chayleaf/dotfiles
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
my dotfiles
133 commits 2 branches 0 tags 10 MiB
Nix 88.2%
Python 6.5%
Rust 4.2%
Shell 0.7%
CSS 0.4%
Find a file
chayleaf 4f650b2091 router: small port 25 changes 
technically this is relevant for security since it blocks requests to
port 25 over ipv6 from clients other than the server, but it doesn't
matter on my network because i don't have ipv6
2023-08-13 16:40:21 +07:00
home nix: 2.16->2.15; home/fish/atuin: remove up key binding 2023-08-04 08:30:16 +07:00
pkgs router: fix mailserver 2023-08-13 04:59:20 +07:00
system router: small port 25 changes 2023-08-13 16:40:21 +07:00
.gitignore gitignore: add /result 2023-06-24 13:19:00 +07:00
COPYING add system76 scheduler+other system config changes 2023-01-24 15:42:51 +07:00
default.nix bpi-r3: more work on booting 2023-06-11 18:02:38 +07:00
extra-builtins.nix don't put private files to store by default 2023-05-26 01:38:17 +07:00
flake.lock router: mss clamping 2023-08-09 23:43:17 +07:00
flake.nix router: mss clamping 2023-08-09 23:43:17 +07:00
overlays.nix update inputs; bpi-r3: build kernel from source 2023-06-11 21:48:35 +07:00
private.nix.sample don't put private files to store by default 2023-05-26 01:38:17 +07:00
push.sh store secrets separate from this flake 2023-05-26 00:46:38 +07:00
README.md store secrets separate from this flake 2023-05-26 00:46:38 +07:00
update.sh store secrets separate from this flake 2023-05-26 00:46:38 +07:00

README.md

My Nix config

Home-manager config and modules are in ./home, NixOS config and modules are in ./system.

Secrets are fetched using a nix plugin at evaluation time to avoid using --impure. I plan to implement a more robust secrets system later though.

To install, simply run nixos-rebuild switch --flake . --option extra-builtins-file $(pwd)/extra-builtins.nix and home-manager switch --flake . --option extra-builtins-file $(pwd)/extra-builtins.nix, since this repo relies on build-time decryption of secrets using a Nix plugin (to be fair you won't be able to use it since you don't have the secrets, such as initial root password). If you don't have nix-plugins though, you can put the secrets in plaintext to /etc/nixos/private and add --impure flag to bootstrap the config.