69 Commits

Author	SHA1	Message	Date
h7x4	304304185c	base: add lsof to list of default installed packages	2026-02-02 23:59:35 +09:00
h7x4	ea6296f47a	base/vm: disable graphics for vms by default	2026-01-26 17:08:35 +09:00
h7x4	7d451f1db5	base/auto-upgrade: don't install flake-inputs.json when disabled	2026-01-26 15:42:56 +09:00
h7x4	1d57cec04d	base/acme: remove deprecated argument	2026-01-26 15:07:40 +09:00
h7x4	1b6ff9876d	Remove global packages from users, skrott: remove neovim properly	2026-01-26 13:16:06 +09:00
h7x4	c061c5be0c	base: re-enable mutableUsers (absolute state)	2026-01-26 00:25:20 +09:00
h7x4	1d47409d96	base: configure sops	2026-01-22 16:48:59 +09:00
h7x4	f7757d697d	base: don't install dynamic loader stub	2026-01-22 16:13:36 +09:00
h7x4	9f43ea887e	base: OOM early on nixos rebuilds	2026-01-22 16:13:20 +09:00
h7x4	5f94345a91	hosts/various: enable qemu guest agent, disable smartd for vms by default	2026-01-22 16:05:36 +09:00
h7x4	89ea5b321a	hosts/various: use systemd-boot as default bootloader	2026-01-22 15:49:50 +09:00
h7x4	e2f3c81ecd	base: move package list to separate file	2026-01-22 15:35:18 +09:00
h7x4	a4c3aaa402	base: provide reasoning for packages, add a few new ones	2026-01-22 15:31:48 +09:00
h7x4	5714efc668	modules/grzegorz: override base certificate config	2026-01-22 15:10:50 +09:00
h7x4	d5199779a6	base: disable fontconfig by default	2026-01-22 14:57:00 +09:00
h7x4	ae3c7019ef	base: disable hibernation and sleep	2026-01-22 14:54:35 +09:00
h7x4	73dc9306f1	base: no mutable users by default	2026-01-22 14:51:24 +09:00
h7x4	09d72305e2	base/nginx: return 444 on fqdn virtualHost by default	2026-01-21 23:17:47 +09:00
h7x4	3a0ea9c338	base/polkit: default to username if in group wheel	2026-01-17 03:59:55 +09:00
h7x4	1c021cd789	base/packages: add net-tools	2026-01-15 17:49:42 +09:00
h7x4	d93bdd8493	journald-upload: use ipv4 temporarily, restrict firewall to ildkule	2026-01-15 17:38:27 +09:00
h7x4	024dae4226	journald-{remote,upload}: init	2026-01-15 15:50:49 +09:00
h7x4	cd6f35a42d	base/auto-upgrade: display build logs in journalctl	2026-01-13 19:59:43 +09:00
h7x4	4abe86dc07	base/roowho2: traffic filter to PVV IP-space	2026-01-06 12:23:39 +09:00
h7x4	25c8171e3d	base/roowho2: init	2026-01-06 12:23:39 +09:00
h7x4	16891ff521	misc/metrics-exporters: move to base	2025-12-30 00:32:25 +09:00
h7x4	aa6f7e3038	base/nginx: enable extra listen paramenters by default	2025-12-24 13:44:58 +09:00
h7x4	0a8702e3ba	flake-input-exporter: replace hardcoded ip space with ones from values	2025-12-22 10:30:55 +09:00
h7x4	3ae26bc53f	base/nix: use auto allocated users	2025-12-05 02:25:28 +09:00
h7x4	d666aa6c33	base/postfix: migrate config to new format	2025-12-05 02:23:46 +09:00
Daniel Olsen	3faad36418	base/nixos-exporter: allow localhost to fetch	2025-10-13 06:41:28 +02:00
Daniel Olsen	9e51bdb373	base/nixos-exporter: listen on own server block	2025-10-12 16:42:42 +02:00
fredrikr79	c7930b793a	base: create flake input exporter	2025-10-12 05:23:54 +02:00
h7x4	8dcd471a6f	base: don't lock kernel modules lmao	2025-08-03 04:36:10 +02:00
Peder Bergebakken Sundt	da7cb17f9e	base: stabilize system.build.toplevel.outPath for vmVariant ... This is done by not depending on the flake itself, allowing the bits of a dirty tree to not affect the hash. This enables equivalence testing with `just eval-vm bob` and checking if the system closure hash changes or not.	2025-05-31 19:13:33 +02:00
Peder Bergebakken Sundt	1caa0cc7be	Merge pull request 'base: add option config.virtualisation.vmVariant' (!101) from vm into main ... Reviewed-on: Drift/pvv-nixos-config#101 Reviewed-by: Oystein Kristoffer Tveit <oysteikt@pvv.ntnu.no>	2025-05-31 19:01:47 +02:00
Peder Bergebakken Sundt	752141f97f	base: add option config.virtualisation.vmVariant	2025-05-31 18:53:04 +02:00
Peder Bergebakken Sundt	9560eab82b	Merge pull request 'flake: switch to nixos.org nixpkgs tarballs' (!103) from switch-inputs into main ... Reviewed-on: Drift/pvv-nixos-config#103 Reviewed-by: Oystein Kristoffer Tveit <oysteikt@pvv.ntnu.no>	2025-05-31 18:35:28 +02:00
h7x4	7fb3e29d7b	base/uptimed: init	2025-05-31 14:05:43 +02:00
Peder Bergebakken Sundt	e387656be8	base/auto-upgrade: fetch input urls from flake	2025-05-30 19:05:24 +02:00
Daniel Olsen	13a270b8ed	disable nginx jit and multi_accept	2025-05-10 11:13:51 +02:00
Peder Bergebakken Sundt	3a707b00d3	base: source ~/.bashrc ... Now by default we source .bashrc and .profile unless the user has actually read the manual. Tested in vm	2025-03-18 22:57:18 +01:00
h7x4	6372a4111e	common/userdbd: init	2025-03-15 01:47:10 +01:00
h7x4	bdfb7384c2	common/userborn: init	2025-03-15 01:46:52 +01:00
h7x4	2be9eb16fe	base/nix: defer store optimization	2025-03-15 01:20:34 +01:00
h7x4	64bd33a213	base: enable fwupd	2025-03-15 01:19:59 +01:00
h7x4	7b5e114944	base: use dbus-broker as dbus implementation	2025-03-15 01:19:33 +01:00
h7x4	ee8965e18c	base: use latest kernel by default	2025-03-15 01:18:28 +01:00
h7x4	4507ffe2ab	base/auto-upgrade: switch ref back to main	2024-12-22 23:04:08 +01:00
h7x4	fd81d61a56	common/logrotate: remove custom hardening now that nixpkgs provides it	2024-12-10 21:05:21 +01:00