Commit graph

286 commits

Author SHA1 Message Date
f2a984c762 feat(rustdesk): enable SSL and update proxy configuration
Enabled `forceSSL` for the RustDesk nginx configuration to ensure secure connections. Replaced `proxyPass` with detailed `extraConfig` to include necessary headers and support for WebSocket connections.
2025-02-24 10:19:46 +01:00
64f48c5969 feat(mx): isolate rustdesk configuration into separate module
Moved rustdesk-server settings from `default.nix` to a dedicated module `rustdesk.nix`. This improves configuration structure and ensures better modularity for maintainability.
2025-02-24 10:08:19 +01:00
3778bf29d0 feat(rustdesk): configure relayHosts for rustdesk-server
Added `relayHosts` configuration to rustdesk-server to specify the relay host `mx.surfsite.org`. This ensures proper routing and connectivity for the RustDesk service.
2025-02-24 09:12:54 +01:00
a686d21d39 feat(mx): enable RustDesk server service
Added configuration to enable the RustDesk server service in the MX system. This facilitates remote desktop functionality out of the box.
2025-02-24 08:31:09 +01:00
8d019af0c3 fix(config): update OLLAMA_API_BASE_URL to new local URL
- Changed OLLAMA_API_BASE_URL from "m4.fritz.box" to "m4.local".
- Ensures proper connectivity with the updated local network setup.
2025-02-22 09:02:55 +01:00
ff76b9045e feat(network): enable LLMNR and MulticastDNS in SGX config
- Enabled LLMNR to allow link-local name resolution.
- Enabled MulticastDNS to support service discovery and hostname resolution within local networks.
2025-02-22 08:59:03 +01:00
74a2d0a2e7 feat(network): enable LLMNR and MulticastDNS in SGX config
- Enabled LLMNR to allow link-local name resolution.
- Enabled MulticastDNS to support service discovery and hostname resolution within local networks.
2025-02-22 08:55:07 +01:00
d3413a581c feat(sgx): add support for port 5355 in firewall configuration
- Allow TCP and UDP traffic on port 5355 for SGX networking.
- This enhances compatibility with multicast DNS resolution (mDNS).
2025-02-22 08:41:56 +01:00
1235ec9071 feat(network): enable systemd-resolved with custom settings
- Enable systemd-resolved and configure DNSSEC with downgrade option.
- Add extra configuration to allow resolving unicast single-label names.
This improves DNS handling and ensures compatibility for SGX setup.
2025-02-22 08:23:48 +01:00
a753a2fbba feat(udev): add new rule for specific hidraw device
Added a udev rule for devices with idVendor 342d and idProduct e4c5. This ensures proper permissions and group access for the specified hidraw device.
2025-02-14 14:30:36 +01:00
f61ddd5f92 feat(gui): configure Nix daemon scheduling for GUI
Set idle I/O and CPU scheduling policies for the Nix daemon to improve GUI responsiveness. Adjusted scheduling class, priority, and policy to optimize background tasks.
2025-02-14 10:07:49 +01:00
ece97f0e92 feat(nixos): add btop to default service packages
Added btop to the default package list in NixOS services. This change ensures btop is available by default for system monitoring and resource management. No impact on existing configurations is expected.
2025-02-12 14:17:21 +01:00
cd36b6082c feat(input-sources): add custom xkb option for ellipsis
Introduces a new XKB configuration for typing the ellipsis symbol. Updates dconf settings and XDG config files to enable and map the custom "mod:ellipsis" option.
2025-02-06 14:38:45 +01:00
81df7dd4aa feat(systems): add custom udev rule for hidraw devices
Introduce a udev rule to properly configure hidraw devices with specific vendor and product
2025-02-04 15:45:32 +01:00
27895a1baf fix(sgx): correct attribute path for Syncthing config
Previously, the `insecureSkipHostcheck` option was incorrectly placed under `settings.options`. This update moves it to the correct path under `settings.gui` to ensure proper configuration behavior.
2025-02-04 10:56:49 +01:00
24688f6ad8 fix(sgx): correct Syncthing configuration key
Adjusts the `insecureSkipHostcheck` setting to align with the proper configuration structure. This resolves a misconfiguration issue in the SGX fileserver Nix file.
2025-02-04 10:51:20 +01:00
ffd9445bc5 feat(systems): enable insecure host check for Syncthing GUI
Added `insecureSkipHostcheck` option to Syncthing configuration to bypass host verification for the GUI. This can simplify local testing but may introduce security risks if used improperly.
2025-02-04 10:47:36 +01:00
91d7c6023a feat(nginx): use recommended proxy settings
Replaced `proxyWebsockets` with `recommendedProxySettings` for enhanced configurability and alignment with best practices. This improves maintainability and future compatibility of the nginx configuration.
2025-02-04 10:43:36 +01:00
7e283d9266 feat(sgx): add Syncthing support and configuration updates
Added Syncthing support with proxy and SSL in nginx and updated ACME certs configuration. Adjusted Syncthing GUI to bind to localhost for improved security.
2025-02-04 10:27:02 +01:00
8748f2b80b feat(nginx): enable websocket support in reverse proxy
Enabled `proxyWebsockets` for the nginx reverse proxy configuration to support websocket connections. This ensures compatibility with services requiring websocket communication.
2025-02-04 10:24:41 +01:00
27d5373e2d fix(config): update OLLAMA_API_BASE_URL for local network
Updated the base URL to align with the current local network setup. This ensures proper connectivity and functionality within the specified environment.
2025-02-04 10:11:25 +01:00
9b5445ed07 feat(gui): add EasyEffects and its GNOME extension
Added EasyEffects to the system packages and its preset selector GNOME extension to improve audio management capabilities. This enhances user control over audio processing and customization options.
2025-02-04 10:05:03 +01:00
35bb52cea3 fix: update OLLAMA_API_BASE_URL to local domain
Changed the API base URL from "m4.fritz.box" to "m4.local" for consistency and compatibility within the local network. This ensures better alignment with standard local domain naming practices.
2025-02-04 09:26:45 +01:00
d866a3facd feat(x1): add gtypist to default package list
Added gtypist to the list of default packages for the x1 system. This enhances typing practice options available to users.
2025-01-31 16:06:49 +01:00
d90d47072c feat: add typing practice tools to system packages
Include klavaro and tipp10 in the system package list. These additions provide tools for users to improve their typing skills.
2025-01-31 15:58:12 +01:00
4ec65f9347 feat(x86_64-linux): add Bluetooth input configuration
Introduce a configuration to disable ClassicBondedOnly for Bluetooth input. This enhances flexibility for connected Bluetooth devices.
2025-01-31 12:36:30 +01:00
1ae41a75aa feat(overlays): add open-webui to unstable overlay
Introduce `open-webui` by inheriting it from `channels.unstable`. This enhances the overlay with additional functionality.
2025-01-30 13:56:19 +01:00
e11b4e9d61 feat(virtualisation): update libvirtd enablement logic
- Disable libvirtd explicitly in m4nix configuration.
- Use `lib.mkDefault` for libvirtd enablement in base services to allow overrides.
2025-01-21 15:35:23 +01:00
b3db658dd0 feat(aarch64-darwin): add virtualization tools to default.nix
- Added `libvirt`, `dnsmasq`, `virt-manager`, and `qemu` to the `pkgs` list.
- These tools enhance virtualization capabilities on aarch64-darwin systems.
2025-01-21 15:27:22 +01:00
ffed5d5394 fix(starship): update bash indicator icon
Replaced the bash indicator icon in the Starship configuration to ensure consistency with the updated icon set. This improves visual alignment with the theme and enhances readability.
2025-01-20 15:16:56 +01:00
02e0446ab1 feat(starship): update shell indicators for clarity
Replaced fish indicator emoji and added new indicators for bash and unknown shells. These changes improve visual clarity and consistency across different shell environments.
2025-01-20 14:37:39 +01:00
b04955534a feat(gui): add Remmina to default GUI services
Added Remmina to the list of default GUI service packages for better remote desktop support. This enhances usability for remote connections out of the box.
2025-01-20 13:48:44 +01:00
0daae09240 feat(x1): enable zram
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2025-01-20 13:48:44 +01:00
e8243a159d feat(starship): update shell settings configuration
- Enable `shell.disabled` option to ensure shell functionality.
- Add `shell.fish_indicator` with a fish emoji for Fish shell users.
2025-01-20 13:46:05 +01:00
971eeac080 feat(aarch64): add Node.js to default packages
- Included Node.js in the default package list for aarch64.
- Ensures Node.js availability out of the box for related workflows.
2025-01-20 12:29:05 +01:00
40329dea86 feat(m4nix): add rdp
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2025-01-20 12:05:49 +01:00
6440514723 chore(m4nix): remove cloudflare-warp from system configuration
Eliminated cloudflare-warp from system packages and systemd setup. This cleans up unused dependencies to streamline the configuration.
2025-01-16 16:33:34 +01:00
adb0d8bdde chore: nix fmt
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2025-01-16 16:25:12 +01:00
904b1e8cfe feat(m4nix): enable spice
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2025-01-16 16:24:57 +01:00
8edd5423d8 fix: update flake dependencies to latest versions
- Updated `nix-darwin` to version `nix-darwin-24.11` with new revision.
- Updated several locked dependencies (`disko`, `homebrew`, `sops-nix`, `nixpkgs`) for newer versions.
- Ensured compatibility with upstream changes and improved dependency freshness.
2025-01-16 09:14:38 +01:00
949e39cdba feat: improve SSH configuration and cleanup unused keys
- Commented out default SSH service enablement in common suite.
- Updated SSH agent configuration to use dynamic user paths.
- Removed outdated SSH keys and added missing key descriptions.
2025-01-16 09:06:46 +01:00
37277447d3 refactor: centralize default SSH keys in common module
Moved default SSH keys to a shared `common.nix` module for better reusability and maintainability. Updated references in both NixOS and Darwin user modules to use the centralized keys. This reduces redundancy and improves consistency across modules.
2025-01-16 08:38:27 +01:00
d86db77250 ssh
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2025-01-16 04:38:17 +01:00
ccc0eda517 feat: github ssh support
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2025-01-15 13:19:49 +01:00
a7dce62fca fix(m4nix): disable tpm2.abrmd
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2025-01-13 08:29:47 +01:00
1495580a03 fix(m4nix): disable tpm2
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2025-01-13 08:26:11 +01:00
6f25c0c2f3 feat(user): add .keep file to git directory
Added a `.keep` file to the `git` directory to ensure its presence in the user's home structure. This aligns with the convention of maintaining stub files for empty directories.
2025-01-10 16:57:12 +01:00
53ff9f2411 chore: flake update
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2025-01-10 16:49:41 +01:00
195a721d19 feat(aarch64): add initial configuration for NixOS on ARM
Introduced hardware and system configurations for the aarch64 NixOS system. Includes hardware setup, base system packages, and enabling key services such as Docker and Podman. This establishes the foundation for managing ARM-based systems.
2025-01-10 16:49:31 +01:00
f45a366528 refactor(sgx): rename internal host to openwebui
Updated ACME and nginx configurations to replace "internal.hoyer.world" with "openwebui.hoyer.world". This ensures correct routing and certificate management for the updated domain.
2025-01-08 15:18:42 +01:00