khionu/flake

flake's Issues

home-manager/khionu: bat config

https://mipmip.github.io/home-manager-option-search/?query=bat

Investigate spotifyd

Home Manager has support for spotifyd, which might be neat for integrating with other programs/tools.

CI to rotate Tailscale secrets

When a new container or server is made, it should be able to immediately join my Tailnet. This will require embedding a secret that allows the environment to authenticate.

Implementation notes

This will need to be encrypted with age, and decrypted via either Yubikey or a single-purpose private key provided through Vault or some other secrets engine. CI runner for this purpose should probably sit near the secrets engine.

Disk management

Eventually, this flake should have a single source-of-truth for drives and filesystems. Disko was explored for this purpose, however the architecture created for convoluted errors and awkward flake integration.

The new disk management will be designed to use compositional functions, eg

{ config, myDisko }: with myDisko; rec {
  disk_a = mkDisk {
    path = "/dev/disk/by-path/NNNNNN";
    partitions = [
      efi.mkPart { size = "1G"; label = "boot"; }
      luks.mkPart { size = "100%"; label = "encrypted"; }
    ];
  };
  zpool_a = zfs.mkPool {
    devices = [ disk_a.out.parts[1].decrypted ];
    children = {
      "zfs_swap" = zfs.mkZVol { ... };
      "EPHEM/root" = zfs.mkDataset { ... };
      # ...
    };
  };
}

The generated configuration will include a single script, broken up into individual functions, that can be used to format and mount any or all of the defined components. It will also export metadata that can be used to glue into the standard NixOS filesystem options.

Investigate FIDO2 PAM

On the tin. Else home manager has support for Yubikeys

Custom install medium

This flake should be able to produce an ISO that replaces the NixOS GUI installer with tooling that uses this flake's contents. The tooling should try to reach various hosting providers' metadata services, and if none are reachable provide a dropdown list of device configurations.

The same medium should come with all tools I might want while troubleshooting a device from a live image.

Note: Nushell input list is very nice.

Attributes to implement

Now that my flake has been broken into attributes, it's time to track which I didn't need yet but will want:

Traits

• Nomad Client
• Nomad Server
• Consul Client
• Consul Server
• Vault Agent
• Vault Proxy
• Vault Server
• Game Development
• NAS (to break out)

Platforms

• Server
• Container
• Embedded