summaryrefslogtreecommitdiff
path: root/phenex
Commit message (Collapse)AuthorAge
* phenex: override GC windowKenny Ballou2020-11-20
| | | | | | Only keep 7 days of cache. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* use user package for gpg-agentKenny Ballou2020-10-23
| | | | | | | The system version is older than the user version since the system is tracking the stable branch. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* system/nix: add some nix configurationsKenny Ballou2020-10-23
| | | | | | | enable automatic garbage collection and add wheel users to trusted nix users. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* Allow unfreeKenny Ballou2020-10-14
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* firewall: add irc portKenny Ballou2020-08-10
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* phenex: use gnome with x11Kenny Ballou2020-06-30
| | | | | | | Switch to gnome for consistency. Use X11 since the performance of wayland is not superb on this machine. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* phenex: add gpgcard support for encrypted rootKenny Ballou2020-06-06
| | | | | | | | Similar to 94677d9 ("eligos: add gpgcard support for encrypted drives", Fri Jun 5 07:20:25 2020 -0600), add gpgcard support for unlocking the encrypted root device before booting. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* services: x11: set specific video driversKenny Ballou2020-05-23
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* phenex: remove redshift serviceKenny Ballou2020-05-17
| | | | | | | | | Rounding out the updates similar to a197c85 ("orobas: remove redshift service", Wed May 13 12:02:37 2020 -0600) and f342c07 ("eligos: remove redshift service.", Thu May 14 00:41:23 2020 -0600), remove redshift from phenex. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* move gnupg and mtr configuration into `programs`Kenny Ballou2020-05-14
| | | | | | | | | | | The configurations for these applications was done in the root file for each machine. This led to issues where each machine had different behaviour, specifically, when it came to changes in GnuPG were introduced after upgrading to 20.03. By moving these common configurations into a separate file, each machine can be sure to have similar configurations. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* Move i18n settings to consoleKenny Ballou2020-05-12
| | | | | | keymap and font have been renamed in 20.03. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* services: add redshiftKenny Ballou2020-04-13
| | | | | | At least until wayland lands. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* services: remove syncthingKenny Ballou2020-02-26
| | | | | | This isn't really working as well as I would like for now. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* firewalls: add xmpp port outboundKenny Ballou2020-02-09
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* services: syncthing: initial service configurationKenny Ballou2020-01-29
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* phenex: enable bluetoothKenny Ballou2020-01-24
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* firewall rules: allow all output ports to localhostKenny Ballou2020-01-21
| | | | | | | | | Instead of explicitly adding rules for every possible service that is only available from localhost, add a rule that catches all local bound traffic and accept. It may seem this is unncessary, however, since the default policy for out-bound is drop, it turns out to be very necessary. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* phenex: nft: fix error in forward rulesKenny Ballou2020-01-16
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* phenex: add host specific firewall rulesKenny Ballou2020-01-15
| | | | | | | This is essentially the same set as the orobas rules, however, device names are slightly different. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* phenex: add dbus configurationKenny Ballou2020-01-05
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* phenex: remove compton serviceKenny Ballou2020-01-05
| | | | | | This conflicts with KDE. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* add new system/security moduleKenny Ballou2019-11-18
| | | | | | Simply flip the hide process information security knob for now. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* phenex: module blacklist iptablesKenny Ballou2019-11-18
| | | | | | | This may be an eaiser alternative to attempting to compile out `iptables` (as was done on Gentoo machines). Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* phenex: use generated hardware-configurationKenny Ballou2019-10-30
| | | | | | | | | | | | Move boot-loader customizations out of saved `hardware-configuration.nix` and into main configuration file. Remove saved `hardware-configuration.nix` and use the generated one. When adding another volume from LVM, the new generation's `/etc/fstab` did not have the new entries. By removing the saved copy and relying on the generated copy, the ease of configuration and future changes is simplified considerably. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* phenex: add printing configurationKenny Ballou2019-09-19
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* system: add documentation configurationKenny Ballou2019-08-14
| | | | | | Enable all the documentation. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* system: add wireshark global configurationKenny Ballou2019-07-10
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* phenex: update hardware UUIDsKenny Ballou2019-06-05
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* Use relative paths for importsKenny Ballou2019-06-05
| | | | | | | Revert 7654882 ("use absolute paths for imports", Fri May 3 15:32:09 2019 -0600) since this will not work when initiating new installations. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* add system/fonts overlays/fontsKenny Ballou2019-05-06
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* use absolute paths for importsKenny Ballou2019-05-03
| | | | | | | | Hard linking configuration files was not reliably working for propagating changes back and forth between the host local link and the subfolder'ed file that is tracked. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* machines: add overlaysKenny Ballou2019-05-02
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* phenex: add system/caKenny Ballou2019-05-02
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* phenex: add docker serviceKenny Ballou2019-05-01
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* nix: initial configurationsKenny Ballou2019-05-01
Add an initial set of configurations as well as configurations for the `phenex` machine. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>