hektor/nix
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Compare commits

base: hektor:10762e270dc80aa00c2f3af054d388bc6111251f
Branches Tags
hektor:main
..
compare: hektor:b4a6dea5d345aeeeefc241c54ab717c24458425b
Branches Tags
hektor:main

11 Commits
10762e270d ... b4a6dea5d3

Author SHA1 Message Date
Hektor Misplon
b4a6dea5d3 fix: use 'colmenaHive' instead of 'colmena' 2026-03-11 19:59:32 +01:00
Hektor Misplon
54529a516a refactor: simplify bash configuration 2026-03-11 19:59:32 +01:00
Hektor Misplon
2d898bde96 refactor: use 'import-as-enable' pattern 2026-03-11 19:59:32 +01:00
Hektor Misplon
e5bb37783e feat(deploy): add deployment tags for each host 2026-03-11 19:59:32 +01:00
Hektor Misplon
1806ed1ddc refactor(hosts): use modules/ssh with sensible defaults 2026-03-11 19:59:32 +01:00
Hektor Misplon
c70effa792 feat(ssh): add default module with enable+harden 2026-03-11 19:59:32 +01:00
Hektor Misplon
58eef9c477 chore(ai): add 'mcp-nixos' 2026-03-11 19:59:32 +01:00
Hektor Misplon
67b0077157 feat: add 'infra' module (and use on work host) 2026-03-11 19:59:32 +01:00
Hektor Misplon
ba6f0168b8 fix: use correct vscode no sandbox flag 2026-03-11 19:59:32 +01:00
Hektor Misplon
d8605c9c3f fix: resolve anki warning 2026-03-11 19:59:32 +01:00
Hektor Misplon
39f0df3f65 feat: add database module 2026-03-11 19:59:32 +01:00
4 changed files with 7 additions and 1 deletions
Expand all files Collapse all files

2
flake.nix
View File

@@ -130,7 +130,7 @@
apps.${system}.colmena = inputs.colmena.apps.${system}.default; apps.${system}.colmena = inputs.colmena.apps.${system}.default;
colmena = import ./deploy/colmena.nix { colmenaHive = import ./deploy/colmena.nix {
inherit inherit
self self
inputs inputs

2
hosts/andromache/default.nix
View File

@@ -62,6 +62,8 @@ in
secrets.username = username; secrets.username = username;
docker.user = username; docker.user = username;
nix.settings.secret-key-files = [ config.sops.secrets.nix_signing_key_andromache.path ];
disko.devices = { disko.devices = {
disk.data = { disk.data = {
type = "disk"; type = "disk";

2
hosts/astyanax/default.nix
View File

@@ -61,6 +61,8 @@ in
nfc.user = username; nfc.user = username;
desktop.ly.enable = true; desktop.ly.enable = true;
nix.settings.secret-key-files = [ config.sops.secrets.nix_signing_key_astyanax.path ];
hardware = { hardware = {
cpu.intel.updateMicrocode = true; cpu.intel.updateMicrocode = true;
# https://wiki.nixos.org/wiki/Intel_Graphics # https://wiki.nixos.org/wiki/Intel_Graphics

2
modules/secrets/default.nix
View File

@@ -29,6 +29,8 @@ in
"anki_sync_user".owner = config.users.users.${cfg.username}.name; "anki_sync_user".owner = config.users.users.${cfg.username}.name;
"anki_sync_key".owner = config.users.users.${cfg.username}.name; "anki_sync_key".owner = config.users.users.${cfg.username}.name;
"hcloud".owner = config.users.users.${cfg.username}.name; "hcloud".owner = config.users.users.${cfg.username}.name;
"nix_signing_key_astyanax" = { };
"nix_signing_key_andromache" = { };
"opencode_api_key".owner = config.users.users.${cfg.username}.name; "opencode_api_key".owner = config.users.users.${cfg.username}.name;
# TODO: using shared secrets for now, but would be better to to per-host secrets # TODO: using shared secrets for now, but would be better to to per-host secrets
# To add per-host secrets: # To add per-host secrets: