Simon Bruder
621d209680
sayuri: Add specialisation that disables mitigations
...
x264 encodes over 2 times faster in one example with mitigations
disabled.
2021-06-09 15:22:17 +02:00
Simon Bruder
56b9c6c37f
Add module for on-demand usage of mullvad
...
Since wg-quick does not require the configuration file to include a
private key and local addresses, they can be added after the execution
of wg-quick.
Fixes #32 .
2021-05-31 23:02:11 +02:00
Simon Bruder
091f6b0e14
Update to 21.05
...
This still uses the relase-21.05 branch which should later be changed to
nixos-21.05.
2021-05-28 14:04:53 +02:00
Simon Bruder
36c0c67e36
sayuri: Update specs in readme
2021-05-27 18:06:34 +02:00
Simon Bruder
ca2136ef04
sayuri: Allow discards on data ssd
2021-05-07 14:37:53 +02:00
Simon Bruder
d3ec5f4ba1
sayuri: Reinstall on NVMe ssd
2021-05-04 23:15:05 +02:00
Simon Bruder
400b55a293
Convert to flake
...
Fixes #3 .
2021-05-01 17:36:58 +02:00
Simon Bruder
7d19c9b039
sayuri: Use radeontop from unstable
2021-04-25 09:54:49 +02:00
Simon Bruder
bed82e297c
sayuri: Migrate to sops
...
Fixes #38 .
2021-04-10 11:58:50 +02:00
Simon Bruder
4a8a7e0a4f
Use sops for secrets
...
Since I currently do not have access to sayuri, sayuri’s migration is
not done yet. The host keys and wg-home-private-key secret still have to
be added.
2021-04-06 14:05:48 +02:00
Simon Bruder
d253f74a06
sayuri: Fill in purpose section of readme
...
Also, next time try to spell FIXME the right way so I don’t notice this
months after setting the machine up.
2021-04-05 13:38:33 +02:00
Simon Bruder
58c72c3200
Allow build on machines that are missing secrets
2021-03-21 11:36:14 +01:00
Simon Bruder
542a89ef57
sayuri: Add foldingathome specialisation
2021-03-06 15:32:18 +01:00
Simon Bruder
83f1c69713
restic/system: Constantly use system for naming
...
In the future I may create add other backup jobs, so it should be clear,
that this only backs up the system.
2021-02-28 12:22:43 +01:00
Simon Bruder
be7e67cf1f
wireguard/home: Make vueko central server
...
This also restructures the wireguard/home configuration, since now
better peer management is possible.
2021-02-20 19:57:04 +01:00
Simon Bruder
0ec1fb5257
Make aesni_intel module available on boot
...
This should increase LUKS performance significantly. In reality,
however, it doesn’t work that well. The difference of raw vs encrypted
block device speed still ist ~ 100 MiB/s. Even more confusing is that
nunotaba’s Intel DC SSD only manages ~ 350 MiB/s **without** encryption.
2021-02-17 15:33:10 +01:00
Simon Bruder
474cc7d0f7
sayuri: Disable docker
2021-02-11 14:11:30 +01:00
Simon Bruder
a02d3cb883
Use separate state version for every machine
...
This also uses the system state version as the home-manager state
version.
Fixes #35 .
2021-01-31 12:21:05 +01:00
Simon Bruder
241bc188cb
sayuri: Use performance scaling governor
...
That machine is not very energy efficient anyway.
2021-01-29 15:54:59 +01:00
Simon Bruder
05a72217aa
Use nixos-hardware for hardware configuration
...
This removes the manual modules that use options to activate hardware
configuration. It seems to general (e.g. newer Intel GPUs require
different opencl icd) or not flexible enough (in case of the ssd
module).
Closes #21 .
2021-01-29 15:50:16 +01:00
Simon Bruder
d8b8e5de93
libvirt: Remove custom option
2021-01-20 16:31:59 +01:00
Simon Bruder
21a8f5a358
Make docker optional
2021-01-17 19:32:01 +01:00
Simon Bruder
7152112076
home/games: Add module and option
2021-01-07 18:29:18 +01:00
Simon Bruder
131d0cc1a5
Add options for unfree software and assets
2021-01-03 17:11:22 +01:00
Simon Bruder
cb913a9b00
Add media-proxy
...
This also adds secrets management for nginx. It is far from perfect
(e.g. nginx does not get reloaded when a secret changes).
2020-12-31 15:44:24 +01:00
Simon Bruder
e6b770875c
nunotaba,sayuri: Add tor client
2020-12-31 12:55:20 +01:00
Simon Bruder
b435e1a182
restic: Parameterise extra paths and excludes
2020-12-21 13:09:25 +01:00
Simon Bruder
c63305cb6b
Restructure krops deployments
2020-12-17 09:50:26 +01:00
Simon Bruder
903041b6e1
Use pass for secrets management
...
Fixes #4
2020-12-13 17:57:08 +01:00
Simon Bruder
f53b777a7e
Use krops for deployments
2020-12-12 16:12:38 +01:00
Simon Bruder
61e61f0908
Reorganise hardware configuration
...
Fixes #6 .
2020-12-06 13:58:48 +01:00
Simon Bruder
b6bc87a6ee
Reformat hardware configuration
2020-12-06 13:58:47 +01:00
Simon Bruder
acc9940043
Remove dev profile
...
Profiles are deprecated in favour of options.
For rust development, use nix-shell instead.
2020-12-05 16:09:10 +01:00
Simon Bruder
fca069698a
Reformat imports in configuration.nix
2020-12-05 16:05:26 +01:00
Simon Bruder
73021c1a94
Parameterise cpu config
2020-12-05 16:00:34 +01:00
Simon Bruder
76bd3a4bc8
Parameterise gpu config
2020-12-05 15:57:23 +01:00
Simon Bruder
9b22c91170
config.sbruder.gui → config.sbruder.gui.enable
2020-12-05 15:44:58 +01:00
Simon Bruder
a23c3801cb
Parameterise libvirt
2020-12-05 15:40:54 +01:00
Simon Bruder
ab39c6035c
Parameterise ssd module
2020-12-05 15:40:49 +01:00
Simon Bruder
74ddf83617
Parameterise wireguard
2020-12-05 15:40:44 +01:00
Simon Bruder
8a63f8aac4
Parameterise restic
2020-12-05 15:40:31 +01:00
Simon Bruder
6d0f3a9964
Reorganise profiles/options
2020-12-05 14:43:01 +01:00
Simon Bruder
6a2a9c48bc
Make gui global option
2020-12-05 13:48:06 +01:00
Simon Bruder
3191c9119f
user: base.nix → default.nix
2020-11-07 19:22:33 +01:00
Simon Bruder
5c56bcb727
Add sayuri
2020-10-17 23:18:22 +02:00