No description
- Nix 99.4%
- Shell 0.6%
| checks | ||
| home | ||
| hosts | ||
| lib | ||
| modules | ||
| overlays | ||
| pkgs | ||
| .gitignore | ||
| flake.lock | ||
| flake.nix | ||
| README.md | ||
| shell.nix | ||
| treefmt.nix | ||
TODO
- Add encryption to atuin
- Zellij-autolock
- Better SSH Management https://github.com/EmergentMind/nix-config/blob/dev/home/ta/common/core/ssh.nix
Bootstrapping
nix-shell -p git
mv /etc/nixos /etc/nixos.old
git clone https://forgejo.rampedindent.xyz/Viktoriya-Dotfiles/NixOs.git /etc/nixos
cp /etc/nixos.old/hardware-configuration.nix /etc/nixos/hosts/Manda/hardware-configuration.nix
nixos-rebuild switch --flake /etc/nixos/#Manda
Inspiration
https://unmovedcentre.com/posts/secrets-management/#generating-access-keys
Configure NFS
Generate New key paris
private_key="$(wg genkey)" && printf 'Private key: %s\nPublic key: %s\n' \
"$private_key" "$(printf '%s' "$private_key" | wg pubkey)"
Connect non nix client
[Interface]
Address = <share.clientAddress> # e.g., 192.168.50.x/24
PrivateKey = <your-private-key>
[Peer]
PublicKey = <share.serverPublicKey>
AllowedIPs = <share.serverAddress>/32 # e.g., 192.168.50.1/32
Endpoint = 192.168.50.27:<share.listenPort>
PersistentKeepalive = 25
chmod 600 /etc/wireguard/wg0.conf
wg-quick up wg0
<serverAddress>:<remoteDirectory> <mountPoint> nfs4 nfsvers=4.2,proto=tcp,_netdev 0 0