Add gamescope (steam) login option

Initial KDE Plasma Bigscreen mode
Make PIA connection check more tollerant to hiccups
2026-03-09 22:32:10 -07:00 · 2026-03-09 21:54:59 -07:00 · 2026-03-08 21:02:50 -07:00 · 2026-03-08 12:43:19 -07:00 · 2026-03-08 12:42:32 -07:00 · 2026-03-05 21:31:29 -08:00
7 changed files with 33 additions and 57 deletions
--- a/common/network/pia-vpn/service-container.nix
+++ b/common/network/pia-vpn/service-container.nix
@@ -11,7 +11,6 @@ with lib;

 let
  cfg = config.pia-vpn;
-  hostName = config.networking.hostName;

  mkContainer = name: ctr: {
    autoStart = true;
@@ -29,9 +28,6 @@ let
    config = { config, pkgs, lib, ... }: {
      imports = allModules ++ [ ctr.config ];

-      ntfy-alerts.ignoredUnits = [ "logrotate" ];
-      ntfy-alerts.hostLabel = "${hostName}/${name}";
-
      # Static IP with gateway pointing to VPN container
      networking.useNetworkd = true;
      systemd.network.enable = true;
--- a/common/network/pia-vpn/vpn-container.nix
+++ b/common/network/pia-vpn/vpn-container.nix
@@ -6,7 +6,6 @@ with lib;

 let
  cfg = config.pia-vpn;
-  hostName = config.networking.hostName;
  scripts = import ./scripts.nix;

  # Port forwarding derived state
@@ -99,8 +98,6 @@ in

          # Route ntfy alerts through the host proxy (VPN container has no gateway on eth0)
          ntfy-alerts.curlExtraArgs = "--proxy http://${cfg.hostAddress}:${toString cfg.proxyPort}";
-          ntfy-alerts.ignoredUnits = [ "logrotate" ];
-          ntfy-alerts.hostLabel = "${hostName}/pia-vpn";

          # Enable forwarding so bridge traffic can go through WG
          boot.kernel.sysctl."net.ipv4.ip_forward" = 1;
--- a/common/ntfy/default.nix
+++ b/common/ntfy/default.nix
@@ -26,12 +26,6 @@
      default = [ ];
      description = "Unit names to skip failure notifications for.";
    };
-
-    hostLabel = lib.mkOption {
-      type = lib.types.str;
-      default = config.networking.hostName;
-      description = "Label used in ntfy alert titles to identify this host/container.";
-    };
  };

  config = lib.mkIf config.thisMachine.hasRole."ntfy" {
--- a/common/ntfy/service-failure.nix
+++ b/common/ntfy/service-failure.nix
@@ -32,7 +32,7 @@ in
            --max-time 30 --retry 3 \
            ${cfg.curlExtraArgs} \
            -H "Authorization: Bearer $NTFY_TOKEN" \
-            -H "Title: Service failure on ${cfg.hostLabel}" \
+            -H "Title: Service failure on ${config.networking.hostName}" \
            -H "Priority: high" \
            -H "Tags: rotating_light" \
            -H "Message: Unit $unit failed at $(date +%c)" \
--- a/common/pc/steam.nix
+++ b/common/pc/steam.nix
@@ -19,15 +19,6 @@ in
        "--hdr-itm-enabled"
        "--adaptive-sync"
      ];
-      steamArgs = [
-        "-steamos3"
-        "-gamepadui"
-        "-pipewire-dmabuf"
-      ];
-      env = {
-        STEAM_ENABLE_VOLUME_HANDLER = "1";
-        STEAM_DISABLE_AUDIO_DEVICE_SWITCHING = "1";
-      };
    };
    environment.systemPackages = [ pkgs.gamescope-wsi ];

--- a/common/server/gitea-actions-runner.nix
+++ b/common/server/gitea-actions-runner.nix
@@ -1,4 +1,4 @@
-{ config, lib, allModules, ... }:
+{ config, lib, ... }:

 # Gitea Actions Runner inside a NixOS container.
 # The container shares the host's /nix/store (read-only) and nix-daemon socket,
@@ -8,7 +8,7 @@

 let
  thisMachineIsARunner = config.thisMachine.hasRole."gitea-actions-runner";
-  hostName = config.networking.hostName;
+  hostOverlays = config.nixpkgs.overlays;
  containerName = "gitea-runner";
  giteaRunnerUid = 991;
  giteaRunnerGid = 989;
@@ -32,10 +32,8 @@ in
      };

      config = { config, lib, pkgs, ... }: {
-        imports = allModules;
-
-        ntfy-alerts.ignoredUnits = [ "logrotate" ];
-        ntfy-alerts.hostLabel = "${hostName}/${containerName}";
+        system.stateVersion = "25.11";
+        nixpkgs.overlays = hostOverlays;

        services.gitea-actions-runner.instances.inst = {
          enable = true;
--- a/flake.lock
+++ b/flake.lock
@@ -53,11 +53,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1775848625,
-        "narHash": "sha256-y2/PYZu+yAeG+ueAuhjeeAWHOSvZMJfPiNs7pQJ/Wbc=",
+        "lastModified": 1772587858,
+        "narHash": "sha256-w0/XBU20BdBeEIJ9i3ecr9Lc6c8uQaXUn/ri+aOsyJk=",
        "owner": "sadjow",
        "repo": "claude-code-nix",
-        "rev": "2a665ed3a46cb363630df50150ecf47f45a1d893",
+        "rev": "0a5fc14be38fabfcfff18db749b63c9c15726765",
        "type": "github"
      },
      "original": {
@@ -186,11 +186,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1774959120,
-        "narHash": "sha256-Pzk6UbueeWy9WFiDY6iA1aHid+2AMzkS6gg2x2cSkz4=",
+        "lastModified": 1769939035,
+        "narHash": "sha256-Fok2AmefgVA0+eprw2NDwqKkPGEI5wvR+twiZagBvrg=",
        "owner": "cachix",
        "repo": "git-hooks.nix",
-        "rev": "c06f90f1eb6569bdaf6a4a10cb7e66db4454ac2a",
+        "rev": "a8ca480175326551d6c4121498316261cbb5b260",
        "type": "github"
      },
      "original": {
@@ -228,11 +228,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1775781825,
-        "narHash": "sha256-L5yKTpR+alrZU2XYYvIxCeCP4LBHU5jhwSj7H1VAavg=",
+        "lastModified": 1772569491,
+        "narHash": "sha256-bdr6ueeXO1Xg91sFkuvaysYF0mVdwHBpdyhTjBEWv+s=",
        "owner": "nix-community",
        "repo": "home-manager",
-        "rev": "e35c39fca04fee829cecdf839a50eb9b54d8a701",
+        "rev": "924e61f5c2aeab38504028078d7091077744ab17",
        "type": "github"
      },
      "original": {
@@ -250,11 +250,11 @@
        "spectrum": "spectrum"
      },
      "locked": {
-        "lastModified": 1775847073,
-        "narHash": "sha256-OyRZOIQZZQNrIDN40jrhY1SFTzTNYURT5MPhZZchSbY=",
+        "lastModified": 1772338235,
+        "narHash": "sha256-9XcwtSIL/c+pkC3SBNuxCJuSktFOBV1TLvvkhekyB8I=",
        "owner": "astro",
        "repo": "microvm.nix",
-        "rev": "239045c84aa62c2ce1349fa4c1ceae9eb6ce9e85",
+        "rev": "9d1ff9b53532908a5eba7707931c9093508b6b92",
        "type": "github"
      },
      "original": {
@@ -270,11 +270,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1775365369,
-        "narHash": "sha256-DgH5mveLoau20CuTnaU5RXZWgFQWn56onQ4Du2CqYoI=",
+        "lastModified": 1772341813,
+        "narHash": "sha256-/PQ0ubBCMj/MVCWEI/XMStn55a8dIKsvztj4ZVLvUrQ=",
        "owner": "Mic92",
        "repo": "nix-index-database",
-        "rev": "cef5cf82671e749ac87d69aadecbb75967e6f6c3",
+        "rev": "a2051ff239ce2e8a0148fa7a152903d9a78e854f",
        "type": "github"
      },
      "original": {
@@ -285,11 +285,11 @@
    },
    "nixos-hardware": {
      "locked": {
-        "lastModified": 1775490113,
-        "narHash": "sha256-2ZBhDNZZwYkRmefK5XLOusCJHnoeKkoN95hoSGgMxWM=",
+        "lastModified": 1771969195,
+        "narHash": "sha256-qwcDBtrRvJbrrnv1lf/pREQi8t2hWZxVAyeMo7/E9sw=",
        "owner": "NixOS",
        "repo": "nixos-hardware",
-        "rev": "c775c2772ba56e906cbeb4e0b2db19079ef11ff7",
+        "rev": "41c6b421bdc301b2624486e11905c9af7b8ec68e",
        "type": "github"
      },
      "original": {
@@ -301,11 +301,11 @@
    },
    "nixpkgs": {
      "locked": {
-        "lastModified": 1775710090,
-        "narHash": "sha256-ar3rofg+awPB8QXDaFJhJ2jJhu+KqN/PRCXeyuXR76E=",
+        "lastModified": 1772542754,
+        "narHash": "sha256-WGV2hy+VIeQsYXpsLjdr4GvHv5eECMISX1zKLTedhdg=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "4c1018dae018162ec878d42fec712642d214fdfa",
+        "rev": "8c809a146a140c5c8806f13399592dbcb1bb5dc4",
        "type": "github"
      },
      "original": {
@@ -344,11 +344,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1775244324,
-        "narHash": "sha256-TSAozmLyWCRbUJu6tXQvhTjsDKNj9q1CsEqwhhh9kMU=",
+        "lastModified": 1772064816,
+        "narHash": "sha256-ks1D9Rtmopd5F/8ENjEUJpSYYMxv603/v6TRen9Hq54=",
        "owner": "simple-nixos-mailserver",
        "repo": "nixos-mailserver",
-        "rev": "c45a1e4385e81b937b353ee4ce97f5cfd60ceff2",
+        "rev": "ea4dc17f4bc0f65eed082fa394509e4543072b56",
        "type": "gitlab"
      },
      "original": {
@@ -361,11 +361,11 @@
    "spectrum": {
      "flake": false,
      "locked": {
-        "lastModified": 1772189877,
-        "narHash": "sha256-i1p90Rgssb//aNiTDFq46ZG/fk3LmyRLChtp/9lddyA=",
+        "lastModified": 1759482047,
+        "narHash": "sha256-H1wiXRQHxxPyMMlP39ce3ROKCwI5/tUn36P8x6dFiiQ=",
        "ref": "refs/heads/main",
-        "rev": "fe39e122d898f66e89ffa17d4f4209989ccb5358",
-        "revCount": 1255,
+        "rev": "c5d5786d3dc938af0b279c542d1e43bce381b4b9",
+        "revCount": 996,
        "type": "git",
        "url": "https://spectrum-os.org/git/spectrum"
      },
Author	SHA1	Message	Date
Zuckerberg	3d79cc84a3	Add gamescope (steam) login option All checks were successful Check Flake / check-flake (push) Successful in 6m48s Details	2026-03-09 22:32:10 -07:00
Zuckerberg	92a62e54c3	Initial KDE Plasma Bigscreen mode	2026-03-09 21:54:59 -07:00
Zuckerberg	bdec3793d0	Make PIA connection check more tollerant to hiccups All checks were successful Check Flake / check-flake (push) Successful in 15m39s Details	2026-03-08 21:02:50 -07:00
Zuckerberg	dac2820c58	Bump ntfy attachment expiry time All checks were successful Check Flake / check-flake (push) Successful in 15m28s Details	2026-03-08 12:43:19 -07:00
Zuckerberg	a84ca38b45	Disable bolt for now since I don't use it and it sometimes randomly hangs	2026-03-08 12:42:32 -07:00
Zuckerberg	1e7aa17d3d	Log DIMM temperatures on each check run All checks were successful Check Flake / check-flake (push) Successful in 3m58s Details	2026-03-05 21:31:29 -08:00
Zuckerberg	77415c30fa	Fix VPN check alert limiting to only count failures StartLimitBurst counts all starts (including successes), so the timer was getting blocked after ~15 min. Replace with a JSON counter file that resets on success and daily, only triggering OnFailure alerts for the first 3 failures per day.	2026-03-05 21:28:39 -08:00
Zuckerberg	e3f78b460c	Remove recyclarr, I'm not using it currently	2026-03-05 21:27:35 -08:00
Zuckerberg	576ee47246	Add periodic PIA VPN connectivity check All checks were successful Check Flake / check-flake (push) Successful in 4m38s Details Oneshot service + timer (every 5 min) inside the VPN container that verifies WireGuard handshake freshness and internet reachability. Fails on VPN or internet outage, triggering ntfy alert via OnFailure. Capped at 3 failures per day via StartLimitBurst.	2026-03-04 21:45:07 -08:00
Zuckerberg	335abe4e65	Add DDR5 DIMM temperature monitoring with ntfy alerts Monitors spd5118 sensors every 5 minutes and sends an ntfy notification if any DIMM exceeds 55°C. Opt-in via ntfy-alerts.dimmTempCheck.enable, enabled on s0.	2026-03-04 21:24:40 -08:00
Zuckerberg	6267def09b	Add Music Assistant to Dashy and Gatus	2026-03-04 21:23:16 -08:00
Zuckerberg	5342c920a8	Update README	2026-03-04 20:53:46 -08:00
Zuckerberg	6beaa008e1	Remove LanguageTool service	2026-03-04 20:45:32 -08:00