Commit graph

259 commits

Author SHA1 Message Date
Harald Hoyer
15e61b339c refactor(x1): remove unused IPU6 module
- Deleted `ipu.nix` and its reference in `default.nix` under `x1` systems.
- Simplifies configuration by removing unused and commented-out code.
2025-09-11 14:35:38 +02:00
Harald Hoyer
dc3a536709 feat(sgx): enable GUI in SGX module
- Changed `gui.enable` to `true` in the SGX default configuration.
- Allows GUI support within the SGX environment for improved usability.
2025-09-11 14:31:40 +02:00
Harald Hoyer
0fb0cfae93 refactor(gnome): relocate remote desktop configuration
- Moved GNOME remote desktop settings from `x1` module to GUI services module.
- Centralizes related configurations for better maintainability.
2025-09-11 14:31:13 +02:00
1ae46cd7b8 feat(x1): open firewall ports for remote desktop
- Allowed TCP and UDP port 3389 in the firewall configuration.
- Ensures proper functionality of gnome-remote-desktop on the x1 system.
2025-09-11 13:39:28 +02:00
296aac6864 feat(x1): configure gnome-remote-desktop systemd service
- Added `wantedBy = ["graphical.target"]` to the `gnome-remote-desktop` service configuration.
- Ensures the service starts automatically with the graphical session.
2025-09-11 13:36:54 +02:00
61d5c8416e feat(x1): enable gnome-remote-desktop service
- Enabled `gnome-remote-desktop` to allow remote desktop connectivity by default on the `x1` system.
- Improves accessibility and remote management for the system.
2025-09-11 13:32:18 +02:00
2cffb1bc35 feat(x1): add gnome-remote-desktop 2025-09-11 13:21:16 +02:00
cb53d49ec3 feat(m4): add opencode to default packages
- Included `opencode` to the default package list for `aarch64-darwin`.
- Ensures availability of the `opencode` tool for users by default.
2025-09-11 09:08:47 +02:00
10290acefb feat(m4): add gemini-cli to default packages
- Included `gemini-cli` to the list of default packages for `aarch64-darwin` platform.
- Ensures availability of the `gemini-cli` tool for users by default.
2025-09-11 09:03:49 +02:00
176aa2c2fe chore(m4nix): sync with rnix 2025-09-09 09:08:40 +02:00
70eaf73fe9 chore(rnix): update system state 2025-09-09 09:08:08 +02:00
848c5ba825 chore(m4nix): re-install with rosetta 2025-09-09 09:04:38 +02:00
bccc0a57c3 feat(x1): add nixos-hardware.nixosModules.lenovo-thinkpad-x1-11th-gen 2025-09-08 15:45:01 +02:00
674941420f feat(nixos): add claude-code and update jetbrains-toolbox
- Added `claude-code` to the default packages for `aarch64-linux/rnix`.
- Moved `jetbrains-toolbox` to be included for all platforms instead of x86_64 only.
2025-09-05 14:42:42 +02:00
28e3de71ce add rosetta and cachix
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2025-08-14 16:27:33 +02:00
33b598d546 add rnix
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2025-08-14 15:39:09 +02:00
b405c7e906 feat(x1): add 'tss' group to user extraGroups
- Included `tss` group in `user.extraGroups` to grant necessary permissions.
- Ensures proper functionality and aligns with updated requirements.
2025-08-14 09:21:07 +02:00
e95b2ddc9e feat(aarch64-darwin): add rialo 2025-08-04 12:48:32 +02:00
acf6c32df8 fix(x1): kernel does not compile
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2025-07-31 13:30:04 +02:00
d5f4c3035e feat(sgx): update Samba configuration for protocol and macOS
- Set minimum protocol to SMB2 and enabled extended attribute (EA) support in Samba settings.
- Added `fruit:nfs_aces` and `fruit:wipe_intentionally_left_blank_rfork` options for improved macOS compatibility.
2025-07-30 14:16:48 +02:00
f08881f303 feat(sgx): rename Time Machine share key in Samba config
- Changed the `time-machine` key to `TimeMachineBackup` in the Samba share configuration.
- Aligns key naming to standard conventions and improves readability.
2025-07-30 14:00:21 +02:00
1338ced84f feat(sgx): disable Avahi service in fileserver configuration
- Set `services.avahi.enable` to `false` in `fileserver.nix`.
- Ensures Avahi is disabled, aligning with updated system requirements.
2025-07-30 13:56:33 +02:00
959e82bcee feat(sgx): disable Netatalk and enhance Samba configuration
- Disabled Netatalk service by setting `enable` to `false`.
- Improved macOS compatibility in Samba with specific `fruit` and `vfs` options.
- Added a new Time Machine share configuration for backups.
2025-07-30 13:27:03 +02:00
ba70ee7f59 feat(aarch64-darwin): add azure-cli to system packages
- Included `azure-cli` in `environment.systemPackages` for aarch64-darwin.
- Provides support for managing Azure resources directly from the system.
2025-07-29 15:56:52 +02:00
f41c21344e chore(mailserver): update password hashing method
- Changed default hashing method in `mkpasswd` command to `sha-512`.
- Ensures stronger security compared to the previous bcrypt method.
2025-07-29 15:54:38 +02:00
d9097dbd72 feat(x1): increase freeze timeout and remove cloudflare-warp
- Added `power.pm_freeze_timeout` kernel setting with a value of 30000 to extend system freeze timeout.
- Removed `cloudflare-warp` from system packages and systemd packages for cleanup.
2025-07-28 14:10:21 +02:00
d3ae0e90ba feat(x1): add fabric-ai to system packages
- Added `fabric-ai` to the `environment.systemPackages` list for x1.
- Ensures availability of the `fabric-ai` tool in the x1 system configuration.
2025-07-07 09:44:48 +02:00
4c11f744c7 chore(x1): reorder systemPackages for better readability
- Reorganized the `environment.systemPackages` list alphabetically.
- Ensured no functional changes to the x1 system configuration.
2025-07-07 09:43:52 +02:00
b23f555241 chore(x1): remove piper from application list
- Dropped `piper` from the x1 system configuration.
- Ensured minimal impact on related dependencies and applications.
2025-07-03 13:02:13 +02:00
230c6322e0 feat(x1): enable ipu and add new applications
- Enabled `ipu.nix` in the x1 system configuration.
- Added `piper-tts`, `libcamera`, and `gnome-terminal` to the application list.
2025-07-03 12:59:58 +02:00
620ac9bd68 feat: add gemini-cli to x1 system and overlays
- Introduced `gemini-cli` as a CLI tool in the x1 configuration.
- Added a new overlay for `gemini-cli` package with npm dependencies.
- Removed `goose-cli` and `aider-chat` from the existing application list.
2025-06-26 13:50:06 +02:00
f464e19fec fix: include fabric-ai in aarch64-darwin CLI apps
- Added fabric-ai to the list of installed CLI applications for aarch64-darwin.
- Ensures consistency across tools available for users.
2025-06-01 08:35:39 +02:00
36ed41047d feat(x1): enable cratedocs-mcp service and update dependencies
- Enabled the cratedocs-mcp service in the x1 configuration.
- Added `cratedocs` as a new flake input and included its modules and overlay.
- Updated multiple flake inputs (`nixpkgs`, `rust-overlay`, etc.) with new revisions.
2025-05-28 09:41:21 +02:00
d700d4b8e3 feat(kernel): adjust inotify limits for JetBrains IDEs
- Removed inotify sysctl settings from hardware configuration.
- Added updated inotify limits under GUI services for JetBrains IDEs.
This ensures better compatibility and performance for these tools.

Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2025-05-27 13:59:08 +02:00
b453062c57 refactor: simplify Nix module inputs and update configurations
Simplified input argument structures across multiple Nix modules by removing unnecessary bindings and standardizing formats. Enabled `system.primaryUser` setting and updated PAM configuration for sudo touch ID authentication. Removed deprecated or unused configurations, including user fields in metacfg and outdated options in some modules.
2025-05-27 13:12:18 +02:00
bbc247aa23 refactor: simplify Nix configuration and update dependencies
Replaced custom Nerd Fonts overrides with predefined ones. Removed unused Neovim settings and plugins, and disabled Neovim for a specific user. Updated various flake dependencies to their latest versions.
2025-05-27 12:59:30 +02:00
f77bad4bf0 feat(sgx): add support for "m4" configuration
Included "m4" in the list of supported configurations for SGX. This enhances compatibility and enables additional use cases for the fileserver.
2025-05-21 10:00:39 +02:00
5893c5b84c chore(sgx): turn off libvirtd 2025-05-21 09:56:12 +02:00
2e28118edf fix(mail.nix): update virtual alias mappings for root/admin
Adjusted the virtual_alias_maps to properly include both root and admin email forwarding. Removed unused rootAlias line and ensured the configuration aligns with intended email routing behavior.
2025-05-21 09:41:36 +02:00
0a4b80c860 refactor(mail): comment out rootAlias and update alias mapping 2025-05-21 09:33:42 +02:00
ac0eef954d feat(mail): configure Postfix relay with SOPS encrypted secrets
Added configuration for Postfix to use an external SMTP relay with encrypted credentials managed by SOPS. Updated `mail.nix` to include relay settings and linked the secrets file for password storage.
2025-05-21 09:30:30 +02:00
ab30ca1c6d feat(sgx/mail): configure postfix root and admin aliases
Added configuration for postfix rootAlias and extraAliases using metacfg user name. This ensures proper email routing for root and admin users.
2025-05-21 08:45:30 +02:00
018b25ac12 feat(sgx): add mail utilities and enable postfix
Introduce `mail.nix` to configure mail utilities (`mailutils`, `mutt`) and enable Postfix service. Updated `default.nix` to include the new configuration file.
2025-05-21 08:30:39 +02:00
4969715aa2 fix(systemd): add 'after' dependencies for mount points
Ensure netatalk, samba, and syncthing services start only after the required mount points are available. This improves service dependency handling and prevents potential race conditions.
2025-05-21 08:16:52 +02:00
8202aad70f feat(sgx): enable authentication for OpenWebUI
- Set `WEBUI_AUTH` to "True" in the OpenWebUI configuration.
- This change enforces authentication for enhanced security.
2025-04-30 11:05:17 +02:00
0471cecafd chore(nix): remove ollama from aarch64-darwin packages
- Removed `ollama` from the package list as it is no longer needed.
- Ensures the package set remains relevant and streamlined.
2025-04-29 08:32:50 +02:00
5521b0f825 feat(kernel): increase inotify limits for user instances/watches
Set higher limits for `fs.inotify.max_user_instances` and `fs.inotify.max_user_watches` in the kernel sysctl configuration. This improves system monitoring capabilities, particularly for applications relying on inotify.
2025-04-17 10:31:30 +02:00
65dd2678e3 feat(x1): add 'uv' to the default package list
Include 'uv' in the x1 system default packages to extend functionality. This change ensures 'uv' is readily available for use without additional setup.
2025-04-17 09:53:24 +02:00
70e1f0eaf7 refactor: restructure hardware configuration file
Reformatted the hardware configuration file for improved clarity and organization. Consolidated nested attributes and adjusted formatting to align with best practices.
2025-04-17 09:53:05 +02:00
35988e7888 feat(coturn): update configuration for secret management
Removed comment clutter and streamlined the configuration for better readability and maintenance. Ensured the sops secrets and ACME certificate handling remain functional.
2025-04-15 10:26:46 +02:00