kittywitch / nixfiles

kat's configuration flake

Kat "kittywitch" Inskip

nixfiles's Issues

Documentation: Figure out how better to document

• Are there docstring like things?

modules/network: Dynamic DNS Updater

Since the move away from glauca.digital for DNS, I haven't had Dynamic DNS.

Need to make a replacement for the old module using knsupdate.

nixfiles-base & nixexprs: Rework

I started two separate repositories: kittywitch/nixfiles-base and kittywitch/nixexprs.

The former provides a template for others to adopt the underlying functionalities provided in this repository. The latter is reusable(?) modules and packages.

• kittywitch/nixexprs inhoused as exprs
• Merged local changes with exprs
• Module reusability prioritisation
• Stabilize repository structure
• Redo kittywitch/nixfiles-base with stabilized repository

users/kat/sway/waybar: Custom Modules

• Move current custom modules to using signals
  • Konawall Toggle
• Create new custom modules
  • gammastep toggle and status module
  • unread mail count

nodes/athame: Deprecation and migration

This node already has a planned replacement in daiyousei.

• Look into ARM cross-compilation w/ nixpkgs
  • aarch64 emulated compiles
  • CI builds and caching
  • Distributed compilation
• Look into existing binary caches.
• Do backups, figure out per-service backup system for state.
• Create a replacement box before any migration on OCI.
• Actually do the migration
• Cancel / delete the Hetzner Cloud box
• Cancel Hetzner Cloud account

modules/network: IPv6 Handling

• Fix network module tf-nix integrations
• Rinnosuke IPv6
• Local node IPv6 configuration

nodes/yule: Investigate PCI-e Issues

Yule has spontaneous PCI-e device dropouts which require a reboot.

profiles/shared: Further work

• Prepare nodes for being shared
  • daiyousei
  • beltane
  • samhain
  • shinmyoumaru
• Contemplate if any other nodes should be opened up
• Give @arcnmx and @hexchen wheel

use extern: arcnmx/nixexprs

Packages:

• #9
• replace alias "walls": arcnmx/nixexprs@d1e6c07

Changes:

• base16 update
  • Move to color names where possible
  • patched vim template: arcnmx/home@a531654

nodes/shinmyoumaru: Migration to NixOS

• Look into ARM cross-compilation w/ nixpkgs
  • ARMv6 cross-compilation
  • CI builds and caching
    • See why CI builds take so long (uncacheable things like e2fs-progs? manually cache)
• Look into existing binary caches
• Generate SD card image
• Actually do the flash/install
• Write packages & services for DHT22 exporter + the socat
  • Consider moving to the BME680
    • If this route is taken, package bme680_exporter instead
  • Package dht22_exporter
  • Provide a service for dht22_exporter
    • Additional service that handles socatting for it to use yggdrasil with it.

CI: Generalised emulated compiles

Currently, we have per-architecture emulated compile definitions for aarch64, ARMv6 and ARMv7. This should be generalised and should use the magic list from modules/system/boot/binfmt.

Of course, the CI helpers themselves could be augumented with something similar to this upstream?

Move away from the horrifying network module

Replace init.vim with .lua

because @arcnmx said so

koishi: MPV hardware acceleration

VDPAU / accel whatever

modules: Finalise and make fully reusable some of my modules

• modules/glauth
• modules/fusionpbx

pkgs/screenstub: Move to using the upstream without patches

Since @arcnmx has added configuration options which do things equivalent to the patch used for screenstub within this repository to allow function with Q35 and Wayland, it makes no sense anymore to use it with those patches.

Identity: Work on LDAP and Keycloak integrations

• Get LDAP server integrated with Keycloak
• Service integrations
  • Mail
    • Requires forking NixOS mailserver
    • Dovecot
    • Postfix
  • Gitea (LDAP)
  • Matrix (SAML)
  • Jellyfin (LDAP)
  • Vaultwarden (OIDC)
    • Wait for dani-garcia/vaultwarden#1955

services/murmur: Figure out better integration (web portal for certificate management)

Imports: Move to flakes

This issue should not be started until flakes are stable.

• Remove niv
• Move to flakes
• Provide flakes in my other projects

vaultwarden: kat and machine kat segregation

Use organisations and password sharing to separate machine-kat from regular kat. It would be prudent to generate per-machine PGP keys, too.

impermanence: Migration and helpers

• Migrate remaining nodes that can be impermanent to impermanence
  • Beltane
  • Yule
  • Daiyousei(?)
• Work on kittywitch/anicca
  • See kittywitch/anicca/issues

services: Rewrite a majority of what isn't simple to begin with into modules

Pilfer arcnmx's firefox stuff

https://github.com/arcnmx/home/blob/master/config/profiles/gui/home.nix#L539-L544

home-manager: SharedModules

https://github.com/nix-community/home-manager/blob/master/nixos/default.nix#L82

users/kat: Regenerate password

Replace password and put it in repo secrets

modules/network: Look into alternatives to Yggdrasil

For a while, I've been dissatisfied with Yggdrasil. It would be wise to look into and explore alternatives to it.

Tailscale would not be viable due to its ownership and pricing model.

Imports: Contemplation and rework

The current state of imports is somewhat improved from how it used to be, however, more work could be done on recursiveMod and nodeImport.

• Further work on recursiveMod
  • Centralized settings definition
  • Refactors to be saner code
  • Require far less hacks
  • Allow merging of tree structures from multiple results in places
• Lighter base profile
  • Contemplate nomenclature (lite? embedded? server? What does the heavier extension to base become?)
• Shared profile
• Migrate shinmyoumaru configuration into profiles/hardware/raspi.