Nix (home-manager) configurations for my computers
Commits at f4b93e2f0fca1dcdd7b1578fbc2cf08a4bbb37bc
f4b93e2fnixos/hive: Fix container has no internet access
https://wiki.nixos.org/wiki/Incus
Missed "Networking/Firewall" section.
Shota FUJI
authored at
Shota FUJI
comitted at
26ad576fDo not version control NixOS user password
Target machine's public key is required for encrypting the password.
However, getting the target machine's public key requires the user's
password. root user's password configured at `nixos-install` will be
wiped because of `mutableUsers = false`. So no way to login.
Therefore `mutableUsers` has to be `true`, and if that option is
enabled, I don't see any practical merits on committing encrypted
password. If I set root password, why not set a normal user's password
too?
Shota FUJI
authored at
Shota FUJI
comitted at
dd92e54dHardware configurations for queenbee
I don't know if this works.
Shota FUJI
authored at
Shota FUJI
comitted at
415c7dddRefactor module structure
The previous custom module architecture was PITA. `flake.nix` gets messy
and finding corresponding module to edit is not easy. Also the resulted
configuration contains unnecessary packages and wastes storage space.
This new architecture, which most of the people online is using, is
easily navigatable, has clear dependency, and uses minimal storage.
Previously `nix run .#incus-import nixos-workerbee` generated over 1GB
image. Now the generated image sizes only 357MiB.
In part of migration, I bumped `home.stateVersion` and upgraded several
options. Notably,
* Switched from `,theme` to darkman for less maintenance cost.
* swaylock and walker now uses HM options.
* Improved Ghostty theme, powered by nix-colorizer.
* Removed unused packages:
- fossil ... Version control.
- lf ... TUI file manager.
- bat ... Bloated. `nvim -R` is enough.
- tmux ... Multiple SSH session should be used. Install mosh if
session persistece is needed.
- nushell ... Not used.
- qalc ... Not used.
- zls, sourcekit ... Language servers. Project should install these.
- mise ... Tool became bloated. Project should install this.
- reuse ... Project should install this.
I only tested `linux-desktop` and `workerbee` profiles. Other profiles
may not build or may have invalid configuration (runtime error.)
Shota FUJI
authored at
Shota FUJI
comitted at
a681013bNixOS config for dev container
Supply chain attacks has been active recently, and the latest Shai-Hulud
was the last push. In addition to the security benefit, I hope migrating
project development inside container makes my future migration to NixOS
easier by slimming down the host (GUI + git + basic tools).
Shota FUJI
authored at
Shota FUJI
comitted at
197938edgit: Use relative path for worktree
Git by default uses absolute path for worktree pointer. This is really
problematic in system container environments. To make git work with
absolute paths inside container, I have to mount the original repository
to container with same path as host. Relative path is obviously the way
to go.
Shota FUJI
authored at
Shota FUJI
comitted at
2b7cf9daUpdate nixgl to latest
To apply the below change:
<https://github.com./nix-community/nixGL/pull/206>
"home-manager switch" no longer emits deprecation warnings.
Shota FUJI
authored at
Shota FUJI
comitted at
157856daUpdate nixpkgs to latest unstable
To fix Syncthing failing to launch.
I've once upgraded nixpkgs to the latest version two days ago *locally*.
It was to test if the new Atuin package (which addressed Fish breaking
change) but it wasn't there, so I `jj restore`-ed. The problem is,
Syncthing migrated its database to the latest version and their
migration does not consider downgrading at all. Since the downgrade,
Syncthing fails to start with a migration error (an SQL error containing
`CREATE INDEX IF NOT EXISTS files_name_only ON files (name)`.)
Shota FUJI
authored at
Shota FUJI
comitted at
4959d9aenvim: Include "locals.scm" from tree-sitter-vala
I'm not convinced its usefulness, though.
Shota FUJI
authored at
Shota FUJI
comitted at
0805f87anvim: Upgrade tree-sitter-vala
To apply patch for fixing "new" not being highlighted.
Shota FUJI
authored at
Shota FUJI
comitted at
dc543f6aFix scm-server is not buildable
Somehow Home-Manager changed the option without deprecating or anything
and Nix started to emit cryptic error message.
Shota FUJI
authored at
Shota FUJI
comitted at