chayleaf/dotfiles
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
my dotfiles
212 commits 2 branches 0 tags 10 MiB
Nix 88.2%
Python 6.5%
Rust 4.2%
Shell 0.7%
CSS 0.4%
Find a file
chayleaf 7eb2ffd0a0
gpg-agent: fix pinentry 
for some reason I started getting the following error without this fix:
sign_and_send_pubkey: signing failed for ED25519 ... from agent: agent
refused operation
2024-02-06 14:31:23 +07:00
home gpg-agent: fix pinentry 2024-02-06 14:31:23 +07:00
pkgs update inputs 2024-01-30 19:39:14 +07:00
system router: misc dnat changes 2024-02-01 07:33:12 +07:00
.gitignore add Radxa Rock 5A; update inputs 2023-10-08 04:41:50 +07:00
COPYING COPYING: properly write out 0BSD 2023-10-19 19:30:48 +07:00
default.nix bpi-r3: more work on booting 2023-06-11 18:02:38 +07:00
extra-builtins.nix flake/secrets: move from /etc/nixos/private to /secrets/nixos 2023-12-25 04:18:03 +07:00
flake.lock server: fix mailserver 2024-01-30 23:01:09 +07:00
flake.nix server: fix mailserver 2024-01-30 23:01:09 +07:00
lib.nix massive cleanup 2023-12-18 08:48:49 +07:00
overlays.nix update inputs 2024-01-30 19:39:14 +07:00
private.nix.sample server/certspotter: check tbs instead of pubkey 2023-10-26 02:02:48 +07:00
push.sh store secrets separate from this flake 2023-05-26 00:46:38 +07:00
README.md store secrets separate from this flake 2023-05-26 00:46:38 +07:00
update.sh store secrets separate from this flake 2023-05-26 00:46:38 +07:00

README.md

My Nix config

Home-manager config and modules are in ./home, NixOS config and modules are in ./system.

Secrets are fetched using a nix plugin at evaluation time to avoid using --impure. I plan to implement a more robust secrets system later though.

To install, simply run nixos-rebuild switch --flake . --option extra-builtins-file $(pwd)/extra-builtins.nix and home-manager switch --flake . --option extra-builtins-file $(pwd)/extra-builtins.nix, since this repo relies on build-time decryption of secrets using a Nix plugin (to be fair you won't be able to use it since you don't have the secrets, such as initial root password). If you don't have nix-plugins though, you can put the secrets in plaintext to /etc/nixos/private and add --impure flag to bootstrap the config.