noah/dotfiles
1
0
Fork 0
mirror of https://github.com/nmasur/dotfiles synced 2025-03-14 21:37:04 +00:00
Code Issues Packages Projects Releases Wiki Activity

fixes for flame server

Browse Source
This commit is contained in:
Noah Masur 2025-03-08 01:31:42 +00:00
parent dd95c94b6e
commit 1276bcf19e
No known key found for this signature in database
14 changed files with 20 additions and 31 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
hosts-by-platform/aarch64-linux/flame/default.nix
View File

@ -11,23 +11,6 @@ rec {
nmasur.settings = { nmasur.settings = {
username = "noah"; username = "noah";
fullName = "Noah Masur"; fullName = "Noah Masur";
# hostnames =
# let
# baseName = "masu.rs";
# in
# {
# budget = "money.${baseName}";
# git = "git.${baseName}";
# influxdb = "influxdb.${baseName}";
# irc = "irc.${baseName}";
# metrics = "metrics.${baseName}";
# minecraft = "minecraft.${baseName}";
# n8n = "n8n.${baseName}";
# notifications = "ntfy.${baseName}";
# prometheus = "prom.${baseName}";
# secrets = "vault.${baseName}";
# status = "status.${baseName}";
# };
}; };
nmasur.profiles = { nmasur.profiles = {

2
platforms/home-manager/modules/nmasur/profiles/developer.nix
View File

@ -15,7 +15,7 @@ in
config = lib.mkIf cfg.enable { config = lib.mkIf cfg.enable {
home.packages = lib.mkDefault [ home.packages = [
pkgs.pgcli # Postgres client with autocomplete pkgs.pgcli # Postgres client with autocomplete
]; ];

2
platforms/home-manager/modules/nmasur/profiles/experimental.nix
View File

@ -15,7 +15,7 @@ in
config = lib.mkIf cfg.enable { config = lib.mkIf cfg.enable {
home.packages = lib.mkDefault [ home.packages = [
# Charm tools # Charm tools

2
platforms/home-manager/modules/nmasur/profiles/linux-gaming.nix
View File

@ -19,7 +19,7 @@ in
wine.enable = lib.mkDefault true; wine.enable = lib.mkDefault true;
}; };
home.packages = lib.mkDefault [ home.packages = [
pkgs.heroic pkgs.heroic
]; ];

2
platforms/home-manager/modules/nmasur/profiles/power-user.nix
View File

@ -12,7 +12,7 @@ in
options.nmasur.profiles.power-user.enable = lib.mkEnableOption "power user home-manager config"; options.nmasur.profiles.power-user.enable = lib.mkEnableOption "power user home-manager config";
config = lib.mkIf cfg.enable { config = lib.mkIf cfg.enable {
home.packages = lib.mkDefault [ home.packages = [
pkgs.age # Encryption pkgs.age # Encryption
pkgs.bc # Calculator pkgs.bc # Calculator
pkgs.delta # Fancy diffs pkgs.delta # Fancy diffs

4
platforms/nix-darwin/modules/nmasur/profiles/base.nix
View File

@ -19,10 +19,10 @@ in
homebrew = lib.mkDefault true; homebrew = lib.mkDefault true;
}; };
homebrew.brews = lib.mkDefault [ homebrew.brews = [
"trash" # Delete files and folders to trash instead of rm "trash" # Delete files and folders to trash instead of rm
]; ];
homebrew.casks = lib.mkDefault [ homebrew.casks = [
"scroll-reverser" # Different scroll style for mouse vs. trackpad "scroll-reverser" # Different scroll style for mouse vs. trackpad
"notunes" # Don't launch Apple Music with the play button "notunes" # Don't launch Apple Music with the play button
]; ];

2
platforms/nix-darwin/modules/nmasur/profiles/extra.nix
View File

@ -16,7 +16,7 @@ in
nmasur.profiles.base.enable = lib.mkDefault true; nmasur.profiles.base.enable = lib.mkDefault true;
homebrew.casks = lib.mkDefault [ homebrew.casks = [
"keybase" # GUI on Nix not available for macOS "keybase" # GUI on Nix not available for macOS
]; ];

2
platforms/nix-darwin/modules/nmasur/profiles/gaming.nix
View File

@ -16,7 +16,7 @@ in
nmasur.profiles.base.enable = lib.mkDefault true; nmasur.profiles.base.enable = lib.mkDefault true;
homebrew.casks = lib.mkDefault [ homebrew.casks = [
"steam" # Not packaged for Nixon macOS "steam" # Not packaged for Nixon macOS
"epic-games" # Not packaged for Nix "epic-games" # Not packaged for Nix
]; ];

3
platforms/nixos/modules/nmasur/presets/services/actualbudget.nix
View File

@ -24,6 +24,9 @@ in
virtualisation.podman.enable = true; virtualisation.podman.enable = true;
# Create a shared group for generic services
users.groups.shared = { };
users.users.actualbudget = { users.users.actualbudget = {
isSystemUser = true; isSystemUser = true;
group = "shared"; group = "shared";

2
platforms/nixos/modules/nmasur/presets/services/caddy.nix
View File

@ -50,7 +50,7 @@ in
config = lib.mkIf cfg.enable { config = lib.mkIf cfg.enable {
# Force Caddy to 403 if not coming from allowlisted source # Force Caddy to 403 if not coming from allowlisted source
nmasur.presets.services.caddy.cidrAllowlist = lib.mkDefault [ "127.0.0.1/32" ]; nmasur.presets.services.caddy.cidrAllowlist = [ "127.0.0.1/32" ];
nmasur.presets.services.caddy.routes = lib.mkBefore [ nmasur.presets.services.caddy.routes = lib.mkBefore [
{ {
match = [ { not = [ { remote_ip.ranges = cfg.cidrAllowlist; } ]; } ]; match = [ { not = [ { remote_ip.ranges = cfg.cidrAllowlist; } ]; } ];

2
platforms/nixos/modules/nmasur/presets/services/restic.nix
View File

@ -44,7 +44,7 @@ in
services.restic.backups = { services.restic.backups = {
default = { default = {
repository = "s3:${cfg.endpoint}/${cfg.s3.bucket}/restic"; repository = "s3:${cfg.s3.endpoint}/${cfg.s3.bucket}/restic";
paths = [ ]; paths = [ ];
environmentFile = config.secrets.restic-s3-creds.dest; environmentFile = config.secrets.restic-s3-creds.dest;
passwordFile = config.secrets.restic.dest; passwordFile = config.secrets.restic.dest;

2
platforms/nixos/modules/nmasur/profiles/base.nix
View File

@ -31,7 +31,7 @@ in
# Create a home directory for human user # Create a home directory for human user
isNormalUser = lib.mkDefault true; isNormalUser = lib.mkDefault true;
extraGroups = lib.mkDefault [ extraGroups = [
"wheel" # Sudo privileges "wheel" # Sudo privileges
]; ];
}; };

4
platforms/nixos/modules/nmasur/profiles/gui.nix
View File

@ -21,7 +21,7 @@ in
# Mouse customization # Mouse customization
services.ratbagd.enable = lib.mkDefault true; services.ratbagd.enable = lib.mkDefault true;
environment.systemPackages = lib.mkDefault [ environment.systemPackages = [
pkgs.libratbag # Mouse adjustments pkgs.libratbag # Mouse adjustments
pkgs.piper # Mouse adjustments GUI pkgs.piper # Mouse adjustments GUI
pkgs.ddcutil # Monitor brightness control pkgs.ddcutil # Monitor brightness control
@ -57,7 +57,7 @@ in
users.users.${username} = { users.users.${username} = {
# Grant main user access to external monitors # Grant main user access to external monitors
extraGroups = lib.mkDefault [ "i2c" ]; extraGroups = [ "i2c" ];
# Automatically create a password to start # Automatically create a password to start
hashedPassword = lib.mkDefault (lib.fileContents ../../../../../misc/password.sha512); hashedPassword = lib.mkDefault (lib.fileContents ../../../../../misc/password.sha512);

5
platforms/nixos/modules/nmasur/profiles/server.nix
View File

@ -16,7 +16,10 @@ in
networking.firewall.allowPing = lib.mkDefault true; networking.firewall.allowPing = lib.mkDefault true;
nmasur.presets.services.openssh.enable = lib.mkDefault true; nmasur.presets.services = {
openssh.enable = lib.mkDefault true;
restic.enable = lib.mkDefault true;
};
# Implement a simple fail2ban service for sshd # Implement a simple fail2ban service for sshd
services.sshguard.enable = lib.mkDefault true; services.sshguard.enable = lib.mkDefault true;