my nix configurations (please roast me)
Find a file
2024-04-11 14:34:48 +03:00
assets iosevka-nerd + new zsh prompt 2024-03-03 21:39:15 +03:00
hosts koi: use dot upstream in coredns 2024-04-11 14:34:48 +03:00
lib fix: downgrade ovmf to stable 2024-03-15 13:18:18 +03:00
packages feat: added sftpgo to puffer 2024-01-09 08:34:03 +03:00
secrets qbt download finish webhook 2024-03-03 04:37:18 +03:00
services feat(koi): uxplay server 2024-03-17 05:59:27 +03:00
ssh initial commit 2024-01-08 07:51:19 +03:00
users/teidesu feat(koi): uxplay server 2024-03-17 05:59:27 +03:00
.gitignore iosevka-nerd + new zsh prompt 2024-03-03 21:39:15 +03:00
agenix-edit initial commit 2024-01-08 07:51:19 +03:00
flake.lock fix: downgrade ovmf to stable 2024-03-15 13:18:18 +03:00
flake.nix fix: downgrade ovmf to stable 2024-03-15 13:18:18 +03:00
LICENSE Create LICENSE 2024-01-30 12:19:43 +03:00
readme.md readme 2024-03-03 22:40:04 +03:00
switch initial darwin 2024-03-03 06:34:26 +03:00

nixos

ok hi this is my nixos config. it is pretty much a mess and the code sucks but welp

impure dependencies

note to self on what needs to be installed on the host manually:

common

  • /etc/ssh/agenix_key (darwin: ~/.ssh/agenix_key) - private key for secret decryption

koi:

  • /etc/iso/win11.iso - iso containing windows 11 installer (e.g. this: magnet) currently unused
  • /etc/vms/haos.img - qcow2 image for haos vm (can be downloaded from the official website, the KVM/Proxmox image).
  • /etc/ssh/agenix_key - private key for secret decryption
  • /etc/secureboot/keys - secure boot keys, generated with sudo nix-shell -p sbctl --run "sbctl create-keys"
  • to enroll fde onto tpm: sudo systemd-cryptenroll /dev/nvme0n1p2 --tpm2-device=auto --tpm2-pcrs=0+2+7

nginx may not start the first time, its fine, just run sudo systemctl restart nginx and it should work. its likely due to docker containers not resolving yet. todo fix this

teidesu-osx

cp /var/run/current-system/Library/Fonts/* /Library/Fonts - copy nix-managed fonts to system fonts (waiting for this PR)

cat in a readme 🐈

cat