312 commits

Author	SHA1	Message	Date
Rouven Seifert	839f56d098	thinkpad: add curl and fix fonts	2024-02-11 20:01:15 +01:00
Rouven Seifert	e315b81cda	thinkpad: use sudo-rs instead of sudo	2024-02-11 20:00:53 +01:00
Rouven Seifert	2e3f52a60e	thinkpad: enable docker	2024-02-11 19:58:56 +01:00
Rouven Seifert	64777dfabf	nuc: unforce dnssec	2024-02-11 19:58:09 +01:00
Rouven Seifert	82aa8774d9	mail: use nix native sieve options	2024-02-11 19:57:42 +01:00
Rouven Seifert	71939c6c39	systemd: allow soft-reboot	2024-01-29 23:50:34 +01:00
Rouven Seifert	b3329fd1a9	home: remove declarative account configuration	2024-01-27 23:03:53 +01:00
Rouven Seifert	e7a4594300	matrix: enable element-web	2024-01-27 23:03:29 +01:00
Rouven Seifert	0fb57287bd	falkenstein: add some spoofing restrictions	2024-01-25 18:20:24 +01:00
Rouven Seifert	7a8e304ca1	nuc: disable dnssec as it breaks matrix	2024-01-25 18:19:48 +01:00
Rouven Seifert	c8fa651010	updates	2024-01-22 01:08:20 +01:00
Rouven Seifert	6cb6667093	thinkpad: wayland and bluetooth fixes	2024-01-22 01:07:30 +01:00
Rouven Seifert	758c58f5c2	nix flake update	2024-01-14 13:17:29 +01:00
Rouven Seifert	7e8859d116	network: bind wg0to wireless	2024-01-11 14:14:19 +01:00
Rouven Seifert	3a052ca275	Revert "another try" ... This reverts commit eefcb05e3a.	2024-01-04 17:26:11 +01:00
Rouven Seifert	eefcb05e3a	another try	2024-01-04 14:56:38 +01:00
Rouven Seifert	94689ed2b2	disable gcc tuning	2024-01-04 14:54:49 +01:00
Rouven Seifert	20f2a3edb4	Revert "one last try" ... This reverts commit 41b724b744.	2024-01-04 14:54:25 +01:00
Rouven Seifert	41b724b744	one last try	2024-01-04 14:53:06 +01:00
Rouven Seifert	66a502d7e6	small hydra test	2024-01-04 11:30:19 +01:00
Rouven Seifert	ee31ef9c4c	gcc: tune arch	2024-01-04 00:17:40 +01:00
Rouven Seifert	60ed410a43	bring back hydra	2024-01-04 00:13:46 +01:00
Rouven Seifert	031a2004f3	cleanup and update changes	2024-01-04 00:13:32 +01:00
Rouven Seifert	fcdc32c2f0	networking: fix wireguard dns	2024-01-04 00:10:15 +01:00
Rouven Seifert	ec6fefe59c	refactor: cleanup	2023-12-29 19:47:57 +01:00
Rouven Seifert	3aa45471d8	thinkpad: power management improvements	2023-12-29 19:40:10 +01:00
Rouven Seifert	8a6f689e6a	virtualisation: fix firewall and secureboot ... gpu passthrough wann?	2023-12-27 22:55:40 +01:00
Rouven Seifert	c4e59829c4	network: disable lldpd	2023-12-27 22:22:42 +01:00
Rouven Seifert	51001f585b	networking: fix ifsr-apb password	2023-12-24 23:40:01 +01:00
Rouven Seifert	1bcad0949a	systemd-networkd improvements	2023-12-23 17:30:24 +01:00
Rouven Seifert	70123785d6	nginx: enable http3 for falkenstein	2023-12-23 17:30:04 +01:00
Rouven Seifert	dab85522ba	ssh3: init packages	2023-12-19 22:42:38 +01:00
Rouven Seifert	1c9806cd0c	misc updates	2023-12-17 17:27:20 +01:00
Rouven Seifert	6a57013187	security: enable u2f	2023-12-17 17:27:14 +01:00
Rouven Seifert	dd997624a9	network: add openfortivpn and wifi@db	2023-12-17 17:22:12 +01:00
Rouven Seifert	cf9dedf17a	networking updates	2023-12-12 17:44:28 +01:00
Rouven Seifert	9e8e5053fd	add shared systemd module	2023-12-12 17:43:16 +01:00
Rouven Seifert	0ac9348fd2	v4l2, printing and website	2023-12-01 15:07:47 +01:00
Rouven Seifert	2e8e3ada22	networking and security updates	2023-11-25 23:22:16 +01:00
Rouven Seifert	aa2c1e702c	host/thinkpad: split into modules	2023-11-24 09:57:15 +01:00
Rouven Seifert	70a6695ca1	updates and virtualization enhancements	2023-11-24 09:19:06 +01:00
Rouven Seifert	bad96e4197	falkenstein-1 -> falkenstein	2023-11-20 22:46:51 +01:00
Rouven Seifert	41d348b037	nixos-hardware: remove	2023-11-18 14:54:56 +01:00
Rouven Seifert	81d601608d	adguard + nextcloud: remove	2023-11-18 00:11:37 +01:00
Rouven Seifert	2fae2a695b	refactor: ran deadnix	2023-11-16 15:53:15 +01:00
Rouven Seifert	dcaa017e5d	agenix: migrate falkenstein	2023-11-16 15:08:13 +01:00
Rouven Seifert	3c5095f144	agenix: migrate nuc	2023-11-16 14:40:40 +01:00
Rouven Seifert	591c0cd6b5	start replacing sops with agenix	2023-11-16 13:29:18 +01:00
Rouven Seifert	719ef1ba91	mail: use rspamd for dkim	2023-11-16 01:27:01 +01:00
Rouven Seifert	33f39b3a15	overlays: remove wdisplays	2023-11-10 11:58:46 +01:00
Rouven Seifert	2bb6fa41e0	networking updates, too many to write down	2023-11-07 19:56:10 +01:00
Rouven Seifert	862e8ecfb2	add grafana and prometheus	2023-10-29 11:58:56 +01:00
Rouven Seifert	78b1a5761c	cleanup	2023-10-28 15:51:25 +02:00
Rouven Seifert	45628bdbc3	agdsn and networking updates	2023-10-26 12:12:45 +02:00
Rouven Seifert	5148ff5953	wireguard and fail2ban	2023-10-22 15:45:30 +02:00
Rouven Seifert	78a47101ac	matrix: init	2023-10-17 10:39:14 +02:00
Rouven Seifert	fdcfeb524c	seafile: init	2023-10-15 16:30:40 +02:00
Rouven Seifert	2bacb74cc1	remove helix flake, add openwrt to router	2023-10-13 00:28:39 +02:00
Rouven Seifert	af80cf73db	helix got fixed upstream	2023-10-09 23:37:08 +02:00
Rouven Seifert	0a2b482244	some agdsn related changes	2023-10-08 14:22:52 +02:00
Rouven Seifert	b81a7a669a	systemd 254 arrived, switched back to sway	2023-09-29 10:32:24 +02:00
Rouven Seifert	e7cb531d8b	dnssec: enable	2023-09-24 22:46:12 +02:00
Rouven Seifert	6dece01018	fixed ssh errors, add hashcash, update mail config, update zsh config	2023-09-24 21:32:28 +02:00
Rouven Seifert	671f4eb06c	refactor networking domain	2023-09-19 13:47:08 +02:00
Rouven Seifert	5cbf915808	nixify some more bots	2023-09-12 11:09:32 +02:00
Rouven Seifert	970ddcdacb	remove crowdsec and add tpm key	2023-09-06 13:35:16 +02:00
Rouven Seifert	74a4348d1d	mail: put sieve scripts in /etc	2023-09-04 13:07:22 +02:00
Rouven Seifert	9f90c1643a	enable spam training	2023-09-03 22:30:56 +02:00
Rouven Seifert	0fb1da3199	mail improvements	2023-09-01 14:15:17 +02:00
Rouven Seifert	0a8ef57823	don't use latest kernels	2023-08-29 20:34:20 +02:00
Rouven Seifert	505d713001	new monitor arrived	2023-08-27 15:48:42 +02:00
Rouven Seifert	a1dc57a8de	remove github workflows and add breaktimer	2023-08-19 14:12:51 +02:00
Rouven Seifert	346d04e632	helix fix and some useful zsh functions	2023-08-12 18:34:29 +02:00
Rouven Seifert	4964b6036b	curl update	2023-08-09 09:01:29 +02:00
Rouven Seifert	4a7f6de503	use a newer version of nom	2023-08-06 22:24:01 +02:00
Rouven Seifert	741ebd293d	nixpkgs deprecated lib.getExe on packages without a mainprogram	2023-08-03 13:30:40 +02:00
Rouven Seifert	a7a6c8e320	re-enabled impermanence and secure boot	2023-08-02 20:28:22 +02:00
Rouven Seifert	085e064e46	switched the thinkpad to zfs again	2023-08-02 18:04:26 +02:00
Rouven Seifert	7d45f23892	fixes before reinstall	2023-07-31 14:12:10 +02:00
Rouven Seifert	b48fa4e383	configured backups	2023-07-30 19:41:51 +02:00
Rouven Seifert	60e1f3c3d0	configured crowdsec	2023-07-27 23:25:08 +02:00
Rouven Seifert	f1f11eee2a	better up purge and mail secrets	2023-07-20 21:35:12 +02:00
Rouven Seifert	48e94316c0	configured uptime-kuma	2023-07-15 11:54:30 +02:00
Rouven Seifert	6577b08dab	nixpkgs update	2023-07-12 22:40:38 +02:00
Rouven Seifert	b283eb634f	wlsunset, dwarf fortress, mail fixes	2023-07-09 22:49:16 +02:00
Rouven Seifert	78b5dad1d9	reconfigured the mail server	2023-07-05 15:55:17 +02:00
Rouven Seifert	2df9f4c65d	first attempt on gpu passthrough	2023-07-03 10:19:14 +02:00
Rouven Seifert	ca8ac0f517	basic river configuration	2023-06-26 23:04:01 +02:00
Rouven Seifert	2d190a8791	beautified overlays	2023-06-22 14:34:05 +02:00
Rouven Seifert	99432a7244	enable zram for the vps	2023-06-19 23:58:04 +02:00
Rouven Seifert	1169e53c76	use lib.getExe where possible	2023-06-19 13:22:15 +02:00
Rouven Seifert	20dd0ece6c	nextcloud 26 -> nextcloud 27	2023-06-19 10:37:17 +02:00
Rouven Seifert	0620ebaa2a	remove exposed keys	2023-06-12 20:11:19 +02:00
Rouven Seifert	f567dff94a	replace http cache with build machines and ssh	2023-06-12 16:49:45 +02:00
Rouven Seifert	33a2c28aad	introduce deploy-rs	2023-06-12 12:58:21 +02:00
Rouven Seifert	ab78b70605	kernel updates	2023-06-09 11:18:29 +02:00
Rouven Seifert	a4f6f8e370	nixpkgs fixes	2023-06-08 17:59:52 +02:00
Rouven Seifert	988ab5a0d0	fix nuc zsh history	2023-06-08 10:16:06 +02:00
Rouven Seifert	7e1d2412ef	initial config	2023-06-05 19:57:19 +02:00
Rouven Seifert	8f78e1f843	configured a spotify widget for waybar	2023-06-03 21:42:12 +02:00