dotfiles, branch matrix-containersSystem and user profile configuration using Guix
http://git.twilken.net/dotfiles/atom?h=matrix-containers2023-12-14T20:33:16Zfixup! Run Matrix services in OCI containers2023-12-14T20:33:16ZTimo Wilken2023-12-14T20:33:16Zurn:sha1:c87dcdae79c6266ac3dac70af08fbef5eb21629bRun Matrix services in OCI containers2023-12-14T19:54:57ZTimo Wilken2023-12-14T19:54:57Zurn:sha1:bf94f7872a1df293bd904bbd2c1ef7229f4f98a8Add note about profile service-types, so I don't forget2023-12-13T22:28:01ZTimo Wilken2023-12-13T22:28:01Zurn:sha1:37e8d03ba4e57e3694b4966b575986be6356726cDeclare dependency on dockerd properly2023-12-13T22:27:44ZTimo Wilken2023-12-13T22:27:28Zurn:sha1:7891c1e395bc0b4125c26b6dd22fcef563186751Configure Grafana to be run behind a reverse proxy2023-12-13T19:51:11ZTimo Wilken2023-12-13T19:50:43Zurn:sha1:0a9f3b827d4e41038a7621199ee790812d4758c3Generalise Docker service and use it to run Grafana2023-12-13T19:51:11ZTimo Wilken2023-12-07T22:14:38Zurn:sha1:aa72ac94a3223faa287c01557874c3840219e000Expose Grafana externally2023-12-13T18:39:32ZTimo Wilken2023-12-03T20:48:06Zurn:sha1:91211036d84baa5e15286539ddadbe6b3d6e7b22Revert kernel update on lap2023-12-13T00:18:22ZTimo Wilken2023-12-13T00:15:43Zurn:sha1:5be8cd1a02ef562a9a8ee251d3cc401585dd3491
The NVIDIA module is only built against linux-lts, and fails to compile
against linux.
Fix rewritten history to make guix pull possible2023-12-12T23:00:52ZTimo Wilken2023-12-12T23:00:52Zurn:sha1:60b37c2d8568897ba4e0bfaf76bb88b166626bd9Remove default kernel configuration2023-12-11T23:41:51ZTimo Wilken2023-12-11T23:41:51Zurn:sha1:5b224e3f534c492a84f68b676cc3b8cd19bfe797Move to latest kernel on lap2023-12-11T23:39:36ZTimo Wilken2023-12-11T23:39:36Zurn:sha1:ec4fdcd211fd37194e28def25a828cdc704081daRe-sign commits after git-filter-branch2023-12-11T23:25:35ZTimo Wilken2023-12-11T23:12:57Zurn:sha1:95245ea55b18ab69ab1ecc53ea71daea8c83cc71Serve "proper" git HTTPS remote on git.twilken.net2023-12-11T22:51:34ZTimo Wilken2023-12-11T22:31:49Zurn:sha1:b9b90cbfd1bc41750a1226faf0d414e8a4f98cf4
...and move cgit to cgit.twilken.net to accommodate this.
Customise passmenu prompt to show what will be typed2023-12-11T20:47:24ZTimo Wilken2023-12-11T20:47:24Zurn:sha1:518ce823220bc9908be1fe93e375a922cce6b588
Also, document an older option and switch on `sh -u` safety option.
Publish channel and make public URL the default2023-12-07T22:54:53ZTimo Wilken2023-12-07T22:54:53Zurn:sha1:48874c00aed86aaff18d909d60dd0f3f0a6c0ba8
Update the introduction commit to the post-filter-branch one without any
secrets.
License compatibly with Guix itself2023-12-07T22:51:55ZTimo Wilken2023-12-07T22:51:55Zurn:sha1:dd28ad4f30307c5f2644ced2921713ddb501a7e1Thermald does not support AMD CPUs2023-12-07T18:29:21ZTimo Wilken2023-12-07T18:29:21Zurn:sha1:12a43fbdbe95d31942a2300ab425f7ae72728435Update packer to 1.10.02023-12-06T14:40:48ZTimo Wilken2023-12-06T14:40:48Zurn:sha1:a23abd14e1bb6c06aec88e324d7b8db5ffcd42a1Update packer to 1.9.52023-12-05T14:26:27ZTimo Wilken2023-12-05T14:26:27Zurn:sha1:4198056df364f3e0ec68bbbdee35ef9bed8cdea9Allow using org-babel-gnuplot2023-12-02T23:56:33ZTimo Wilken2023-12-02T23:56:33Zurn:sha1:cb2e102ebcc6627024f5cbf3959ace887319d035Bind <leader>fp to find file in project2023-12-02T17:08:42ZTimo Wilken2023-12-02T17:08:42Zurn:sha1:499b75d3d9e6ad4d08b8d1c80075f8f4f00b79dcFix .asd finding function2023-12-01T19:14:55ZTimo Wilken2023-12-01T19:14:55Zurn:sha1:b02a98a0df668fbcf6e93cf7f73ab225970199faTweak cgit overview page2023-11-29T23:26:32ZTimo Wilken2023-11-29T23:26:32Zurn:sha1:3289c2f3bfb3228d181f8a3ba09b9d812add4dcbGive cgit automatic access to git repos2023-11-29T22:41:28ZTimo Wilken2023-11-29T22:41:28Zurn:sha1:5657968c20bc00b5f09cc54259771c0372c2a14cConfigure git.twilken.net SSH access2023-11-29T22:36:01ZTimo Wilken2023-11-29T22:36:01Zurn:sha1:75d7a839d7af8d2870ba376a673bea8e4e97d091Fix cgit clone prefixes2023-11-29T22:35:52ZTimo Wilken2023-11-29T22:35:52Zurn:sha1:4bda6a736f68c0608a8e5da410d1935839dc4497Serve Git repos over SSH and back them up2023-11-29T22:09:52ZTimo Wilken2023-11-29T22:09:52Zurn:sha1:6a7ed174aac8ab1583ac4ae62e8a482d3d67ffd7Remove duplicate nginx MIME type2023-11-29T20:13:45ZTimo Wilken2023-11-29T20:13:45Zurn:sha1:1d7b1c2728a58f3c17a70329bde6c25ea4156eb7Fix nginx syntax for reverse proxies2023-11-29T20:10:13ZTimo Wilken2023-11-29T20:10:13Zurn:sha1:165486a9dca1caa30f352f8cd32ec78504348a62Serve cgit on git.twilken.net2023-11-29T19:44:19ZTimo Wilken2023-11-29T19:44:19Zurn:sha1:8415fbef97b35131f75dc93ad9bd61fd09487a52Simplify nginx certificate deployment hook2023-11-29T19:43:36ZTimo Wilken2023-11-29T19:40:30Zurn:sha1:813cefc3cc2b17d752bf6ea7803ce036e562a286Migrate Nextcloud from Apache to nginx2023-11-28T23:45:52ZTimo Wilken2023-11-28T23:40:38Zurn:sha1:36f7bbb00d43ccbfaa50ae2d2efedfbb3761cc91Revert to upstream steam-container2023-11-28T21:17:05ZTimo Wilken2023-11-28T21:17:05Zurn:sha1:d5d9951c7675f29931be3ce2a6c79bb6498914d6
The grafted libx11 has been ungrafted, so the package replacement is no longer
needed.
Encrypt to new laptop SSH host keys2023-11-28T19:12:31ZTimo Wilken2023-11-28T19:12:31Zurn:sha1:385f51f3fa4b5a0d48d9fbfa124ec92c0b6b393c
Also, follow WireGuard secrets renaming.
Disable flymake-collection Python checkers2023-11-27T13:31:19ZTimo Wilken2023-11-27T13:31:19Zurn:sha1:081fb8db2408d9c214f864e138010454c84a959c
These seem to slow down large buffers a lot, and eglot already does linting.
Specify custom battery/adapter names for polybar2023-11-22T23:08:25ZTimo Wilken2023-11-22T23:08:25Zurn:sha1:d5d5e3b8ce00f1f559905f9c689866f778388e84Basic home declaration for frm2023-11-22T22:48:53ZTimo Wilken2023-11-22T22:48:53Zurn:sha1:50fc4e2173ff0a31da01e3e0332b23ef522e8078Remove obsolete comment2023-11-22T22:35:42ZTimo Wilken2023-11-22T22:35:42Zurn:sha1:55a42d6934ae595900cac9ef18f6b3248ba930ffAuthorise signing key for frm2023-11-22T22:07:56ZTimo Wilken2023-11-22T22:07:56Zurn:sha1:3269a1f3b72d49e3e7bb56cd9a5abe06f92fc974Unify system declarations for lap and frm2023-11-22T22:07:31ZTimo Wilken2023-11-22T22:07:31Zurn:sha1:5d7e2f3290df90d2a916b0f5e0d157114cd3d797Move to ed25519 SSH keys on end-user devices2023-11-22T20:25:47ZTimo Wilken2023-11-22T20:25:47Zurn:sha1:1b18b360b2b2d5eac6eb8d80eb006a44ad2b0995Allow SSH access to end-user machines2023-11-21T21:57:29ZTimo Wilken2023-11-21T21:55:31Zurn:sha1:adfbf841b0095496e7dc836f58139cf3a0997857
This is useful for communicating between the two laptops.
Update installer systems2023-11-21T21:37:06ZTimo Wilken2023-11-21T21:28:09Zurn:sha1:839723165e48e077378aa94a779fc32a0496e6b4
As used during installation of frm.twilken.net.
Fix CSS indent2023-11-21T21:27:33ZTimo Wilken2023-11-21T21:27:33Zurn:sha1:3ce92c3c7a1d80cea0cb3063265e6b0f0ccfc837Package neomutt's mutt_oauth2.py script2023-11-21T21:25:59ZTimo Wilken2023-11-21T21:25:59Zurn:sha1:4267ecbfb60827dd9d85070cf2fa7bff74a6b729
This gets rid of the last git submodule.
Package Catppuccin themes instead of using git submodules2023-11-21T21:09:44ZTimo Wilken2023-11-21T21:09:44Zurn:sha1:68c09c0bdd23a588f8ab75593b0fd8bf5f38d6c7
This makes administrating this repo easier, and the home environment can be
reconfigured without having to add the checkout to the guile load path.
Fix spacing in (tw packages catppuccin)2023-11-21T18:23:32ZTimo Wilken2023-11-21T18:23:12Zurn:sha1:4fb486beb38389d79fbe889439527664ecfb57c0Install MT7922 firmware on Framework laptop2023-11-21T16:52:27ZTimo Wilken2023-11-21T16:49:28Zurn:sha1:5288f5aa553d1851efd468630b202d335b8a630aUpdate python-alibuild to v1.15.32023-11-21T14:02:50ZTimo Wilken2023-11-21T14:02:50Zurn:sha1:9f9821b3525af3d9a8f098ce8be49f6c2839bb36Enable MT7921E module for AMD RZ616 Wi-Fi card2023-11-20T23:30:18ZTimo Wilken2023-11-20T23:30:18Zurn:sha1:772a91ac7f38248a789e865c3b102eceb5d4561cManage new Framework laptop2023-11-20T21:44:59ZTimo Wilken2023-11-20T20:02:50Zurn:sha1:04925b8eef4678ff06f408b446aba8e8098f98ceMake WireGuard service install its own secrets automatically2023-11-20T20:01:15ZTimo Wilken2023-11-20T19:59:04Zurn:sha1:bddc465bf484ddf78cf3576c77b10eff4e753ef8Package wgmine2023-11-20T20:01:15ZTimo Wilken2023-11-20T20:00:43Zurn:sha1:23675c58437ebf337fd0bdddfd32910cb5c60f89Update Hashicorp packages2023-11-20T12:21:33ZTimo Wilken2023-11-20T12:21:33Zurn:sha1:b5c54c9d033af6e69a21de0ec2ef3d57c3201a15Fix zsh service extension2023-11-15T18:38:20ZTimo Wilken2023-11-15T18:38:20Zurn:sha1:c42618b19422a5b85a43274c8e75b12d87dd08f7Add Dash docsets for more languages2023-11-14T22:37:41ZTimo Wilken2023-11-14T22:37:41Zurn:sha1:4b241a2408ed9a7c4dfdfbb54328cc048368af44Fix enabling aggressive-indent-mode in Common Lisp mode2023-11-14T19:27:56ZTimo Wilken2023-11-14T19:27:56Zurn:sha1:b56d441c096df1f163b1c33bb9f0d6dd081671c4Load Lisp project automatically when entering REPL2023-11-14T19:02:38ZTimo Wilken2023-11-14T19:02:38Zurn:sha1:52ef06f79e3f643520d76a9a3381f4c8dbe98a0dExtend home services where possible2023-11-12T22:11:54ZTimo Wilken2023-11-12T22:11:54Zurn:sha1:ff2d7581b4aaafc9e0f0361a6f67296e103b70eb
This should make it easier to move to a proper service-type for this in the
future.
Add `ggm' command to show a log since branching off from master2023-11-11T19:56:45ZTimo Wilken2023-11-11T19:51:39Zurn:sha1:77f41b59b56f7da6d9765b627a20486e87235d34Install fixed Steam launcher in home profile2023-11-11T19:19:57ZTimo Wilken2023-11-11T19:19:57Zurn:sha1:9c55ea4984d64b7780911ae4ab6c47fcc9973c73
This can run Cities:Skylines with "Steam Linux Runtime 1.0 (scout)" as a
forced Steam compatibility tool.
Installing it here is easier than launching Steam from the command line every
time.
Make graphical services depend on new x11-display service2023-11-10T17:56:38ZTimo Wilken2023-11-10T17:56:38Zurn:sha1:e3e2fcdbd9b1afca78cd641078612572aa53225b
This should avoid spam from failing services when logging in on a TTY.
Set up Ansible development environment2023-11-10T16:50:04ZTimo Wilken2023-11-10T16:50:04Zurn:sha1:853b727c39d19979e5de13aff879a83713c5ff3bBookmark aido2osx[78] in vinagre2023-11-09T15:56:53ZTimo Wilken2023-11-09T15:56:53Zurn:sha1:7b029f895bd067a55291af5e8b94d370eecb0574Fix copy-pasted Wireguard keys on lud2023-11-08T19:57:20ZTimo Wilken2023-11-08T19:56:58Zurn:sha1:5d00c97cf41edc57f1f1095f8a036bd0b49ea445Update python-alibuild to 1.15.22023-11-08T19:38:10ZTimo Wilken2023-11-08T16:11:05Zurn:sha1:3a0fefee59227ac4c554265f9b14a39267444f20Add script to generate secret files2023-11-08T19:36:24ZTimo Wilken2023-11-08T19:36:24Zurn:sha1:aa850e391ac1995e0e0288cc76975a9b49143394
This documents where the secrets come from and allows recovering them upon
deletion or host key change, in the latter case by deleting the affected .enc
files and regenerating them with the new host key from known_hosts.
Track secrets on lud2023-11-08T19:32:58ZTimo Wilken2023-11-08T19:32:58Zurn:sha1:ce00f9c7071a92199596ae19c58bdb623cdf67a6Track renaming of restic passwords2023-11-08T19:27:13ZTimo Wilken2023-11-08T19:27:13Zurn:sha1:53e10a969148f3ee1a1d434b677e370359873365Track restic and wireguard secrets on vin2023-11-08T18:50:05ZTimo Wilken2023-11-08T18:50:05Zurn:sha1:9790519c3faf4a368ce7f43953a4ab9479960cf9Use age for secrets encryption2023-11-08T18:29:17ZTimo Wilken2023-11-08T18:23:27Zurn:sha1:3aad285fc3c8a83a868da10f7d46a84ae45d2413Follow upstream dunst -> wm module rename2023-11-07T19:42:26ZTimo Wilken2023-11-07T19:42:26Zurn:sha1:053e0a34114e6cf633cfd2ab15f4a0c05c6551d3Fix actionlint buffer detection2023-11-07T13:04:24ZTimo Wilken2023-11-07T13:04:24Zurn:sha1:c0734862851006793cf67aee431aaa57e09a3dfe
In multi-mode yaml buffers, e.g. parts of alidist-mode buffers,
`buffer-file-name' returns nil instead, which previously raised an error here.
Add secrets service2023-11-05T00:03:55ZTimo Wilken2023-11-05T00:03:55Zurn:sha1:7409fef3cbe6bba6c66ce8b03aef6c2d9dc6c7e7
Allow managing secrets and passwords using Guix.
Secrets are encrypted in the Guix channel repository and decrypted using a
single host key at activation time.
Fix `match-record' indentation2023-11-04T23:35:42ZTimo Wilken2023-11-04T23:32:41Zurn:sha1:c3ef6ab1a62cf23cd15fd8865ec6bcdf8e7e4ad7Disable unused-variable warnings in flymake-guile2023-11-04T22:47:58ZTimo Wilken2023-11-04T22:47:58Zurn:sha1:5098b845e9eb0b3a39495f4fd7890cae0d426c3e
These produce too many false positives, e.g. every time `match' is used.
Also, reduce indentation by inverting the `if' condition.
Disable info's mouse tracking2023-11-04T22:10:57ZTimo Wilken2023-11-04T22:10:57Zurn:sha1:8de570559e0936482000470ac101896691c0f4a9Reduce nesting in `ppscm'2023-11-04T21:09:15ZTimo Wilken2023-11-04T20:34:47Zurn:sha1:046beafb15037b52d33c8e32830ab53103005228Configure `json-ts-mode'2023-11-04T19:14:22ZTimo Wilken2023-11-04T19:14:22Zurn:sha1:b6faa2b59ffe6a62abf43455ec88efe075b1df1cInstall infokey2023-11-03T22:54:50ZTimo Wilken2023-11-03T22:54:35Zurn:sha1:8e672848f30c9dba6ae75c8fdd9d4cd7f4ef6e43Update levant to 0.3.32023-11-03T22:10:25ZTimo Wilken2023-11-03T22:10:25Zurn:sha1:72ee16fda8757b9a2f93eaf1d7353bb5e8151de4Remove unused `act' package2023-11-03T22:03:21ZTimo Wilken2023-11-03T22:03:21Zurn:sha1:a50b6a1e467f343d7bbd771879fb950e8debcae7Remove obsolete comment about <leader> in diff-mode2023-11-03T22:01:27ZTimo Wilken2023-11-03T22:01:27Zurn:sha1:864628dde78720f141b5a6af833315b0d3ed46e3Back up KSP and Pioneer game data2023-11-03T21:03:16ZTimo Wilken2023-11-03T21:03:16Zurn:sha1:473e4d6341899e29ffe5410c4b80be1afb5cc6ceFix path to Nextcloud cron.php2023-11-03T21:01:24ZTimo Wilken2023-11-03T21:01:24Zurn:sha1:62b839792af93435b5597e641c10f6cd084c5bedCache restic repos depending on repository type2023-11-02T22:57:18ZTimo Wilken2023-11-02T22:57:18Zurn:sha1:16a694a210a6c20bb2d904e9468732dfdf11d6d5
It makes more sense never to use a cache for local repositories (since they're
on local disk already), but to use it (and keep it clean) for remote REST
repositories.
Back up Grafana database2023-11-02T22:29:41ZTimo Wilken2023-11-02T22:29:41Zurn:sha1:6d2872c94c20dd6c4b0e296163aaffebc786ba23Fix Guix' restic's apparent lack of support for --keep-X=-12023-11-02T19:35:05ZTimo Wilken2023-11-02T19:35:05Zurn:sha1:0958e3c43ae0bc8c0c7b201b65a63474c0faedb5Stop depending on WireGuard in Grafana service2023-11-02T19:18:40ZTimo Wilken2023-11-02T19:18:40Zurn:sha1:0778378249c4f65bfd3cda84e425df4e19eff3d9
This stops Grafana from restarting whenever restarting the WireGuard service.
Revoke Syncopoli's SSH keys2023-11-01T22:39:16ZTimo Wilken2023-11-01T22:39:16Zurn:sha1:853a4dc5e6f74426f97424fd781986aee97f529e
I don't use this app for backing up my phone any more (instead, I use restic).
Disable the access granted to the SSH key formerly used by Syncopoli.
Fix path to public key file for moved installer declaration2023-11-01T22:37:21ZTimo Wilken2023-11-01T22:37:21Zurn:sha1:f1279e0d79055f4c4212346753b6d1582083f754Clean up old Nextcloud backups automatically2023-11-01T22:12:21ZTimo Wilken2023-11-01T22:12:21Zurn:sha1:a7d2d1b6c6a7cc9586910d7f970bb0c5bf01c59cGeneralise Restic declarations2023-11-01T22:10:16ZTimo Wilken2023-11-01T22:10:16Zurn:sha1:6812d052650b62a090852101bad99dd48a964c19
* rename confusingly named restic-*-repository variables to restic-scheduled-*
* generalise repository handling, allowing local and REST repositories both as
backup and cleanup targets
* generalise password handling, allowing passwords from pass or from files for
backup, for cleanup and as part of a REST URL
Add a simple test script2023-11-01T21:30:30ZTimo Wilken2023-11-01T21:30:30Zurn:sha1:9b57cf604c1544ca63dea1a454f696b02002c8f3
This only evaluates each home and system config to make sure they're valid.
Move the "nonfree installer" declaration to a subdirectory since evaluating it
does too much -- it seems to trigger a "guix pull" somehow.
Be less aggressive about trailing whitespace2023-10-31T16:15:09ZTimo Wilken2023-10-31T16:15:09Zurn:sha1:bc67572084726572972170f0f2133f4050e8136dMake python-mode and python-ts-mode setup equivalent2023-10-30T22:39:13ZTimo Wilken2023-10-30T22:39:13Zurn:sha1:fa8515d53411c9fba4bcb9088ef3ffa4e3b4da94Solve old Emacs todos, enable pixel-scroll-precision-mode2023-10-30T22:38:47ZTimo Wilken2023-10-30T22:38:47Zurn:sha1:a6896676ea0d4f969629597eeee518003c02e883Fix and enable Guile flymake checker2023-10-30T22:36:22ZTimo Wilken2023-10-30T22:36:22Zurn:sha1:eca49ccec53882720d3d20172b2c35c315a7ebebPort actionlint checker to flymake2023-10-30T21:38:38ZTimo Wilken2023-10-30T21:38:38Zurn:sha1:2b195f782bb43b29b198d14d588d9f71d80c077fInitial tree-sitter support in Emacs2023-10-30T16:30:41ZTimo Wilken2023-10-13T15:23:29Zurn:sha1:1ce4deeb09d62769b9957c53ef28eafd38d3abb0