Lithospherical/nix-config
1
0
Fork 0
forked from jan-leila/nix-config
Code Pull requests Activity

chore: organized tasks in README.md

Browse source
This commit is contained in:
Leyla Becker 2025-10-19 11:31:15 -05:00
parent b05bfc31fe
commit 290db94f42
1 changed files with 50 additions and 29 deletions
Download patch file Download diff file Expand all files Collapse all files

79
README.md
View file

@ -47,32 +47,53 @@ nix multi user, multi system, configuration with `sops` secret management, `home
# Tasks: # Tasks:
## Tech Debt ## Tech Debt
- monitor configuration in `~/.config/monitors.xml` should be sym linked to `/run/gdm/.config/monitors.xml` (https://www.reddit.com/r/NixOS/comments/u09cz9/home_manager_create_my_own_symlinks_automatically/) - [ ] monitor configuration in `~/.config/monitors.xml` should be sym linked to `/run/gdm/.config/monitors.xml` (https://www.reddit.com/r/NixOS/comments/u09cz9/home_manager_create_my_own_symlinks_automatically/)
- nfs export should be backed by the same values for server and client - [ ] migrate away from flakes and move to npins
## New Features - [ ] rework the reverse_proxy.nix file so that it is a normally named service. Then also change it so that we can hook into it with both a base domain and a subdomain to make migrating to vpn accessible services easier
- crab-hole
- figure out why syncthing and jellyfins permissions don't propagate downwards ## Broken things
- figure out steam vr things? - [ ] figure out steam vr things?
- auto turn off on power loss - nut - [ ] whisper was having issues
- zfs email after scrubbing # TODO: test this
- SMART test with email results ## Data Integrity
- samba mounts - [ ] zfs email after scrubbing # TODO: test this
- offline access for nfs mounts (overlay with rsync might be a good option here? https://www.spinics.net/lists/linux-unionfs/msg07105.html note about nfs4 and overlay fs) - [ ] SMART test with email results
- Create Tor guard/relay server - [ ] zfs encryption FIDO2 2fa (look into shavee)
- migrate away from flakes and move to npins - [ ] rotate sops encryption keys periodically (and somehow sync between devices?)
- whisper - [ ] Secure Boot - https://github.com/nix-community/lanzaboote
- zfs encryption FIDO2 2fa (look into shavee) - [ ] auto turn off on power loss - nut
- Secure Boot - https://github.com/nix-community/lanzaboote
- rotate sops encryption keys periodically (and somehow sync between devices?) ## Data Access
- wake on LAN for updates - [ ] nfs export should be backed by the same values for server and client
- remote distributed builds - https://nix.dev/tutorials/nixos/distributed-builds-setup.html - [ ] samba mounts
- ISO target that contains authorized keys for nixos-anywhere https://github.com/diegofariasm/yggdrasil/blob/4acc43ebc7bcbf2e41376d14268e382007e94d78/hosts/bootstrap/default.nix - [ ] offline access for nfs mounts (overlay with rsync might be a good option here? https://www.spinics.net/lists/linux-unionfs/msg07105.html note about nfs4 and overlay fs)
- mastodon instance - [ ] figure out why syncthing and jellyfins permissions don't propagate downwards
- rework the reverse_proxy.nix file so that it is a normally named service. Then also change it so that we can hook into it with both a base domain and a subdomain to make migrating to vpn accessible services easier - [ ] make radarr, sonarr, and bazarr accessible over vpn
- move searx, home-assistant, actual, jellyfin, paperless, and immich to only be accessible via vpn - [ ] move searx, home-assistant, actual, jellyfin, paperless, and immich to only be accessible via vpn
- make radarr, sonarr, and bazarr accessible over vpn
- graphana accessible though tailscale ## Services
- fix panoramax package - [ ] crab-hole for ad block
- actual instance - [ ] enable and learn actual for budgeting
- claude code MCP servers should bundle node with them so they work in all environments - [ ] vikunja service for project management
- Vikunja service - [ ] Create Tor guard/relay server
- [ ] mastodon instance
## DevOps
- [ ] wake on LAN for updates
- [ ] remote distributed builds - https://nix.dev/tutorials/nixos/distributed-builds-setup.html
- [ ] ISO target that contains authorized keys for nixos-anywhere https://github.com/diegofariasm/yggdrasil/blob/4acc43ebc7bcbf2e41376d14268e382007e94d78/hosts/bootstrap/default.nix
- [ ] fix panoramax package
- [ ] claude code MCP servers should bundle node with them so they work in all environments
## Observability
- [ ] graphana for dashboards
- [ ] prometheus and loki for metric and log collection
- [ ] zfs storage usage
- [ ] zfs drive health status
- [ ] service version lag
- [ ] network/cpu/ram utilization
- [ ] http latency
- [ ] postgres db load
- [ ] nginx queries
- [ ] ntfy.sh for push notifications
- [ ] kuma for uptime visualization