update robi machine

This commit is contained in:
Ingolf Wagner 2023-07-01 17:34:23 +02:00
parent 93560cdd74
commit 3cd5ab2f65
No known key found for this signature in database
GPG key ID: 76BF5F1928B9618B
6 changed files with 26 additions and 18 deletions

View file

@ -114,7 +114,11 @@
pkgs = import nixpkgs { pkgs = import nixpkgs {
inherit system; inherit system;
config.allowUnfree = true; config.allowUnfree = true;
config.permittedInsecurePackages = [ "python-2.7.18.6" ]; config.permittedInsecurePackages = [
"python-2.7.18.6"
# "openssl-1.1.1u"
];
overlays = [ overlays = [
(_self: _super: { (_self: _super: {
unstable = import nixpkgs-unstable { unstable = import nixpkgs-unstable {
@ -293,17 +297,16 @@
chungus = nixosConfigurationSetup { chungus = nixosConfigurationSetup {
name = "chungus"; name = "chungus";
modules = [ modules = [
#retiolum.nixosModules.retiolum
#private_assets.nixosModules.jobrad
homeManagerModules homeManagerModules
]; ];
}; };
robi = nixosConfigurationSetup {
name = "robi";
modules = [
homeManagerModules
];
};
}; };
}; };
} }

View file

@ -87,7 +87,7 @@ in
programs.alacritty = { programs.alacritty = {
enable = true; enable = true;
settings = { settings = {
font.size = lib.mkForce 7.0; font.size = lib.mkForce 6.5;
}; };
}; };

View file

@ -17,7 +17,6 @@
./borg.nix ./borg.nix
./codimd.nix ./codimd.nix
./gitea.nix ./gitea.nix
./grocy.nix
./nextcloud.nix ./nextcloud.nix
./packages.nix ./packages.nix
./syncthing.nix ./syncthing.nix
@ -59,6 +58,13 @@
./cache.nix ./cache.nix
]; ];
components.terminal.enable = true;
components.mainUser.enable = true;
components.gui.enable = false;
components.network.enable = true; components.network.enable = true;
components.network.wifi.enable = false; components.network.wifi.enable = false;
@ -73,7 +79,7 @@
# Shell configuration # Shell configuration
# ------------------- # -------------------
programs.custom. zsh.enable = true; #programs.custom. zsh.enable = true;
users.users.root.shell = pkgs.zsh; users.users.root.shell = pkgs.zsh;
security.acme.acceptTerms = true; security.acme.acceptTerms = true;
@ -106,7 +112,7 @@
# usually part of the wifi.nix module # usually part of the wifi.nix module
# because Networkd-wait-online is just failing. # because Networkd-wait-online is just failing.
systemd.services.systemd-networkd-wait-online.enable = false; #systemd.services.systemd-networkd-wait-online.enable = false;
systemd.services.NetworkManager-wait-online.enable = false; systemd.services.NetworkManager-wait-online.enable = false;
} }

View file

@ -20,9 +20,9 @@
appName = "git.ingolf-wagner.de"; appName = "git.ingolf-wagner.de";
#cookieSecure = true; #cookieSecure = true;
#disableRegistration = true; #disableRegistration = true;
domain = "git.ingolf-wagner.de";
rootUrl = "https://git.ingolf-wagner.de/";
settings = { settings = {
server.ROOT_URL = "https://git.ingolf-wagner.de/";
server.DOMAIN = "git.ingolf-wagner.de";
service.DISABLE_REGISTRATION = true; service.DISABLE_REGISTRATION = true;
session.COOKIE_SECURE = true; session.COOKIE_SECURE = true;
log.LEVEL = "Warn"; log.LEVEL = "Warn";

View file

@ -47,7 +47,6 @@ in
boot.loader.grub = { boot.loader.grub = {
enable = true; enable = true;
efiSupport = false; efiSupport = false;
version = 2;
}; };
# This will mirror all UEFI files, kernels, grub menus and # This will mirror all UEFI files, kernels, grub menus and
@ -87,8 +86,8 @@ in
# Initial empty root password for easy login: # Initial empty root password for easy login:
users.users.root.initialHashedPassword = ""; users.users.root.initialHashedPassword = "";
services.openssh.permitRootLogin = "prohibit-password"; services.openssh.settings.PermitRootLogin = "prohibit-password";
services.openssh.passwordAuthentication = false; services.openssh.settings.PasswordAuthentication = false;
environment.systemPackages = [ pkgs.mosh ]; environment.systemPackages = [ pkgs.mosh ];

View file

@ -234,7 +234,7 @@ in
# nextcloud setup # nextcloud setup
services.nextcloud = { services.nextcloud = {
enable = true; enable = true;
package = pkgs.nextcloud25; package = pkgs.nextcloud26;
autoUpdateApps.enable = true; autoUpdateApps.enable = true;
#nginx.enable = true; #nginx.enable = true;
enableBrokenCiphersForSSE = false; # see https://github.com/NixOS/nixpkgs/pull/198470 enableBrokenCiphersForSSE = false; # see https://github.com/NixOS/nixpkgs/pull/198470