Commit graph

270 commits

Author SHA1 Message Date
Harald Hoyer
45c3c766cb chore(nixbuild): remove deprecated shellInit for SSH sessions
- Deleted `environment.shellInit` previously used for Nix path initialization in SSH sessions.
- Path initialization is now fully handled by `programs.fish.loginShellInit` for consistency across environments.
2025-11-13 11:54:03 +01:00
Harald Hoyer
18844d662b chore(nixbuild): add sshKey field and finalize fish init
- Added `sshKey` field for all builder configurations in `nixbuild.nix` to standardize access keys.
- Replaced `programs.fish.shellInit` with `environment.shellInit` and introduced `programs.fish.loginShellInit` for improved Nix path initialization.
2025-11-13 11:51:57 +01:00
Harald Hoyer
cd86d39ec1 chore(flakes): update Flake lockfile and configs
- Updated multiple Flake lockfile entries to the latest revisions for improved consistency with upstream changes.
- Removed redundant `sshKey` fields from builder configurations in `nixbuild.nix`.
- Added `Nix` path initialization for fish shell SSH sessions and refactored mouse bindings in `default.nix`.
2025-11-13 11:36:46 +01:00
3f6c1df78c feat(nixbuild): centralize distributed build config
- Moved shared distributed build settings to `nixbuild.nix` for reuse.
- Updated `m4` and `rialo` systems to import the centralized configuration.
- Simplifies maintenance and ensures consistency across systems.
2025-11-13 10:27:54 +01:00
143e8cbf98 feat(build): enable distributed builds and caching setup
- Added Nix distributed build configuration for multiple machines.
- Introduced caching setup with substituters and sandbox paths.
- Enabled optional build configurations with ccache support.
2025-11-13 09:42:19 +01:00
ecee6bd93a feat(m4): disable dock autohide on aarch64-darwin
- Set `system.defaults.dock.autohide` to `false` in `m4/default.nix`.
- Ensures the dock remains visible by default for better user accessibility.
2025-10-02 08:38:00 +02:00
440cf540eb feat(sgx): adjust tmpfs usage for better configuration
- Set `boot.tmp.useTmpfs` to `false` in `x86_64-linux/sgx/default.nix`.
- Applied `lib.mkDefault` to `boot.tmp.useTmpfs` in `services/base/default.nix` for consistency.
2025-09-28 08:19:45 +02:00
3b0809697d feat(sgx): add claude-code 2025-09-22 16:56:38 +02:00
76ead2d77c feat(sgx): enable nix-ld 2025-09-19 10:24:09 +02:00
Harald Hoyer
8d03b05ffb feat(sgx): add cratedocs-mcp service and update flakes
- Enabled `services.cratedocs-mcp` with firewall access in the SGX module for enhanced functionality.
- Updated multiple Flake lockfile entries to the latest revisions, ensuring access to updated upstream changes.
2025-09-17 15:57:18 +02:00
Harald Hoyer
d316ef4c2d refactor(gui): replace GNOME remote desktop with XRDP
- Switched from GNOME remote desktop to XRDP for remote access services across configurations.
- Removed GNOME-specific settings and added XRDP service settings in GUI and system modules.
- Enhances flexibility and aligns remote desktop service configuration.
2025-09-12 09:38:53 +02:00
Harald Hoyer
15e61b339c refactor(x1): remove unused IPU6 module
- Deleted `ipu.nix` and its reference in `default.nix` under `x1` systems.
- Simplifies configuration by removing unused and commented-out code.
2025-09-11 14:35:38 +02:00
Harald Hoyer
dc3a536709 feat(sgx): enable GUI in SGX module
- Changed `gui.enable` to `true` in the SGX default configuration.
- Allows GUI support within the SGX environment for improved usability.
2025-09-11 14:31:40 +02:00
Harald Hoyer
0fb0cfae93 refactor(gnome): relocate remote desktop configuration
- Moved GNOME remote desktop settings from `x1` module to GUI services module.
- Centralizes related configurations for better maintainability.
2025-09-11 14:31:13 +02:00
1ae46cd7b8 feat(x1): open firewall ports for remote desktop
- Allowed TCP and UDP port 3389 in the firewall configuration.
- Ensures proper functionality of gnome-remote-desktop on the x1 system.
2025-09-11 13:39:28 +02:00
296aac6864 feat(x1): configure gnome-remote-desktop systemd service
- Added `wantedBy = ["graphical.target"]` to the `gnome-remote-desktop` service configuration.
- Ensures the service starts automatically with the graphical session.
2025-09-11 13:36:54 +02:00
61d5c8416e feat(x1): enable gnome-remote-desktop service
- Enabled `gnome-remote-desktop` to allow remote desktop connectivity by default on the `x1` system.
- Improves accessibility and remote management for the system.
2025-09-11 13:32:18 +02:00
2cffb1bc35 feat(x1): add gnome-remote-desktop 2025-09-11 13:21:16 +02:00
cb53d49ec3 feat(m4): add opencode to default packages
- Included `opencode` to the default package list for `aarch64-darwin`.
- Ensures availability of the `opencode` tool for users by default.
2025-09-11 09:08:47 +02:00
10290acefb feat(m4): add gemini-cli to default packages
- Included `gemini-cli` to the list of default packages for `aarch64-darwin` platform.
- Ensures availability of the `gemini-cli` tool for users by default.
2025-09-11 09:03:49 +02:00
176aa2c2fe chore(m4nix): sync with rnix 2025-09-09 09:08:40 +02:00
70eaf73fe9 chore(rnix): update system state 2025-09-09 09:08:08 +02:00
848c5ba825 chore(m4nix): re-install with rosetta 2025-09-09 09:04:38 +02:00
bccc0a57c3 feat(x1): add nixos-hardware.nixosModules.lenovo-thinkpad-x1-11th-gen 2025-09-08 15:45:01 +02:00
674941420f feat(nixos): add claude-code and update jetbrains-toolbox
- Added `claude-code` to the default packages for `aarch64-linux/rnix`.
- Moved `jetbrains-toolbox` to be included for all platforms instead of x86_64 only.
2025-09-05 14:42:42 +02:00
28e3de71ce add rosetta and cachix
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2025-08-14 16:27:33 +02:00
33b598d546 add rnix
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2025-08-14 15:39:09 +02:00
b405c7e906 feat(x1): add 'tss' group to user extraGroups
- Included `tss` group in `user.extraGroups` to grant necessary permissions.
- Ensures proper functionality and aligns with updated requirements.
2025-08-14 09:21:07 +02:00
e95b2ddc9e feat(aarch64-darwin): add rialo 2025-08-04 12:48:32 +02:00
acf6c32df8 fix(x1): kernel does not compile
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2025-07-31 13:30:04 +02:00
d5f4c3035e feat(sgx): update Samba configuration for protocol and macOS
- Set minimum protocol to SMB2 and enabled extended attribute (EA) support in Samba settings.
- Added `fruit:nfs_aces` and `fruit:wipe_intentionally_left_blank_rfork` options for improved macOS compatibility.
2025-07-30 14:16:48 +02:00
f08881f303 feat(sgx): rename Time Machine share key in Samba config
- Changed the `time-machine` key to `TimeMachineBackup` in the Samba share configuration.
- Aligns key naming to standard conventions and improves readability.
2025-07-30 14:00:21 +02:00
1338ced84f feat(sgx): disable Avahi service in fileserver configuration
- Set `services.avahi.enable` to `false` in `fileserver.nix`.
- Ensures Avahi is disabled, aligning with updated system requirements.
2025-07-30 13:56:33 +02:00
959e82bcee feat(sgx): disable Netatalk and enhance Samba configuration
- Disabled Netatalk service by setting `enable` to `false`.
- Improved macOS compatibility in Samba with specific `fruit` and `vfs` options.
- Added a new Time Machine share configuration for backups.
2025-07-30 13:27:03 +02:00
ba70ee7f59 feat(aarch64-darwin): add azure-cli to system packages
- Included `azure-cli` in `environment.systemPackages` for aarch64-darwin.
- Provides support for managing Azure resources directly from the system.
2025-07-29 15:56:52 +02:00
f41c21344e chore(mailserver): update password hashing method
- Changed default hashing method in `mkpasswd` command to `sha-512`.
- Ensures stronger security compared to the previous bcrypt method.
2025-07-29 15:54:38 +02:00
d9097dbd72 feat(x1): increase freeze timeout and remove cloudflare-warp
- Added `power.pm_freeze_timeout` kernel setting with a value of 30000 to extend system freeze timeout.
- Removed `cloudflare-warp` from system packages and systemd packages for cleanup.
2025-07-28 14:10:21 +02:00
d3ae0e90ba feat(x1): add fabric-ai to system packages
- Added `fabric-ai` to the `environment.systemPackages` list for x1.
- Ensures availability of the `fabric-ai` tool in the x1 system configuration.
2025-07-07 09:44:48 +02:00
4c11f744c7 chore(x1): reorder systemPackages for better readability
- Reorganized the `environment.systemPackages` list alphabetically.
- Ensured no functional changes to the x1 system configuration.
2025-07-07 09:43:52 +02:00
b23f555241 chore(x1): remove piper from application list
- Dropped `piper` from the x1 system configuration.
- Ensured minimal impact on related dependencies and applications.
2025-07-03 13:02:13 +02:00
230c6322e0 feat(x1): enable ipu and add new applications
- Enabled `ipu.nix` in the x1 system configuration.
- Added `piper-tts`, `libcamera`, and `gnome-terminal` to the application list.
2025-07-03 12:59:58 +02:00
620ac9bd68 feat: add gemini-cli to x1 system and overlays
- Introduced `gemini-cli` as a CLI tool in the x1 configuration.
- Added a new overlay for `gemini-cli` package with npm dependencies.
- Removed `goose-cli` and `aider-chat` from the existing application list.
2025-06-26 13:50:06 +02:00
f464e19fec fix: include fabric-ai in aarch64-darwin CLI apps
- Added fabric-ai to the list of installed CLI applications for aarch64-darwin.
- Ensures consistency across tools available for users.
2025-06-01 08:35:39 +02:00
36ed41047d feat(x1): enable cratedocs-mcp service and update dependencies
- Enabled the cratedocs-mcp service in the x1 configuration.
- Added `cratedocs` as a new flake input and included its modules and overlay.
- Updated multiple flake inputs (`nixpkgs`, `rust-overlay`, etc.) with new revisions.
2025-05-28 09:41:21 +02:00
d700d4b8e3 feat(kernel): adjust inotify limits for JetBrains IDEs
- Removed inotify sysctl settings from hardware configuration.
- Added updated inotify limits under GUI services for JetBrains IDEs.
This ensures better compatibility and performance for these tools.

Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2025-05-27 13:59:08 +02:00
b453062c57 refactor: simplify Nix module inputs and update configurations
Simplified input argument structures across multiple Nix modules by removing unnecessary bindings and standardizing formats. Enabled `system.primaryUser` setting and updated PAM configuration for sudo touch ID authentication. Removed deprecated or unused configurations, including user fields in metacfg and outdated options in some modules.
2025-05-27 13:12:18 +02:00
bbc247aa23 refactor: simplify Nix configuration and update dependencies
Replaced custom Nerd Fonts overrides with predefined ones. Removed unused Neovim settings and plugins, and disabled Neovim for a specific user. Updated various flake dependencies to their latest versions.
2025-05-27 12:59:30 +02:00
f77bad4bf0 feat(sgx): add support for "m4" configuration
Included "m4" in the list of supported configurations for SGX. This enhances compatibility and enables additional use cases for the fileserver.
2025-05-21 10:00:39 +02:00
5893c5b84c chore(sgx): turn off libvirtd 2025-05-21 09:56:12 +02:00
2e28118edf fix(mail.nix): update virtual alias mappings for root/admin
Adjusted the virtual_alias_maps to properly include both root and admin email forwarding. Removed unused rootAlias line and ensured the configuration aligns with intended email routing behavior.
2025-05-21 09:41:36 +02:00