aaron/nixconfig
1
1
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity
351 Commits 76 Branches 0 Tags
feature/neon_secureboot
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
aaron e35311dfd5 chore: update installation guide with secure-boot setup pitfalls 2026-10-03 16:21:54 +02:00
aaron beb520a615 feature(boot): add secure-boot support and tpm-unlock to neon 2026-10-03 15:55:36 +02:00
aaron 4eb3e27f8b Merge pull request 'feature(boot): add secure-boot support and tpm-unlock to argon' (#93) from feature/argon_secureboot into main 
Reviewed-on: #93
 2026-10-03 15:48:06 +02:00
aaron 8c56b00247 feature(boot): add secure-boot support and tpm-unlock to argon 2026-10-03 15:07:13 +02:00
aaron ff2e4d2f69 Merge pull request 'fix: do not allow edits to the bootloader' (#92) from feature/bootloader_security into main 
Reviewed-on: #92
 2026-10-03 14:11:56 +02:00
aaron 318e17ac27 fix: do not allow edits to the bootloader 2026-10-03 14:11:29 +02:00
aaron c66549f3bf Merge pull request 'feature(hidpi): adapt sddm and systemd-boot to hidpi display' (#91) from feature/krypton_hidpi into main 
Reviewed-on: #91
 2026-10-03 13:44:31 +02:00
aaron 620c415be9 fix: adapt systemd-boot for kryptons hidpi screen by using the right console mode 2026-10-03 13:39:35 +02:00
aaron 472f359f80 fix: adapt kryptons sddm for hidpi using the qt scale factor 2026-10-03 13:35:50 +02:00
aaron ad494d1209 Merge pull request 'feature(boot): add luks unlock method using TPM+PIN' (#90) from feature/tpm_unlock into main 
Reviewed-on: #90
 2026-10-03 13:28:35 +02:00
aaron d26bd424cc feature(boot): add luks unlock method using TPM+PIN 2026-10-03 13:25:18 +02:00
aaron a7bba82b5b Merge pull request 'feature(lanzaboote): add support for secure-boot through lanazaboote' (#88) from feature/secure_boot into main 
Reviewed-on: #88
 2026-10-03 12:48:11 +02:00
aaron a5e69c043d chore: update installation guide with secure-boot setup 2026-10-03 12:47:27 +02:00
aaron b2a2e7d161 Merge remote-tracking branch 'origin/main' into feature/secure_boot 2026-10-03 11:41:27 +02:00
aaron 66a19890bd chore: remove old vm host entry since it is not used anymore (#89) 
Reviewed-on: #89
Co-authored-by: aaron <aaron@0x29a.ch>
 2026-10-03 11:37:40 +02:00
aaron 450559f8c6 feature: data-drives on argon and boot securty (#87) 
- increase security by restricting /boot to root only
- add data-drives for encrypted drives that will get mounted through crypttab rather than the initrd

Reviewed-on: #87
Co-authored-by: aaron <aaron@0x29a.ch>
 2026-10-03 10:57:34 +02:00
aaron b75f44ceab feature(lanzaboote): add support for secure-boot through lanazaboote 2026-10-03 10:39:28 +02:00
aaron b42b873eb1 fix(opencl): remove failing legacy build from t14g1 config 2026-10-02 23:47:57 +02:00
aaron 4effe953c8 Merge pull request 'feature: add new host krypton' (#86) from feature/krypton into main 
Reviewed-on: #86
 2026-10-02 23:28:24 +02:00
aaron 645a4163f5 feature(neon): since nixos-hardware was added, add support for the t14g1 as well 2026-10-02 23:28:05 +02:00
aaron 4845485547 fix: add proper hardware-configuration for the host 2026-10-02 22:40:37 +02:00
aaron ac74b85231 feature(krypton): add framework 13 pro to the list of hosts 2026-10-02 22:01:56 +02:00
aaron 42da578f75 Merge pull request 'Feature/update installation' (#85) from feature/update_installation into main 
Reviewed-on: #85
 2026-10-02 17:36:42 +02:00
aaron dd50c4b4e5 feature(disk): allow discards on cryptroot 2026-10-02 17:35:53 +02:00
aaron 8a1067b324 feature(trim): add trim support and change partuuid to disk-labels 2026-10-02 17:34:45 +02:00
aaron fc4f0afc46 chore(guide): add corrections and updates to the install guide 2026-10-02 17:33:34 +02:00
aaron 006290ef05 Merge pull request 'feature(boot): attatch /tmp to tmpfs, but keep nix build in /var/tmp' (#84) from feature/tmpfs-tmp into main 
Reviewed-on: #84
 2026-10-02 16:40:44 +02:00
aaron 6a080b2319 feature(boot): attatch /tmp to tmpfs, but keep nix build in /var/tmp 2026-10-02 16:39:53 +02:00
aaron 3e0e1d48f9 Merge pull request 'chore: repository cleanup and noctalia baseline' (#83) from chore/cleanup into main 
Reviewed-on: #83
 2026-10-02 09:51:23 +02:00
aaronandClaude Opus 5.5 3fed9c1fc8 feature(noctalia): take argon's gui overrides into the config 
- idle: 300s screen-off, 600s lock, 5s fade, and explicit actions (without them the behaviours do nothing once settings.toml is gone)
- font without Mono, launcher without categories or global emoji, control-center logo from syncthing
- drop shell.ui_scale and shell.panel.launcher_compact, which v5 ignores

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-02 09:39:08 +02:00
aaronandClaude Opus 5.5 87eb1bcb72 refactor(docker): rootless only 
Drops the root daemon and the root-equivalent docker group; the daemon settings now apply to the rootless daemon. compose ships with the docker package.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-02 09:25:40 +02:00
aaronandClaude Opus 5.5 06b656477b docs: move explanations into short module headers 
Non-obvious context sits in a brief header at the top of a module, everything else uses single-line comments. niri binds use spawn-sh strings, so neon only overrides the command.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-02 09:25:40 +02:00
aaronandClaude Opus 5.5 8d19be9527 refactor: fold host-only modules into the hosts 
- argon owns its gpu settings, calibre and the luks drives, now generated from one table
- claudecode.nix is gone, claude-code lives in packages.nix
- home-manager options live next to the home-manager wiring in flake.nix
- settings.nix: one nix block, extra-substituters instead of repeating the cache.nixos.org defaults
- README: current layout

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-02 09:25:40 +02:00
aaronandClaude Opus 5.5 1abb1ca6a1 chore: drop redundant packages and options 
- packages.nix is the baseline: drop neovim (nixvim), nvd, sof-firmware (enableAllFirmware), qtmultimedia (v4 leftover); vial moves to vial.nix, wl-clipboard to noctalia.nix, claude-code becomes a plain package here
- drop packages and options already provided elsewhere: noctalia (home-manager), gnupg/pinentry-qt (agent), gtk/qt themes, sddm Theme.Current, zsh plugins (home-manager), group = users, empty firewall lists
- single-package lists without `with pkgs;`, steam package inside its block

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-02 09:25:40 +02:00
aaronandClaude Opus 5.5 4633687ccb chore: remove unused gnuradio module 
It isn't imported by any host and doesn't build reliably on unstable; gnuradio moves to a devenv in the projects that need it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-02 09:25:14 +02:00
aaron 99a910265f Merge pull request 'feature(niri): configure niri via home-manager's niri module' (#82) from feature/niri-hm into main 
Reviewed-on: #82
 2026-10-02 08:37:31 +02:00
aaron 5abbcb10ca feature(devenv): update devenv 2026-10-02 08:23:28 +02:00
aaron ea2682f31d feature(niri): use home-managers new niri-module to configure niri on my machines with host-specific additions 2026-10-01 18:43:48 +02:00
aaron 73e17de1a1 Merge pull request 'chore: linting' (#81) from chore/lint into main 
Reviewed-on: #81
 2026-10-01 11:42:15 +02:00
aaron 26473288b6 chore: ignore nixfmt reformat in git blame 2026-10-01 11:40:30 +02:00
aaron 2231d2fc3f style: format all nix files with nixfmt 2026-10-01 11:40:12 +02:00
aaron 4ec579b1fc chore(lint): add statix config and remove unused arguments 2026-10-01 11:40:03 +02:00
aaron c1d11138b3 Merge pull request 'feature: pull in the latest updates, fix some errors and add a devenv for this repository' (#80) from chore/update into main 
Reviewed-on: #80
 2026-10-01 11:26:12 +02:00
aaron 92b170e5e8 feature: pull in the latest updates, fix some errors and add a devenv for this repository 2026-10-01 11:20:22 +02:00
aaron 3d90a9759f Merge pull request 'feature(wl-mirror): add wl-mirror as dependency to noctalia' (#79) from feature/wl-mirror into main 
Reviewed-on: #79
 2026-09-29 20:29:06 +02:00
aaron 3b4f05a91c feature(wl-mirror): add wl-mirror as dependency to noctalia 2026-09-29 16:05:18 +02:00
aaron c1a7a9d085 Merge pull request 'chore(flake): update flake file' (#78) from chore/update into main 
Reviewed-on: #78
 2026-09-26 17:25:11 +02:00
aaron 848af4d44b chore(flake): update flake file 2026-09-26 17:23:47 +02:00
aaron e61289a26e Merge pull request 'fix(siri): add venv to the siril installation' (#77) from fix/siril into main 
Reviewed-on: #77
 2026-09-20 12:51:09 +02:00
aaron 28f5f4faa9 fix(siri): add venv to the siril installation 2026-09-19 18:48:20 +02:00
aaron 1007450e19 Merge pull request 'chore: update nix flake' (#76) from chore/update into main 
Reviewed-on: #76
 2026-09-15 12:49:26 +02:00
aaron 1be2731c53 chore: update nix flake 2026-09-15 12:34:30 +02:00
aaron b8d108f173 Merge pull request 'feature(shell): shorten the path in the agnoster prompt, if it gets too long' (#75) from feature/shorten_shell into main 
Reviewed-on: #75
 2026-09-14 16:47:19 +02:00
aaron 366a895a08 feature(shell): shorten the path in the agnoster prompt, if it gets too long 2026-09-14 16:46:17 +02:00
aaron 7ceef4775c Merge pull request 'feature: move from gpg-git-commit-signing to ssh-signing' (#74) from feature/ssh-git-sign into main 
Reviewed-on: #74
 2026-09-05 15:46:55 +02:00
aaron 1b9b584729 feature(gpg): add more signing-keys to the config to enable my laptop as well 2026-09-05 15:44:42 +02:00
aaron d9d6877714 feature(gpg): move git from gpg-signing to ssh-signing 2026-09-05 15:33:05 +02:00
aaron 6704ec389c Merge pull request 'chore(update): update flake file' (#73) from chore/update into main 
Reviewed-on: #73
 2026-08-31 13:52:26 +02:00
aaron aca9e5d7cc chore(update): update flake file 2026-08-30 18:46:17 +02:00
aaron 2c8fbf008d Merge pull request 'chore(update): update flake file' (#72) from chore/update into main 
Reviewed-on: #72
 2026-08-20 20:53:12 +02:00
aaron c4f1be8a38 chore(update): update flake file 2026-08-20 20:52:22 +02:00
aaron 6df7fcacbb Merge pull request 'fix: ship a numbered udev rule file for vial since otherwise it gets overwritten by systemd's udev file' (#71) from feature/vial into main 
Reviewed-on: #71
 2026-08-09 14:45:34 +02:00
aaron bc11b464a8 fix: ship a numbered udev rule file for vial since otherwise it gets overwritten by systemd's udev file 2026-08-09 14:45:08 +02:00
aaron 0ac9b45286 Merge pull request 'feature(udev): add support for vial.rocks configurable devices and add the native app as well' (#69) from feature/lily58 into main 
Reviewed-on: #69
 2026-08-09 14:27:03 +02:00
aaron 55e12b2226 Merge pull request 'feature/appimage' (#70) from feature/bitbox02 into main 
Reviewed-on: #70
 2026-08-09 14:26:54 +02:00
aaron eab8f4974e feature(appimage): add appimage squashfs support for my nixos 2026-08-09 14:13:52 +02:00
aaron 0b1190a257 feature(appimage): add appimage squashfs support for my nixos 2026-08-09 14:13:06 +02:00
aaron 62954a67b5 feature(udev): add support for vial.rocks configurable devices and add the native app as well 2026-08-09 13:49:46 +02:00
aaron 37d44b64c1 Merge pull request 'chore(flake): update flake file' (#68) from chore/update into main 
Reviewed-on: #68
 2026-08-06 16:50:04 +02:00
aaron cb5dd91550 chore(flake): update flake file 2026-08-06 16:38:59 +02:00
aaron fb04de1d23 Merge pull request 'feature(tmux): make tmux forward csi-u sequences thus enabling shift-enter in opencode' (#66) from feature/tmux into main 
Reviewed-on: #66
 2026-07-29 10:46:47 +02:00
aaron f41387e451 feature(tmux): make tmux forward csi-u sequences thus enabling shift-enter in opencode 2026-07-29 10:44:42 +02:00
aaron 2ae9d451f5 Merge pull request 'refactor(tmux): tidy up my old tmux config, use unicode for the seperators and backport augmentations from my at-work-config' (#65) from feature/tmux into main 
Reviewed-on: #65
 2026-07-29 10:34:05 +02:00
aaron 3feb6d2367 refactor(tmux): tidy up my old tmux config, use unicode for the seperators and backport augmentations from my at-work-config 2026-07-29 10:30:33 +02:00
aaron 41fbb67fc9 Merge pull request 'fix(sleep): revert s2sleep as it introduces crashes after the wake-up of the system' (#64) from fix/sleep into main 
Reviewed-on: #64
 2026-07-23 17:10:08 +02:00
aaron b15968b004 fix(sleep): revert s2sleep as it introduces crashes after the wake-up of the system 2026-07-23 16:12:50 +02:00
aaron 274c39b213 Merge pull request 'refactor(sleep): move the s2 sleep change to argon only since s2idle would cost more battery on a laptop that s3 deep sleep' (#63) from fix/sleep into main 
Reviewed-on: #63
 2026-07-23 15:08:41 +02:00
aaron 2a3c439993 refactor(sleep): move the s2 sleep change to argon only since s2idle would cost more battery on a laptop that s3 deep sleep 2026-07-23 15:08:24 +02:00
aaron a2e9ad6035 Merge pull request 'fix(sleep): change sleep mode from s3 deep to s2 idle sleep to prevent issues woth radeon RDNA4 cards' (#62) from fix/sleep into main 
Reviewed-on: #62
 2026-07-23 14:56:59 +02:00
aaron 6fdde12804 fix(sleep): change sleep mode from s3 deep to s2 idle sleep to prevent issues woth radeon RDNA4 cards 2026-07-23 14:51:55 +02:00
aaron 32291e63bb Merge pull request 'chore(update): update flake file' (#61) from feature/update into main 
Reviewed-on: #61
 2026-07-23 14:29:18 +02:00
aaron 0e681ec0e2 chore(update): update flake file 2026-07-20 22:51:44 +02:00
aaron 0ce944b327 Merge pull request 'chore(flake): update flake file' (#60) from feature/updates into main 
Reviewed-on: #60
 2026-07-06 22:12:41 +02:00
aaron 046a17374b chore(flake): update flake file 2026-07-06 21:16:24 +02:00
aaron 626015db9f Merge pull request 'feature(packages): update and add cifs and nfs utils' (#59) from feature/cifs-utils into main 
Reviewed-on: #59
 2026-06-27 19:07:21 +02:00
aaron dfc2a1ca3a feature(packages): add nfs-utils 2026-06-27 18:51:31 +02:00
aaron e41d02abcc chore(update): upgrade flake file 2026-06-27 18:36:19 +02:00
aaron ec79afe982 feature(packages): add cifs-utils 2026-06-27 18:35:06 +02:00
aaron 536d4df5e4 Merge pull request 'feature(noctalia): add ddcutil to adjust the screens brightness' (#58) from feature/brightnesscontrol into main 
Reviewed-on: #58
 2026-06-23 13:03:47 +02:00
aaron 3bd71bb5e1 feature(noctalia): add ddcutil to adjust the screens brightness 2026-06-23 13:02:19 +02:00
aaron d7ac5923ff Merge pull request 'feature: astrophotography toolkit' (#57) from feature/astro into main 
Reviewed-on: #57
 2026-06-23 11:21:10 +02:00
aaron dab8e42797 fix(siril): expose adwaita-qt6 style plugin for dark theme 2026-06-23 11:08:10 +02:00
aaron cd905df8b4 fix(siril): add python3 to the siril wrapper so it sees it in its runtime path 2026-06-23 10:53:21 +02:00
aaron c20c9c0601 chore(flake): update flake file 2026-06-22 23:20:40 +02:00
aaron 853a7cfb17 feature(neon): add claude code to neon 2026-06-22 21:51:11 +02:00
aaron 596b58fab4 fix: add gc and misc settings to neon as well 2026-06-21 00:01:16 +02:00
aaron a58319e08d fix: remove stellarium module from neon 2026-06-20 23:57:20 +02:00
aaron 79b24d9439 fix: add more shared objects for sirils plugins 2026-06-20 21:48:26 +02:00
aaron b295a9a330 feature(siril): make siril plugins work by exposing shared objects 2026-06-20 18:11:34 +02:00
aaron 29db6af86b feature(starnet): add starnet to siril to use ml models for star removal, this needs nix-ld to be enabled 2026-06-20 13:58:29 +02:00