Changed the keyboard variant configuration in xserver to include a trailing comma. This ensures the variant setting is correctly parsed by the xserver.
Enabled ResolveUnicastSingleLabel option in systemd-resolved configuration. This ensures unicast single-label domain names can be resolved. Added in the extraConfig section.
This commit updates the allowed TCP port for networking in the SGX configuration file. Instead of hardcoding the port number, it now uses the port specified in the netatalk configuration. This change enables more flexibility in port assignment and reduces potential conflicts.
The configuration update for the x86_64-linux t15 hardware adds a US layout variant to the existing German keyboard configuration. This change will allow switching between US and German keyboard layouts as per user requirements.
This commit updates the hardware configuration file for the x86_64-linux system. Specifically, it modifies the xserver keymap settings, ensuring proper keymap configuration for 'de' layout with 'nodeadkeys' variant in the x86_64-linux system.
Multiple boot options have been added in the hardware-configuration for the x86_64-linux system. This includes unsafe secrets mitigation options, such as 'noibrs', 'noibpb', 'nopti', etc., to potentially enhance system performance.
Created a new module for home printer setup and enabled it on x86_64-linux systems. The module configures printing drivers and ensures that printers are set up properly. In addition, moved specific printer configurations into the newly created homeprinter module.
This commit adds configurations for two printers (Brother DCP-L2530DW and Canon MG6300 series) in the nix file. It also enables printing services and resolves DNSSEC degradation. This ensures a more seamless and secure printing experience.
The indentation in the mailserver.nix file was fixed to follow proper syntax guidelines. This was a minor change, but it improves code readability and adherence to stylistic standards.
The 'atticd' service has been deleted from the sgx-nixos configuration. Additionally, the reference to 'atticd.nix' has been removed from the 'default.nix' imports. This was done to help streamline the system configuration.
The user's extraGroups in the NixOS module now contains 'wheel' by default. This change provides the user with more privileges. Consequently, 'wheel' has been removed from the SGX-Attic's 'user.extraGroups' as it became redundant.
This commit removes a predefined TCP port (8080) from the allowed list in the networking firewall. This choice will increase the security features by avoiding any unnecessary open ports in the firewall configuration.
The import statement for the atticd.nix file has been commented out in the default.nix file under the sgx-nixos system. This reflects changes in dependencies or system configurations.
This commit adds "wheel" to the user.extraGroups in the default SGX configuration file for x86_64-linux system. This is a necessary update to ensure users
This commit refactors the hardware configuration in the SGX attic. A new file named `disko.nix` has been added which houses the disk setup previously located on `hardware-configuration.nix`. Additionally, some parameters in `default.nix` have been updated and unneeded configuration settings have been removed.
This commit adds a new email alias to the mailserver configuration. This new addition will allow emails sent to this address to be properly routed and received.
This commit adds a new email alias to the mailserver configuration. This new addition will allow emails sent to this address to be properly routed and received.
This commit updates the list of email aliases for various users in the mailserver configuration. It reorders existing aliases and introduces new ones, extending their visibility in different domains. This offers aliases under the hoyer.social and hoyer.world domains, enhancing flexibility for users.
This commit updates the certificate scheme configuration on the mailserver. The `certificateScheme` and `acmeCertificateName` have been added, and an unnecessary certificate reference in the `acme.nix` file has been deleted.
This commit removes the dnsProvider attribute ("internetbs") from four entries in the acme.nix file. These changes aim to reduce redundancy and maintain simplicity in the script.
This commit removes the dnsProvider property from the "varlink.org" configuration within the acme.nix file. This step contributes to system simplification and potential adaptability improvements.
Added "herward-hoyer.de" as a new domain in the acme.nix file. Set "internetbs" as the DNS provider and added "*.herward-hoyer.de" to the extra domain names.
The DNS provider has been changed from "internetbs" to "cloudflare". Moreover, configurations for multiple domains have been updated and expanded, including "mx.surfsite.org", "surfsite.org", "hartwin-hoyer.de", "varlink.org", "hoyer.xyz", and others.
A new DNS provider, Cloudflare, has been added to the configuration for domain "harald-hoyer.de" in the acme.nix file. This change will affect the handling of DNS requests for this domain.
The commit includes the addition of the "meike-hoyer.de" domain to the acme.nix file, using "cloudflare" as the DNS provider. This update enhances the system's domain coverage.
This update removes the myprivacy.tools domain from the configuration of the mailserver. As a result, no incoming or outgoing messages will be processed for this domain. Also, all email addresses related to myprivacy.tools were also removed.
This commit changes the default retention period for garbage collection in the attic daemon setting from 30 days to 3 months. This will allow the system to maintain data for a longer period before cleaning.
This commit introduces a new parameter for setting the garbage collection interval in the atticd.nix file. The garbage collection interval is set to run every 30 days, helping to manage unnecessary data and improve system performance.
The atticd settings in systems/x86_64-linux/sgx-nixos have been updated to include an API endpoint. The primary purpose of this change is to ensure that atticd infrastructure can successfully connect to the new endpoint at https://attic.teepot.org.
The attic-client has been added to the packages for the x86_64-linux system. This change enables interaction with the Attic distributed storage system, expanding the capabilities of this system setting.
The attic-client has been added to the packages for the x86_64-linux system. This change enables interaction with the Attic distributed storage system, expanding the capabilities of this system setting.
This commit allows TCP traffic on port 8080 and permits ICMP echo requests for ping command in SGX-NixOS. Moreover, the necessary code adjustments have been made in the default.nix file.
This commit includes the atticd service to the sgx-nixos system. The `atticd.nix` file has been added with default configuration and the attic service has been included in imports in `default.nix`. Modifications were made in `flake.nix` and `flake.lock` to integrate attic dependencies.
A new package, k9s, has been added to the default packages for x86_64-linux system. This effort is to enhance the overall system functionality and user experience.
The goaccess.nix import has been commented out in the mx/default.nix file. This change signifies that the goaccess feature is currently not being utilized or is under maintenance.
This commit updates the docker image URL for the nix runner in the forgejo.nix configuration. The new URL points to the image hosted at git.hoyer.xyz/harald/nix-runner:latest. This change is
This change updates the nginx configuration in the x86_64-linux system. It adds a new parameter, clientMaxBodySize, which is set to allow larger payloads of up to 100M, improving our capacity to handle bigger client requests.
This commit enables the host network mode setting for the forgejo-runner in the x86_64-linux/mx system. This change facilitates better network performance and easy communication with the host.
The Docker image reference for the "nix" key in the `systems/x86_64-linux/mx/forgejo.nix` file was updated. This change points to a more recent version of the image, "nix-runner:latest", to ensure our deployments are based on the latest state.
This commit adds a new runner image for the Nix environment. The "nix:docker://backslashhh/nix:latest" line has been included in the Forgejo configuration, allowing Gitea to use the latest Nix image in the runner.
This commit updates the runner labels in the forgejo.nix file. It changes the URL links for the runner images and specifies the version of Ubuntu to be used. The new labels reference the runner images from the gitea repository rather than Node.js images.
This commit introduces the configuration for the gitea-actions-runner service in the forgejo.nix file. It also includes adding a new encrypted yaml file for the runner token. The configurations set up instances and labels for different versions of Ubuntu.
The system's configuration for x86_64-linux architecture has been modified. Specifically, warp-svc will not be started automatically anymore, as its reference in the "wants" section of "multi-user" targets in systemd configuration has been removed.
Adjust default garbage collection intervals and retention periods. Set default GC to run weekly and retain 14 days on nixos module and to run daily and retain 7 days on the 64-linux module.
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
Harald Hoyer