summaryrefslogtreecommitdiff
path: root/hostnix/elmo/configuration.nix
AgeCommit message (Collapse)Author
2024-11-16Enable envfsJoe Mou
Quick fix for .dotfiles scripts
2024-10-18Jellyfin media server w/ VA-API hardware accelerationJoe Mou
Jellyfin uses its own authentication; it's probably not worthwhile to try to consolidate with SSO (and may break Jellyfin clients). We don't bother to allow UDP for DLNA nor Jellyfin auto detection.
2024-10-18Use Zitadel to replace KanidmJoe Mou
Kanidm development is kind of slow and conservative. Their frontend is lacking. The hope was Zitadel would solve some issues logging in to the Home Assistant app behind oauth2-proxy, but it doesn't really help. In particular, KeePassium is unable to password complete (login page reloads to username entry?). In any case, we probably prefer Zitadel so let's at least record it for now. Pocket ID is an interesting minimal alternative, but the Home Assistant app doesn't support passkeys. $ sudo rm -r /var/lib/kanidm/
2024-10-18Add upgrade make target, add packagesJoe Mou
2024-10-09Try out GiteaJoe Mou
DISABLE_REGISTRATION needs to be set after the initial administrator account is manually registered. Considered the Forgejo community fork, but it doesn't seem to have attracted very much of the developer community. Despite concerns about copyright claims, Gitea does not have a CLA; it is MIT licensed. Still considering even lighter weight options that may be easier to programmatically control (just an HTTP server that speaks the smart protocol?). For managing groups of repositories, can use labels or organizations. Neither seem particularly convenient. Gitea defaults to public repositories.
2024-10-09sshguard whitelist to prevent lockoutJoe Mou
2024-06-11locate/updatedbJoe Mou
2024-04-26elmo: E-mail on certain systemd failuresJoe Mou
2024-04-26elmo: postfix with client certificatesJoe Mou
2024-04-26elmo: Enable sshguardJoe Mou
2024-04-26ACME with DNS challengeJoe Mou
2024-04-26elmo: blocky ad-blocking DNSJoe Mou
2024-04-26elmo: nzbgetJoe Mou
2024-04-26elmo: Enable fstrimJoe Mou
Initial run trimmed nearly the entire volume. May be quite important since Nix churns through storage.
2024-02-18Add mac mini SSH key and SyncthingJoe Mou
2024-02-15Port configs from weebnixJoe Mou
2024-02-13Refactor elmo default configsJoe Mou
2024-02-13Low-level reconfigurationJoe Mou
- btrfs subvolumes - hostname - SSH
2024-02-13Initial mac mini NixOS configurationJoe Mou