summaryrefslogtreecommitdiff
path: root/services
Commit message (Collapse)AuthorAge
* configure systemd-resolved with DoTHEADmasterKenny Ballou2021-07-23
| | | | | | | | | | Disable networkmanager from writing `/etc/resolv.conf` and use configured DNS servers with DNS over TLS. Prune down list of nameservers as Level3 and OpenDNS do not currently support DoT. Signed-off-by: Kenny Ballou <kb@devnulllabs.io>
* x11: enable horizontal scrollingKenny Ballou2021-07-14
| | | | Signed-off-by: Kenny Ballou <kb@devnulllabs.io>
* services/compton: fix opacity typeKenny Ballou2021-06-25
| | | | Signed-off-by: Kenny Ballou <kb@devnulllabs.io>
* gnome: disable waylandKenny Ballou2021-05-14
| | | | | | Performance on i5-1135G7 with Xe graphics is le bad. Signed-off-by: Kenny Ballou <kb@devnulllabs.io>
* networkmanager: append some sane nameserversKenny Ballou2021-05-14
| | | | Signed-off-by: Kenny Ballou <kb@devnulllabs.io>
* gnome: update gnome keysKenny Ballou2021-05-12
| | | | | | New release has renamed various keys. Signed-off-by: Kenny Ballou <kb@devnulllabs.io>
* fix clamshell modeKenny Ballou2021-05-12
| | | | | | | This may not be the universally applicable way to enable clamshell mode. But this works for lemp10. Signed-off-by: Kenny Ballou <kb@devnulllabs.io>
* update channel: use nixos-unstableKenny Ballou2021-05-03
| | | | | | | Using `nixos-unstable` channel, various configuration keys have changed and need to be updated to build system configuration. Signed-off-by: Kenny Ballou <kb@devnulllabs.io>
* gnome: exclude some packagesKenny Ballou2021-05-01
| | | | | | Remove packages that are never used. Signed-off-by: Kenny Ballou <kb@devnulllabs.io>
* containers: add runtimes configurationKenny Ballou2021-04-05
| | | | Signed-off-by: Kenny Ballou <kb@devnulllabs.io>
* services: add podman configurationKenny Ballou2021-01-21
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* x11: remove intel video driverKenny Ballou2021-01-21
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* x11: intel: prefer modesetting driverKenny Ballou2020-12-17
| | | | | | | | | Following the discussion from nixpkgs[0], Iris Xe graphics performance dramatically better using the modesetting driver than the intel driver. [0]: https://github.com/NixOS/nixpkgs/pull/55583 Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* services: add nfs service configurationKenny Ballou2020-12-15
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* gnome: add packages and udev settingsKenny Ballou2020-11-16
| | | | | | | Add gnome-shell-extensions and character map, add gnome-settings-daemon to udev. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* x11: refactor xserver and add xkbOptionsKenny Ballou2020-11-16
| | | | | | | | - Refactor into nested property lists - Set compose and X11 restart keys Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* x11-laptop: increase accelSpeedKenny Ballou2020-11-16
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* x11-laptop: add libinput settingsKenny Ballou2020-06-30
| | | | | | | Enable palm detection, set the acceleration profile. This isn't exactly the right settings yet, but committing for now. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* add initial lightdm configurationKenny Ballou2020-06-25
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* services: x11: set specific video driversKenny Ballou2020-05-23
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* services: add redshiftKenny Ballou2020-04-13
| | | | | | At least until wayland lands. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* x11-laptop: refactor libinputKenny Ballou2020-04-07
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* services: gnome shellKenny Ballou2020-04-07
| | | | | | Add basic configuration for gnome-shell desktop. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* services: syncthing: initial service configurationKenny Ballou2020-01-29
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* services: firewall: use host specific rulesetsKenny Ballou2020-01-06
| | | | | | | Instead of using the same set of rules for all machines, use specific rulesets tailored to each machine. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* add dbus configurationKenny Ballou2020-01-05
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* firewall: allow http-alt from internal networkKenny Ballou2019-10-30
| | | | | | | Allow clients from the internal network to access the alternative HTTP port. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* firewall: restrict postgresql connectionsKenny Ballou2019-10-30
| | | | | | Restrict postgresql connections to local and internal networks only. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* firewall: allow postgres connections outKenny Ballou2019-09-26
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* service: printing: configure basic printingKenny Ballou2019-09-19
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* nft: add local app server 3000 portKenny Ballou2019-08-01
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* firewall: add docker masquerade and forward rulesKenny Ballou2019-07-18
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* firewall: update docker input traffic saddrKenny Ballou2019-07-18
| | | | | | | Instead of allowing the entire `172/8` block which includes more than we actually want, appropriately limit to the `172.16/12`. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* docker: use correct host address for DNSKenny Ballou2019-07-18
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* firewall: add icmp echo-{request,reply} output rulesKenny Ballou2019-07-10
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* firewall: add openvpn output ruleKenny Ballou2019-07-10
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* firewall: add http-alt portsKenny Ballou2019-07-05
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* firewall: :rose: fix spacingKenny Ballou2019-06-27
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* firewall: remove nat default policiesKenny Ballou2019-06-27
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* firewall: remove unnecessary chainsKenny Ballou2019-06-27
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* firewall: add counter to related forwarded connectionsKenny Ballou2019-06-27
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* service: add network manager configurationKenny Ballou2019-06-08
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* services: configure netfilter firewallKenny Ballou2019-06-07
| | | | | | Add an initial configuration for netflter. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* services: update dnsmasq configurationKenny Ballou2019-06-07
| | | | | | | | There was some misunderstandings of the various settings here. Furthermore, add some of the extra/custom configuration that was not yet codified. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* system/dnsmasq: use port 53Kenny Ballou2019-05-06
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* system/docker: add missing trailing newlineKenny Ballou2019-05-06
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* services: add openssh serviceKenny Ballou2019-05-03
| | | | Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* services/docker: add `docker` serviceKenny Ballou2019-05-01
| | | | | | Add user to `docker` group. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
* nix: initial configurationsKenny Ballou2019-05-01
Add an initial set of configurations as well as configurations for the `phenex` machine. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
generated by cgit v1.2.1 (git 2.18.0) at 2024-05-18 13:28:59 +0000