Commit graph

122 commits

Author SHA1 Message Date
Harald Hoyer c5ab732a80 flake update
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-21 14:32:26 +01:00
Harald Hoyer 30e06447c0 nixos-revision: fix git path
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-21 14:32:04 +01:00
Harald Hoyer e35702458b remove clippy from packages
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-21 10:51:34 +01:00
Harald Hoyer 1046f5bdde address fish by full patch
otherwise, if another package provides `fish` we are in trouble

Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-21 10:49:21 +01:00
Harald Hoyer af6f565c41 mx: set update time to 4:00
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-21 09:33:48 +01:00
Harald Hoyer a412322e1c add mx
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-21 09:26:03 +01:00
Harald Hoyer 143cc1742a only not exec fish, when WANT_BASH is defined
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-20 22:11:30 +01:00
Harald Hoyer f1899875ce sgx: factor out aesmd
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-20 16:53:28 +01:00
Harald Hoyer 0b9fb35062 sgx: enable working aesm with normal dcap
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-20 15:50:39 +01:00
Harald Hoyer ab7be188fc sgx: dcap firewall rules
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-20 13:26:21 +01:00
Harald Hoyer 9f40890b90 flake.lock update
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-20 13:21:02 +01:00
Harald Hoyer 42b3d0a1c3 remove gpg/yubikey external deps
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-20 13:11:47 +01:00
Harald Hoyer 04f08d679e rename plusultra to metacfg
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-20 08:58:05 +01:00
Harald Hoyer b22607a4df sgx: autoupgrade switch
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-20 08:50:51 +01:00
Harald Hoyer e45233bbfd flake update
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-20 00:09:10 +01:00
Harald Hoyer 94d0ada223 nixsgx for everyone
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-20 00:07:46 +01:00
Harald Hoyer eafb5c1455 t15: do not set disks idle
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-19 20:53:17 +01:00
Harald Hoyer 1d92a42c76 t15: enable secureboot
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-19 20:26:16 +01:00
Harald Hoyer d4b12af844 add t15
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-19 19:54:07 +01:00
Harald Hoyer 7ffd2b5128 sgx: samba
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-19 17:22:02 +01:00
Harald Hoyer 3638391894 sgx: port services from nixos
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-19 16:22:29 +01:00
Harald Hoyer e906b9c5dd sgx: add raid disks
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-19 15:48:07 +01:00
Harald Hoyer 0e548b42c0 flake update
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-19 14:44:07 +01:00
Harald Hoyer 2e0f1de287 pcscd off by default
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-19 14:43:29 +01:00
Harald Hoyer 573c30710b nix-ld: add libsecret
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-19 10:59:46 +01:00
Harald Hoyer 1858f17e8e use bash as login shell, but exec fish for interactive
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-14 13:03:40 +01:00
Harald Hoyer 41b5142e74 cleanup and git theme
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-12 01:18:14 +01:00
Harald Hoyer 05e5d3bc39
add .gitignore
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-12 00:44:26 +01:00
Harald Hoyer 5e2d3a6ce4
add mpro
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-12 00:24:28 +01:00
Harald Hoyer dd3dd53e11 update flake.lock
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-11 17:19:33 +01:00
Harald Hoyer 4f32736f59 remove cachix from pkgs
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-11 17:16:04 +01:00
Harald Hoyer 9e19f0673a Use snowfall-lib pre-v3
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-11 17:05:47 +01:00
Harald Hoyer b6acf6a941 move btrfs.autoScrub.enable to hardware-configuration.nix
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-11 16:53:16 +01:00
Harald Hoyer ffedb0821b gui: disable pcscd
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-11 08:57:18 +01:00
Harald Hoyer 8f27b0fde4 sgx: use real docker
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-08 14:10:25 +01:00
Harald Hoyer 162da63f38 sgx: add /etc/sgx_default_qcnl.conf
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-08 12:58:27 +01:00
Harald Hoyer ab3402a274 sgx extragroups
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-08 12:35:42 +01:00
Harald Hoyer 2fdd7ff133 flake update
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-07 10:23:40 +01:00
Harald Hoyer bca2575b01 disable pcscd
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-07 10:23:24 +01:00
Harald Hoyer 61a5a0b458 system.autoUpgrade does not need --refresh
Although there is `tarball-ttl` which specifies the TTL for the cache,
the default is one hour, which is enough for updates.

https://nixos.org/manual/nix/stable/command-ref/conf-file.html#conf-tarball-ttl

So `--refresh` is only needed for interactive updates.

Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-07 09:57:13 +01:00
Harald Hoyer 7ec319bf22 Revert "enable MIPI camera"
not worth the hassle

This reverts commit 897a92ea57.
2024-03-07 09:43:15 +01:00
Harald Hoyer fba2a2ddad remove redundant dbus config
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-07 09:32:47 +01:00
Harald Hoyer 05d6f42a79 i18n
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-06 23:58:37 +01:00
Harald Hoyer 897a92ea57 enable MIPI camera
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-06 23:39:50 +01:00
Harald Hoyer ec22fafec6 update README.md
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-06 23:39:02 +01:00
Harald Hoyer 393c46757b sgx-azure: add nixsgx cachix
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-06 20:52:07 +01:00
Harald Hoyer 108136a1d1 sgx-azure
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-06 20:27:18 +01:00
Harald Hoyer c405c2af83 add README.md
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-06 19:54:17 +01:00
Harald Hoyer 2f3ccfbc5d libvirt program enable
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-06 19:38:51 +01:00
Harald Hoyer d3fb170fee btrfs scrub
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-06 19:38:39 +01:00