Commit graph

519 commits

Author SHA1 Message Date
Harald Hoyer
570e7f1bf0 feat(nix): update SGX hardware configuration for x1 11th gen
- Replaced `not-detected.nix` import with `lenovo-thinkpad-x1-11th-gen` module from `nixos-hardware`
- Improved hardware compatibility for the 11th generation Lenovo ThinkPad X1
2025-12-04 11:07:44 +01:00
Harald Hoyer
2787e11a3f fix(nix): remove kernelPackages override in T15 hardware configuration
- Deleted `kernelPackages` override setting for `linuxPackages_latest`
- Simplifies hardware configuration by relying on default kernel package selection
2025-12-04 10:56:27 +01:00
Harald Hoyer
86626e2ad2 chore(nix): comment out session variables in x86_64-linux configuration file
- Disabled `environment.sessionVariables` block by wrapping it in comments
- Maintains alignment with existing configuration practices
2025-12-04 10:54:05 +01:00
Harald Hoyer
a2c8388b47 feat(nix): update hardware configuration for T15 without detected modules
- Added imports: intel Tiger Lake CPU and GPU, laptop, SSD, and PC-specific configurations from `nixos-hardware`.
- Set `kernel-providers` to use `linuxPackages_latest`.
- Improved hardware configuration from `nixos againts configuration..` for modernized-hardware heldon
2025-12-04 10:51:20 +01:00
Harald Hoyer
fcb5e83a63 feat(nix): add obsidian and sync folders to sgx fileserver configuration
- Added "obsidian" folder with path "~/obsidian" and device list
- Added "sync" folder with path "~/sync" and device list
- Both folders configured with same device list: sgx, S25, x1, m4
- Maintains consistent folder configuration pattern in fileserver setup
2025-12-03 17:01:38 +01:00
Harald Hoyer
6b2190a918 • feat(nix): configure gnome-remote-desktop firewall rules and systemd target
- Added systemd service configuration to enable gnome-remote-desktop on graphical.target
  - Conditionally enable firewall rules for RDP ports (3389) only when gnome-remote-desktop is enabled
  - Maintains consistent service configuration with existing xrdp and firewall setup patterns
2025-12-03 16:52:23 +01:00
04d40c5bbd fix(x1): Use latest kernel packages for x1 system
Switched to using the latest kernel packages for the x1 system by removing the comment from the kernelPackages line and setting it to lib.mkOverride 0 pkgs.linuxPackages_latest. This ensures the system uses the most recent kernel modules and features while maintaining consistency with other configuration changes. The change aligns with recent system updates and package management improvements.
2025-12-03 16:33:40 +01:00
8fba80933c enable nix-index and disable command-not-found
- Enable nix-index program to provide package search functionality
- Disable command-not-found as nix-index handles missing command suggestions instead
- Maintains consistency with recent nix configuration improvements
2025-12-03 16:33:40 +01:00
Harald Hoyer
29e4ef307b • fix(nix): disable nixbuild.nix import for aarch64-darwin systems
- Commented out the nixbuild.nix import in both aarch64-darwin system configurations
  - Maintains consistent system configuration across darwin platforms
2025-12-03 16:25:35 +01:00
Harald Hoyer
270f3fe252 fix(nix): update system applications environment configuration
- Changed pathsToLink from string "/Applications" to list [ "/Applications" ] in system environment build
- Maintains consistent configuration format for environment paths
2025-12-03 16:25:27 +01:00
b9d5e775d2 fix(nixos): open port 22000 for rustdesk and add freerdp
- Added TCP port 22000 to networking.firewall.allowedTCPPorts for rustdesk server access
- Included freerdp package in GUI services module
- Maintains consistency with recent configuration refactorings and feature additions
2025-12-03 15:54:35 +01:00
Harald Hoyer
f5be97a2f4 • feat(nix): enable gnome-remote-desktop and xrdp services
• fix(nix): replace ollama with obsidian in system packages
• feat(nix): add cheese, freerdp, and rustdesk-flutter to GUI modules
• refactor(nix): reorganize gnome extensions and services configuration
• chore(nix): configure xrdp to use mkDefault and add firewall rules for RDP
• feat(nix): enable gnome-remote-desktop with proper port configuration
2025-12-03 15:35:05 +01:00
Harald Hoyer
71304185bd fix(nix): add DNS nameservers for headscale
- Added global DNS nameservers configuration for headscale
- Included Cloudflare DNS servers (1.1.1.1, 1.0.0.1) and IPv6 addresses
- Added local DNS server (192.168.178.254) for internal resolution
2025-12-03 10:49:18 +01:00
Harald Hoyer
05eceda8ca feat(nix): configure gitea-runner to depend on nginx service
- Added systemd service dependencies for gitea-runner-default
  - Ensured nginx.service is required and started before gitea-runner-default
  - Maintains proper service startup order for forgejo deployment
2025-12-03 10:48:56 +01:00
fc4b2a3e30 fix(nixos): rename gdm.autoSuspend key for display manager
- Corrected `services.xserver.displayManager.gdm.autoSuspend` to `services.displayManager.gdm.autoSuspend` for proper configuration.
-
2025-12-03 10:04:41 +01:00
0ccdd23cba fix(nixos): correct typo in Postfix configuration
- Renamed `setting.main` to `settings.main` in the Postfix module for consistency with configuration standards.
- Ensured proper functionality of service by aligning with expected key structure.
2025-12-03 10:03:29 +01:00
4386027761 refactor(nixos): standardize configuration structures
- Renamed and reorganized configuration keys for consistency (`settings` usage).
- Updated Postfix, systemd, and Syncthing configurations to adhere to the standardized format.
- Improved maintainability and readability of NixOS configurations.
2025-12-03 10:02:15 +01:00
d7424a4cb6 feat(nixos): refactor Git and GUI configuration handling
- Replaced `inherit` with explicit `settings` for Git user configuration.
- Unified Git configuration structure across NixOS and home modules.
- Adjusted GUI configuration by enabling `gdm.autoSuspend` and reordering options.
2025-12-03 09:57:52 +01:00
9f792774a5 feat(nix): enable GNOME remote desktop and update flake lock
- Enabled `services.gnome.gnome-remote-desktop` in the `x1` configuration.
- Removed an unused `lib` parameter in the `forgejo.nix` module.
- Updated the `home-manager` source in the `flake.lock` file with the latest revision and hash.
2025-12-03 09:44:16 +01:00
62f1eb0a2d Update forgejo-runner package reference
Switched from `forgejo-actions-runner` to `forgejo-runner` package for the gitea actions runner instance. This aligns with the updated package naming convention in the system configuration. The change ensures proper integration with the forgejo ecosystem and maintains consistency with the project's package structure.
2025-12-03 09:43:59 +01:00
884ceee9fd fix(mx): set mailserver stateVersion 2025-12-03 07:08:57 +01:00
5444962eda fix(mx): set mailserver stateVersion 2025-12-03 07:02:18 +01:00
5d7e14e9de nixos-25.11 2025-12-02 19:37:14 +01:00
549b3633d1 nixos-25.11 2025-12-02 18:58:52 +01:00
Harald Hoyer
18871b8617 chore(nix): enable WebSocket proxy in nginx config
- Added `proxyWebsockets = true` to improve WebSocket support.
- Ensures seamless communication for services relying on WebSocket connections.
2025-11-27 16:44:37 +01:00
Harald Hoyer
0fa35124db chore(nix): add home.hoyer.world to ACME extra domains
- Updated `acme.nix` to include `home.hoyer.world` in `extraDomainNames`.
- Ensures ACME generates certificates for the new domain.
2025-11-27 15:42:26 +01:00
Harald Hoyer
6cb03a2c8f chore(nix): add reverse proxy for home.hoyer.world
- Configured reverse proxy in `nginx.nix` for `home.hoyer.world`.
- Disabled ACME and redirected to `internal.hoyer.world` with forced SSL.
2025-11-27 15:30:54 +01:00
Harald Hoyer
40e677ea02 chore(nix): add TCP port 10400 to Wyoming firewall
- Updated `wyoming.nix` to allow traffic on TCP port `10400`.
- Ensures compatibility with services requiring this port.
2025-11-27 15:24:38 +01:00
Harald Hoyer
eb6136a0e0 chore(nix): simplify OpenWakeWord server config
- Removed nesting for `openwakeword` in `wyoming.nix` configuration.
- Preserved service functionality with TCP port `10400` and preloaded models.
2025-11-27 15:22:42 +01:00
Harald Hoyer
45d051924b chore(nix): add OpenWakeWord service to Wyoming config
- Enabled `openwakeword` service in `wyoming.nix` with TCP port `10400`.
- Preloaded model support added for voice commands like "hey_jarvis".
2025-11-27 15:21:39 +01:00
Harald Hoyer
4c641910fd chore(nix): add Wyoming service configuration
- Introduced a new `wyoming.nix` file with service definitions for `faster-whisper` and `piper`.
- Enabled TCP ports `10200` and `10300` in the firewall for service communication.
- Updated SGX configuration to include `wyoming.nix` in system imports.
2025-11-27 15:04:53 +01:00
Harald Hoyer
66022d19c2 chore(nix): enable libvirtd and update user groups
- Enabled `libvirtd` in virtualization settings to allow libvirt usage.
- Added `libvirtd` to `user.extraGroups` for better permissions and management.
2025-11-27 10:37:46 +01:00
Harald Hoyer
1afee15561 chore(nix): add libvirt to default packages
- Included `libvirt` in the default package set for base services.
- Ensures virtualization support is readily available.
2025-11-27 10:27:17 +01:00
Harald Hoyer
c020457ac6 chore(nix): improve libvirt and virtualisation settings
- Added `qemuOvmf = true` to enable UEFI support in libvirt.
- Restructured `libvirtd` configuration for better readability.
2025-11-27 10:21:48 +01:00
c0ae011636 chore(nix): bump claude-code to 2.0.51
- Updated package version from 2.0.50 to 2.0.51.
- Refreshed source hash and matched npmDepsHash for the new version.
2025-11-24 21:09:36 +01:00
9c5a7b3f39 chore(nix): re-enable claude-code in unstable overlay
- Uncommented `claude-code` package definition for usage in the overlay.
- Commented out its previously disabled entry for consistency.
2025-11-24 20:59:33 +01:00
86a7dc1cfe chore(nix): update unstable overlay for claude-code
- Enabled `claude-code` in the unstable overlay by uncommenting its entry.
- Commented out its previous custom package definition for consistency.
2025-11-24 20:58:15 +01:00
734bd82b6c chore(nix): disable opencode in unstable overlay
- Commented out `opencode` from the unstable overlay in default.nix.
- Ensures the package is excluded without permanent removal.
2025-11-24 20:56:56 +01:00
0d2b7bd942 feat(claude-code): update to version 2.0.50
- Bumped package version from 2.0.36 to 2.0.50.
- Updated package source hash and npmDeps hash to match the new version.
- Refreshed `package-lock.json` with the updated version.
2025-11-24 20:54:18 +01:00
Harald Hoyer
7883fe4221 chore(nix): update fileserver configuration
- Reformatted `netatalk` service dependencies for readability.
- Updated `hosts allow` setting to include `100.64.0.` for enhanced network access control.
2025-11-24 16:01:04 +01:00
Harald Hoyer
bf82f7afa0 chore(nix): enable RustDesk and update configurations
- Uncommented `rustdesk.nix` in MX system and added `rustdesk-flutter` to GUI services.
- Disabled `services.rustdesk-server.signal` on X1 system to align with updated settings.
2025-11-24 14:59:39 +01:00
Harald Hoyer
0603825f36 chore(nix): remove RustDesk server from aarch64-darwin config
- Deleted `services.rustdesk-server.enable` from the configuration.
- Disables the RustDesk server as it is no longer required or used.
2025-11-24 14:38:52 +01:00
Harald Hoyer
ff89519ba5 chore(nix): enable RustDesk server on Darwin and X1
- Added `services.rustdesk-server.enable = true` to aarch64-darwin and x86_64-linux X1 configurations.
- Provides remote desktop functionality through RustDesk server.
2025-11-24 14:36:21 +01:00
Harald Hoyer
fb990e65c4 chore(nix): add Tailscale to default packages
- Included `tailscale` in the default package set for Darwin services.
- Ensures availability of Tailscale for secure connectivity and VPN management.
2025-11-24 14:15:09 +01:00
4e67949e03 fix: headscale web proxy 2025-11-24 14:07:09 +01:00
caad1ddba9 Revert "chore(nix): enhance Nginx proxy settings for Headscale"
This reverts commit 2d0d03f845.
2025-11-24 13:57:00 +01:00
Harald Hoyer
2d0d03f845 chore(nix): enhance Nginx proxy settings for Headscale
- Added extra HTTP headers and security configurations in the Nginx proxy for Headscale.
- Improves websocket handling, security headers, and HTTPS redirection.
2025-11-24 13:54:52 +01:00
Harald Hoyer
8d6db08029 chore(nix): add OIDC configuration to Headscale
- Introduced OIDC settings in Headscale, including allowed domains, client ID, client secret path, and issuer.
- Enables support for OpenID Connect authentication.
2025-11-24 11:22:21 +01:00
Harald Hoyer
ef4ac5e228 chore(nix): fix property name in Headscale settings
- Corrected `baseDomain` to `base_domain` in the Headscale DNS settings.
- Aligns property naming with expected schema for proper configuration.
2025-11-21 16:24:28 +01:00
Harald Hoyer
2a810ce759 chore(nix): remove enableACME from Headscale Nginx config
- Dropped `enableACME` as it is redundant when `useACMEHost` is defined.
- Simplifies Nginx virtual host configuration for Headscale.
2025-11-21 16:23:53 +01:00