config/README.md

93 lines
4.6 KiB
Markdown

# Initial setup (old)
nixos-generate-config
# Reading list
* https://nixos.wiki/wiki/Flakes
* https://teu5us.github.io/nix-lib.html
* https://ryantm.github.io/nixpkgs/builders/trivial-builders/
* https://nixos.wiki/wiki/Nix-writers
# TODOs:
* [ ] https://discourse.nixos.org/t/jsonresume-nix-build-and-deploy-your-resume-with-nix/34089
* [ ] https://github.com/ogoid/nixos-expose-cuda
* [ ] http health monitoring `services.netdata.httpcheck.checks.<foobar>`
* [x] Split stuff into multiple files
* [x] Make a flake
* [ ] homemanager: ip cameras with frigate
* [x] merge hosted docs into a single subdomain
* [x] Setup some remote-development and deploy flow
* [ ] host older versions of nixpkgs documentation (like 20.09)
* [x] add a hidpi profile? https://wiki.archlinux.org/title/HiDPI
* [ ] desktop entries
* https://github.com/jakehamilton/config/blob/579827c699d9c78bd42e73f543eafb05a0d6c374/packages/hey/default.nix
* [ ] https://github.com/jakehamilton/config/blob/579827c699d9c78bd42e73f543eafb05a0d6c374/packages/xdg-open-with-portal/default.nix
* [ ] extend it to work over ssh
* [ ] https://github.com/fufexan/nix-gaming/tree/b090e8b7e463d9c437536b25a0e9af3477a269e9#pipewire-low-latency
* [ ] https://search.nixos.org/packages?query=heroic
* [ ] [doukutsu-rs](https://github.com/jakehamilton/config/tree/579827c699d9c78bd42e73f543eafb05a0d6c374#doukutsu-rs)
* [ ] [doas](https://github.com/jakehamilton/config/blob/579827c699d9c78bd42e73f543eafb05a0d6c374/modules/security/doas/default.nix)
* [ ] [gpg](https://github.com/jakehamilton/config/blob/579827c699d9c78bd42e73f543eafb05a0d6c374/modules/security/gpg/default.nix)
* [ ] [keyring](https://github.com/jakehamilton/config/blob/579827c699d9c78bd42e73f543eafb05a0d6c374/modules/security/keyring/default.nix)
* [ ] [avahi](https://github.com/jakehamilton/config/blob/579827c699d9c78bd42e73f543eafb05a0d6c374/modules/services/avahi/default.nix)
* [ ] [kvm](https://github.com/jakehamilton/config/blob/579827c699d9c78bd42e73f543eafb05a0d6c374/modules/virtualisation/kvm/default.nix)
* [ ] shares
* [ ] [samba](https://github.com/jakehamilton/config/blob/579827c699d9c78bd42e73f543eafb05a0d6c374/modules/services/samba/default.nix)
* [ ] nfs
* [ ] [zfs](https://github.com/jakehamilton/config/blob/579827c699d9c78bd42e73f543eafb05a0d6c374/modules/system/zfs/default.nix)
* [ ] rocm
* [ ] cuda
* [ ] xclip
* [ ] `profiles/singularity.nix` https://github.com/NixOS/nixpkgs/issues/230851
* [ ] declarative libvirt
* [ ] https://git.m-labs.hk/M-Labs/wfvm
* [ ] https://github.com/kholia/OSX-KVM
* [ ] s3: minio or garage
* [ ] mlflow / wandb service
* [x] xforwarding over ssh
* [ ] autogenerate ssh keys for new hosts
* [ ] switch to systemd networkd
* [ ] pre-commit hook with 'nix eval ...outPath'
* https://github.com/cachix/pre-commit-hooks.nix
* [x] use `nom` when deploying
* [ ] figure out how to reuse system flake lock while deplying, leave the night job to upgrade
* [ ] users/pbsds: Support multiple profiles, like headless, nixpkgs-dev, various desktops, hpc, pvv, etc
* [ ] gnome:
* [x] lxterminal
* [ ] replace gnome terminal
* [x] themes
* [x] shortcuts
* [x] pavucontrol
* [ ] nixos-generate-config instructions for new hosts
* [ ] zfs, declarative pools?
* [ ] some tunneling for NFS hosts
* [ ] transgui config
* [x] secrets - nix-sops ?
* [x] flexget
* [ ] microbin
* [ ] transmission
* [ ] transmission remote gui (requires sops in home-manager)
* [x] domeneshop
* [ ] webdav
* [ ] code-remote
* [ ] add .netrc
* [ ] hydra
* perfect for CUDA and RISCV
* [ ] self-hosted binary cache (single-machine) (nix-serve, carinae, harmonia, eris or attic, ssh?)
* https://discourse.nixos.org/t/announcing-harmonia-a-nix-binary-cache-written-in-rust/19855
* https://discourse.nixos.org/t/introducing-attic-a-self-hostable-nix-binary-cache-server/24343/1
* [ ] profiles/web: make ACME/nginx helper a function
* [ ] Support multiple tlds
* [ ] Support multiple acme accounts
* [ ] Support a per-account provider?
* [ ] Support DNS auth
* [ ] Setup aliases instead of a per-vhost cert?
* [ ] Preferably setup a wildchar cert per host
* [ ] once secrets are in place: coin a one true ssh key, automate adding ssh host public keys to flake
* [ ] then add darwin and aarch64 community remote builders
* [ ] https://github.com/dali99/nix-dotfiles/blob/85dcafb4e0b8382a3d04b9a5f63afd01a4144143/machines/pvv-terminal.nix#L3
* [ ] wrap windowmanager in nixGL on non-nixos https://github.com/dali99/nix-dotfiles/blob/85dcafb4e0b8382a3d04b9a5f63afd01a4144143/profiles/xsession/default.nix#LL138C1-L138C1
* [ ] requires GNOME xstart in home-manager