Commit Graph

50 Commits

Author SHA1 Message Date
zuckerberg 000bbd7f4d Update interface names because usePredictableInterfaceNames is now off 2026-03-01 17:52:42 -08:00
zuckerberg 2ed58e1ec5 Update flake inputs; drop navidrome; fix noto-fonts subset glob
- Update nixpkgs (Feb 27), home-manager, microvm, nix-index-database,
  claude-code-nix, dailybot
- Remove navidrome service, nginx proxy, dashy entry, and gatus monitor
- Add noto-fonts-subset patch for libreoffice/collabora (noto-fonts
  2026.02.01 switched from variable to static font filenames)
- Add incus-lts writableTmpDirAsHomeHook overlay for sandbox HOME fix
- Add samba4Full overlay to disable CephFS (ceph pinned to python3.11)
2026-03-01 12:36:10 -08:00
zuckerberg 288a2841aa Replace Uptime Kuma with Gatus for declarative uptime monitoring
Check Flake / check-flake (push) Successful in 2m4s
Gatus is configured entirely via YAML (mapped from Nix attrsets),
making nix-config the single source of truth for all monitoring
config instead of Uptime Kuma's web UI/SQLite database.
2026-02-22 17:30:03 -08:00
zuckerberg a697ea10ad Add daily ZFS health check with ntfy alerts and introduce ntfy role
Add a zfs-alerts module that runs a daily health check on ZFS machines,
sending detailed ntfy notifications for degraded pools, data errors, or
drive errors. Introduce an "ntfy" system role to decouple ntfy alerting
from the server/personal roles, and assign it to all machines.
2026-02-22 17:17:40 -08:00
zuckerberg 339eac52c6 Add uptime kuma
Check Flake / check-flake (push) Successful in 9m15s
2026-02-22 15:49:26 -08:00
zuckerberg 156f0183bd Add ntfy push notification server on ponyo 2026-02-21 23:29:36 -08:00
zuckerberg 99ef62d31a Fix unused vars
Check Flake / check-flake (push) Successful in 1m21s
2026-02-11 23:12:00 -08:00
zuckerberg 10f3e3a7bf Remove old stale/unused configuration 2026-02-11 22:47:38 -08:00
zuckerberg da9a8f8c03 Update nixpkgs 2026-01-11 14:25:03 -08:00
zuckerberg 846da159d0 Iodine stopped working again 2025-07-16 20:47:49 -07:00
zuckerberg a45125421e Add collabora online and move nextcloud domain 2025-07-16 20:46:51 -07:00
zuckerberg 2faea9d380 Update nixpkgs and other flake inputs 2025-07-13 17:52:08 -07:00
zuckerberg 1f9fbd87ac Use upstream pykms and Actual Budget. Move Actual to s0. Add automated backups for Actual.
Check Flake / check-flake (push) Successful in 1m37s
2025-03-29 18:36:13 -07:00
zuckerberg c2cb43fd2c Enable iperf3 server on ponyo 2025-03-28 20:22:14 -07:00
zuckerberg 89b49aafc0 flake.lock: Update
Check Flake / check-flake (push) Successful in 1h32m23s
Flake lock file updates:

• Updated input 'agenix':
    'github:ryantm/agenix/c2fc0762bbe8feb06a2e59a364fa81b3a57671c9' (2024-05-24)
  → 'github:ryantm/agenix/f6291c5935fdc4e0bef208cfc0dcab7e3f7a1c41' (2024-08-10)
• Updated input 'deploy-rs':
    'github:serokell/deploy-rs/3867348fa92bc892eba5d9ddb2d7a97b9e127a8a' (2024-06-12)
  → 'github:serokell/deploy-rs/aa07eb05537d4cd025e2310397a6adcedfe72c76' (2024-09-27)
• Updated input 'flake-utils':
    'github:numtide/flake-utils/b1d9ab70662946ef0850d488da1c9019f3a9752a' (2024-03-11)
  → 'github:numtide/flake-utils/c1dfcf08411b08f6b8615f7d8971a2bfa81d5e8a' (2024-09-17)
• Updated input 'nix-index-database':
    'github:Mic92/nix-index-database/ff80cb4a11bb87f3ce8459be6f16a25ac86eb2ac' (2024-05-27)
  → 'github:Mic92/nix-index-database/5fce10c871bab6d7d5ac9e5e7efbb3a2783f5259' (2024-10-07)
• Updated input 'nixos-hardware':
    'github:NixOS/nixos-hardware/7b49d3967613d9aacac5b340ef158d493906ba79' (2024-06-01)
  → 'github:NixOS/nixos-hardware/b7ca02c7565fbf6d27ff20dd6dbd49c5b82eef28' (2024-10-04)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/805a384895c696f802a9bf5bf4720f37385df547' (2024-05-31)
  → 'github:NixOS/nixpkgs/ecbc1ca8ffd6aea8372ad16be9ebbb39889e55b6' (2024-10-06)
• Updated input 'simple-nixos-mailserver':
    'gitlab:simple-nixos-mailserver/nixos-mailserver/29916981e7b3b5782dc5085ad18490113f8ff63b' (2024-06-11)
  → 'gitlab:simple-nixos-mailserver/nixos-mailserver/af7d3bf5daeba3fc28089b015c0dd43f06b176f2' (2024-08-05)
• Removed input 'simple-nixos-mailserver/utils'
2024-10-06 20:28:24 -06:00
zuckerberg d557820d6c Lockdown intranet services behind tailscale 2024-06-21 21:04:49 -06:00
zuckerberg 01af25a57e Add Actual server
Check Flake / check-flake (push) Successful in 6m3s
2024-02-19 19:44:07 -07:00
zuckerberg 0e59fa3518 Add easy boot configuration profile limit 2024-02-18 17:30:12 -07:00
zuckerberg 7e812001f0 Add librechat
Check Flake / check-flake (push) Successful in 6m12s
2024-02-09 19:57:09 -07:00
zuckerberg 14c19b80ef Stop auto upgrade
Check Flake / check-flake (push) Successful in 1m2s
2024-02-05 11:32:16 -07:00
zuckerberg 75031567bd Two radio endpoints
Check Flake / check-flake (push) Successful in 50s
2024-02-02 20:23:40 -07:00
zuckerberg 800a95d431 Update to nixos 23.11
Check Flake / check-flake (push) Successful in 1m24s
2024-02-01 21:42:33 -07:00
zuckerberg b5dd983ba3 Automatically set machine hostname 2023-04-24 20:52:17 -06:00
zuckerberg 71baa09bd2 Refactor imports and secrets. Add per system properties and role based secret access.
Highlights
- No need to update flake for every machine anymore, just add a properties.nix file.
- Roles are automatically generated from all machine configurations.
- Roles and their secrets automatically are grouped and show up in agenix secrets.nix
- Machines and their service configs may now query the properties of all machines.
- Machine configuration and secrets are now competely isolated into each machine's directory.
- Safety checks to ensure no mixing of luks unlocking secrets and hosts with primary ones.
- SSH pubkeys no longer centrally stored but instead per machine where the private key lies for better cleanup.
2023-04-21 12:58:11 -06:00
zuckerberg 378cf47683 restic backups 2023-04-08 21:25:55 -06:00
zuckerberg f68a4f4431 nixpkgs-fmt everything 2023-04-04 23:30:28 -06:00
zuckerberg c48b1995f8 Remove zerotier 2023-03-18 20:41:09 -06:00
zuckerberg db441fcf98 Add ability to refuse PIA ports 2023-03-12 21:46:36 -06:00
zuckerberg ab2cc0cc0a Cleanup services 2023-03-12 17:51:10 -06:00
zuckerberg 9684a975e2 Migrate nextcloud to ponyo 2023-03-12 00:10:14 -07:00
zuckerberg c3c3a9e77f disable searx for now 2023-03-12 00:09:40 -07:00
zuckerberg ecb6d1ef63 Migrate mailserver to ponyo 2023-03-11 23:40:36 -07:00
zuckerberg d8dbb12959 grow disk for ponyo 2023-02-11 19:01:42 -07:00
zuckerberg 3e0cde40b8 Cleanup remote LUKS unlock 2023-02-11 18:40:08 -07:00
zuckerberg bc863de165 Hardware config should be in hardware config 2023-02-11 09:48:25 -07:00
zuckerberg 11072c374b Owncast 2022-07-24 15:18:29 -04:00
zuckerberg aa7bbc5932 Use Tailscale 2022-06-23 22:30:07 -04:00
zuckerberg a92800cbcc Update to NixOS 22.05 2022-06-19 23:59:52 -04:00
zuckerberg 7e615f814d Rewrite VPN container 2022-05-28 18:54:41 -04:00
zuckerberg 1856fe00d6 Jellyfin open port 2022-05-20 18:58:13 -04:00
zuckerberg b8c9278f37 Use runyan.org 2022-05-09 14:46:18 -04:00
zuckerberg 339eed1f55 Move services to ponyo 2022-05-02 18:01:03 -04:00
zuckerberg 910af494b5 Retire neetdev 2022-05-02 02:50:54 -04:00
zuckerberg af9333feff Ponyo as media proxy 2022-04-21 02:24:45 -04:00
zuckerberg 5945310dd4 Ponyo keys 2022-04-21 01:27:47 -04:00
zuckerberg ffad65d902 OVH is annoying... 2022-04-21 01:15:51 -04:00
zuckerberg 2cd7f12a75 Install as efi removable 2022-04-20 22:51:14 -04:00
zuckerberg fe48d7b009 New ponyo 2022-04-20 16:06:24 -04:00
zuckerberg 448c3b280a New ponyo 2022-04-20 16:00:29 -04:00
zuckerberg ef2ad011cc Add ponyo 2022-04-20 00:04:25 -04:00