skogsbrus/os

My OS & dotfiles configuration for Linux and MacOS devices (Nix)

os's Issues

Use sops-nix for secrets

Security hardening

References: https://xeiaso.net/blog/paranoid-nixos-2021-07-18

Photoprism: use photo_organizer.py to structure the library & import

keeper: storage available on LAN

Bump activitywatch dependencies that have critical security issues

Manage sshconfig with nix

Look into containerized services

keeper: wireguard connectivity

working:
LAN: phone --> router --> keeper

not working:
wireguard: phone --> router --> keeper

Improve structure

Got help from @phaer and jakehamilton.

References:

• https://github.com/jakehamilton/config/tree/main/machines/x86_64-linux
• https://github.com/jakehamilton/config/blob/main/modules/virtualisation/kvm.nix
• https://nixos.org/manual/nixos/stable/index.html#sec-option-declarations

Misc

• Namespace?

Improvements:

• You can pass extra arguments to your home-manager config by adding it to home-manager.extraSpecialArgs. E.g. i use home-manager.extraSpecialArgs.osConfig = config; in my nixos configuration, so i get osConfig in my home manager modules. so i.e. osConfig.networking.hostName works.

Flake:ify hardware config

Current solution imports a hardcoded file for device specific options, such as disk encryption and hw options. This should be managed in flake.nix instead.

Firefox: don't search for .home domains

https://support.mozilla.org/en-US/questions/1307552

Update gitconfig based on directory

How to manage private files that can't be published?

Would be nice to publish this repo AND be able to configure private things for e.g work.

Nix flakes make it so that each file has to be checked in or be an input so can't just use .gitignore and not check it in.

Separate home & system config

As suggested here: https://www.reddit.com/r/NixOS/comments/mqw0cl/question_about_flakes_and_homemanager/gumt5ij?utm_source=share&utm_medium=web2x&context=3

Keeper: debug kodi segfault

Fix zsh + fzf

Photoprism: some sort of cronjob for library scanning

keeper: slow rebuilds

Rebuilds on the host keeper can take up to 10-20 minutes. On boot, it's not noticable. But it gets worse after each rebuild until the system is rebooted.

Attached is an strace log of a rebuild that took 20 minutes.

rebuild.log

keeper: get zfs emails working (zed)