Commit graph

476 commits

Author SHA1 Message Date
1301fd94b3
fix (borgmatic): Add postgresql config 2025-12-01 15:09:48 -06:00
8b5fa1dfe9
service (authentik): Add Borgmatic config 2025-12-01 15:01:45 -06:00
a3a8ea9a34
services (linux): Remove nixos-update service 2025-12-01 14:03:20 -06:00
6a1cc7877c
users (mcentire): Add millironx to adm group 2025-12-01 13:52:06 -06:00
b2477b9f24
fix (authentik): Too many fixes to list
Bad on me, but I have spent way too long making edits that are all
required on mcentire to get Authentik semi-working. There are lots of
notes in here on reasoning of why stuff is the way it is. Backup still
needs to be configured, and potentially Crowdsec.
2025-12-01 12:03:20 -06:00
8d96ef7684
fix (podman-secrets): Use user systemd unit
User systemd units cannot wait for system units. Fix race condition bugs
in user Quadlet services by using a user service that the Quadlet
services can use as a `After=` or `Requires=` directive.
2025-12-01 12:01:45 -06:00
fa6b537a3c
docs: Add mcentire to README 2025-12-01 09:17:07 -06:00
e9b1841f7b
docs: Remove harmony reference 2025-12-01 09:07:15 -06:00
4e84e57e3b
docs: Convert README table to pipe format 2025-12-01 09:06:23 -06:00
70f98a6200
meta: Add README 2025-12-01 08:57:54 -06:00
ce174b61fd
meta: Add gitignore 2025-12-01 08:37:00 -06:00
8e5734469c
fix (podman-secrets): setuid path
NixOS does some weird stuff with setting security bits in wrappers,
rather than in packages themselves, and this was breaking podman. Add
the wrappers directory to the PATH of the secrets service.
2025-11-28 18:10:19 -06:00
49a2f7cd35
fix (podman-secrets): Create home directory for authentik user 2025-11-28 16:14:58 -06:00
1f322921bd
fix (podman-secrets): Use explicit pkg references in script 2025-11-28 16:02:49 -06:00
72e4f04b31
fix (podman-secrets): Use explicit Julia call 2025-11-28 15:51:53 -06:00
2b06848632
service (mcentire): Add authentik service 2025-11-28 15:41:59 -06:00
3fd32ffa45
feat: Add podman-secrets module 2025-11-28 10:41:45 -06:00
1730970935
homes (mcentire): Add home-manager config for mcentire 2025-11-28 10:41:45 -06:00
f2069cacb9
secrets: Add mcentire-millironx ssh key 2025-11-28 10:41:45 -06:00
b6b514278e
defaults (Dock/Taskbar): Make taskbar and dock have the same Apps
Except for Steam, because Steam is weird and will spawn extra windows
that don't play well with Taskbar.
2025-11-24 11:02:47 -06:00
4a9eed6ecb
brew (corianne): Remove LogiOptions app 2025-11-24 10:34:08 -06:00
8d188dea43
addons (firefox): Remove web archives addon 2025-11-19 09:28:05 -06:00
ac6c552339
pkgs (firefoxpwa): Remove Firefox PWAs 2025-11-19 09:28:04 -06:00
f9672236f5
addons (firefox): Remove Floccus addon 2025-11-19 09:28:04 -06:00
c8a1aa9692
addons (firefox): Install plasma-integration only on Linux 2025-11-19 09:28:04 -06:00
4a8ddb0784
pkg (desktop): Remove ghostty 2025-11-19 09:05:53 -06:00
ac57a31f06
lint (borgmatic): Move retention to global scope 2025-11-16 19:39:29 -06:00
9fc8c9a890
services (borgmatic): Add borgmatic service 2025-11-16 19:33:47 -06:00
65ee23cc36
activation (common): remove git hash recorder
I used to try to control Ansible's bootstrapping of home-manager by
recording the current git hash of the home-manager repo, but I haven't
allowed ansible to touch home-manager after initial setup for a while
now, so remove the hash code.
2025-11-16 18:27:25 -06:00
d080b9d480
lint (ansible): Fix template reference/location 2025-11-16 18:25:13 -06:00
160c8e8273
lint (ansible): Fix line length 2025-11-16 18:24:52 -06:00
e094a8ac6a
config (harmony): Remove Harmony/Asahi configs 2025-11-16 18:24:23 -06:00
be4ce6fe1f
pkgs (common): Install agenix cli via overlay 2025-11-16 18:07:44 -06:00
71a086d07e
dock (corianne): Remove unavailable Chromium PWAs 2025-11-13 14:47:31 -06:00
4d56344446
secrets: Rekey secrets for secret purposes 2025-11-13 14:47:26 -06:00
3b9b7f684d
Revert "fix (crowdsec): hub permissions issues"
This reverts commit f982232c99.
2025-11-11 21:59:28 -06:00
2c4e709704
debug (crowdsec): Add verbose logging to Crowdsec collection install
step
2025-11-11 21:42:25 -06:00
f982232c99
fix (crowdsec): hub permissions issues 2025-11-11 21:39:34 -06:00
1fba403731
fix (crowdsec): Add sleep to avoid rate limits 2025-11-10 22:17:28 -06:00
b2928eb81f
fix (crowdsec): Proper URI syntax for API 2025-11-10 21:47:29 -06:00
4ca995f75a
fix (crowdsec): Add hub update steps 2025-11-10 21:41:27 -06:00
2ea0b68221
fix (crowdsec): API url 2025-11-10 16:00:16 -06:00
0fa3e1ec0e
fix (crowdsec): Scope of Journalctl access 2025-11-10 15:58:08 -06:00
97a9912537
feat: Add Crowdsec modules 2025-11-10 00:07:41 -06:00
3d0c03efb0
secrets: Remove bosephus root from administrators 2025-11-09 23:22:37 -06:00
9295e14787
flake: Add crowdsec flake 2025-11-09 21:13:30 -06:00
e1c6bad638
config (zed): Add Typst LSP support 2025-11-07 18:03:36 -06:00
b98b2a59de
fix (mcentire): Use correct formatting for time zone 2025-11-03 15:06:34 -06:00
6619f55275
fix (mcentire): Add git for pulling git-stored configs 2025-11-03 15:02:00 -06:00
ec395140f3
nixos (mcentire): Add mcentire config 2025-11-03 14:54:59 -06:00