Commit graph

140 commits

Author SHA1 Message Date
Harald Hoyer 712f3aaeb7 feat(nixos-services): add refresh option to autoUpgrade
This commit adds a new "--refresh" flag to the system.autoUpgrade in the NixOS services base module.
2024-06-12 10:31:24 +02:00
Harald Hoyer 5c863a8fa0 feat: Remove specific email addresses from mailserver config
This commit removes specific email addresses related to "meike-knutz.de" and "gerlinde-hoyer.de" in the mailserver configuration. It affects aliases, postmaster, and abuse sections of the configuration.
2024-06-11 10:36:21 +02:00
Harald Hoyer 5b768bee9a feat: update defaultPhoneRegion config in nextcloud.nix
This commit removes the defaultPhoneRegion from the config section and sets it in the settings section in nextcloud.nix file. This reorganization improves the structure and readability of the configuration.
2024-06-11 10:35:11 +02:00
Harald Hoyer dd6bdf3c3f feat: upgrade Nextcloud package to version 29
The Nextcloud package in the x86_64-linux system has been upgraded from version 28 to version 29. This update introduces the latest features, improvements, and security fixes from the Nextcloud project.
2024-06-11 10:28:46 +02:00
Harald Hoyer 2096f688db chore: nix flake lock update
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-06-11 10:18:58 +02:00
Harald Hoyer 0a57bf37ef feat: 24.05 for everyone
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-06-11 10:15:15 +02:00
Harald Hoyer a7484b3891 feat: Move kernel package override to specific system configs
This commit moves the kernel package version override from the base nixos service to specific system configurations. Now, the latest linux packages will be used only in the system configurations where the override has been explicitly added. This approach gives us more flexibility to handle different kernel package versions for different systems.
2024-06-03 13:21:50 +02:00
Harald Hoyer 9c50d1379a feat: all besides mx to 24.05 2024-06-03 11:41:14 +02:00
Harald Hoyer 6331eb6277 feat: sgx-nixos to 24.05 2024-06-03 11:14:24 +02:00
Harald Hoyer 40ee6ff1f2 feat: nixos 24.05
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-06-03 11:06:26 +02:00
Harald Hoyer 1cd941d447 fix: update pccs_url in sgx_default_qcnl.conf
An extra comma is added to the pccs_url in the sgx_default_qcnl.conf file to correct a possible syntax error. This fix ensures the correct parsing of the JSON object.
2024-05-21 15:44:20 +02:00
Harald Hoyer db296ef226 feat: add BindPaths to systemd services in aesmd_dcap
This commit updates systemd services configuration of aesmd_dcap by adding a new directory to BindPaths. The file "/dev/log" has been added to ensure proper logging.
2024-05-21 15:44:00 +02:00
Harald Hoyer 27fc4658e1 feat: update input 'nixsgx-flake' instead of 'nixsgx' 2024-05-21 15:22:43 +02:00
Harald Hoyer 2994566928 feat: update nixsgx input in autoUpgrade 2024-05-21 15:18:32 +02:00
Harald Hoyer b253dd4e58 feat: Add gnome.cheese and pstree to gui default services
This commit includes gnome.cheese and pstree to the list of default services in the gui module. Users will now have these services available by default in the graphical user interface.
2024-05-21 11:28:43 +02:00
Harald Hoyer 86b3ff2cb0 feat(systemd): add check_root service and timer
A new systemd service, `check_root`, has been added which checks disk usage of the root directory. If usage exceeds 85%, an email alert is sent. In addition to this service, a corresponding systemd timer is added to trigger this check daily.
2024-05-17 16:58:44 +02:00
Harald Hoyer 0032016cfa feat: Update encrypted data and metadata in .secrets file 2024-05-17 16:40:54 +02:00
Harald Hoyer 16e744e39e feat: Add systemd service to monitor boot disk space
This commit introduces a new systemd service that runs daily to check the disk usage of the /boot partition. If utilization exceeds a set threshold, it triggers a warning email. This will ensure prompt alerts on critically low boot disk space, helping in maintaining a stable system.
2024-05-17 16:29:30 +02:00
Harald Hoyer bd2e13a215 feat: Add lidSwitch configuration to ignore in logind service
This commit includes a new lid switch configuration for the logind service within the SGX default configuration file. The lid switch has been set to "ignore", enhancing control over system behaviors upon lid actions.
2024-04-12 08:38:02 +02:00
Harald Hoyer 88dd896bc2 feat: Remove hd-idle systemd service in hardware configuration
The section specifying the systemd services for hd-idle has been removed in the hardware configuration file.
2024-04-11 16:28:20 +02:00
Harald Hoyer 86e5539c2f feat: Add 'docker' to user.extraGroups
In systems/x86_64-linux/x1/default.nix, 'docker' has been added to user.extraGroups. This allows the current user to manage Docker without needing root access.
2024-04-11 10:50:52 +02:00
Harald Hoyer c0991dbdd1 feat: add virtualization config to x86_64-linux system
This commit introduces virtualization configurations for docker and libvirtd in the x86_64-linux system. It also sets the podman.dockerCompat to false to avoid compatibility issues.
2024-04-11 10:48:50 +02:00
Harald Hoyer f9d045b883 Update SGX hardware configuration
This commit updates the hardware configuration for SGX systems. We have configured the available kernel modules list to include TPM-related modules. Also, unnecessary TPM2 security settings have been removed to clean up the configuration file.
2024-04-10 22:18:56 +02:00
Harald Hoyer e9034a7711 sgx: Disable Docker and enable Podman Docker compatibility
Docker has been disabled, with the Podman Docker compatibility feature being enabled instead to ensure system virtualization.
2024-04-10 22:13:19 +02:00
Harald Hoyer d5287f242e Enable TPM2 security in x86_64-linux SGX hardware configuration
The commit turns on the TPM2 security feature and its associated Access Broker and Resource Manager daemon (abrmd) in the hardware configuration for the x86_64-linux SGX system. This action, represented by changing the respective entries from false to true, enhances the security of this system configuration.
2024-04-10 22:10:34 +02:00
Harald Hoyer 4066b0cd80 sgx: unsgx and prevent sleep on lid close
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-04-10 21:46:05 +02:00
Harald Hoyer 7d0cf0ac60 sgx: set disks idle
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-04-10 21:45:22 +02:00
Harald Hoyer 969d86d932 flake update
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-04-10 21:45:02 +02:00
Harald Hoyer 30e7082344 sgx
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-04-10 17:43:39 +02:00
Harald Hoyer bcbd179bf2 nix: set TMPDIR to /var/tmp
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-28 10:30:42 +01:00
Harald Hoyer 21e1464534 remove ~/.cargo/bin path
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-26 09:51:09 +01:00
Harald Hoyer 30754f5211 different fish exec workaround
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-25 11:40:05 +01:00
Harald Hoyer d94278f8ac flake update
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-25 11:39:54 +01:00
Harald Hoyer 1ebef44098 nix: turn off relaxed sandbox mode
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-22 22:30:14 +01:00
Harald Hoyer af17fbbfe6 mx: add timer for blog rendering
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-21 23:40:25 +01:00
Harald Hoyer 946f44ee51 sgx: don't use pccs
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-21 21:23:02 +01:00
Harald Hoyer ad2fc117c7 fish: add missing exec
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-21 21:17:20 +01:00
Harald Hoyer bfeb26c5e0 sgx-nixos: add podman
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-21 16:52:35 +01:00
Harald Hoyer f8ebc5d553 gitignore result
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-21 15:24:51 +01:00
Harald Hoyer f4e2368893 A new start 2024-03-21 15:00:36 +01:00