summaryrefslogtreecommitdiff
path: root/hostnix
AgeCommit message (Collapse)Author
2023-09-29Disable DNSSEC validationJoe Mou
There may be more than one issue. Most distributions do not seem to enable DNSSEC verification, so we'll disable for now too. Related: https://github.com/systemd/systemd/pull/18563
2023-09-29Add KeycloakJoe Mou
2023-09-29Refactor system and dyndns modulesJoe Mou
2023-09-28IPv6 dynamic dns, systemd-networkd for RFC 7217 stable private addressesJoe Mou
systemd-networkd is a bit opaque. In particular there doesn't seem to be a way to verify that the generated IPv6 addresses are stable private. An alternative may be to set net.ipv6.conf.default.addr_gen_mode = 2. systemd.network.wait-online.anyInterface does not seem to work properly; systemd-networkd-wait-online.service should be generated with --any flag but appears to be from upstream.
2023-09-28Initial Syncthing moduleJoe Mou
2023-09-27Mount /nix with noatimeJoe Mou
2023-09-27Dynamic DNS with bootstrapped SIG(0) keyJoe Mou
2023-09-27Add trusted-user to simplify sharing of binary cacheJoe Mou
Note to cross-compile, need to set: nixpkgs.buildPlatform = "x86_64-linux"; This will use a LOT of disk space in the Nix store (10+ GB).
2023-09-27Give up on enabling soundJoe Mou
Probably needs dtparam=audio=on in /boot/config.txt for snd_bcm2835
2023-09-27Disable X server and GPUJoe Mou
Note disabling environment.noXlibs causes many cache misses.
2023-09-27Play around with enabling X serverJoe Mou
Would also want to consider raising CMA (dynamic GPU memory)
2023-09-27Add /boot/config.txt (platform firmware configuration)Joe Mou
2023-09-27Switch to Raspberry Pi downstream kernelJoe Mou
- Seems to be a better idea to use device tree blobs from the same kernel (see https://lkml.org/lkml/2022/3/26/90). - Adds some device-specific device nodes, which provides better support (like for vcgencmd).
2023-09-27Basic loose endsJoe Mou
2023-09-22Switch boot loader to U-BootJoe Mou
Previously was using Tianocore EDK II build with old platform firmware. Switch to NixOS SD image build, which has stock Raspberry Pi OS firmware (but missing the DTO overlays/ directory) chained into U-Boot.
2023-09-20fix up additional subvolumesJoe Mou
2023-09-19minimal remote loginJoe Mou
2023-09-19nixos-generate-configJoe Mou