dotnix @main -
refs -
log -
-
https://git.jolheiser.com/dotnix.git
My nix dotfiles
feat: sencha
Signed-off-by: jolheiser <john.olheiser@gmail.com>
Signature
-----BEGIN PGP SIGNATURE-----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=2c2s
-----END PGP SIGNATURE-----
8 changed files, 153 additions(+), 22 deletions(-)
diff --git a/flake.nix b/flake.nix
index fb09fd8b0663e8adf4b217673267278c7cd3ec3f..729e553ac18927cf591155362aa82d0c1a4083ab 100644
--- a/flake.nix
+++ b/flake.nix
@@ -227,6 +227,16 @@ (commonConfig {})
];
};
{
+ })
+ system = "x86_64-linux";
+ modules = [
+ home-manager.nixosModules.home-manager
+ agenix.nixosModules.default
+ ./machines/sencha
+ (commonConfig {})
+ ];
+ };
+{
home-manager = {
colmena = {
meta = {
diff --git a/machines/sencha/default.nix b/machines/sencha/default.nix
new file mode 100644
index 0000000000000000000000000000000000000000..316d35c7f6ecbfd1a8b7f87e9868c0e959335968
--- /dev/null
+++ b/machines/sencha/default.nix
@@ -0,0 +1,41 @@
+{pkgs, ...}: {
+ imports = [./hardware.nix ../common/gui];
+
+ boot = {
+ kernelPackages = pkgs.linuxPackages_latest;
+ kernelParams = ["quiet" "splash"];
+ };
+
+ boot.loader.systemd-boot.enable = true;
+ boot.loader.efi.canTouchEfiVariables = true;
+
+ boot.initrd.luks.devices."luks-c1c666de-2c68-4d50-98f1-3974ef424ff3".device = "/dev/disk/by-uuid/c1c666de-2c68-4d50-98f1-3974ef424ff3";
+
+ hardware = {bluetooth.enable = true;};
+
+ networking = {
+ hostName = "sencha";
+ networkmanager.enable = true;
+ firewall.enable = true;
+ };
+
+ services = {
+ blueman.enable = true;
+ openssh.enable = true;
+ pcscd.enable = true;
+ };
+
+ virtualisation.docker.enable = true;
+
+ users.users.olheiser.isNormalUser = true;
+ users.users.jolheiser = {
+ extraGroups = ["wheel" "docker" "storage"];
+ isNormalUser = true;
+ };
+
+ environment.systemPackages = with pkgs; [
+ firefox
+ ];
+
+ system.stateVersion = "22.11";
+}
diff --git a/machines/sencha/hardware.nix b/machines/sencha/hardware.nix
new file mode 100644
index 0000000000000000000000000000000000000000..096e4e171a737edfdd9e0df4477366c5d35caea1
--- /dev/null
+++ b/machines/sencha/hardware.nix
@@ -0,0 +1,42 @@
+# Do not modify this file! It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations. Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+ imports =
+ [ (modulesPath + "/installer/scan/not-detected.nix")
+ ];
+
+ boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "usbhid" "usb_storage" "sd_mod" "sr_mod" "rtsx_usb_sdmmc" ];
+ boot.initrd.kernelModules = [ ];
+ boot.kernelModules = [ ];
+ boot.extraModulePackages = [ ];
+
+ fileSystems."/" =
+ { device = "/dev/disk/by-uuid/d1f561b1-bc50-4e34-9ca6-e973d2d9437a";
+ fsType = "ext4";
+ };
+
+ boot.initrd.luks.devices."luks-75db2e03-a875-43ee-8ca8-70507b421641".device = "/dev/disk/by-uuid/75db2e03-a875-43ee-8ca8-70507b421641";
+
+ fileSystems."/boot" =
+ { device = "/dev/disk/by-uuid/A8A8-1D01";
+ fsType = "vfat";
+ };
+
+ swapDevices =
+ [ { device = "/dev/disk/by-uuid/5c3eb124-674b-4315-890d-137275aab504"; }
+ ];
+
+ # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+ # (the default) this is the recommended approach. When using systemd-networkd it's
+ # still possible to use this option, but it's recommended to use it in conjunction
+ # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+ networking.useDHCP = lib.mkDefault true;
+ # networking.interfaces.eno1.useDHCP = lib.mkDefault true;
+ # networking.interfaces.wlp2s0.useDHCP = lib.mkDefault true;
+
+ nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+ hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index b2fb11ac6a004a4a7c0bda1cf91634017ba802f3..0cf619b5e1d7566ff587099241b2de24d504e501 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -1,11 +1,17 @@
let
jolheiser = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKrPUqk9v7FE7OgMDaOMdlnItiXSDkmS+eU94RzQFiMS nix";
+let
+ matcha = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILZxjkZLj/9xvmg1enK+B7k8qf6Px0j4kTZ2caQfYmB1";
+ jolheiser = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKrPUqk9v7FE7OgMDaOMdlnItiXSDkmS+eU94RzQFiMS nix";
matcha = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILZxjkZLj/9xvmg1enK+B7k8qf6Px0j4kTZ2caQfYmB1 root@matcha";
+ jolheiser = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKrPUqk9v7FE7OgMDaOMdlnItiXSDkmS+eU94RzQFiMS nix";
chai = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA7PS9SJ+OVrUku9dPUQZigioy+r3VlFHVntsa/F7AdM root@chai";
+ jolheiser = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKrPUqk9v7FE7OgMDaOMdlnItiXSDkmS+eU94RzQFiMS nix";
masala = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH0bnlygiFqNwl0mHxcD+t78bTsn1NcHm6L2B4le4FtS root@nixos";
+ jolheiser = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKrPUqk9v7FE7OgMDaOMdlnItiXSDkmS+eU94RzQFiMS nix";
dragonwell = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN32Cwxer2AOGvEqSqXSPp49gj1VtR7G2XmPnmXj6o53 root@dragonwell";
- all = [jolheiser matcha chai masala dragonwell];
+ all = [jolheiser matcha sencha chai masala dragonwell];
in {
"shared/ssh-config.age".publicKeys = all;
"shared/ssh-config-work.age".publicKeys = all;
diff --git a/secrets/shared/gist-pw.age b/secrets/shared/gist-pw.age
index 50b30a746d3b830a9678ca4ad7cadeaa4250a096..ab8a09b2d0f6824b98fab5c7ea0bb52494bfe75c 100644
--- a/secrets/shared/gist-pw.age
+++ b/secrets/shared/gist-pw.age
@@ -1,21 +1,29 @@
age-encryption.org/v1
+-> ssh-ed25519 E8j6/g wmOmVN/IOfp9tz1ygdCfGgaoQWCS7Xk6zMziXGLdImU
+zwG/aHslBrylHAJ9IC5Y25id1GgTZuxzMr1F9e7WYOM
-> ssh-ed25519 E8j6/g MoQ+KiKt+A1JLrO7Xdo/EUY1/RXgT02IT5KdDIrBFnI
+AHlnXqzgAyFbXL8rgypA5Dv83xKMlbxtMFKKt5TA674
+-> ssh-ed25519 Cuo7gw I/c93mKH8DXsIOwE50GchLlPGC/HdwPJmgzR7YCOz14
+-> ssh-ed25519 E8j6/g MoQ+KiKt+A1JLrO7Xdo/EUY1/RXgT02IT5KdDIrBFnI
ivOpO8f87yAm1k/1FL3qhiaS5G/eW7jYV19Mz5QoEXc
+-> ssh-ed25519 E8j6/g MoQ+KiKt+A1JLrO7Xdo/EUY1/RXgT02IT5KdDIrBFnI
-> ssh-ed25519 xUMv2w xht8LuQJaV0yhzvwbmYjUsgn3KdUqj8BtumeNRqrP10
+-> ssh-ed25519 E8j6/g MoQ+KiKt+A1JLrO7Xdo/EUY1/RXgT02IT5KdDIrBFnI
0WlxPmL1t8GqRMX+ll0nnDDPDDhEAOqkJFZKwwFYZ10
+-> ssh-ed25519 E8j6/g MoQ+KiKt+A1JLrO7Xdo/EUY1/RXgT02IT5KdDIrBFnI
-> ssh-ed25519 jo1MPA XPE2K3xYt5ECbDQP5T5VMTsGkIg9awvvLflpPSc522E
+-> ssh-ed25519 E8j6/g MoQ+KiKt+A1JLrO7Xdo/EUY1/RXgT02IT5KdDIrBFnI
G4xPLpMYsOz+5au7BaNk1n5naS5SWaxFKYue6f0gHWA
+-> ssh-ed25519 E8j6/g MoQ+KiKt+A1JLrO7Xdo/EUY1/RXgT02IT5KdDIrBFnI
-> ssh-ed25519 JBrabQ QFUSyS+N63P5XCJTbD32yfZ2GIh5J4A1YYL5T3CWDgg
+-> ssh-ed25519 E8j6/g MoQ+KiKt+A1JLrO7Xdo/EUY1/RXgT02IT5KdDIrBFnI
i/+qf3N+/p/34jW4of+YaQzQZI/Glab91Gu540ePDI8
-age-encryption.org/v1
+ivOpO8f87yAm1k/1FL3qhiaS5G/eW7jYV19Mz5QoEXc
-age-encryption.org/v1
+ivOpO8f87yAm1k/1FL3qhiaS5G/eW7jYV19Mz5QoEXc
age-encryption.org/v1
-age-encryption.org/v1
+ivOpO8f87yAm1k/1FL3qhiaS5G/eW7jYV19Mz5QoEXc
-> ssh-ed25519 E8j6/g MoQ+KiKt+A1JLrO7Xdo/EUY1/RXgT02IT5KdDIrBFnI
-age-encryption.org/v1
+ivOpO8f87yAm1k/1FL3qhiaS5G/eW7jYV19Mz5QoEXc
ivOpO8f87yAm1k/1FL3qhiaS5G/eW7jYV19Mz5QoEXc
-age-encryption.org/v1
+ivOpO8f87yAm1k/1FL3qhiaS5G/eW7jYV19Mz5QoEXc
-> ssh-ed25519 xUMv2w xht8LuQJaV0yhzvwbmYjUsgn3KdUqj8BtumeNRqrP10
-YTOf
---- PcaNjf88InU5siJmdazbEPYDJd1YeTDVFkrYzZcsJgM
-R�Q){َŊ��
�vZ�Q8�#��o��RPYG����w � h7
\ No newline at end of file
diff --git a/secrets/shared/git-send-email.age b/secrets/shared/git-send-email.age
index 84c7d8d7dcfb7903872a85842d6f8bd43e984536..632cac1f80ecc59fcd381abcdc83a3d18d46f0e1 100644
Binary files a/secrets/shared/git-send-email.age and b/secrets/shared/git-send-email.age differ
diff --git a/secrets/shared/irc-pw.age b/secrets/shared/irc-pw.age
index 8bef1213e8c9fc3b70f2942cc947f27fbab4f7cf..4cc17df22a3d79f9f337430d53a1da0442eaf149 100644
--- a/secrets/shared/irc-pw.age
+++ b/secrets/shared/irc-pw.age
@@ -1,19 +1,28 @@
age-encryption.org/v1
+-> ssh-ed25519 E8j6/g ULhSVxSexfROyh7t/qo4LlBmVaRb116JzL9HsKAmLiE
+Cva3JJ1W6Lgfj+O/QNxEWMpYbCFiTuTc+X5xZZw54uY
+-> ssh-ed25519 xUMv2w F9mWX2Nd01z56bo1NgtKq++u9b5flpF5qE5ihBbn5GU
-> ssh-ed25519 E8j6/g d1zXFjUit7YPN55uV8l2k3CVDFcKIdKBlSAwmUHY+nw
+-> ssh-ed25519 Cuo7gw xK29blvGUDpc+nIwIBeWzrvVWb3lOT6e5ocLl+1IvxM
+z+ZIHcU8DIhwwxkBG/MKc/fzslmiOkVLv+8mDKewI9o
+-> ssh-ed25519 E8j6/g d1zXFjUit7YPN55uV8l2k3CVDFcKIdKBlSAwmUHY+nw
Y+W5puz47ItyxU6eMYh/2C/s+Qs+CWfA+80tp14ZiZY
+-> ssh-ed25519 E8j6/g d1zXFjUit7YPN55uV8l2k3CVDFcKIdKBlSAwmUHY+nw
-> ssh-ed25519 xUMv2w /pGFstD9CQoIfQ++vK4xsacup4DmJLrAbJc8DhbPyG0
+-> ssh-ed25519 E8j6/g d1zXFjUit7YPN55uV8l2k3CVDFcKIdKBlSAwmUHY+nw
BT9/wTt4UYUPQJL/ZJXNVBfAUUykiyXt2Pc2FQe9Dm4
+-> ssh-ed25519 E8j6/g d1zXFjUit7YPN55uV8l2k3CVDFcKIdKBlSAwmUHY+nw
-> ssh-ed25519 jo1MPA +GG0hnR/eBw122D4dZvbMcsIfQitviv2UUv3I4yiYAs
+-> ssh-ed25519 E8j6/g d1zXFjUit7YPN55uV8l2k3CVDFcKIdKBlSAwmUHY+nw
KCsDTbnfxRyY8xXBtaEg9GHMF0eHrF9Ss5OgSSQWDq8
+-> ssh-ed25519 E8j6/g d1zXFjUit7YPN55uV8l2k3CVDFcKIdKBlSAwmUHY+nw
-> ssh-ed25519 JBrabQ KGZMHVVEwuGMkEqa5wM4/cZo7A9lnbySp1Sn2bA3wi4
+-> ssh-ed25519 E8j6/g d1zXFjUit7YPN55uV8l2k3CVDFcKIdKBlSAwmUHY+nw
NlPafvcnBfs1S0iDKqG0zAg7/grGI3VVkWOWhFF5iHQ
-age-encryption.org/v1
+Y+W5puz47ItyxU6eMYh/2C/s+Qs+CWfA+80tp14ZiZY
-age-encryption.org/v1
+Y+W5puz47ItyxU6eMYh/2C/s+Qs+CWfA+80tp14ZiZY
age-encryption.org/v1
-age-encryption.org/v1
+Y+W5puz47ItyxU6eMYh/2C/s+Qs+CWfA+80tp14ZiZY
-> ssh-ed25519 E8j6/g d1zXFjUit7YPN55uV8l2k3CVDFcKIdKBlSAwmUHY+nw
-age-encryption.org/v1
Y+W5puz47ItyxU6eMYh/2C/s+Qs+CWfA+80tp14ZiZY
---- TyFKdTP94CXHZg3iL0zb+OdKWLB1FbPwMXaNEkzdAHM
-�<6���anOQ��^�������Y�P��q2�j��
-z�Fg��c����
\ No newline at end of file
+Y+W5puz47ItyxU6eMYh/2C/s+Qs+CWfA+80tp14ZiZY
diff --git a/secrets/shared/spotify.age b/secrets/shared/spotify.age
index 8367be420aaa352e41d00088b765aba568ce5037..dc8bfdded70b57af50c5f6a9a9eb8c60048269e7 100644
Binary files a/secrets/shared/spotify.age and b/secrets/shared/spotify.age differ
diff --git a/secrets/shared/ssh-config-work.age b/secrets/shared/ssh-config-work.age
index 05ab03313c7df8f6e88b2475207b524aa7d18c3d..b1136f4500f174ef4dd9bccf61f4ff94574babf9 100644
Binary files a/secrets/shared/ssh-config-work.age and b/secrets/shared/ssh-config-work.age differ
diff --git a/secrets/shared/ssh-config.age b/secrets/shared/ssh-config.age
index 82cbe7362df27368a4547335d6f836bca660339d..1a94737a239ee484dc02610f5a8ffeb7439921cf 100644
Binary files a/secrets/shared/ssh-config.age and b/secrets/shared/ssh-config.age differ
diff --git a/secrets/work/cifs.age b/secrets/work/cifs.age
index 35eb63b6b47b9e7ac328d93b66eb1f5a279926ce..b322859d5599de36fe176c046cee52e0cf79a70a 100644
--- a/secrets/work/cifs.age
+++ b/secrets/work/cifs.age
@@ -1,14 +1,20 @@
age-encryption.org/v1
--> ssh-ed25519 E8j6/g h1UgF1wBEBym6mto99lHpxI5aTR/InLtB+qEgF6g7Uw
+age-encryption.org/v1
fFozoAaGXzxt9h8zjvIDoQbpcv3W24Cqc4gnJyGrQm0
+age-encryption.org/v1
-> ssh-ed25519 jo1MPA ijzgJKOkAo+sd3NYbWO1GrekE38UPvGwsfn9iDjgS2Y
+age-encryption.org/v1
cbWslYP3bDsmvxqI+brGSQorPCJ5sO/bzpb+x0IwzWY
+age-encryption.org/v1
-> ssh-ed25519 JBrabQ 4cgUO/SGfRXeyV0qkt21wsbFR54AYW9YjcEtXZ2pFV4
+age-encryption.org/v1
ZAo97dneSNnnESRT81aU+GqUBm6gBTPNWX8+fgZKDMY
+age-encryption.org/v1
-> y-grease ;B]h /L C:g
+age-encryption.org/v1
pZ+TsXnyMnizg4nKhbxpLgZ0X8BVJDswBx6e8vfkzS+nsVkygyEgmmg
-age-encryption.org/v1
+-> ssh-ed25519 E8j6/g h1UgF1wBEBym6mto99lHpxI5aTR/InLtB+qEgF6g7Uw
-age-encryption.org/v1
+-> ssh-ed25519 E8j6/g h1UgF1wBEBym6mto99lHpxI5aTR/InLtB+qEgF6g7Uw
age-encryption.org/v1
-age-encryption.org/v1
+-> ssh-ed25519 E8j6/g h1UgF1wBEBym6mto99lHpxI5aTR/InLtB+qEgF6g7Uw
-> ssh-ed25519 E8j6/g h1UgF1wBEBym6mto99lHpxI5aTR/InLtB+qEgF6g7Uw
diff --git a/secrets/work/netrc.age b/secrets/work/netrc.age
index 65acd2f9404d02f18cd0061c2fca40713f58b2ff..b17cbdf4d839aec38ed6180a71698fda8e24177c 100644
--- a/secrets/work/netrc.age
+++ b/secrets/work/netrc.age
@@ -1,12 +1,21 @@
age-encryption.org/v1
+age-encryption.org/v1
-> ssh-ed25519 E8j6/g Qz7+yH51tMzj1uY98P9MV0tXEf1DCSDCO2lIr/C5Bjc
+age-encryption.org/v1
1B8DKpZVzVQfevZ1xfalrpaM40hZiBjL3rKBOwmueE0
+age-encryption.org/v1
-> ssh-ed25519 jo1MPA ZsuqgFfcyKEZINlcqBqc3mnmtM8yE7Vh6dtj4i/D5TI
+age-encryption.org/v1
GAw5T8Mqd8LqGXtLZqJ+ADewL5H4wctHHbgIOZOZflg
+age-encryption.org/v1
-> ssh-ed25519 JBrabQ Zvf0y/ZYm9ogPC0fZV+J/FCIyRrP48X4ccoVTeV5bFQ
+age-encryption.org/v1
uKIKyKDnrAdnDjPBP0oY3NktEBQK9O9VSAykFrjC+24
+age-encryption.org/v1
-> yC7d,N9-grease eFX(X HYK 7L:a
+age-encryption.org/v1
oj6ihhdnlM6qHEUSBecee/K563PIko1Krw8YNoO16cRHtt8y9w
-age-encryption.org/v1
+-> ssh-ed25519 E8j6/g Qz7+yH51tMzj1uY98P9MV0tXEf1DCSDCO2lIr/C5Bjc
+-> ssh-ed25519 E8j6/g Qz7+yH51tMzj1uY98P9MV0tXEf1DCSDCO2lIr/C5Bjc
age-encryption.org/v1
-age-encryption.org/v1
+3��ƿ5p�O� {#xL� IE���< }��"g'qWVW���$��U / �|�5���$G|����4m-b�I �� ���؞�F�I�;^���"ی�Fb���0��U��`'ߛ��7��Z�j�m�� �X)�b\��-sd�X ����
\ No newline at end of file
diff --git a/secrets/work/pip.conf.age b/secrets/work/pip.conf.age
index 5262b33b02ec2703b7f0a1f35e9c6b0a46028f35..0929ea12827b9a270aea247ad0899265c8e0d9a8 100644
Binary files a/secrets/work/pip.conf.age and b/secrets/work/pip.conf.age differ
diff --git a/secrets/work/pypirc.age b/secrets/work/pypirc.age
index 479a227fae3a1f7baf7714ede04c025e90604d56..ea2d082caaadd361d8fce8662a5a1a3ed5f0d0ce 100644
Binary files a/secrets/work/pypirc.age and b/secrets/work/pypirc.age differ