about summary refs log tree commit diff
path: root/modules
Commit message (Collapse)AuthorAgeFilesLines
* profiles/packages: Add neofetchdevhell2018-05-011-0/+1
| | | | Sometimes it is quite useful.
* profiles/packages: Add some (hopefully) useful toolsdevhell2018-05-011-0/+6
|
* profiles/workstation: Switch to gopassaszlig2018-04-292-1/+2
| | | | | | | | Even though gopass is more complex than pass, it's also less fragile because it's written in a reasonably type-safe language rather than being a giant shell script that relies on lots of external commands. Signed-off-by: aszlig <aszlig@nix.build>
* core/tests: Fix predictable-interface-names testsaszlig2018-04-291-2/+15
| | | | | | | Those also have subtests and they also test different variations of options, so let's actually create a check for every single variations. Signed-off-by: aszlig <aszlig@nix.build>
* core/tests: Specify subtest for Kubernetesaszlig2018-04-291-2/+4
| | | | | | | | The Kubernetes tests actually contain subtests, so let's specify them so we don't run into errors during Hydra evaluation because the result would be a generic attribute set instead of a derivation. Signed-off-by: aszlig <aszlig@nix.build>
* core/tests: Add tests for Chromium and Firefoxaszlig2018-04-291-0/+6
| | | | | | | | | While hasPackage is not yet very accurate when it comes to detecting whether a package is in systemPackages (it only matches the name attribute), let's make at least two of the most frequently used browsers part of our machine specific tests. Signed-off-by: aszlig <aszlig@nix.build>
* core/tests: Remove "with lib"aszlig2018-04-291-10/+10
| | | | | | | We want to make sure nix-instantiate --parse will catch errors very early, because evaluation of the test definitions takes a ton of time. Signed-off-by: aszlig <aszlig@nix.build>
* core/tests: Update upstream NixOS testsaszlig2018-04-291-2/+93
| | | | | | | | | | | | | | | | | | | | New tests as of NixOS/nixpkgs@9df35787f16636628a2c7392cc4bfeff0e815242: buildbot, ceph, deluge, docker-edge, docker-tools, docker-tools-overlay, fwupd, gjs, iftop, kubernetes.dns, kubernetes.rbac, matrix-synapse, nix-ssh-serve, novacomd, openldap, plotinus, powerdns, predictable-interface-names, prosody, quagga, rabbitmq, rspamd, rxe, strongswan-swanctl, systemd, transmission, xautolock, xrdp, yabar The main kubernetes test no longer exists and has been split into kubernetes.dns and kubernetes.rbac in NixOS/nixpkgs@709b6f664e472ae2075bbee83bfb1dd1ba95e0e7. I also added a small hasPackage helper for gjs, which we're going to use for packages in the system path very soon. Signed-off-by: aszlig <aszlig@nix.build>
* core/tests: Fix references to copperheadaszlig2018-04-291-2/+4
| | | | | | | | | This was changed in NixOS/nixpkgs@844c08ec0a5b79abb16d9de5bd39ed492f4. Instead of linuxPackages_copperhead_hardened we now have linuxPackages_copperhead_lts and linuxPackages_copperhead_stable. Signed-off-by: aszlig <aszlig@nix.build>
* profiles/packages: Add ghostwriterdevhell2018-04-271-0/+1
| | | | | | I need something to write markdown quickly with preview. Vim is fine of course, but there's no easily available preview of course. Also, ghostwriter seems really nice.
* profiles/packages: Remove unnecessary packagesdevhell2018-04-251-58/+1
| | | | | A lot of these packages are not needed anymore, and if they are we can always hot-load them using `nix run`.
* profiles/managed: Add boot.cleanTmpDiraszlig2018-04-251-0/+1
| | | | | | | A lot of trash has accumulated in /tmp on some of the machines, so let's clean it up. Signed-off-by: aszlig <aszlig@nix.build>
* profiles/workstation: Add hledger to packagesaszlig2018-04-231-0/+3
| | | | | | | | | The whole package actually, including the ncurses UI and web interface. Not that I really need the UI/web stuff right now, but it might come in handy later. Signed-off-by: aszlig <aszlig@nix.build>
* profile/base: Set default priority on SSHd optionsaszlig2018-04-211-3/+3
| | | | | | | | | | | The parent commit actually introduced an eval error with meshuggah, because the machine defined permitRootLogin. Setting these values to priority 1000 (which is what mkDefault does) makes sure that setting the value somewhere else always takes precedence (unless of course it has a value >= 1000). Signed-off-by: aszlig <aszlig@nix.build>
* profiles/base: Provide sane OpenSSH defaultsaszlig2018-04-212-4/+5
| | | | | | | | | It's been ages since I needed to authenticate to SSHd via a password, so let's actually make sure we only use pubkey auth by default. If we need more than that we can still change the value to something else on a per- machine basis. Signed-off-by: aszlig <aszlig@nix.build>
* core/licensing: Pass localSystem instead of systemaszlig2018-04-201-1/+1
| | | | | | | | | Since NixOS/nixpkgs@c6f7d4367894047592cc412740f0c1f5b2ca2b59 the system argument is now localSystem to be more consistent with crossSystem. This fixes evaluation of all machine configurations. Signed-off-by: aszlig <aszlig@nix.build>
* profiles/packages: Add bcaldevhell2018-04-201-0/+1
| | | | Because some calculations just look cooler on CLI :)
* profiles/packages: Move urlview from skunkworksdevhell2018-04-151-0/+1
| | | | All machines running neomutt should also have urlview available.
* profiles/managed: Move Chromium to machinesaszlig2018-04-121-1/+0
| | | | | | | The new machine (shakti) is going to use Firefox, so let's make sure this is machine-specific. Signed-off-by: aszlig <aszlig@nix.build>
* profiles/managed: Add RAR support for Arkaszlig2018-04-121-2/+5
| | | | | | | | | Unfortunately people still tend to use RAR archives for whatever reason. The unfreeAndNonDistributablePkgs is a bit wrong here though, because Ark and unrar *are* actually redistributable. This needs to be fixed in nixpkgs though. Signed-off-by: aszlig <aszlig@nix.build>
* profiles/managed: Enable GVFSaszlig2018-04-121-1/+4
| | | | | | | | | This module adds udev rules for MTP devices, so in theory we do not need it. However I can remember one occasion where this was needed, but I don't remember exactly why. So let's better err on our side rather than causing problems for the users. Signed-off-by: aszlig <aszlig@nix.build>
* profiles/managed: Move updateMicrocode to machinesaszlig2018-04-121-1/+0
| | | | | | | | This is clearly something that is specific to the actual hardware, so even though both brawndo and tyree share the same CPU vendor, we will have a third managed machine that is going to be different. Signed-off-by: aszlig <aszlig@nix.build>
* profiles/packages: Add neomutt, msmtp, and notmuchdevhell2018-04-111-0/+3
| | | | | Let's add these for all machines since we will be creating a centralised mail configuration.
* profiles/services: Enable offlineimapdevhell2018-04-081-0/+6
| | | | | I really, really miss mutt et al., it's time that I get it back up and running with offlineimap and notmuch.
* profiles/managed: Enable sound by defaultaszlig2018-04-081-0/+1
| | | | | | | | | | This is no longer enabled by default since NixOS/nixpkgs@a43e33d0e48b2284ac3a2222d7f1965cef66f5e2. Those machines are desktop machines/laptops where users expect to have support for sound ;-) Signed-off-by: aszlig <aszlig@nix.build>
* profiles/services: Enable keybase servicedevhell2018-04-071-0/+1
| | | | To my surprise keybase now needs a systemd unit. So, let's add it.
* Remove my patched version of Gajim everywhereaszlig2018-04-047-884/+2
| | | | | | | | | | | | | | | | | | The config.patch doesn't apply for Gajim 1.0 anymore anyway, so let's throw everything away, including my custom config in order to start with a new abomination. With the new approach, I'm going to patch the configuration defaults *directly* into Gajim, because one of the problems with the old approach was that whenever specifics about a configuration value has changed, I didn't get noticed by a patch failure. So in the end the config I was ending up was a big mess. I'm going to start this with a new unpatched version and someday get to a patched version that I'm staisfied with... hopefully ;-) Signed-off-by: aszlig <aszlig@nix.build>
* profiles/packages: Add usbutilsdevhell2018-04-041-0/+1
| | | | | | Always good to have, even though I appreciate that I could use `nix run` for this, I like having certain tools without having to rely on a network connection.
* profiles/workstation: Remove yesod-binaszlig2018-04-041-1/+0
| | | | | | | I very rarely use this and if I want to I can still use nix run to bring it in and it has been a lazy package anyway. Signed-off-by: aszlig <aszlig@nix.build>
* profiles/managed: Remove bomiaszlig2018-04-041-1/+0
| | | | | | It doesn't seem to be maintained anymore. Signed-off-by: aszlig <aszlig@nix.build>
* profiles/workstations: Use NixOps from nixpkgsaszlig2018-04-021-1/+1
| | | | | | | | | | This one is an old leftover from where I ran patched versions of NixOps, but nowadays it is already in <nixpkgs>, so no need to keep it around. Other than that, with Hydra now running in restricted eval mode it will run into an eval error. Signed-off-by: aszlig <aszlig@nix.build>
* profiles/services: Enable geoclue2 in redshiftdevhell2018-04-021-2/+1
| | | | | Since moving around a lot with the laptop, there is not much sense trying to set the lat/long.
* profiles/services: Add pcscddevhell2018-04-011-0/+1
| | | | Needed for Nitrokey to work with gpg.
* profiles/base: Add google-fonts and rename fadevhell2018-03-161-1/+2
| | | | | | I need some of the fonts in google-fonts and since font-awesome-ttf has been renamed to font-awesome_4, let's reflect that even if it is aliased.
* profiles/packages: Add fortunedevhell2018-03-131-0/+1
| | | | Need this for xscreensaver, and maybe toilet/figlet.
* profiles/packages: Disable mono{develop}devhell2018-03-131-2/+2
|
* profiles/workstation: Fix attr for sound.enableaszlig2018-03-071-1/+2
| | | | | | | I'm testing every fart that I push to nixpkgs, so why don't I test it here as well? Dammit! Signed-off-by: aszlig <aszlig@nix.build>
* workstation/packages: (Re-)Add fehaszlig2018-03-071-0/+1
| | | | | | | | This was more or less accidentally leaked to PATH and got removed in NixOS/nixpkgs@71a8dbb956f5735030cd3982263d72f1bffdae23, so let's add it in again. Signed-off-by: aszlig <aszlig@nix.build>
* profiles/workstation: Enable ALSA soundaszlig2018-03-071-0/+1
| | | | | | | | Since NixOS/nixpkgs@a43e33d0e48b2284ac3a2222d7f1965cef66f5e2 this is no longer enabled by default so in order to, for example, restore card volumes we need to have this enabled. Signed-off-by: aszlig <aszlig@nix.build>
* core/tests: Remove reference for pumpio testaszlig2018-03-041-3/+0
| | | | | | | | | This test has been removed in NixOS/nixpkgs@21dcead5f0c3d548ad4642a4e86, so we no longer need to check for it. Fixes an error during channel evaluation. Signed-off-by: aszlig <aszlig@nix.build>
* profiles/packages: Add electricsheepdevhell2018-03-031-0/+1
| | | | I've missed this. I need this.
* Revert "services/i3/conky: Fix segfault"aszlig2018-02-261-9/+2
| | | | | | | | | This reverts commit 9dc27c57880db6469865dc2e6aaf295665c681a3. The patch already was from upstream master and it found its way into the new release, so we no longer need it. Signed-off-by: aszlig <aszlig@nix.build>
* core/tests: Fix use of networking.interfaces.*.ip4aszlig2018-02-261-1/+2
| | | | | | | | | | | Since NixOS/nixpkgs@c1bed05e341756f7fdfa73035c7f1e078e49be3d it is now called ipv4.addresses. The reason why the evaluation on our behalf has failed despite the option being aliased is that we try to access the option while checking for eligible tests for a particular machine. Signed-off-by: aszlig <aszlig@nix.build>
* core/tests: Fix copperhead linuxPackages attributeaszlig2018-02-101-1/+1
| | | | | | | | | | Since NixOS/nixpkgs@3a2ee6e5c3bfae64c604859c7cc1ee6b069ea5b5 the attribute name for the kernel packages is now linuxPackages_copperhead_hardened instead of linuxPackages_hardened_copperhead, so we need to change it in our conditions as well. Signed-off-by: aszlig <aszlig@nix.build>
* profiles/base: Add dev to wireshark groupdevhell2018-02-091-1/+1
|
* profiles/packages: Add ipcalcdevhell2018-02-081-0/+1
|
* profiles/packages: Reenable johndevhell2018-02-071-1/+1
| | | | It seems to work again and I need it for teaching.
* core/tests: Update upstream NixOS testsaszlig2018-02-031-8/+95
| | | | | | | | | | | | | | | | | | | | New tests as of NixOS/nixpkgs@27a4a5511dc2cf9756943458d7a752617e4ad6e3: acme, atd, beegfs, couchdb, dovecot, env, gitolite, grafana, graphite, home-assistant, initrd-network-ssh, kernel-copperhead, kernel-latest, kernel-lts, mesos, mutableUsers, mysqlBackup, netdata, nghttpx, owncloud, prometheus, radicale, statsd, sudo, switchTest, vault, xmonad, zookeeper I've removed the pgjwt test, because the attribute is not reachable anymore within nixos/release.nix as it has been commented out in NixOS/nixpkgs@40ed22650737a444fee7883e69e852fd4b808133. Also I didn't add the postgis test, because checking for the configuration attribute is a bit tedious and chances are very low that we'd have a machine in Vuizvui that uses it. Signed-off-by: aszlig <aszlig@nix.build>
* services/i3/conky: Fix segfaultaszlig2018-02-011-2/+9
| | | | | | | | | | | We're using "out_to_x = false" because we only want output to stdout, unfortunately since conky version 1.10.7, this causes a segfault which is tracked in upstream issue brndnmtthws/conky#454. The patch I'm using here was submitted and merged upstream in brndnmtthws/conky#455 and it's not yet part of a release yet. Signed-off-by: aszlig <aszlig@nix.build>
* profiles/packages: Add pixzdevhell2018-02-011-0/+1
| | | | For good measure, add pixz to the parallel compression collection.