superconfig/2configs/ at 3208a650d468f77eccfd7976300aaf8c868f3fd1 · lass.pds.lassul.us/superconfig

antimicrox

treewide: nix fmt

2 years ago

bgt-bot

bgt-check: fix shellcheck

2 years ago

binary-cache

configs.binary-cache: migrate facts to vars

1 year ago

boot

remove unused configuration files

1 year ago

desktops

2configs/desktops/sway: fix overfocus args, keybind conflict, and reload killing firefox

6 months ago

dns

knot: refresh stale robotns2.second-ns.de NOTIFY targets Hetzner rotated robotns2.second-ns.de's addresses on 2023-12-04; the acl block was updated then but the remote/NOTIFY targets were missed, so pushes to that slave were going to dead IPs.

5 months ago

hass

2configs/hass: fix update script to restart systemd service instead of podman container

7 months ago

hw

vendor x220.nix from stockholm

11 months ago

monitoring

2configs.monitoring.telegraf: drop removed promtail scrape

6 months ago

ppp

remove unused configuration files

1 year ago

printing

configure new gg23 printer

2 years ago

services

2configs.services.flix.ipfs: fix reconcile for paths with special chars ([] etc)

6 months ago

tests

remove unused configuration files

1 year ago

websites

remove exim from all machines and clean up references

7 months ago

weron

remove unused configuration files

1 year ago

yellow-mounts

treewide: nix fmt

2 years ago

ableton.nix

treewide: nix fmt

2 years ago

alacritty.nix

alacritty: migrate to new config schema

2 years ago

android-webcam.nix

nix fmt

9 months ago

atuin-server.nix

treewide: nix fmt

2 years ago

auto-timezone.nix

machines ignavia: add auto-timezone

2 years ago

autotether.nix

treewide: nix fmt

2 years ago

autoupdate.nix

autoupdate: add jitter of 6h

2 years ago

bitcoin.nix

pkgs.monero -> pkgs.monero-cli

2 years ago

bitlbee.nix

bitlbee: remove deprecated plugins

9 months ago

br.nix

br: remove some legacy

2 years ago

browsers.nix

tools.workspace-manager: add workspace-browser, run as systemd service

7 months ago

c-base.nix

*: migrate facts to vars

10 months ago

cast.nix

treewide: nix fmt

2 years ago

consul.nix

consul: need 3 nodes for bootstrap, needs 2 nodes for running

9 months ago

container-bridge.nix

2configs.container-bridge: use iptables mode for Jool NAT64 Switch from --netfilter to --iptables mode so Jool only processes container traffic. --netfilter mode intercepts all packets to 64:ff9b::/96, breaking upstream NAT64 (e.g., Android hotspot tethering).

8 months ago

container-networking.nix

treewide: nix fmt

2 years ago

container-tests.nix

*: nix fmt

1 year ago

default.nix

2configs.default: add tools.s to all machines

6 months ago

docuseal.nix

docuseal: add smtp config

6 months ago

download-user.nix

machines.neoprism: add download user with ro yellow mount

8 months ago

dunst.nix

treewide: nix fmt

2 years ago

et-server.nix

treewide: nix fmt

2 years ago

fetchWallpaper.nix

treewide: nix fmt

2 years ago

fonts.nix

fonts: remove unused font packages

7 months ago

games.nix

2configs.games: simplify, add hidraw udev rule Remove separate games user. Add hidraw udev rule for gamepad support in Wine/Proton.

6 months ago

gc.nix

treewide: nix fmt

2 years ago

gg23.nix

2configs/gg23.nix: enable IPv6 on internal network Add ULA prefix fd42:7d6a::/64 on int0 with IPv6 Router Advertisement so clients get IPv6 via SLAAC. Enable IPv6 forwarding and NAT66 masquerade for the ULA prefix. This fixes Jitsi (and other IPv6-only services) not working from the internal network.

7 months ago

git-brain.nix

treewide: nix fmt

2 years ago

git.nix

configs.git: nix fmt

1 year ago

go.nix

treewide: nix fmt

2 years ago

green-host.nix

fix container prompts

1 year ago

gsm-wiki.nix

gsm-wiki: rotate password

1 year ago

hfos.nix

treewide: nix fmt

2 years ago

home-manager.nix

nix fmt

11 months ago

home-media.nix

Replace 2configs/mpv.nix with tools.mpv - Remove 2configs/mpv.nix and replace imports with tools.mpv package - Update desktop configurations to use self.packages.${pkgs.system}.mpv - Simplify home-media.nix by removing unused mpv import

1 year ago

hotdog-host.nix

configs.hotdog-host: deploy hotdog from github stockholm

11 months ago

htop.nix

refactor: move nixos/* into toplevel

3 years ago

iodined.nix

move some config from krebs.iptables to networking.firewall

11 months ago

ipfs.nix

2configs/ipfs: add IPFS with auto-pin watcher for flix, client config for xerxes

6 months ago

kannix.nix

2configs.default: add tools.s to all machines

6 months ago

kanvibe.nix

2configs/kanvibe: replace vibe-kanban with kanvibe fork

7 months ago

kitty.nix

2configs.kitty: disable audio bell

8 months ago

libvirt.nix

treewide: nix fmt

2 years ago

mail.nix

configs.mail: add notmuch & muchsync

1 year ago

mailserver.nix

2configs.mailserver: complete dovecot 2.4 migration The previous translation of the dovecot 2.3 plugin/namespace blocks didn't survive doveconf parsing or the runtime check for virtual namespaces: - `acl = vfile` is a named-list-filter in 2.4. The driver moved to top-level `acl_driver`, and per-identifier defaults live in `acl <identifier> { acl_rights = ...; }` filters keyed on the ACL id (owner/anyone/user=...). The filter name itself is parsed by acl_identifier_parse, which is why earlier attempts with `acl vfile` or `acl primary` failed with "Invalid identifier". - `acl_shared_dict` was removed; the bot subscribes to shared paths explicitly so we don't need it. - Per-namespace `location = "driver:path:opts"` was split into separate mail_driver / mail_path / mail_index_path settings. - The virtual namespace also needs `mailbox_list_layout = fs` to override the global Maildir++ - otherwise dovecot 2.4 refuses to initialise the namespace, which broke both LMTP delivery and IMAP login. Verified on neoprism with `doveconf -n` and a live LMTP delivery.

5 months ago

mc.nix

treewide: nix fmt

2 years ago

minecraft.nix

treewide: nix fmt

2 years ago

mouse.nix

fix: update deprecated options to new names

1 year ago

mumble-reminder.nix

mumble-reminder: add 25.05 and 25.11 Release Animals 25.05: Warbler -> Goldwandsänger 25.11: Xantusia -> Nachtechse

10 months ago

murmur.nix

treewide: nix fmt

2 years ago

n8n.nix

2configs/n8n: disable secure cookie

6 months ago

network-manager.nix

network-manager: remove wireless disable force override to fix wifi on newer nixos

9 months ago

networkd.nix

*: nix fmt

1 year ago

news-host.nix

wayland: setup legacy portals

2 years ago

nextcloud.nix

nextcloud30 -> 31

11 months ago

nfs-dl.nix

treewide: nix fmt

2 years ago

nginx.nix

dns: switch lassul.us, www, paste to neoprism; nginx: return 404 on default vhost

7 months ago

nix.nix

nix: use latest version

11 months ago

opencrow.nix

2configs/opencrow: switch model to claude-sonnet-4

6 months ago

orange-host.nix

fix container prompts

1 year ago

pair-programming.nix

2configs: replace krebs.users.lass.pubkey with hardware SSH keys Replace all instances of config.krebs.users.lass.pubkey with hardware keys: - self.keys.ssh.yubi_pgp - self.keys.ssh.yubi1 - self.keys.ssh.yubi2 - self.keys.ssh.solo2

1 year ago

pass.nix

configs.pass: take passmenu from tools

1 year ago

paste.nix

nix fmt

7 months ago

pinned-registry.nix

pinned-registry: reference nixpkgs as flake

2 years ago

pipewire.nix

pipewire: add mainUser to pipewire group

11 months ago

power-action.nix

power-action: replace krebs module with native upower Uses services.upower for suspend on critical battery and a lightweight systemd user service for espeak warnings. Removes krebs.power-action dependency, special user, and sudo hacks. Import moved from desktop configs to individual machine configs (xerxes, ignavia) for explicit control.

9 months ago

privoxy-retiolum.nix

treewide: nix fmt

2 years ago

privoxy.nix

treewide: nix fmt

2 years ago

radicale.nix

nix fmt

8 months ago

radicle.nix

2configs/radicle: privateKeyFile -> privateKey Adapted to upstream rename in NixOS/nixpkgs#475836.

6 months ago

realwallpaper.nix

move some config from krebs.iptables to networking.firewall

11 months ago

red-host.nix

treewide: nix fmt

2 years ago

retiolum.nix

retiolum: deprecate clanCore

1 year ago

review.nix

treewide: nix fmt

2 years ago

riot.nix

machines.neoprism: replace exim-smarthost with simple-nixos-mailserver IMAPS, SMTP submission, sieve filtering, DKIM, full-text search. Remove dead code internet-gateway.nix and hackerfleet exim router. Add mail and DKIM dirs to borg backup.

7 months ago

rogue-talk.nix

2configs/rogue-talk: format

8 months ago

rtl-sdr.nix

treefmt: apply nix fmt

9 months ago

security-workarounds.nix

security-workarounds: remove old CVE

1 year ago

shadowsocks.nix

configs.shadowsocks: migrate facts to vars

1 year ago

snapclient.nix

treewide: nix fmt

2 years ago

snappymail.nix

2configs/mailserver: add virtual.All mailbox, bump imap memory limit Add virtual.All mailbox (all messages across all folders) so attachments can be opened reliably (virtual.Unread loses messages when marked read). Bump imapMemoryLimit to 1GB for virtual mailbox sync. Also increase snappymail PHP/nginx timeouts.

7 months ago

snapserver.nix

snapserver: enable tcp mode

10 months ago

spora.nix

spora: migrate to vars

1 year ago

ssh-redirect.nix

treewide: nix fmt

2 years ago

steam.nix

2configs/steam: add gamescope for fullscreen windowed wrapping

8 months ago

sunshine.nix

treewide: nix fmt

2 years ago

syncthing.nix

2configs: update clan.core.clanDir to clan.core.settings.directory

1 year ago

themes.nix

2configs/themes: integrate noctalia-shell theme switching

7 months ago

tor-ssh.nix

change tor vars generator to hostname

1 year ago

tpm2.nix

tools.pinentry-rofi, 5pkgs.ssh-tpm-agent: add rofi pinentry with SSH context Add a rofi-based pinentry for TPM SSH authentication that displays the SSH command being authenticated (destination, flags, arguments). - Patch ssh-tpm-agent to pass client PID via SSH_CLIENT_PID env var using SO_PEERCRED on the Unix socket - New pinentry-rofi tool reads /proc/<pid>/cmdline to show SSH args - Update tpm2.nix to use the patched agent and new pinentry

8 months ago

vaultwarden.nix

add vault.lassul.us

11 months ago

weechat.nix

weechat: remove broken weechat-matrix

1 year ago

wine.nix

treewide: nix fmt

2 years ago

wiregrill.nix

nix fmt

9 months ago

xdg-open.nix

xdg-open: rip firefox-devedition

9 months ago

yggdrasil.nix

2configs.yggdrasil: disable persistentKeys

8 months ago

yubikey.nix

yubikey: remove gpg specific config

11 months ago

zerotier.nix

2configs: update clan.core.clanDir to clan.core.settings.directory

1 year ago

zsh.nix

zsh: enable for completions

2 years ago

Configure Feed

Configure Feed