Commit graph

62 commits

Author SHA1 Message Date
6bdcc2ccfe Create an option for defining the user in home-manager modules
This will replace existing per-module user configuration.

Or, rather, it already did for git.
2025-07-21 18:47:29 +00:00
6dc2fc4e44 Add git home module
Allows me to avoid configuring my name any time I want to use git
2025-07-21 18:47:02 +00:00
974bb922cb Add nixvim to nixos-anywhere build
It sucks not having neovim when I first login
2025-07-21 16:28:10 +00:00
7e6ff28dd3 Add initial sillytavern secrets, update test-corp key 2025-07-21 16:27:51 +00:00
40ab79ca74 Update readme with better information for running nixos-anywhere
Without this I was getting errors like:

> error: flake 'flake:nixos-anywhere' does not provide attribute 'packages.x86_64-linux.nixosConfigurations."digitalocean".config.system.build.diskoScript', 'legacyPackages.x86_64-linux.nixosConfigurations."digitalocean".config.system.build.diskoScript' or 'nixosConfigurations."digitalocean".config.system.build.diskoScript'

I'm not sure why.
2025-07-21 15:57:00 +00:00
e09993401b Add sops-nix definition to nixos-anywhere flake
It has to be present in order to read modules that include sops
definitions, and more of them are starting to include definitions.
2025-07-21 15:57:00 +00:00
6fc6b311ed Disable our version of cloud-init for nixos-anywhere
It has its own specialized cloud-init. Eventually I should harmonize the
two, but not today.
2025-07-21 15:57:00 +00:00
cef526f0c0 Move seafile to filez.gleipnir.technology 2025-07-19 00:46:16 +00:00
a9f75cb5dc Flesh out cloudreve with secrets and caddy proxy 2025-07-19 00:45:50 +00:00
2789ec177d Add cloudreve license key 2025-07-19 00:19:24 +00:00
49a5f5bc84 Add cloudreve secrets 2025-07-19 00:04:38 +00:00
5ce074917d Add initial cloudreve module
Uses the pro image, which I just paid for. I hope it's worth it...
2025-07-19 00:00:29 +00:00
a26ed33b42 Switch to caddy, remove onlyoffice, add collabora
Most things work on this commit, except the integration between
collabora and seafile. I think it might be related to the timezone
change I made and a lack of access_token being passed in the URL.

I'm going to test that with a reboot. But first, checkpoint!
2025-07-18 22:45:02 +00:00
c7068bceea Add collabora module 2025-07-18 20:39:45 +00:00
71d8bff1e6 Enable redis within the authentik pod, add redis to corp
We put it in the pod because I don't know how to make it accessible to
things in the bod without binding all host addresses. There's probably a
sophisticated way to do it correctly, but I don't want to figure it out
yet.
2025-07-18 19:04:50 +00:00
b94bea0a59 Remove redundant settings from corp
These are covered in the base image now.
2025-07-18 18:05:37 +00:00
a2f9607685 Switch to running redis within the pod
I need time to figure out the networking portion.
2025-07-18 18:04:26 +00:00
29386d8f0d Create environment file correctly, reference correct services 2025-07-18 17:10:24 +00:00
3bd771709b Create required volume mount locations 2025-07-18 17:01:08 +00:00
6a4ec1f82b Don't use slirp4netns with rootful pod 2025-07-18 17:01:08 +00:00
bcd365fb44 Add authentik containers and pod 2025-07-18 17:01:08 +00:00
de7adc50b4 Remove fish_variables in my fish config
It causes a failure because fish manages this file and changes it over
time.
2025-07-18 17:01:08 +00:00
43cde1e2f4 Switch authentik env file to an actual env file
ini is not env.
2025-07-18 17:00:35 +00:00
f28aa733cc Remove comments at the top
I think they are problematic for the environment file
2025-07-18 16:56:03 +00:00
22a74da80b Authentik use host.containers.internal instead of raw IP 2025-07-18 16:51:32 +00:00
79c00df400 Add corp to the authentik secrets 2025-07-18 16:44:05 +00:00
5bf6e1ef8c Add corp age key to sops, rename pazuzu's key
dev_ prefix is for developer machines
2025-07-18 16:43:42 +00:00
2af6c783a4 Add test-corp to authentik secrets 2025-07-18 15:58:48 +00:00
9da3485bfd Add the authentik secrets to the authentik module 2025-07-18 15:55:17 +00:00
859ae228d6 Add a simple template for a module
Just to remind me of the incantation.
2025-07-18 15:46:21 +00:00
01d8e5a580 Default to nvim for the editor 2025-07-18 15:46:21 +00:00
07d3b9d35e Make podman a separate module
We're going to hide more in there.
2025-07-18 15:46:21 +00:00
3228b54092 Add the authentik configuration secrets 2025-07-18 15:43:54 +00:00
6d4190e88e Add basice sops.yaml file for configuring sops.
It currently just has the age key for my dev system
2025-07-18 15:39:13 +00:00
259c621a2f Create base test-corp environmnt
This creates more commonality between a nixos-anywhere bootstrapped
system and a locally built nixos image, which is good.
2025-07-17 19:39:38 +00:00
a7e5b4a313 Add swapspace for RAM-limited new hosts 2025-07-17 18:13:03 +00:00
ca4bd03c36 Reference the shared modules for nixos-anywhere 2025-07-17 17:09:26 +00:00
fe4d33cf03 Make do-agent, cloud-init, and fish opt-in via config
I just like having lists that show what's going on, and light redundancy
doesn't bother me.
2025-07-17 17:09:11 +00:00
b6fa29e631 Alphabetize the arguments to fish
The power of OCD compels you
2025-07-17 17:08:06 +00:00
3e83a50e38 Move disabledModules specification into custom onlyoffice module
This is what allows us to override the way the module is defined in the
system
2025-07-17 17:07:17 +00:00
7f29bd7689 Update Readme with latest instructions, remove dead nixos-anywhere files
Those files have been moved to other areas that are more common to the
rest of the systems.
2025-07-17 17:07:00 +00:00
f19be411a2 Make create-droplet directly executable, and have slightly better documentation 2025-07-17 16:50:01 +00:00
c022445849 Add more complex user setup for eliribble
Includes fish functions and neovim via nix
2025-07-16 15:19:35 -07:00
0c8fea347a Add secrets and home config to the corp machine 2025-07-16 09:55:20 -07:00
ecbb1b932c Migrate corp configuration to this repository and use flakes 2025-07-16 09:36:39 -07:00
af5c966e5b Disable prompting for password for sudo 2025-07-12 03:44:42 +00:00
93c0365a5f Add cloud-init and digital ocean agent monitor
This should help with properly setting up IPv6 and with getting
statistics about what the machine is doing.
2025-07-12 03:42:28 +00:00
ebb456c7cc Add the fish shell
Which we need because of our tmux config.
2025-07-11 23:12:34 +00:00
2fc0223e06 Go to nixOS 25.05, fix breakage with custom configs 2025-07-11 22:31:23 +00:00
152327bd85 Add home-manager, per-user configs, and tmux configuration 2025-07-11 21:24:59 +00:00