this repo has no description
update to 22.11
+65
-38
+26
-10
flake.lock
+26
-10
flake.lock
···
443
443
"inputs": {
444
444
"nixpkgs": [
445
445
"nixos"
446
-
]
446
+
],
447
+
"utils": "utils_2"
447
448
},
448
449
"locked": {
449
-
"lastModified": 1656169755,
450
-
"narHash": "sha256-Nlnm4jeQWEGjYrE6hxi/7HYHjBSZ/E0RtjCYifnNsWk=",
450
+
"lastModified": 1670156115,
451
+
"narHash": "sha256-L2FKLedprp3AkQ+GS+2Br7CYWeCmLCjt3zUd87p0lNQ=",
451
452
"owner": "nix-community",
452
453
"repo": "home-manager",
453
-
"rev": "4a3d01fb53f52ac83194081272795aa4612c2381",
454
+
"rev": "e704ef9ec7a8ccf8711bb11ff68da06f1917a26d",
454
455
"type": "github"
455
456
},
456
457
"original": {
457
458
"owner": "nix-community",
458
-
"ref": "release-22.05",
459
+
"ref": "release-22.11",
459
460
"repo": "home-manager",
460
461
"type": "github"
461
462
}
···
557
558
},
558
559
"nixos": {
559
560
"locked": {
560
-
"lastModified": 1667327283,
561
-
"narHash": "sha256-XEMEmRwv0lrhV8OFn1+dsEJovTDmn94zEjfxMfAoLIc=",
561
+
"lastModified": 1670157845,
562
+
"narHash": "sha256-epO16PPDkhYicQWQkSYZxU3tJAML/rF0FESR6BMTpYw=",
562
563
"owner": "nixos",
563
564
"repo": "nixpkgs",
564
-
"rev": "c9a1090e19f93cb30c205682aab2d0989f8de91f",
565
+
"rev": "267a3d939c3aa4cea15d3b1ccac59f5e29c05bb3",
565
566
"type": "github"
566
567
},
567
568
"original": {
568
569
"owner": "nixos",
569
-
"ref": "release-22.05",
570
+
"ref": "release-22.11",
570
571
"repo": "nixpkgs",
571
572
"type": "github"
572
573
}
···
804
805
],
805
806
"superdirt-src": "superdirt-src",
806
807
"tidal-src": "tidal-src",
807
-
"utils": "utils_2",
808
+
"utils": "utils_3",
808
809
"vim-tidal-src": "vim-tidal-src",
809
810
"vowel-src": "vowel-src"
810
811
},
···
838
839
}
839
840
},
840
841
"utils_2": {
842
+
"locked": {
843
+
"lastModified": 1667395993,
844
+
"narHash": "sha256-nuEHfE/LcWyuSWnS8t12N1wc105Qtau+/OdUAjtQ0rA=",
845
+
"owner": "numtide",
846
+
"repo": "flake-utils",
847
+
"rev": "5aed5285a952e0b949eb3ba02c12fa4fcfef535f",
848
+
"type": "github"
849
+
},
850
+
"original": {
851
+
"owner": "numtide",
852
+
"repo": "flake-utils",
853
+
"type": "github"
854
+
}
855
+
},
856
+
"utils_3": {
841
857
"locked": {
842
858
"lastModified": 1653893745,
843
859
"narHash": "sha256-0jntwV3Z8//YwuOjzhV2sgJJPt+HY6KhU7VZUL0fKZQ=",
+7
-4
flake.nix
+7
-4
flake.nix
···
4
4
inputs =
5
5
{
6
6
# Nix
7
-
nixos.url = "github:nixos/nixpkgs/release-22.05";
7
+
nixos.url = "github:nixos/nixpkgs/release-22.11";
8
8
latest.url = "github:nixos/nixpkgs/nixos-unstable";
9
9
# Community
10
-
home.url = "github:nix-community/home-manager/release-22.05";
10
+
home.url = "github:nix-community/home-manager/release-22.11";
11
11
home.inputs.nixpkgs.follows = "nixos";
12
12
nixos-hardware.url = "github:nixos/nixos-hardware";
13
13
# Lib
···
52
52
# TODO not quite useful yet, since it needs secrets
53
53
# dhyan.url = "git+ssh://gitea@git.sealight.xyz/aynish/dhyan?ref=main";
54
54
# dhyan.inputs.nixpkgs.follows = "nixos";
55
+
# TODO needs secrets
56
+
# muneem.url = "git+ssh://gitea@git.sealight.xyz/aynish/muneem?ref=main";
57
+
# muneem.inputs.nixpkgs.follows = "nixos";
55
58
};
56
59
57
60
outputs =
···
91
94
deploy.overlay
92
95
./pkgs/default.nix
93
96
tidalcycles.overlays.default
94
-
neovim-nightly.overlay
97
+
# neovim-nightly.overlay
95
98
rust-overlay.overlays.default
96
99
eww.overlays.default
97
100
];
···
148
151
};
149
152
suites = with profiles; rec {
150
153
base = [ core users.root users.anish ];
151
-
sealight = [ base server metrics gitea rss-bridge mount-mossnet ];
154
+
sealight = [ base server metrics gitea rss-bridge mount-mossnet freshrss ];
152
155
lituus = [ base server metrics sealight-website matrix wireguard-server ];
153
156
mossnet = [ base server taskd shaarli dns monitoring nfs gonic headphones radicale seafile syncthing dhyan calibre wallabag finance ]; # hpi sync.music muneem
154
157
cube = [ base site server ];
+1
-1
install-encrypted.sh
+1
-1
install-encrypted.sh
···
112
112
# this value at the release version of the first install of this system.
113
113
# Before changing this value read the documentation for this option
114
114
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
115
-
system.stateVersion = "21.05"; # Did you read the comment?
115
+
system.stateVersion = "22.11"; # Did you read the comment?
116
116
}
117
117
118
118
endmsg
+1
-1
install-yubikey.sh
+1
-1
install-yubikey.sh
···
162
162
# this value at the release version of the first install of this system.
163
163
# Before changing this value read the documentation for this option
164
164
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
165
-
system.stateVersion = "21.05"; # Did you read the comment?
165
+
system.stateVersion = "22.11"; # Did you read the comment?
166
166
}
167
167
168
168
endmsg
+1
-1
profiles/cachix/default.nix
+1
-1
profiles/cachix/default.nix
+8
-6
profiles/cachix/nix-community.nix
+8
-6
profiles/cachix/nix-community.nix
···
1
1
{
2
2
nix = {
3
-
binaryCaches = [
4
-
"https://nix-community.cachix.org"
5
-
];
6
-
binaryCachePublicKeys = [
7
-
"nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
8
-
];
3
+
settings = {
4
+
substituters = [
5
+
"https://nix-community.cachix.org"
6
+
];
7
+
trusted-public-keys = [
8
+
"nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
9
+
];
10
+
};
9
11
};
10
12
}
+8
-6
profiles/cachix/nrdxp.nix
+8
-6
profiles/cachix/nrdxp.nix
···
1
1
{
2
2
nix = {
3
-
binaryCaches = [
4
-
"https://nrdxp.cachix.org"
5
-
];
6
-
binaryCachePublicKeys = [
7
-
"nrdxp.cachix.org-1:Fc5PSqY2Jm1TrWfm88l6cvGWwz3s93c6IOifQWnhNW4="
8
-
];
3
+
settings = {
4
+
substituters = [
5
+
"https://nrdxp.cachix.org"
6
+
];
7
+
trusted-public-keys = [
8
+
"nrdxp.cachix.org-1:Fc5PSqY2Jm1TrWfm88l6cvGWwz3s93c6IOifQWnhNW4="
9
+
];
10
+
};
9
11
};
10
12
}
+7
-5
profiles/core/default.nix
+7
-5
profiles/core/default.nix
···
4
4
{
5
5
imports = [ ../cachix ];
6
6
7
-
nix.systemFeatures = [ "nixos-test" "benchmark" "big-parallel" "kvm" ];
7
+
nix.settings.system-features = [ "nixos-test" "benchmark" "big-parallel" "kvm" ];
8
8
9
9
fonts = {
10
10
fonts = with pkgs; [ powerline-fonts dejavu_fonts ];
···
15
15
};
16
16
17
17
nix = {
18
-
autoOptimiseStore = true;
18
+
settings = {
19
+
sandbox = true;
20
+
trusted-users = [ "root" "@wheel" ];
21
+
allowed-users = [ "@wheel" ];
22
+
auto-optimise-store = true;
23
+
};
19
24
gc.automatic = true;
20
25
optimise.automatic = true;
21
-
useSandbox = true;
22
-
allowedUsers = [ "@wheel" ];
23
-
trustedUsers = [ "root" "@wheel" ];
24
26
extraOptions = ''
25
27
min-free = 536870912
26
28
keep-outputs = true
+3
-2
profiles/freshrss/default.nix
+3
-2
profiles/freshrss/default.nix
···
1
1
{ config, lib, pkgs, ... }:
2
2
3
3
{
4
+
age.secrets.freshrss-dbpass.file = "${self}/secrets/freshrss-dbpass.age";
5
+
age.secrets.freshrss-dbpass.owner = "freshrss";
4
6
services.freshrss = {
5
7
enable = true;
6
8
virtualHost = "rss.sealight.xyz";
7
9
baseUrl = "https://rss.sealight.xyz/";
8
10
database = {
9
11
type = "pgsql";
10
-
# passwordFile = "/run/secrets/gitea-dbpass"; # TODO supplied by agenix
11
-
passFile = "/run/secrets/freshrss-dbpass";
12
+
passFile = "/run/agenix/freshrss-dbpass";
12
13
};
13
14
};
14
15
+3
-1
users/anish/default.nix
+3
-1
users/anish/default.nix
···
5
5
6
6
users.users.anish = {
7
7
description = "Personal user for Anish";
8
-
hashedPassword = "MVHHpy9gbe3ow";
8
+
hashedPassword = "$y$j9T$y3DPt/dWaPE.gRazQqw1w0$1RMH5sl/Nu8kW3ZMywYCPRniHD/jF5qRh0VKrdJ.bV2";
9
9
shell = pkgs.zsh;
10
10
isNormalUser = true;
11
11
extraGroups = [ "wheel" "audio" ];
···
16
16
"ssh-rsa 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 u0_a139@localhost"
17
17
];
18
18
};
19
+
20
+
home-manager.users.anish.home.stateVersion = "22.05";
19
21
20
22
# home-manager.users.anish.programs.git = {
21
23
# userName = "Anish Lakhwara";