about summary refs log tree commit diff stats
Commit message (Collapse)AuthorAge
* Fix: Add scanning and full printing supportene2023-02-18
|
* Fix: Ignore Session.vim Filesene2023-02-18
|
* Feat: Move nheko from system to user packagesene2023-02-18
|
* Style(home-manager): Format with alejandraene2023-02-18
|
* Feat: Add encryption through agenixene2023-02-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There are other alternatives: * [This blog post about NixOs secret encryption](https://xeiaso.net/blog/nixos-encrypted-secrets-2021-01-20) * Directly to agenix: * A [rewrite in rust](https://github.com/yaxitech/ragenix) * A dead (?) [rewrite in rust](https://github.com/cole-h/agenix-cli) * An implementation of Sops for nix: [Sops-nix](https://github.com/Mic92/sops-nix) * See the [NixOs wiki entry](https://nixos.wiki/wiki/Comparison_of_secret_managing_schemes) for further options. Reasons for agenix: I mostly just ruled other options out, until this was the only real thing: * The blog post was created in a time, where tools like agenix where not available, and it (very simplified) just shows, how to implement a basic version of agenix * The rewrite are both in itself interesting, but lack community support, this is however subject to change, and thus a migration to a rewrite might be feasible in the future. * Sops seems like a really nice thing, with support for nearly all relevant encryption options, but the documentation for sops-nix seems rather lack-luster for me, so I decided to stay with agenix, especially because I should not need the extra encryption options. * And lastly most of the option on the wiki page need excessive manual intervention on every reboot (maybe because the were written with servers in mind), but I would like to be able to deploy once and then never have to think about secret management. So you see, I mostly just used what seemed to be the easiest for my situation right now, and agenix works rather well. If there weren't one big downside, I would really like it: Encrypting a file with age — which is what agenix uses under the hood — requires a key, which in the case of agenix is the public ssh key. Being asymmetric encryption, the decryption requires the private key, which is in my case stored in an ssh-agent, feed directly from KeepassXC. And this is where the problem lives, I want to be able to decrypt the secrets (obviously), and this only works if I copy the private key to a file, which, whilst being a manual process, completely breaks the point behind using an ssh-agent with KeepassXC integration in the first place. There are however open Issues on both the rage an agenix issue trackers, so the hope of fixing this is still there.
* Feat(home-manager): Add local packagesene2023-02-17
|
* Chore: Add todo fileene2023-02-17
|
* Feat(services): Add snapper config for the persistent volumeene2023-02-17
|
* Fix(system): Rework some btrfs subvolume names and add lazyatimeene2023-02-17
| | | | | | The lazyatime mount setting should increase the performance somewhat, especially because I don't really need atime. Thought using noatime might make this setting completely useless, so it might get removed again.
* Fix(users): Change home of soispha to /home/soisphaene2023-02-17
| | | | | This puts the home directory in the tempfs part of the filesystem, so all, not explicitly specified directories, will be restored upon reboot.
* Feat(services): Use default.nix filesene2023-02-17
|
* Feat(home-manager): Move configs in their own directoryene2023-02-17
|
* Feat(impermanence): Add full stack tempfsene2023-02-16
|
* Feat: Add impersistent for persistent files and dirsene2023-02-16
|
* Feat(nix): Add settingsene2023-02-15
|
* Fix(yambar): Remove typosene2023-02-15
|
* Fix(zsh): Remove typosene2023-02-15
|
* Fix(home-manager): Fix Typosene2023-02-15
|
* Feat(home-manager): Add zshene2023-02-15
|
* Feat(home-manager): Add yambarene2023-02-15
|
* Feat(home-manager): Add swaylockene2023-02-15
|
* Feat(home-manager): Add swayidleene2023-02-15
|
* Fix(ssh): Delete reference configurationene2023-02-15
|
* Fix(home-manager): Declare the configs directly in Nixene2023-02-13
|
* Fix(home-manager): Update rclone to use the correct fileene2023-02-13
|
* Feat(home-manager): Add sshene2023-02-12
|
* Feat(home-manager): Add riverene2023-02-12
|
* Feat(home-manager): Add rcloneene2023-02-12
|
* Feat(home-manager): Add python xdg-settingsene2023-02-12
|
* Fix(home-manager): Improve Firefox configurationene2023-02-12
|
* Fix(home-manager): Import home-manager correctlyene2023-02-12
|
* Feat(home-manager): Make the home configuration betterene2023-02-11
|
* Fix: Rename host for clarity and import home-managerene2023-02-11
|
* Fix: Remove typo from home-manager directory nameene2023-02-11
|
* Fix: Import the configurationsene2023-02-11
|
* Fix: Comment infinite recursion causing linesene2023-02-11
| | | | | I will probably use a module for persistent file systems, so commenting this seems the best option for now.
* Feat: Switch to default.nixene2023-02-11
|
* Feat(home-manager): Add firefox configene2023-02-11
|
* Feat(home-manger): Add mpdene2023-02-07
|
* Feat(home-manger): Add mako configurationsene2023-02-07
|
* Feat(home-manger): Add support for lfene2023-02-07
|
* Feat(home-manger): Add support for lessene2023-02-07
|
* Feat(home-manager): Add latexindentene2023-02-07
|
* Feat(home-manager): Add support for keepassxcene2023-02-07
|
* Feat(home-manager): Add gtk configurationsene2023-02-07
|
* Feat(home-manger): Add grades config supportene2023-02-07
|
* Feat(home-manager): Add git supportene2023-02-07
|
* Feat(home-manager): Add support for gammastepene2023-02-07
|
* Feat(home-manager): Add cups supportene2023-02-07
|
* Feat(home-manager): Add alacritty supportene2023-02-07
|