simon/nixos-config
simon/nixos-config
1
1
Fork 0
Code Issues 8 Pull requests Actions Projects Activity
1722 commits 18 branches 0 tags 8 MiB
Commit graph

147 commits

Author SHA1 Message Date
Simon Bruder 7d23321c0f
cups: Restructure to include SII SLP 650 2024-07-19 11:36:06 +02:00
Simon Bruder ecc2065201
smartctl_exporter: Add 2024-06-01 13:58:01 +02:00
Simon Bruder 013511c1c9
sops: Switch to new PGP key 2024-01-22 17:32:02 +01:00
Simon Bruder 10b8d432d5
Relicense 
This applies the REUSE specification to the repository, so the licensing
information can be tracked for every file individually.
 2024-01-13 14:39:22 +01:00
Simon Bruder 9995ff511e
restic/system: Prune on renge 
Because of fuuko’s very slow link, the prune had not been successful for
a whole quarter. Now that renge has more RAM, it can finally run the
prune without having to worry about OOM.
 2024-01-10 21:27:42 +01:00
Simon Bruder 80fcaab244
nginx: Make recommended settings global 2023-12-16 10:19:20 +01:00
Simon Bruder 816004e80b
restic: Use QoS instead of uploadLimit 
This implements a crude mechanism for signalling my router to add the
packets to its own qdisc.

The way in which this is implemented with nftables is hacky because of
NixOS’ limitations on build-time checking (which obviously can’t know
about the existence of cgroups on the target).
 2023-10-07 22:49:47 +02:00
Simon Bruder afc9013506
shinobu/router: Implement QoS using HTB 
This is an initial implementation and probably still needs tuning.
 2023-10-07 22:49:26 +02:00
Simon Bruder 7b836dd65b
Drastically lower restic upload limit 
Welcome in the year 2023, where it apparently is acceptable to offer
internet connectivity with not even 5 Mbit/s upload speed.
 2023-10-04 23:42:00 +02:00
Simon Bruder 0d92c932ed
fuuko/photoprism: Make reachable from outside 
This is not that good, because if I am at home, I want to have a fast
connection without routing everything through the Internet first. I
currently work around this by using an ssh tunnel for this.
 2023-08-19 17:30:52 +02:00
Simon Bruder 49149fa1d4
fuuko/photoprism: Init 2023-08-18 22:17:02 +02:00
Simon Bruder 7f2ed58e19
fuuko: Do DHCP on both interfaces 2023-08-12 15:32:12 +02:00
Simon Bruder bb0b66d9c1
fuuko: Add r8169 to initrd modules 
This allows unlocking with the onboard NIC.
 2023-08-08 15:32:00 +02:00
Simon Bruder 0a33de244f
fuuko/qbittorrent: Switch endpoint 2023-07-03 11:46:28 +02:00
Simon Bruder 3df0ddcc27
shinobu/co2_exporter: Migrate from fuuko 2023-07-01 13:14:32 +02:00
Simon Bruder 1b44e31627
shinobu: Init 2023-07-01 12:37:12 +02:00
Simon Bruder 472ff64011
fuuko: Add SSD for hot storage 
Adding a new PCIe device changes the names of the network interfaces, so
they need to be adapted.
 2023-06-28 23:13:57 +02:00
Simon Bruder 4a182ff522
fuuko: Make co2 exporter more reliable 
This also “fixes” a typo in the variable name.
 2023-06-28 12:53:29 +02:00
Simon Bruder c3afd14f8a
fuuko/router: Switch wg-mullvad endpoint 2023-06-23 17:15:06 +02:00
Simon Bruder b135035baa
fuuko/router: Migrate dnsmasq options to 23.05 2023-06-01 19:54:25 +02:00
Simon Bruder 764834c16f
fuuko/router: Change mullvad peer 2023-05-25 20:08:04 +02:00
Simon Bruder 52dab514ca
fuuko: Use additional NIC instead of VLANs 2023-04-15 18:08:46 +02:00
Simon Bruder 9c5da77efc
fuuko: Note router/AP in readme 2023-04-08 18:45:14 +02:00
Simon Bruder 5cd4845dbf
fuuko/router: Add wireless AP 
It is anything but great, though I will try to find a better solution
for this.
 2023-04-05 10:11:39 +02:00
Simon Bruder 7c0ccbbd6a
fuuko/router: Use bridge for lan 2023-04-05 10:11:39 +02:00
Simon Bruder 67dabb0de5
fuuko: Note that remote unlocking is broken 2023-04-02 12:16:00 +02:00
Simon Bruder 68cc1d32d4
fuuko/router: Add static record for switch 2023-04-02 12:00:19 +02:00
Simon Bruder 444aa962b5
fuuko: Add router service 
This now mostly replaces ayu, which has been sitting between upstream
and the switch the last 6 months.

It now also configures routing over Mullvad, which also finally enables
IPv6 (I don’t understand how people get away with not providing it
natively in 2023).

Once I get a WLAN card, it will also host its own access point, which
currently still relies on ayu as “dumb AP” (as OpenWRT calls it).
 2023-04-02 01:14:01 +02:00
Simon Bruder a6af0f92b4
fuuko: Note GPU change in README 2023-04-02 00:17:23 +02:00
Simon Bruder e81cbc6539
fuuko/languagetool: Init 2023-03-09 21:21:13 +01:00
Simon Bruder f1b1eafe38
fuuko: Enable gigabyte_wmi sensors 2023-02-22 17:02:19 +01:00
Simon Bruder af65610fdd
fuuko: Enable udisks2 2023-02-22 17:02:18 +01:00
Simon Bruder 801b9db7a1
fuuko: Note blu-ray burner in readme 
It has been in there for some time, but was not noted in the readme.
 2023-02-21 21:33:20 +01:00
Simon Bruder a984f1bb04
fuuko: Move into better case 2023-02-21 21:33:20 +01:00
Simon Bruder fd3bb4284b
Add prometheus co2 exporter 2022-11-03 16:40:05 +01:00
Simon Bruder aaaf7d3ccc
Move Blu-ray drive from sayuri to fuuko 
This removes makemkv-specific configuration from sayuri and adds it to
fuuko. It also changes the makemkv sandbox to now hardcode fuuko’s
configuration.
 2022-10-15 23:27:12 +02:00
Simon Bruder f527e08fdf
fuuko/qbittorrent: Change wireguard config 2022-10-14 23:47:35 +02:00
Simon Bruder c0b743a65b
fuuko: Configure to work on-demand 
This is so I can only enable it when I don’t mind it generating tons of
noise.
 2022-10-07 22:20:29 +02:00
Simon Bruder 41da6fe13f
fuuko/fritzbox-exporter: Drop 2022-09-30 11:36:14 +02:00
Simon Bruder 2a5c666631
fuuko/wordclock-dimmer: Migrate to renge 2022-09-30 11:33:20 +02:00
Simon Bruder 712aeca8c4
fuuko: Update GPU in README 2022-09-24 19:30:01 +02:00
Simon Bruder 47d202ef90
fuuko: Move to new platform 
The move already occurred on Tuesday, but I was too lazy to commit it.
 2022-09-17 12:02:14 +02:00
Simon Bruder 78564e6ef4
fuuko: Adjust README to its current purpose 2022-09-12 21:02:14 +02:00
Simon Bruder d508543c3c
fuuko: Disable DHCP and DNS server 
This is now the main router’s job.
 2022-09-12 20:54:59 +02:00
Simon Bruder eeb8f25453
fuuko/scan: Drop 2022-09-12 20:34:52 +02:00
Simon Bruder e31c264c92
restic: Do not limit upload by default 
This allows servers that have a fast internet connection to complete
their backup in seconds instead of minutes.
 2022-08-25 23:22:17 +02:00
Simon Bruder 4e78d87bde
restic: Use storage box and restic-rest-server 
While this setup complicates things, it also should protect me against
(malicious) deletion of old backups.
 2022-08-25 23:12:42 +02:00
Simon Bruder 7a7c90f9f9
vueko/media: Init 
This also changes fuuko/media to no longer take the htpasswd file from a
file locally stored on fuuko, but rather defines it in sops to be usable
by all systems.
 2022-08-22 16:32:26 +02:00
Simon Bruder 22d017999f
syncthing: Init 2022-07-08 11:51:04 +02:00
Simon Bruder 67b30a52af
Remove private binary cache 
I don’t actually use it and it adds complexity to installing new
machines.
 2022-06-10 00:03:03 +02:00