2.4 KiB
2.4 KiB
Hosts
Host Map
| Hostname | Device Description | Primary User | Role |
|---|---|---|---|
twilight |
Desktop Computer | Leyla | Desktop |
horizon |
13 inch Framework Laptop | Leyla | Laptop |
defiant |
NAS Server | Leyla | Service |
emergent |
Desktop Computer | Eve | Laptop |
threshold |
Laptop | Eve | Desktop |
Rebuilding machines
./rebuild.sh
New machine setup
keys for decrypting password secrets for each users located at /var/lib/sops-nix/key.txt and will be copied over to new machines installed with ./install.sh
updating passwords: sops secrets/secrets.yaml
./install.sh --target 192.168.1.130 --flake hostname
Notes:
- Look into this for rotating sops keys
https://technotim.live/posts/rotate-sops-encryption-keys/ - Look into this for openssh known configurations https://search.nixos.org/options?channel=unstable&from=0&size=15&sort=alpha_asc&type=packages&query=services.openssh
- Look into this for flake templates https://nix.dev/manual/nix/2.22/command-ref/new-cli/nix3-flake-init
- Look into this for headscale https://carlosvaz.com/posts/setting-up-headscale-on-nixos/
Updating
nix flake update
Tasks:
Tech Debt
- allowUnfree should be enabled user side not host side (this isn't enabled at all right now for some reason???)
- have nfs binds and exports defined by same code
- move services from defiant into own flake
- made base domain in nas services configurable
- vscode extensions should be in own flake (make sure to add the nixpkgs.overlays in it too)
- server service system users should also be on local systems for file permission reasons
New Features
- GNOME default monitors per hardware configuration?
- offline access for nfs mounts (overlay with rsync might be a good option here? https://www.spinics.net/lists/linux-unionfs/msg07105.html note about nfs4 and overlay fs)
- Flake templates
- Docker parity with existing NAS on defiant
- NFS on defiant
- firefox declarative???
- figure out steam vr things?
- Open GL?
- util functions
- openssh known hosts
- limit boot configurations to 2 on defiant
- rotate sops encryption keys periodically (and somehow sync between devices?)
- zfs email after scrubbing
- headscale server
- mastodon server
- tail scale clients
- wake on LAN