use ed25519 ssh key 2021-04-04 11:18:34 +02:00
Simon Bruder 0212f2adbd
fuuko/drone: Init 2021-04-03 18:47:01 +02:00
Simon Bruder ac7e1c1123
fuuko/dnsmasq: Use DNS over TLS via stubby 2021-04-03 13:11:09 +02:00
Simon Bruder 891697f80c
programs: Add dog 2021-04-03 13:02:21 +02:00
Simon Bruder e186893654
Update sources 2021-04-03 11:37:54 +02:00
Simon Bruder ce7425d8c4
Remove issei from vpn and prometheus 2021-04-02 18:13:09 +02:00
Simon Bruder 94b2746018
fuuko/go-neb: Add alertmanager matrix receiver 2021-04-02 17:46:07 +02:00
Simon Bruder 2897451a65
fuuko/prometheus: Set external URLs 2021-04-02 16:44:17 +02:00
Simon Bruder 8b1b969aa9
fuuko: Set target to production hostname 2021-04-02 15:10:14 +02:00
Simon Bruder 98a4f345eb
fuuko/matrix/mautrix-whatsapp: Init 2021-04-02 15:09:57 +02:00
Simon Bruder 0ae96653a5
fuuko/matrix/synapse: Init 2021-04-02 14:59:14 +02:00
Simon Bruder 3b6a9dfc40
Update sources 2021-04-02 10:11:33 +02:00
Simon Bruder 6459a2a7ef
fzf: Add better default commands and options 2021-04-01 14:43:16 +02:00
Simon Bruder b6297d0153
vueko/coturn: Init 2021-03-31 12:08:35 +02:00
Simon Bruder bc2851de6b
programs: Replace pdfsam with pdfarranger 2021-03-31 10:02:10 +02:00
Simon Bruder 9be9148da8
zsh/pass-wrappers: Remove unnecessary functions
I no longer host a docker registry or minio server.
2021-03-30 23:53:20 +02:00
Simon Bruder 15075a818d
installation: Remove FIXME from comments
Otherwise grepping for FIXME shows this, even though it’s not what you
expect.
2021-03-30 23:49:08 +02:00
Simon Bruder 2d74dac8c0
fuuko/hedgedoc: Start after postgresql 2021-03-30 16:13:20 +02:00
Simon Bruder a32b45ebb7
Update sources 2021-03-30 10:06:52 +02:00
Simon Bruder e94c72e42e
Add open ports for quick tests 2021-03-29 22:26:10 +02:00
Simon Bruder 1521f10806
waybar: Do not print status on mpc invocation 2021-03-29 16:20:24 +02:00
Simon Bruder 50f0968738
fuuko: Add gitea 2021-03-29 14:08:53 +02:00
Simon Bruder 5491ef4817
vueko/mailserver: Add gitea user 2021-03-29 13:48:10 +02:00
Simon Bruder 2484140e59
Update sources 2021-03-29 12:53:57 +02:00
Simon Bruder a7ad88a5ec
Include unstable channel as overlay
This allows nix cli tools to access unstable from niv’s pinned rev
(instead of having to rely on uncached and unpinned
channel:nixos-unstable). Also packageOverrides might get
deprecated/removed[1] eventually.

[1]: https://github.com/NixOS/nixpkgs/issues/43266
2021-03-29 12:03:58 +02:00
Simon Bruder cb8a8f3c8d
fuuko/prometheus: Enable admin API 2021-03-28 11:04:48 +02:00
Simon Bruder 55099f1884
fuuko/prometheus: Raise retention time to 90d 2021-03-28 11:04:25 +02:00
Simon Bruder c8b7a9c8e9
gui: Install adwaita icons system-wide 2021-03-27 13:22:34 +01:00
Simon Bruder c1992958bf
media-proxy: Start after network is online 2021-03-27 12:45:43 +01:00
Simon Bruder 90c2ab9d0a
Update sources 2021-03-26 21:40:33 +01:00
Simon Bruder 9f8c80029d
vueko/mailserver: Add aliases 2021-03-26 19:40:20 +01:00
Simon Bruder aa6458f4bf
ytcc: Init 2021-03-25 13:57:26 +01:00
Simon Bruder 57de9427ea
Update sources 2021-03-25 13:42:59 +01:00
Simon Bruder d2ee32fdb1
Update sources 2021-03-22 20:57:48 +01:00
Simon Bruder fa1c274248
mpv: Update FSRCNNX x2
This also changes the model to 8-0-4-1 (new upstream default). Since
upstream replaced the old model on GitHub releases instead of adding a
new release, previous generations that don’t have the old model cached
won’t build anymore.
2021-03-22 08:31:51 +01:00
Simon Bruder 5e8fb02b78
vueko/mail: Add alias 2021-03-21 11:53:47 +01:00