summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2024-02-15Port configs from weebnixJoe Mou
2024-02-13Simplify elmo/system.nixJoe Mou
2024-02-13Refactor elmo default configsJoe Mou
2024-02-13Low-level reconfigurationJoe Mou
- btrfs subvolumes - hostname - SSH
2024-02-13Initial mac mini NixOS configurationJoe Mou
2024-02-13Leftover weebnix configs (hard drive died?)Joe Mou
2023-12-22Adopt new services.home-assistant.customComponentsJoe Mou
2023-12-22Revert "Switch to production ACME certs"Joe Mou
This reverts commit 18148c3dec9154f43c5be6f2ed9e427e990c6a06.
2023-12-21Upgrade to NixOS 23.11Joe Mou
2023-10-02Add remaining Syncthing sharesJoe Mou
2023-10-01Add libreddit serviceJoe Mou
2023-10-01Syncthing exposed frontend and added devicesJoe Mou
2023-10-01Adjust OpenId Connect / OAuth2 config for use across subdomainsJoe Mou
2023-10-01Switch to production ACME certsJoe Mou
2023-10-01Initial configuration of Home Assistant w/ oauth2-proxy for KeyCloak ↵Joe Mou
authentication
2023-09-29Disable DNSSEC validationJoe Mou
There may be more than one issue. Most distributions do not seem to enable DNSSEC verification, so we'll disable for now too. Related: https://github.com/systemd/systemd/pull/18563
2023-09-29Add KeycloakJoe Mou
2023-09-29Refactor system and dyndns modulesJoe Mou
2023-09-28IPv6 dynamic dns, systemd-networkd for RFC 7217 stable private addressesJoe Mou
systemd-networkd is a bit opaque. In particular there doesn't seem to be a way to verify that the generated IPv6 addresses are stable private. An alternative may be to set net.ipv6.conf.default.addr_gen_mode = 2. systemd.network.wait-online.anyInterface does not seem to work properly; systemd-networkd-wait-online.service should be generated with --any flag but appears to be from upstream.
2023-09-28Initial Syncthing moduleJoe Mou
2023-09-27Mount /nix with noatimeJoe Mou
2023-09-27Dynamic DNS with bootstrapped SIG(0) keyJoe Mou
2023-09-27Add trusted-user to simplify sharing of binary cacheJoe Mou
Note to cross-compile, need to set: nixpkgs.buildPlatform = "x86_64-linux"; This will use a LOT of disk space in the Nix store (10+ GB).
2023-09-27Give up on enabling soundJoe Mou
Probably needs dtparam=audio=on in /boot/config.txt for snd_bcm2835
2023-09-27Disable X server and GPUJoe Mou
Note disabling environment.noXlibs causes many cache misses.
2023-09-27Play around with enabling X serverJoe Mou
Would also want to consider raising CMA (dynamic GPU memory)
2023-09-27Add /boot/config.txt (platform firmware configuration)Joe Mou
2023-09-27Switch to Raspberry Pi downstream kernelJoe Mou
- Seems to be a better idea to use device tree blobs from the same kernel (see https://lkml.org/lkml/2022/3/26/90). - Adds some device-specific device nodes, which provides better support (like for vcgencmd).
2023-09-27Basic loose endsJoe Mou
2023-09-22Switch boot loader to U-BootJoe Mou
Previously was using Tianocore EDK II build with old platform firmware. Switch to NixOS SD image build, which has stock Raspberry Pi OS firmware (but missing the DTO overlays/ directory) chained into U-Boot.
2023-09-20fix up additional subvolumesJoe Mou
2023-09-19minimal remote loginJoe Mou
2023-09-19nixos-generate-configJoe Mou