Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2020-04-04 | r/616 chore(ops/nixos/nugget): Install ffmpeg (including libnpp support) | Vincent Ambo | 1 | -0/+1 | |
2020-04-04 | r/615 feat(ops/nixos/nugget): Add module for v4l2loopback support | Vincent Ambo | 2 | -0/+13 | |
This kernel module creates a fake video input device to which I can stream various things, such as screen grabs or qyliss' video stream for TVL. | |||||
2020-04-04 | r/611 feat(ops/nixos/nugget): Install clang & friends system-wide | Vincent Ambo | 1 | -0/+3 | |
2020-03-12 | r/602 fix(ops/nixos/nugget): Ensure that 'nuggetEmacs' is used for EXWM | Vincent Ambo | 1 | -7/+8 | |
2020-03-12 | r/601 chore(ops/nixos/nugget): Disable DHCP for Remarkable USB conn | Vincent Ambo | 1 | -1/+0 | |
This otherwise holds up the boot process if the device is not connected, which is annoying. | |||||
2020-03-12 | r/600 feat(ops/nixos/nugget): Install google-c-style in Emacs | Vincent Ambo | 1 | -1/+6 | |
2020-03-01 | r/589 fix(ops/nixos/camden): Add required options for ACME updates | Vincent Ambo | 1 | -12/+17 | |
The implementation for provisioning ACME certificates has changed in nixos-unstable[0] and now requires a few extra options to be set. [0]: https://github.com/NixOS/nixpkgs/pull/77578 | |||||
2020-03-01 | r/588 chore(third_party): Remove guile 3.0 override | Vincent Ambo | 1 | -1/+1 | |
I don't actually use guile at all, this was just for experimentation. | |||||
2020-03-01 | r/586 chore(ops/nixos/nugget): Use DHCP for Remarkable USB connection | Vincent Ambo | 1 | -0/+1 | |
2020-02-21 | r/567 fix(ops/nixos/camden): Add missing quote in nginx config | Vincent Ambo | 1 | -1/+1 | |
2020-02-21 | r/566 feat(ops/nixos/camden): Modify nginx log format | Vincent Ambo | 1 | -8/+8 | |
This log format contains more structured and correctly typed information, which I can now use for dashboards and stuff in Stackdriver. | |||||
2020-02-21 | r/565 fix(ops/nixos/camden): Configure nginx to not log hostnames | Vincent Ambo | 1 | -1/+1 | |
Hostname prefixes break JSON serialisation, leading to useless Stackdriver Logging entries. | |||||
2020-02-21 | r/564 feat(ops/nixos/camden): Install jq | Vincent Ambo | 1 | -0/+1 | |
2020-02-21 | r/563 feat(ops/nixos/camden): Forward logs to Stackdriver Logging | Vincent Ambo | 1 | -0/+8 | |
Enables the journaldriver service to forward logs into a "home" log-stream in the "tazjins-infrastructure" project. The service account key for camden has been placed on the machine manually. | |||||
2020-02-21 | r/562 chore(ops/nixos/nugget): Remove input-fonts package | Vincent Ambo | 1 | -1/+0 | |
My default font is now Jetbrains Mono everywhere. | |||||
2020-02-21 | r/559 chore: Rename pkgs->depot in all Nix file headers | Vincent Ambo | 3 | -31/+27 | |
2020-02-17 | r/557 Merge branch 'fix/camden-trusted-users' | Vincent Ambo | 1 | -0/+2 | |
2020-02-17 | fix(ops/nixos/camden): Add myself to trusted Nix users | Vincent Ambo | 1 | -0/+2 | |
2020-02-17 | r/556 fix(ops/nixos/camden): Use pounce from //third_party | Vincent Ambo | 1 | -1/+1 | |
2020-02-17 | r/553 feat(ops/nixos/camden): Install pounce on camden | Vincent Ambo | 1 | -1/+8 | |
2020-02-17 | r/552 feat(ops/nixos/camden): Enable support for mosh | Vincent Ambo | 1 | -0/+2 | |
2020-02-17 | r/551 Merge branch 'feat/camden-migration' | Vincent Ambo | 1 | -1/+1 | |
2020-02-17 | chore(ops/nixos/nugget): Add /etc/hosts entries for camden hostnames | Vincent Ambo | 1 | -1/+1 | |
2020-02-14 | r/550 refactor(ops/nixos/camden): Merge ACME certificate blocks | Vincent Ambo | 1 | -11/+7 | |
2020-02-14 | r/549 feat(camden): Move to actual tazj.in hostnames | Vincent Ambo | 1 | -4/+15 | |
2020-02-12 | r/548 feat(ops/nixos/nugget): Add camden to /etc/hosts | Vincent Ambo | 1 | -0/+7 | |
At the moment there is no other way for requests from nugget to camden to resolve correctly, as the Hyperoptic router is eating this traffic on the LAN. | |||||
2020-02-12 | r/547 feat(ops/nixos/camden): Add nginx vhost for cgit at git.camden | Vincent Ambo | 1 | -0/+21 | |
2020-02-12 | r/546 feat(ops/nixos/camden): Move ACME configuration out of nginx | Vincent Ambo | 1 | -4/+13 | |
This makes it possible to re-use the same provisioning mechanism for multiple related domains. | |||||
2020-02-12 | r/545 feat(ops/nixos/camden): Set up cgit service | Vincent Ambo | 1 | -5/+27 | |
Adds a user & group which are configured to own the local depot copy, and a cgit service to serve it. The depot checkout was configured as: mkdir -p /var/git && chown git: /var/git # now, as the git user, in /var/git git clone --bare ... depot chmod -R g+rw /var/git chmod g+s (find /var/git -type d) git init --bare --shared=all depot My personal user is a member of the git group, which means that after the above configuration I can push to the bare repo as my user and things work. Also, crucially, the `post-update` hook must be enabled as cgit uses the dumb HTTP transport. | |||||
2020-02-11 | r/543 fix(nix/tailscale): Fix incorrect Tailscale ACL config type | Vincent Ambo | 1 | -8/+10 | |
2020-02-11 | r/542 feat(ops/nixos/camden): Serve /blobs/ from /var/www/blobs | Vincent Ambo | 1 | -1/+5 | |
This directory is writeable by me and is intended to make it easy to serve random blobs. | |||||
2020-02-11 | r/541 feat(ops/nixos/camden): Enable haveged entropy "generator" | Vincent Ambo | 1 | -3/+4 | |
2020-02-11 | r/540 feat(ops/nixos/nugget): Set up nginx serving homepage & blog | Vincent Ambo | 1 | -0/+53 | |
This nginx does not currently log access correctly because for some impenetrable reason (as is tradition), neither /dev/stdout nor /dev/fd/1 exist for nginx at runtime. This is probably systemd's doing, but I'll debug it later. | |||||
2020-02-11 | r/538 fix(ops/nixos/camden): Use package set from depot pin | Vincent Ambo | 1 | -2/+9 | |
2020-02-11 | r/537 feat(nix/tailscale): Add function for generating tailscale ACLs | Vincent Ambo | 1 | -1/+8 | |
... and use it on Camden! | |||||
2020-02-11 | r/536 feat(ops/nixos/camden): Join camden.tazj.in into Tailscale mesh | Vincent Ambo | 1 | -3/+21 | |
2020-02-11 | r/535 fix(ops/nixos): Add camden to rebuilder script | Vincent Ambo | 1 | -0/+4 | |
This should probably be templated instead. | |||||
2020-02-11 | r/534 feat(ops/nixos): Add initial configuration for host camden | Vincent Ambo | 3 | -7/+96 | |
2020-02-11 | r/533 feat(ops/nixos/nugget): Enable tailscale-relay | Vincent Ambo | 1 | -0/+12 | |
2020-02-11 | r/532 feat(ops/nixos): Add NixOS module for running tailscale | Vincent Ambo | 2 | -0/+78 | |
This uses the "legacy" tailscale Linux client, but built from source as per the previous commits. | |||||
2020-02-11 | r/530 chore(ops/nixos/nugget): Install tailscale on nugget | Vincent Ambo | 1 | -0/+1 | |
2020-02-08 | r/483 feat(ops/nixos/nugget): Install i3lock | Vincent Ambo | 1 | -0/+1 | |
2020-02-07 | r/478 feat(ops/nixos/nugget): Enable pcscd & install Yubikey tools | Vincent Ambo | 1 | -0/+8 | |
2020-02-04 | r/476 feat(ops/nixos/nugget): Enable U2F hardware support | Vincent Ambo | 1 | -0/+1 | |
2020-01-25 | r/456 feat(ops/nixos/nugget): Install unzip | Vincent Ambo | 1 | -0/+1 | |
2020-01-20 | r/435 feat(ops/nixos/nugget): Enable Keybase "service" | Vincent Ambo | 1 | -0/+2 | |
2020-01-19 | r/423 feat(third_party/guile): Override guile to version 3.0.0 | Vincent Ambo | 1 | -0/+1 | |
Lets try this thing out! | |||||
2020-01-19 | r/422 feat(ops/nixos/nugget): Install miller | Vincent Ambo | 1 | -0/+1 | |
2020-01-19 | r/419 chore(ops/nixos/nugget): Aimlessly tweak font configuration | Vincent Ambo | 1 | -0/+11 | |
These settings seem to be very mildly better than what I had before, but I'm not entirely sure. | |||||
2020-01-19 | r/416 feat(ops/nixos/nugget): Connect to wifi & install Google Chrome | Vincent Ambo | 1 | -0/+10 | |
This adds configuration which, sometimes, when the stars align just right, makes it possible to cast to the Chromecast from nugget. |