Commit Graph

131 Commits

Author SHA1 Message Date
Eli Ribble 8338996e65 Move to ungoogled-chromium for my browsing.
I'm sick of those guys.
2025-03-12 09:27:31 -07:00
Eli Ribble cee7610873 Add aerc email client.
I figured out how to get it to work with Stalwart mail.
2025-03-12 09:27:31 -07:00
Eli Ribble 7de0a20139 Limit nginx to a single specific IPv6 address.
It frees up the other address to take over port 80.
2025-01-22 01:57:31 -07:00
Eli Ribble 1c10ea89d7 Add working proof-of-concept of frp server (frps)
This is working on a single IPv6 address of the two we now have
avaliable. Because nginx is still binding to port 80 on all addresses,
we have to test this on port 8081, which is less than ideal. Still, it's
progress.
2025-01-22 01:34:25 -07:00
Eli Ribble 3993b526a5 Convert from cloud-init networking to static networking
This is honestly pretty ugly. The issue is that I want two different
IPv6 addresses on this server. I get one address for free as part of my
hosting agreement. The other I have to pay $0.01 per month for. The
address is routable, but it's not provided via cloud-init like the
initial address.

I therefore took the data from /var/lib/cloud/instance/network-config.json
and translated it into this configuration manually. It's dangerous - I
don't know when any of this information may change.

However, it works, and both addresses are now bound to eth0.

Notice that I set the network configuration name to "09-wan". This is
because the previous configuration using cloud-init created a network
configuration at /etc/systemd/network/10-cloud-init that has to be
manually removed or superseded.
2025-01-22 00:40:43 -07:00
Eli Ribble 99f0311a38 Fix error around --impure
I was seeing a stack trace with this at the bottom:

       error: cannot look up '<home-manager/nixos>' in pure evaluation mode (use '--impure' to override)

After reading a bit at https://nixos-and-flakes.thiscute.world/nixos-with-flakes/start-using-home-manager
I was able to craft this shape which uses home-manager in a flake and
doesn't have the same problem.
2025-01-21 23:31:00 -07:00
Eli Ribble 37c8d92d05 Add personal config files through home-manager
I'm doing more development on this server, it's nice to have my configs.
2025-01-13 06:26:32 -07:00
Eli Ribble 5421eccc0b Disable password auth in SSH and root login
More secure.
2025-01-05 19:06:15 -07:00
Eli Ribble a154a67ac8 Re-enable the bare 'sovr.cloud' certificate
It works now that our DNS entries are correct.
2025-01-05 19:05:10 -07:00
Eli Ribble 7c7b53349a Disable the firewall.
Apparently it's blocking port 80 which is making Let's Encrypt certs
fail as well as screwing with our redirect for web browsers.
2025-01-03 09:02:48 -07:00
Eli Ribble d7aabdf198 Add ACME-based Let's Encrypt certificate for TLS
The bare "sovr.cloud" certificate doesn't work yet, but I'm leaving it
there for now.
2025-01-03 09:02:07 -07:00
Eli Ribble f57f7097c1 Add ssh key for eliribble, sort properties alhpabetically 2025-01-02 10:17:39 -07:00
Eli Ribble 4ae53fe701 Add sovr session secret to sovr-server config 2025-01-02 10:17:16 -07:00
Eli Ribble c26aef1700 Add 'deploy' user
We'll use this to run our server process
2025-01-02 10:16:32 -07:00
Eli Ribble e2461e9149 Initial sovr-server systemd service config
This also changes to directly referencing the local git checkout of my
flake definition which makes it faster and safer to iterate on the
logic.

At this point I am creating a systemd unit file, but it's not correct at
all.
2025-01-02 07:35:32 -07:00
Eli Ribble e3779851bb Move timezone to be alpha-sorted 2025-01-02 07:20:42 -07:00
Eli Ribble 1f3d84e37c Add working config for sovr flake.
This builds the sovr-server software from the flake defined in its root.
2025-01-02 07:20:14 -07:00
Eli Ribble 9a0d2bac7b Add neovim to sovr 2025-01-02 07:19:55 -07:00
Eli Ribble 2f950e883d Switch sovr cloud to management via flakes. 2024-12-28 21:37:57 -07:00
Eli Ribble d9f3667421 Permanently enable nix-flakes and nix-command
I'm enabling it a *lot* for one-off commands. I probably should just
accept my fate.
2024-12-27 08:59:30 -07:00
Eli Ribble c57e7cd2c2 Sort options alphabetically
Makes for better organizations and easier diffs
2024-12-27 08:55:46 -07:00
Eli Ribble 235a6d3ce9 Add initial working just.hosting cloud config 2024-12-27 05:50:43 -07:00
Eli Ribble 10bd823179 Add Chromium.
Crashes somewhat less than Firefox, it seems.
2024-12-27 05:50:43 -07:00
Eli Ribble eae408484b Add libvirtd for VM management
It was useful for testing out Umbrel
2024-12-27 05:50:43 -07:00
Eli Ribble de0b9e515f Try to make printer not hold up rebuild
I'm not sure the printer still works, I'm on another network, but at
least it doesn't make the rebuild process hang.
2024-12-27 05:50:43 -07:00
Eli Ribble 227371359f Add nginx reverse proxy for dev environment.
This adds step-ca, but misses the step of having the CA initialize
itself and create the certificate and add the cert to
/etc/nixos/certs/sovr.[crt|key].
2024-12-27 05:50:43 -07:00
Eli Ribble d7d81564e3 Add service to start steam in the background.
I'm actually also starting Steam in big picture mode through the steam
configuration UI on this system, so this may be redundant, but I'm
adding it anyway.
2024-12-18 10:43:02 -07:00
Eli Ribble dec120533b Disable waiting for network online
It makes rebuilds take forever.
2024-12-18 10:43:02 -07:00
Eli Ribble 484b12dcdc Sort some options
No functional changes
2024-12-18 10:43:02 -07:00
Eli Ribble a9b58d88b0 Add home-manager for power and screen locking control
This must be paired with adding home-manager to the nixos channels via

sudo nix-channel --add https://github.com/nix-community/home-manager/archive/master.tar.gz home-manager
sudo nix-channel --update
2024-12-18 10:43:02 -07:00
Eli Ribble 71352b788f Disable screen locking, start Moonlight via xdgautostart
I couldn't figure out a way to create the symlink through NixOS so I
just created it manually in ~/.config/autostart:

ln -s
/var/lib/flatpak/app/com.moonlight_stream.Moonlight/current/active/export/share/application/com.moonlight_stream.Moonlight.desktop
~/.config/autostart/com.moonlight_stream.Moonlight.desktop
2024-12-18 05:40:57 -07:00
Eli Ribble 86f9a6fcee Initial working login and moonlight client working 2024-12-17 15:56:03 -07:00
Eli Ribble 1bb2859818 Enable sunshine, move to nixos 24.11 2024-12-17 14:00:16 -07:00
Eli Ribble 29c5ab1438 Initial working Steam install on thenix
Thenix is just Theiarch, but running on NixOS rather than Arch. Theiarch
of course was just an Arch Linux build of Theiawin, which was just a
Windows VR computer.
2024-12-17 12:46:35 -07:00
Eli Ribble 9a648d903e Add some vim and tmux configs
I'm getting my feet wet with home-manager configuration files.
2024-10-23 09:19:44 -07:00
Eli Ribble 6e67b13b5b Add support for nfs mounts 2024-10-23 09:18:32 -07:00
Eli Ribble b59764a335 Add home-manager, create some configs
I mostly wanted this to control my neovim config for html, which I have
now.
2024-10-15 13:13:34 -07:00
Eli Ribble afaa784c7e Get Brother printer working.
I followed instructions from
https://discourse.nixos.org/t/declarative-printer-setup-missing-driver/33777/5

to extract the driver file from the Brother support page.
2024-10-14 14:14:41 -07:00
Eli Ribble 2787d79351 Add Dia 2024-10-05 18:30:59 -07:00
Eli Ribble bc74c3e1eb Disable network wait-online
It keeps delaying the nixos rebuild unnecessarily. Apparently this
should be disabled when you use Network Manager for networking.
https://discourse.nixos.org/t/systemd-networkd-wait-online-934764-timeout-occurred-while-waiting-for-network-connectivity/33656/6
2024-10-05 18:30:59 -07:00
Eli Ribble ad3adb8db2 Disable PSR to avoid laptop crashing 2024-10-05 18:30:59 -07:00
Eli Ribble 6099b0a23c Remove avahi, go systemd.resolved.
Turns out that avahi fights with systemd resolved. By just using the
one, I can correctly resolve local hostnames.
2024-10-05 18:30:59 -07:00
Eli Ribble c7902f70c0 Switch keymap to the default.
This is so I can use whatever keyboard is connected on bootup. I can
always change it once I have a windowed session.
2024-10-05 18:30:59 -07:00
Eli Ribble 91ab1432ac Don't require my printer work.
It's there sometimes, sometimes not.
2024-10-05 18:30:59 -07:00
Eli Ribble d4e7097f6d Poke holes in the firewall for mDNS (Avahi) and my python test script
The test script checks for addressability from a datacenter.
2024-10-05 18:30:59 -07:00
Eli Ribble 270e1a5236 Add support for IPv6 in the Avahi service.
Trying to get connected to my Tealok via zeroconf networking.
2024-10-05 18:30:59 -07:00
Eli Ribble b73dd14b20 Add websocat for troubleshooting websockets 2024-10-05 18:30:59 -07:00
Eli Ribble 0bec404043 Add Remmina, the Remote Desk Protocol (RDP) and VNC client.
Used to troubleshoot getting a working static site generator area for
Ben
2024-10-05 18:30:59 -07:00
Eli Ribble 311d96f2c7 Add ndisc6 for rdisc6, the router discovery tool.
Useful in some of the IPv6/DHCPv6 investigations I was doing for Tealok.
2024-10-05 18:30:59 -07:00
Eli Ribble b34b0dea3c Add Minecraft clients lunar-client and hmcl.
To play with my kids!

But really, I never got lunar-client working, but I did eventually get
hmcl working on Hypixel, and that's what really counts.
2024-10-05 18:30:59 -07:00