about summary refs log tree commit diff
path: root/machines
Commit message (Collapse)AuthorAgeFilesLines
* machines/dnyarri: Stop bcache during sleep/scrubaszlig2019-02-091-1/+29
| | | | | | | | | | | | | | | | | | | | | | | | | | I did have a major outage this week, because I was using bcache with writeback mode on a RAID10 backing storage. Fortunately, I was able to recover 99.9% of the data (only the most recent stuff wasn't recoverable), but I certainly don't want this to happen again in the future. While I did use bcache with hibernate and writeback, the interesting part is that the caching device went bonkers after a "normal" shutdown rather than a suspend/hibernate, with "normal" being "with a bunch of kernel warnings about zswap". Also, this happened around a btrfs scrub, so the inconsistency was all over the place. So first of all, I'm now going with writaround mode rather than writeback mode for the time being. Although it's slower than writeback, the chances that I need to do such a recovery again is close to 0% with writethrough and writearound because all writes are synchronous. Second, this very change makes sure that whenever the machine goes to sleep or a scrub is started, the caching is disabled and afterwards it's re-enabled. That way we shouldn't have lots of trash on the caching device. Signed-off-by: aszlig <aszlig@nix.build>
* machines/dnyarri: Enable btrfs auto-scrubaszlig2019-02-091-0/+2
| | | | | | | | I had this in my local configuration.nix since a while and while it might be annoying when this runs every month, I think it's better to do it regularily rather than having a dying disk go unnoticed. Signed-off-by: aszlig <aszlig@nix.build>
* Revert "machines/titan: Switch to iwd"devhell2019-01-031-1/+1
| | | | | | | This reverts commit 292099429d0bab51f0cb634c6bc5c9745c4c1383. Well, looks like iwd ist still not ready for primetime with my university's eduroam implementation.
* machines/profpatsch: disable sshd for workstationsProfpatsch2018-12-301-1/+1
|
* machines/haku: add wireguard kernel moduleProfpatsch2018-12-301-0/+3
|
* machines/haku: add Thomas’s ssh pubkey to vorstandProfpatsch2018-12-301-0/+1
|
* machines/titan: Switch to iwddevhell2018-12-271-1/+1
| | | | | | Now, it's not yet clear if iwd will work with my uni's eduroam service at all. Either way though, this is in preparation for the switch and test once I'm near an eduroam access point.
* machines/dnyarri: Remove vault deviceaszlig2018-12-241-14/+1
| | | | | | | | Since quite a while, NixOS re-uses the passphrases from earlier devices, so there is no need anymore for such a device in order to unlock multiple containers with the same passphrase. Signed-off-by: aszlig <aszlig@nix.build>
* machines/dnyarri: Use close instead of luksCloseaszlig2018-12-241-1/+1
| | | | | | | The "luksClose" subcommand for cryptsetup has been deprecated for a while, so let's move over to "close". Signed-off-by: aszlig <aszlig@nix.build>
* machines/dnyarri: Enable bcache kernel moduleaszlig2018-12-241-0/+5
| | | | | | | | | | | | | | | Since I got a new SSD for the machine (thanks @cvdnext), I also had the opportunity to re-create my LUKS containers to LUKS2 with Argon2 key derivation alongside creating bcache backing devices. The change in order to support bcache is just a matter of adding "bcache" to availableKernelModules and we're done. However, as the storage configuration is not a very common one, I decided to add a test specific to that to make sure future NixOS updates won't prevent the machine from booting. Signed-off-by: aszlig <aszlig@nix.build>
* machines/profpatsch: clean up configsProfpatsch2018-12-224-105/+25
| | | | Remove unused packages and commented out stuff.
* machines/profpatsch/base: add find* aliasesProfpatsch2018-12-221-1/+8
|
* machines/profpatsch/workstation: Accept the TruthProfpatsch2018-12-221-1/+1
|
* machines/profpatsch/workstation: disable fcitx for nowProfpatsch2018-12-221-4/+5
|
* machines/profpatsch/workstation: enable firewallProfpatsch2018-12-221-1/+7
|
* machines/katara: add aarch nixos community builderProfpatsch2018-12-221-0/+13
|
* machines/katara: disabled hyperthreadingProfpatsch2018-12-221-1/+1
|
* machines/katara: wireguard supportProfpatsch2018-12-221-0/+4
|
* machines/katara: Use "alot" from python3Packagesaszlig2018-12-141-1/+1
| | | | | | | | | Since alot version 0.8, Python 2.x is no longer supported and subsequently trying to use it from pythonPackages will result in an evaluation error. Signed-off-by: aszlig <aszlig@nix.build> Cc: @Profpatsch
* tishtushi: Remove mount for /nix/storeaszlig2018-12-121-10/+0
| | | | | | | | | | | | The internal SSD of the machine just died, so I reconstructed the Nix store on the spinning rust from the machine configuration and we're now left without the SSD. Maybe it makes sense to still use the SSD with bcache, depending on how failure-resilient it is, but for now, let's just remove it so we at least have a working system. Signed-off-by: aszlig <aszlig@nix.build>
* machines/devhell/{eris,titan}: Remove pkgsdevhell2018-12-092-24/+0
| | | | These packages are unnecessary currently.
* machines: deactivate schaf & fliewatuetsternenseemann2018-11-091-2/+0
| | | | both don't exist anymore
* machines/devhell: Remove powerManagementdevhell2018-11-031-5/+0
| | | | TLP is running, so this won't work.
* machines/{eris,titan}: Unify configsdevhell2018-11-032-16/+57
| | | | | | I've become increasingly aware that my configurations drift, and while this is still not amazing in terms of DRY and whatnot, it's all I can do for now.
* dnyarri: Drop override for podcastparseraszlig2018-10-251-17/+1
| | | | | | | | | | | The upstream version 0.6.4 was released 2 months ago and it recently hit nixpkgs[1], so we can finally drop the override as the new version now contains the fix[2] for the problem that affected me. [1]: https://github.com/NixOS/nixpkgs/commit/5e2590ba6fd352bc65b4cd7fd82 [2]: https://github.com/gpodder/podcastparser/pull/17 Signed-off-by: aszlig <aszlig@nix.build>
* machines/haku: serve lojbanistan.de faviconProfpatsch2018-10-201-1/+15
|
* machines/eris: Remove thunderbirddevhell2018-10-021-1/+0
| | | | Everything is on neomutt now so there is no need for thunderbird.
* machines/katara: add local unbound DNS resolverProfpatsch2018-09-211-0/+2
|
* machines/titan: Replace gutenprint/hplip with foo2zjsdevhell2018-08-161-1/+1
| | | | | | | I've set up a RPi to act as a print server, but the printers are configured as RAW, so the burden of having the correct drivers installed lies with the client, which is fine considering the current network setup.
* machines/brawndo: Add Firefox to systemPackagesaszlig2018-07-251-1/+2
| | | | | | | | User is likely to switch, so let's add Firefox alongside to Chromium and eventually remove Chromium at some day. Signed-off-by: aszlig <aszlig@nix.build> Cc: @dwenola
* machines/brawndo: Add Python 3 to system pathaszlig2018-07-221-1/+1
| | | | | Signed-off-by: aszlig <aszlig@nix.build> Cc: @dwenola
* machines/katara: fix execlineb wrapperProfpatsch2018-07-201-1/+1
|
* fix typoProfpatsch2018-07-201-1/+1
|
* machines/katara: nix-diff is broken atmProfpatsch2018-07-201-1/+1
|
* machines/katara: add execlineb-with-builtinsProfpatsch2018-07-202-0/+11
|
* machines/profpatsch: a few misc changesProfpatsch2018-07-202-1/+6
|
* machines/katara: fix dunst invocationProfpatsch2018-07-201-1/+1
|
* machines/katara: switch from notmuch to muProfpatsch2018-07-201-3/+4
|
* machines/katara: add more utilsProfpatsch2018-07-201-2/+4
|
* Fix mpv overrides with scripts attributeaszlig2018-07-192-2/+6
| | | | | | | | | Since NixOS/nixpkgs@402ee4e9eaf08a697672718cd502067c726a7c73, mpv by itself no longer has a script argument but there is now "mpv-with-scripts", which boils down to something similar. Signed-off-by: aszlig <aszlig@nix.build> Cc: @Profpatsch, @sternenseemann
* machines/schaf: Use users instead of extraUsersaszlig2018-07-021-2/+2
| | | | | | | | The users.extraUsers has been renamed a long time ago, so let's switch to the new option. Signed-off-by: aszlig <aszlig@nix.build> Cc: @sternenseemann
* pkgs.profpatsch: add nix-genProfpatsch2018-06-252-12/+1
|
* machines/haku: set NIX_PATH similar to kataraProfpatsch2018-06-051-0/+12
|
* machines: rename labnet to openlabProfpatsch2018-06-054-2/+2
| | | | The namespace was kind of hard to remember, so let’s just call it openlab.
* machines/labnet: remove labtopProfpatsch2018-06-052-18/+0
| | | | The machine’s mainboard broke, so it’s gone.
* machines/labnet: pull hannswurscht into its own fileProfpatsch2018-06-053-69/+73
|
* machines/mikiya: set static IP address for initrdProfpatsch2018-05-231-2/+1
|
* fuuuuProfpatsch2018-05-231-1/+1
|
* machines/mikiya: add ethernet dev kernel module to initrdProfpatsch2018-05-231-0/+3
|
* machines/mikiya: wait, until mapper device is unlockedProfpatsch2018-05-231-1/+7
|