Compare commits
No commits in common. "master" and "main" have entirely different histories.
@ -148,7 +148,6 @@
|
|||||||
tree
|
tree
|
||||||
p7zip
|
p7zip
|
||||||
inetutils # telnet
|
inetutils # telnet
|
||||||
wl-clipboard # clipboard for vim
|
|
||||||
|
|
||||||
# media
|
# media
|
||||||
yt-dlp
|
yt-dlp
|
||||||
|
|||||||
@ -301,7 +301,7 @@
|
|||||||
# this line prevents hanging on network split
|
# this line prevents hanging on network split
|
||||||
automount_opts = "x-systemd.automount,noauto,x-systemd.idle-timeout=60,x-systemd.device-timeout=5s,x-systemd.mount-timeout=5s";
|
automount_opts = "x-systemd.automount,noauto,x-systemd.idle-timeout=60,x-systemd.device-timeout=5s,x-systemd.mount-timeout=5s";
|
||||||
|
|
||||||
in ["${automount_opts},username=admin,password=Ch19blizz9,uid=1000,gid=1000"];
|
in ["${automount_opts},credentials=/etc/nixos/smb-credentials,uid=1000,gid=1000"];
|
||||||
};
|
};
|
||||||
fileSystems."/mnt/services" = {
|
fileSystems."/mnt/services" = {
|
||||||
device = "//192.168.0.30/services";
|
device = "//192.168.0.30/services";
|
||||||
@ -310,7 +310,7 @@
|
|||||||
# this line prevents hanging on network split
|
# this line prevents hanging on network split
|
||||||
automount_opts = "x-systemd.automount,noauto,x-systemd.idle-timeout=60,x-systemd.device-timeout=5s,x-systemd.mount-timeout=5s";
|
automount_opts = "x-systemd.automount,noauto,x-systemd.idle-timeout=60,x-systemd.device-timeout=5s,x-systemd.mount-timeout=5s";
|
||||||
|
|
||||||
in ["${automount_opts},username=admin,password=Ch19blizz9,uid=1000,gid=1000"];
|
in ["${automount_opts},credentials=/etc/nixos/smb-credentials,uid=1000,gid=1000"];
|
||||||
};
|
};
|
||||||
fileSystems."/mnt/data" = {
|
fileSystems."/mnt/data" = {
|
||||||
device = "//192.168.0.30/data";
|
device = "//192.168.0.30/data";
|
||||||
@ -319,7 +319,7 @@
|
|||||||
# this line prevents hanging on network split
|
# this line prevents hanging on network split
|
||||||
automount_opts = "x-systemd.automount,noauto,x-systemd.idle-timeout=60,x-systemd.device-timeout=5s,x-systemd.mount-timeout=5s";
|
automount_opts = "x-systemd.automount,noauto,x-systemd.idle-timeout=60,x-systemd.device-timeout=5s,x-systemd.mount-timeout=5s";
|
||||||
|
|
||||||
in ["${automount_opts},username=admin,password=Ch19blizz9,uid=1000,gid=1000"];
|
in ["${automount_opts},credentials=/etc/nixos/smb-credentials,uid=1000,gid=1000"];
|
||||||
};
|
};
|
||||||
|
|
||||||
programs.virt-manager.enable = true;
|
programs.virt-manager.enable = true;
|
||||||
|
|||||||
@ -2,16 +2,11 @@
|
|||||||
description = "A very basic flake";
|
description = "A very basic flake";
|
||||||
|
|
||||||
inputs = {
|
inputs = {
|
||||||
agenix.url = "github:ryantm/agenix";
|
|
||||||
nixpkgs.url = "github:nixos/nixpkgs/nixos-25.11";
|
nixpkgs.url = "github:nixos/nixpkgs/nixos-25.11";
|
||||||
nixpkgs-unstable.url = "github:nixos/nixpkgs/nixpkgs-unstable";
|
nixpkgs-unstable.url = "github:nixos/nixpkgs/nixpkgs-unstable";
|
||||||
nixos-hardware.url = "github:nixos/nixos-hardware/master";
|
nixos-hardware.url = "github:nixos/nixos-hardware/master";
|
||||||
home-manager.url = "github:nix-community/home-manager/release-25.11";
|
home-manager.url = "github:nix-community/home-manager/release-25.11";
|
||||||
home-manager.inputs.nixpkgs.follows = "nixpkgs";
|
home-manager.inputs.nixpkgs.follows = "nixpkgs";
|
||||||
nix-cachyos-kernel.url = "github:xddxdd/nix-cachyos-kernel/release";
|
|
||||||
nix-cachyos-kernel.inputs.nixpkgs.follows = "nixpkgs";
|
|
||||||
|
|
||||||
nix-citizen.url = "github:LovingMelody/nix-citizen";
|
|
||||||
};
|
};
|
||||||
|
|
||||||
outputs =
|
outputs =
|
||||||
|
|||||||
@ -45,7 +45,7 @@
|
|||||||
historyLimit = 10000;
|
historyLimit = 10000;
|
||||||
mouse = true;
|
mouse = true;
|
||||||
extraConfig = ''
|
extraConfig = ''
|
||||||
set -s set-clipboard on
|
|
||||||
'';
|
'';
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|||||||
@ -10,13 +10,6 @@
|
|||||||
# ];
|
# ];
|
||||||
# };
|
# };
|
||||||
|
|
||||||
anki = {
|
|
||||||
enable = true;
|
|
||||||
sync = {
|
|
||||||
url = "http://192.168.0.30:27701";
|
|
||||||
};
|
|
||||||
};
|
|
||||||
|
|
||||||
mpv = {
|
mpv = {
|
||||||
enable = true;
|
enable = true;
|
||||||
|
|
||||||
|
|||||||
368
home/podman.nix
368
home/podman.nix
@ -6,30 +6,6 @@
|
|||||||
}:
|
}:
|
||||||
|
|
||||||
{
|
{
|
||||||
|
|
||||||
systemd.user.services.podman-prune = {
|
|
||||||
Unit = {
|
|
||||||
Description = "Prune unused Podman resources for admin user";
|
|
||||||
};
|
|
||||||
Service = {
|
|
||||||
Type = "oneshot";
|
|
||||||
ExecStart = "${pkgs.podman}/bin/podman system prune -f --all";
|
|
||||||
};
|
|
||||||
};
|
|
||||||
|
|
||||||
systemd.user.timers.podman-prune = {
|
|
||||||
Unit = {
|
|
||||||
Description = "Weekly Podman prune timer";
|
|
||||||
};
|
|
||||||
Timer = {
|
|
||||||
OnCalendar = "weekly";
|
|
||||||
Persistent = true;
|
|
||||||
};
|
|
||||||
Install = {
|
|
||||||
WantedBy = [ "timers.target" ];
|
|
||||||
};
|
|
||||||
};
|
|
||||||
|
|
||||||
services.podman.networks = {
|
services.podman.networks = {
|
||||||
internal_net = {
|
internal_net = {
|
||||||
driver = "bridge";
|
driver = "bridge";
|
||||||
@ -81,50 +57,6 @@ systemd.user.timers.podman-prune = {
|
|||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
# akaunting = {
|
|
||||||
# image = "docker.io/akaunting/akaunting:latest";
|
|
||||||
# autoStart = true;
|
|
||||||
# autoUpdate = "registry";
|
|
||||||
# network = "internal_net";
|
|
||||||
# environmentFile = [
|
|
||||||
# "/pool/services/secrets/default"
|
|
||||||
# "/pool/services/secrets/akaunting"
|
|
||||||
# ];
|
|
||||||
# volumes = [
|
|
||||||
# "/pool/services/podman/akaunting/data:/var/www/html/akaunting"
|
|
||||||
# ];
|
|
||||||
# ports = [
|
|
||||||
# "8003:80"
|
|
||||||
# ];
|
|
||||||
# extraConfig = {
|
|
||||||
# Service = {
|
|
||||||
# TimeoutStartSec = 900;
|
|
||||||
# };
|
|
||||||
# };
|
|
||||||
# };
|
|
||||||
#
|
|
||||||
# akaunting-db = {
|
|
||||||
# image = "docker.io/mariadb:latest";
|
|
||||||
# autoStart = true;
|
|
||||||
# autoUpdate = "registry";
|
|
||||||
# network = "internal_net";
|
|
||||||
# environmentFile = [
|
|
||||||
# "/pool/services/secrets/default"
|
|
||||||
# "/pool/services/secrets/akaunting"
|
|
||||||
# ];
|
|
||||||
# volumes = [
|
|
||||||
# "/pool/services/podman/akaunting/db:/var/lib/mysql"
|
|
||||||
# ];
|
|
||||||
# ports = [
|
|
||||||
# "3307:3306"
|
|
||||||
# ];
|
|
||||||
# extraConfig = {
|
|
||||||
# Service = {
|
|
||||||
# TimeoutStartSec = 900;
|
|
||||||
# };
|
|
||||||
# };
|
|
||||||
# };
|
|
||||||
|
|
||||||
archivebox = {
|
archivebox = {
|
||||||
image = "docker.io/archivebox/archivebox:latest";
|
image = "docker.io/archivebox/archivebox:latest";
|
||||||
autoStart = true;
|
autoStart = true;
|
||||||
@ -162,6 +94,75 @@ systemd.user.timers.podman-prune = {
|
|||||||
};
|
};
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
|
authentik-server = {
|
||||||
|
image = "ghcr.io/goauthentik/server:2026.2.1";
|
||||||
|
autoStart = true;
|
||||||
|
autoUpdate = "registry";
|
||||||
|
network = "internal_net";
|
||||||
|
exec = "server";
|
||||||
|
environmentFile = [
|
||||||
|
"/pool/services/secrets/default"
|
||||||
|
"/pool/services/secrets/authentik"
|
||||||
|
];
|
||||||
|
volumes = [
|
||||||
|
"/pool/services/podman/authentik/data:/data"
|
||||||
|
"/pool/services/podman/authentik/certs:/certs"
|
||||||
|
"/pool/services/podman/authentik/templates:/templates"
|
||||||
|
];
|
||||||
|
extraPodmanArgs = [
|
||||||
|
"--shm-size=256m"
|
||||||
|
];
|
||||||
|
extraConfig = {
|
||||||
|
Service = {
|
||||||
|
TimeoutStartSec = 900;
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
authentik-postgresql = {
|
||||||
|
image = "docker.io/postgres:16-alpine";
|
||||||
|
autoStart = true;
|
||||||
|
autoUpdate = "registry";
|
||||||
|
network = "internal_net";
|
||||||
|
environmentFile = [
|
||||||
|
"/pool/services/secrets/default"
|
||||||
|
"/pool/services/secrets/authentik"
|
||||||
|
];
|
||||||
|
volumes = [
|
||||||
|
"/pool/services/podman/authentik/db:/var/lib/postgresql/data"
|
||||||
|
];
|
||||||
|
extraConfig = {
|
||||||
|
Service = {
|
||||||
|
TimeoutStartSec = 900;
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
authentik-worker = {
|
||||||
|
image = "ghcr.io/goauthentik/server:2026.2.1";
|
||||||
|
autoStart = true;
|
||||||
|
autoUpdate = "registry";
|
||||||
|
network = "internal_net";
|
||||||
|
exec = "worker";
|
||||||
|
environmentFile = [
|
||||||
|
"/pool/services/secrets/default"
|
||||||
|
"/pool/services/secrets/authentik"
|
||||||
|
];
|
||||||
|
volumes = [
|
||||||
|
"/pool/services/podman/authentik/data:/data"
|
||||||
|
"/pool/services/podman/authentik/certs:/certs"
|
||||||
|
"/pool/services/podman/authentik/templates:/templates"
|
||||||
|
];
|
||||||
|
extraPodmanArgs = [
|
||||||
|
"--shm-size=256m"
|
||||||
|
];
|
||||||
|
extraConfig = {
|
||||||
|
Service = {
|
||||||
|
TimeoutStartSec = 900;
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
caddy-local = {
|
caddy-local = {
|
||||||
image = "ghcr.io/caddybuilds/caddy-cloudflare:latest";
|
image = "ghcr.io/caddybuilds/caddy-cloudflare:latest";
|
||||||
autoStart = true;
|
autoStart = true;
|
||||||
@ -187,25 +188,6 @@ systemd.user.timers.podman-prune = {
|
|||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
cleanuparr = {
|
|
||||||
image = "ghcr.io/cleanuparr/cleanuparr:latest";
|
|
||||||
autoStart = true;
|
|
||||||
autoUpdate = "registry";
|
|
||||||
network = "internal_net";
|
|
||||||
environmentFile = [
|
|
||||||
"/pool/services/secrets/default"
|
|
||||||
];
|
|
||||||
volumes = [
|
|
||||||
"/pool/services/podman/cleanuparr:/config"
|
|
||||||
"/pool/media/torrents:/downloads"
|
|
||||||
];
|
|
||||||
extraConfig = {
|
|
||||||
Service = {
|
|
||||||
TimeoutStartSec = 900;
|
|
||||||
};
|
|
||||||
};
|
|
||||||
};
|
|
||||||
|
|
||||||
bazarr = {
|
bazarr = {
|
||||||
image = "lscr.io/linuxserver/bazarr:latest";
|
image = "lscr.io/linuxserver/bazarr:latest";
|
||||||
autoStart = true;
|
autoStart = true;
|
||||||
@ -271,14 +253,10 @@ systemd.user.timers.podman-prune = {
|
|||||||
autoStart = true;
|
autoStart = true;
|
||||||
autoUpdate = "registry";
|
autoUpdate = "registry";
|
||||||
network = "internal_net";
|
network = "internal_net";
|
||||||
environment = {
|
environmentFile = [
|
||||||
OIDC_ENABLED="1";
|
"/pool/services/secrets/default"
|
||||||
OIDC_PROVIDER_METADATA_URL="https://authentik.mektem.com/application/o/fresh-rss/.well-known/openid-configuration";
|
"/pool/services/secrets/freshrss"
|
||||||
OIDC_CLIENT_ID="PsqRnVLTezIKL7582E8pnKNFIF0W41kVyMhh4RoG";
|
];
|
||||||
OIDC_CLIENT_SECRET="h1XsvbUcRn33rq7qBBS0GUENEgn6zTJQeHpVPhzcqG4ekdwlCghIn1ALhydYXF1pfS8HaskM3KntHXDTC8a7athLxLzT95Gxr8OpvN9iOY75pUXrNnLJXUrY9o4qKM7m";
|
|
||||||
OIDC_X_FORWARDED_HEADERS="X-Forwarded-Port X-Forwarded-Proto X-Forwarded-Host";
|
|
||||||
OIDC_SCOPES="openid email profile";
|
|
||||||
};
|
|
||||||
volumes = [
|
volumes = [
|
||||||
"/pool/services/podman/freshrss:/config"
|
"/pool/services/podman/freshrss:/config"
|
||||||
];
|
];
|
||||||
@ -425,9 +403,6 @@ systemd.user.timers.podman-prune = {
|
|||||||
volumes = [
|
volumes = [
|
||||||
"/pool/services/podman/immich/db:/var/lib/postgresql/data:z"
|
"/pool/services/podman/immich/db:/var/lib/postgresql/data:z"
|
||||||
];
|
];
|
||||||
ports = [
|
|
||||||
"5433:5432"
|
|
||||||
];
|
|
||||||
userNS = "keep-id";
|
userNS = "keep-id";
|
||||||
extraConfig = {
|
extraConfig = {
|
||||||
Service = {
|
Service = {
|
||||||
@ -448,9 +423,6 @@ systemd.user.timers.podman-prune = {
|
|||||||
volumes = [
|
volumes = [
|
||||||
"/pool/services/podman/immich/cache:/cache"
|
"/pool/services/podman/immich/cache:/cache"
|
||||||
];
|
];
|
||||||
ports = [
|
|
||||||
"3003:3003"
|
|
||||||
];
|
|
||||||
extraConfig = {
|
extraConfig = {
|
||||||
Service = {
|
Service = {
|
||||||
TimeoutStartSec = 900;
|
TimeoutStartSec = 900;
|
||||||
@ -467,9 +439,6 @@ systemd.user.timers.podman-prune = {
|
|||||||
"/pool/services/secrets/default"
|
"/pool/services/secrets/default"
|
||||||
"/pool/services/secrets/immich"
|
"/pool/services/secrets/immich"
|
||||||
];
|
];
|
||||||
ports = [
|
|
||||||
"6379:6379"
|
|
||||||
];
|
|
||||||
extraConfig = {
|
extraConfig = {
|
||||||
Service = {
|
Service = {
|
||||||
TimeoutStartSec = 900;
|
TimeoutStartSec = 900;
|
||||||
@ -539,47 +508,6 @@ systemd.user.timers.podman-prune = {
|
|||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
# joplin = {
|
|
||||||
# image = "docker.io/joplin/server:latest";
|
|
||||||
# autoStart = true;
|
|
||||||
# autoUpdate = "registry";
|
|
||||||
# network = "internal_net";
|
|
||||||
# environmentFile = [
|
|
||||||
# "/pool/services/secrets/default"
|
|
||||||
# "/pool/services/secrets/joplin"
|
|
||||||
# ];
|
|
||||||
# ports = [
|
|
||||||
# "22300:22300"
|
|
||||||
# ];
|
|
||||||
# extraConfig = {
|
|
||||||
# Service = {
|
|
||||||
# TimeoutStartSec = 900;
|
|
||||||
# };
|
|
||||||
# };
|
|
||||||
# };
|
|
||||||
#
|
|
||||||
# joplin-db = {
|
|
||||||
# image = "docker.io/postgres:15";
|
|
||||||
# autoStart = true;
|
|
||||||
# autoUpdate = "registry";
|
|
||||||
# network = "internal_net";
|
|
||||||
# environmentFile = [
|
|
||||||
# "/pool/services/secrets/default"
|
|
||||||
# "/pool/services/secrets/joplin"
|
|
||||||
# ];
|
|
||||||
# volumes = [
|
|
||||||
# "/pool/services/podman/joplin-db:/var/lib/postgresql/data"
|
|
||||||
# ];
|
|
||||||
# ports = [
|
|
||||||
# "5432:5432"
|
|
||||||
# ];
|
|
||||||
# extraConfig = {
|
|
||||||
# Service = {
|
|
||||||
# TimeoutStartSec = 900;
|
|
||||||
# };
|
|
||||||
# };
|
|
||||||
# };
|
|
||||||
|
|
||||||
kiwix = {
|
kiwix = {
|
||||||
image = "ghcr.io/kiwix/kiwix-serve:latest";
|
image = "ghcr.io/kiwix/kiwix-serve:latest";
|
||||||
autoStart = true;
|
autoStart = true;
|
||||||
@ -639,71 +567,6 @@ systemd.user.timers.podman-prune = {
|
|||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
# mastodon = {
|
|
||||||
# image = "ghcr.io/linuxserver/mastodon:amd64-latest";
|
|
||||||
# autoStart = true;
|
|
||||||
# autoUpdate = "registry";
|
|
||||||
# network = "internal_net";
|
|
||||||
# environmentFile = [
|
|
||||||
# "/pool/services/secrets/default"
|
|
||||||
# "/pool/services/secrets/mastodon"
|
|
||||||
# ];
|
|
||||||
# volumes = [
|
|
||||||
# "/pool/services/podman/mastodon/config:/config"
|
|
||||||
# ];
|
|
||||||
# ports = [
|
|
||||||
# "808:80"
|
|
||||||
# "8449:443"
|
|
||||||
# "3009:3000"
|
|
||||||
# ];
|
|
||||||
# extraConfig = {
|
|
||||||
# Service = {
|
|
||||||
# TimeoutStartSec = 900;
|
|
||||||
# };
|
|
||||||
# };
|
|
||||||
# };
|
|
||||||
#
|
|
||||||
# mastodon-db = {
|
|
||||||
# image = "docker.io/postgres:16-alpine";
|
|
||||||
# autoStart = true;
|
|
||||||
# autoUpdate = "registry";
|
|
||||||
# network = "internal_net";
|
|
||||||
# environmentFile = [
|
|
||||||
# "/pool/services/secrets/default"
|
|
||||||
# "/pool/services/secrets/mastodon-db"
|
|
||||||
# ];
|
|
||||||
# volumes = [
|
|
||||||
# "/pool/services/podman/mastodon/db:/var/lib/postgresql/data"
|
|
||||||
# ];
|
|
||||||
# ports = [
|
|
||||||
# "5435:5432"
|
|
||||||
# ];
|
|
||||||
# extraConfig = {
|
|
||||||
# Service = {
|
|
||||||
# TimeoutStartSec = 900;
|
|
||||||
# };
|
|
||||||
# };
|
|
||||||
# };
|
|
||||||
#
|
|
||||||
# mastodon-redis = {
|
|
||||||
# image = "registry.hub.docker.com/library/redis:6.2-alpine";
|
|
||||||
# autoStart = true;
|
|
||||||
# autoUpdate = "registry";
|
|
||||||
# network = "internal_net";
|
|
||||||
# environmentFile = [
|
|
||||||
# "/pool/services/secrets/default"
|
|
||||||
# ];
|
|
||||||
# ports = [
|
|
||||||
# "6382:6379"
|
|
||||||
# ];
|
|
||||||
# extraConfig = {
|
|
||||||
# Service = {
|
|
||||||
# TimeoutStartSec = 900;
|
|
||||||
# };
|
|
||||||
# };
|
|
||||||
# };
|
|
||||||
|
|
||||||
|
|
||||||
metube = {
|
metube = {
|
||||||
image = "ghcr.io/alexta69/metube:latest";
|
image = "ghcr.io/alexta69/metube:latest";
|
||||||
autoStart = true;
|
autoStart = true;
|
||||||
@ -760,88 +623,6 @@ systemd.user.timers.podman-prune = {
|
|||||||
# };
|
# };
|
||||||
# };
|
# };
|
||||||
|
|
||||||
#nginx-proxy-manager = {
|
|
||||||
# image = "docker.io/jc21/nginx-proxy-manager:2.9.22";
|
|
||||||
# autoStart = true;
|
|
||||||
# autoUpdate = "registry";
|
|
||||||
# network = "internal_net";
|
|
||||||
# environmentFile = [
|
|
||||||
# "/pool/services/secrets/default"
|
|
||||||
# ];
|
|
||||||
# volumes = [
|
|
||||||
# "/pool/services/podman/nginx-proxy-manager:/data"
|
|
||||||
# "/pool/services/podman/letsencrypt:/etc/letsencrypt"
|
|
||||||
# ];
|
|
||||||
# ports = [
|
|
||||||
# "80:80"
|
|
||||||
# "443:443"
|
|
||||||
# "81:81"
|
|
||||||
# ];
|
|
||||||
# extraConfig = {
|
|
||||||
# Service = {
|
|
||||||
# TimeoutStartSec = 900;
|
|
||||||
# };
|
|
||||||
# };
|
|
||||||
#};
|
|
||||||
|
|
||||||
nextcloud = {
|
|
||||||
image = "docker.io/nextcloud";
|
|
||||||
autoStart = true;
|
|
||||||
autoUpdate = "registry";
|
|
||||||
network = "internal_net";
|
|
||||||
environmentFile = [
|
|
||||||
"/pool/services/secrets/default"
|
|
||||||
"/pool/services/secrets/nextcloud"
|
|
||||||
];
|
|
||||||
volumes = [
|
|
||||||
"/pool/services/podman/nextcloud/app:/var/www/html"
|
|
||||||
];
|
|
||||||
extraConfig = {
|
|
||||||
Service = {
|
|
||||||
TimeoutStartSec = 900;
|
|
||||||
};
|
|
||||||
};
|
|
||||||
};
|
|
||||||
|
|
||||||
nextcloud-db = {
|
|
||||||
image = "docker.io/mariadb:10.6";
|
|
||||||
autoStart = true;
|
|
||||||
autoUpdate = "registry";
|
|
||||||
network = "internal_net";
|
|
||||||
exec = "--transaction-isolation=READ-COMMITTED --log-bin=binlog --binlog-format=ROW";
|
|
||||||
environmentFile = [
|
|
||||||
"/pool/services/secrets/default"
|
|
||||||
"/pool/services/secrets/nextcloud"
|
|
||||||
];
|
|
||||||
volumes = [
|
|
||||||
"/pool/services/podman/nextcloud/db:/var/lib/mysql"
|
|
||||||
];
|
|
||||||
extraConfig = {
|
|
||||||
Service = {
|
|
||||||
TimeoutStartSec = 900;
|
|
||||||
};
|
|
||||||
};
|
|
||||||
};
|
|
||||||
|
|
||||||
ntfy = {
|
|
||||||
image = "docker.io/binwiederhier/ntfy";
|
|
||||||
autoStart = true;
|
|
||||||
autoUpdate = "registry";
|
|
||||||
network = "internal_net";
|
|
||||||
exec = "serve";
|
|
||||||
environmentFile = [
|
|
||||||
"/pool/services/secrets/default"
|
|
||||||
"/pool/services/secrets/ntfy"
|
|
||||||
];
|
|
||||||
volumes = [
|
|
||||||
"/pool/services/podman/ntfy:/var/lib/ntfy"
|
|
||||||
];
|
|
||||||
extraConfig = {
|
|
||||||
Service = {
|
|
||||||
TimeoutStartSec = 900;
|
|
||||||
};
|
|
||||||
};
|
|
||||||
};
|
|
||||||
ntp = {
|
ntp = {
|
||||||
image = "docker.io/cturra/ntp";
|
image = "docker.io/cturra/ntp";
|
||||||
autoStart = true;
|
autoStart = true;
|
||||||
@ -850,9 +631,6 @@ systemd.user.timers.podman-prune = {
|
|||||||
environmentFile = [
|
environmentFile = [
|
||||||
"/pool/services/secrets/default"
|
"/pool/services/secrets/default"
|
||||||
];
|
];
|
||||||
ports = [
|
|
||||||
"123:123/udp"
|
|
||||||
];
|
|
||||||
extraConfig = {
|
extraConfig = {
|
||||||
Service = {
|
Service = {
|
||||||
TimeoutStartSec = 900;
|
TimeoutStartSec = 900;
|
||||||
|
|||||||
@ -24,12 +24,6 @@ services.displayManager.sddm.enable = true;
|
|||||||
];
|
];
|
||||||
};
|
};
|
||||||
|
|
||||||
#fileSystems."/run/media/admin/08cabc7a-9a6e-4c21-8a07-6663af77b705" = {
|
|
||||||
# device = "/dev/08cabc7a-9a6e-4c21-8a07-6663af77b705";
|
|
||||||
# fsType = "ext4";
|
|
||||||
# options = ["rw,nosuid,nodev,relatime,errors=remount-ro"];
|
|
||||||
# };
|
|
||||||
|
|
||||||
networking = {
|
networking = {
|
||||||
hostName = "nixos-desktop";
|
hostName = "nixos-desktop";
|
||||||
interfaces.enp42s0 = {
|
interfaces.enp42s0 = {
|
||||||
@ -57,50 +51,22 @@ services.displayManager.sddm.enable = true;
|
|||||||
package = config.boot.kernelPackages.nvidiaPackages.stable;
|
package = config.boot.kernelPackages.nvidiaPackages.stable;
|
||||||
};
|
};
|
||||||
|
|
||||||
# this fixes the sleep/wake issue FUCK NVIDIA
|
# this fixes the sleep/wake issue
|
||||||
# systemd.services."systemd-suspend" = {
|
# systemd.services."systemd-suspend" = {
|
||||||
# serviceConfig = {
|
# serviceConfig = {
|
||||||
# Environment = ''"SYSTEMD_SLEEP_FREEZE_USER_SESSIONS=false"'';
|
# Environment = ''"SYSTEMD_SLEEP_FREEZE_USER_SESSIONS=false"'';
|
||||||
# };
|
# };
|
||||||
# };
|
# };
|
||||||
|
|
||||||
# fixes hardware accel on nvidia open FUCK NVIDIA
|
# fixes hardware accel on nvidia open
|
||||||
hardware.graphics.extraPackages = [
|
hardware.graphics.extraPackages = [
|
||||||
pkgs.nvidia-vaapi-driver
|
pkgs.nvidia-vaapi-driver
|
||||||
];
|
];
|
||||||
|
|
||||||
systemd.user.services.reset-gnome-idle-on-resume = {
|
|
||||||
description = "Reset GNOME idle timer after resume";
|
|
||||||
after = [ "suspend.target" ];
|
|
||||||
wantedBy = [ "suspend.target" ];
|
|
||||||
environment = {
|
|
||||||
DBUS_SESSION_BUS_ADDRESS = "unix:path=/run/user/1000/bus";
|
|
||||||
};
|
|
||||||
script = ''
|
|
||||||
sleep 3
|
|
||||||
# Tell gnome-session we have user activity
|
|
||||||
${pkgs.dbus}/bin/dbus-send \
|
|
||||||
--session \
|
|
||||||
--dest=org.gnome.Mutter.IdleMonitor \
|
|
||||||
/org/gnome/Mutter/IdleMonitor/Core \
|
|
||||||
org.gnome.Mutter.IdleMonitor.ResetIdleTime
|
|
||||||
'';
|
|
||||||
serviceConfig = {
|
|
||||||
Type = "oneshot";
|
|
||||||
User = "admin";
|
|
||||||
};
|
|
||||||
};
|
|
||||||
|
|
||||||
environment.variables = {
|
environment.variables = {
|
||||||
NVD_BACKEND = "direct";
|
NVD_BACKEND = "direct";
|
||||||
LIBVA_DRIVER_NAME = "nvidia";
|
LIBVA_DRIVER_NAME = "nvidia";
|
||||||
};
|
};
|
||||||
|
|
||||||
# cachyos kernel
|
|
||||||
# nixpkgs.overlays = [ inputs.nix-cachyos-kernel.overlays.pinned ];
|
|
||||||
# boot.kernelPackages = pkgs.cachyosKernels.linuxPackages-cachyos-latest;
|
|
||||||
# nix.settings.substituters = [ "https://attic.xuyh0120.win/lantian" ];
|
|
||||||
# nix.settings.trusted-public-keys = [ "lantian:EeAUQ+W+6r7EtwnmYjeVwx5kOGEBpjlBfPlzGlTNvHc=" ];
|
|
||||||
|
|
||||||
system.stateVersion = "24.11";
|
system.stateVersion = "24.11";
|
||||||
}
|
}
|
||||||
|
|||||||
@ -59,21 +59,6 @@ systemd.services.podman-network-vlan50 = {
|
|||||||
};
|
};
|
||||||
users.users.admin.linger = true;
|
users.users.admin.linger = true;
|
||||||
|
|
||||||
#services.xserver.videoDrivers = [ "nvidia" ];
|
|
||||||
|
|
||||||
# hardware = {
|
|
||||||
# graphics.enable = true;
|
|
||||||
# nvidia = {
|
|
||||||
# modesetting.enable = true;
|
|
||||||
# powerManagement.enable = true;
|
|
||||||
# powerManagement.finegrained = false;
|
|
||||||
# open = false;
|
|
||||||
# nvidiaSettings = false;
|
|
||||||
# package = config.boot.kernelPackages.nvidiaPackages.stable;
|
|
||||||
# };
|
|
||||||
# nvidia-container-toolkit.enable = true;
|
|
||||||
# };
|
|
||||||
|
|
||||||
hardware.graphics = {
|
hardware.graphics = {
|
||||||
enable = true;
|
enable = true;
|
||||||
enable32Bit = true; # only needed if you run 32-bit apps
|
enable32Bit = true; # only needed if you run 32-bit apps
|
||||||
@ -153,7 +138,6 @@ systemd.services.podman-network-vlan50 = {
|
|||||||
boot.supportedFilesystems = [ "zfs" ];
|
boot.supportedFilesystems = [ "zfs" ];
|
||||||
boot.zfs.forceImportRoot = false;
|
boot.zfs.forceImportRoot = false;
|
||||||
boot.zfs.extraPools = [ "pool" ];
|
boot.zfs.extraPools = [ "pool" ];
|
||||||
#environment.etc."zfs/keys/pool.key".source = config.age.secrets."zfs/pool.key".path;
|
|
||||||
|
|
||||||
services.zfs.autoScrub = {
|
services.zfs.autoScrub = {
|
||||||
enable = true;
|
enable = true;
|
||||||
@ -162,15 +146,45 @@ systemd.services.podman-network-vlan50 = {
|
|||||||
|
|
||||||
services.smartd = {
|
services.smartd = {
|
||||||
enable = true;
|
enable = true;
|
||||||
|
notifications = {
|
||||||
|
mail.enable = true;
|
||||||
|
mail.recipient = "faris@mektem.com";
|
||||||
|
};
|
||||||
#devices = [ "DEVICESCAN -a" ]; # autodetect all drives
|
#devices = [ "DEVICESCAN -a" ]; # autodetect all drives
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|
||||||
|
programs.msmtp = {
|
||||||
|
enable = true;
|
||||||
|
accounts.default = {
|
||||||
|
auth = true;
|
||||||
|
tls = true;
|
||||||
|
host = "smtp.protonmail.ch";
|
||||||
|
port = 587;
|
||||||
|
from = "faris@mektem.com";
|
||||||
|
user = "faris@mektem.com";
|
||||||
|
passwordeval = "cat /pool/services/secrets/mail.txt";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
environment.etc."zfs/zed-notify.sh" = {
|
||||||
|
mode = "0755";
|
||||||
|
text = ''
|
||||||
|
#!/bin/sh
|
||||||
|
# ZED calls: ZED_EMAIL_PROG "subject" "recipient"
|
||||||
|
SUBJECT="$1"
|
||||||
|
TO="$2"
|
||||||
|
(echo "Subject: $SUBJECT"; echo "To: $TO"; echo ""; cat) | \
|
||||||
|
${pkgs.msmtp}/bin/msmtp "$TO"
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
|
||||||
services.zfs.zed = {
|
services.zfs.zed = {
|
||||||
|
enableMail = true;
|
||||||
settings = {
|
settings = {
|
||||||
ZED_NTFY_URL="https://ntfy.mektem.com";
|
ZED_EMAIL_ADDR = [ "faris@mektem.com" ];
|
||||||
ZED_NTFY_TOPIC="zfs";
|
ZED_EMAIL_PROG = "/etc/zfs/zed-notify.sh"; # Or ssmtp
|
||||||
ZED_NTFY_ACCESS_TOKEN="tk_gtjia7itxhg1qik7j58wkgey2parr";
|
ZED_EMAIL_OPTS = "";
|
||||||
ZED_NOTIFY_INTERVAL_SECS = 1;
|
ZED_NOTIFY_INTERVAL_SECS = 3600;
|
||||||
ZED_NOTIFY_VERBOSE = true; # Set to false to only get alerts on degradation
|
ZED_NOTIFY_VERBOSE = true; # Set to false to only get alerts on degradation
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
@ -260,6 +274,29 @@ systemd.services.podman-network-vlan50 = {
|
|||||||
# };
|
# };
|
||||||
};
|
};
|
||||||
|
|
||||||
|
# headscale = {
|
||||||
|
# image = "docker.io/headscale/headscale:stable";
|
||||||
|
# autoStart = true;
|
||||||
|
# #utoUpdate = "registry";
|
||||||
|
# networks = [ "vlan50" ];
|
||||||
|
# cmd = [ "serve" ];
|
||||||
|
# environmentFiles = [
|
||||||
|
# "/pool/services/secrets/default"
|
||||||
|
# ];
|
||||||
|
# volumes = [
|
||||||
|
# "/pool/services/podman/headscale/config:/etc/headscale:ro"
|
||||||
|
# "/pool/services/podman/headscale/lib:/var/lib/headscale"
|
||||||
|
# ];
|
||||||
|
# extraOptions = [
|
||||||
|
# "--ip=192.168.50.38"
|
||||||
|
# ];
|
||||||
|
# #extraConfig = {
|
||||||
|
# # Service = {
|
||||||
|
# # TimeoutStartSec = 900;
|
||||||
|
# # };
|
||||||
|
# ##};
|
||||||
|
# };
|
||||||
|
|
||||||
matrix = {
|
matrix = {
|
||||||
image = "ghcr.io/element-hq/synapse";
|
image = "ghcr.io/element-hq/synapse";
|
||||||
autoStart = true;
|
autoStart = true;
|
||||||
@ -305,6 +342,29 @@ systemd.services.podman-network-vlan50 = {
|
|||||||
# };
|
# };
|
||||||
};
|
};
|
||||||
|
|
||||||
|
ntfy = {
|
||||||
|
image = "docker.io/binwiederhier/ntfy";
|
||||||
|
autoStart = true;
|
||||||
|
#autoUpdate = "registry";
|
||||||
|
networks = [ "vlan50" ];
|
||||||
|
cmd = [ "serve" ];
|
||||||
|
environmentFiles = [
|
||||||
|
"/pool/services/secrets/default"
|
||||||
|
"/pool/services/secrets/ntfy"
|
||||||
|
];
|
||||||
|
volumes = [
|
||||||
|
"/pool/services/podman/ntfy:/var/lib/ntfy"
|
||||||
|
];
|
||||||
|
extraOptions = [
|
||||||
|
"--ip=192.168.50.35"
|
||||||
|
];
|
||||||
|
# extraConfig = {
|
||||||
|
# Service = {
|
||||||
|
# TimeoutStartSec = 900;
|
||||||
|
# };
|
||||||
|
# };
|
||||||
|
};
|
||||||
|
|
||||||
privatebin = {
|
privatebin = {
|
||||||
image = "docker.io/privatebin/nginx-fpm-alpine:latest";
|
image = "docker.io/privatebin/nginx-fpm-alpine:latest";
|
||||||
autoStart = true;
|
autoStart = true;
|
||||||
|
|||||||
@ -1,6 +0,0 @@
|
|||||||
age-encryption.org/v1
|
|
||||||
-> ssh-ed25519 XBJw1w YrkLsFjR7+oYed3CT1NTy2pAFdB5R5zdxKO7mALhGxI
|
|
||||||
Mf+GTmElPO7u0t0btC6OQPvYsOZK55V3U/kXy1Q5DoE
|
|
||||||
--- PBhiiGF8DyW6h8xHM9nbKc8Hy6gdwSXL4KHLegbVrOY
|
|
||||||
Z¡Ü
|
|
||||||
w”âx¿ô]Šq¯bI ·è4òÄÈé>AÙÝ’·3l9üô
M¶jrT#—`
îÂ…¶£·Ç®Ç£)Å܉–½Ôîôxï‚ÞåÔÿvtM<74>ÚËd´ôµÃ¹4•p‡\<Š»ê±ÇŠ‹rÊ»Õ9<ÌóUÞÞš4¤ZŒ-€ ˜ùÎØø°'¼7âK~W)¦lwÐZg¨_ÊäWjmˆ
|
|
||||||
@ -1,6 +0,0 @@
|
|||||||
age-encryption.org/v1
|
|
||||||
-> ssh-ed25519 XBJw1w pV0hcqdF8HNjmPqhNZcNNpYct2gjChqMIt3T2V4pbg4
|
|
||||||
h99ssWIwfePRODbgKsgxTiSQRYPxSU6ALJYKBE4uYSM
|
|
||||||
--- F3f51NlLMKQXb2QKjX5IlCpaK6y6Tc3neFL5yGQuaQs
|
|
||||||
ÅʰVºÒ›IÒu²cGÌ; ‘ Óy]=tóxý>t:¹.-QØ¢w~nˆ"Úææñ‹ÓiÕ@kbšH
|
|
||||||
}Ì¥
|
|
||||||
@ -1,7 +0,0 @@
|
|||||||
age-encryption.org/v1
|
|
||||||
-> ssh-ed25519 XBJw1w CPGMAFD2JqqasZ2zBXeYjcKDMmjRvvQn0p1T4WzgzTQ
|
|
||||||
g2Pg6kOnlRAUMtRO9bVFRukNoKJX9ZoDypcqCrBfsOI
|
|
||||||
--- t9bhlp4c+srjytHQtjfoPoLkSRMhz8+UN/Uh2mcs9GI
|
|
||||||
<EFBFBD>€˜\ìþæY ¡Cè½gÏõO6Èo6ö<07><>HÓÞè‰
|
|
||||||
˜ù„û¶7ÞÛuÿlŒâê
|
|
||||||
®Ÿ¤Œ¡øóëp²h2Ó÷Ó|Ûßmª¡tQ’<>XXv u– ¼ÿcdF
|
|
||||||
Binary file not shown.
Binary file not shown.
@ -1,5 +0,0 @@
|
|||||||
age-encryption.org/v1
|
|
||||||
-> ssh-ed25519 XBJw1w IRiClsh/t9oYx54GwyzXiXGhafCQsoAqhX3KYd1MLAU
|
|
||||||
Q30hHqH+rrFvTxKQp3/6e0IrGs8UEt7Q3ukhzYDilBg
|
|
||||||
--- 7zos7CO/1R0oM3Po32TdtT2vn+0dZNuwXimY5oCTw6E
|
|
||||||
Ùr0ˆT¡D9æuCÞ)ìMÑ«ÉU¼35}ïɘWÑ4
,<2C> Ö`4÷C¾‘6<<3C>J%ºÕiíÙ<C3AD>31ܯîÙYéb‰\ű¸Q°/aŒê©L” ’ÇÈËák¿Võr,;ߤñ<aÀªT`ø9E†nÙP·%
ÑãùÜ—vÃTñ¶Že˜Rj»‡QÁ©º¨<C2BA>$(5¸D"LõST=ëzÇuòtù¸Ÿæ‘uÏ\…Ð}
O9Ÿ»Ö»V Ótù²D¼hªûˆyzÕ’dîSîÍeMnõ®=]|õì
|
|
||||||
@ -1,5 +0,0 @@
|
|||||||
age-encryption.org/v1
|
|
||||||
-> ssh-ed25519 XBJw1w dfIt9D68fTDiv3E/vRCAulWPFtiQHQPkAHwmgTT3iVc
|
|
||||||
nI5jOSRnaXwuzuosmDwn/WDEpSeWGT3/5wQ4U5tCcQU
|
|
||||||
--- 4By9gEMbv47Ty1hcnaIjlXjD6Ruz54mHZ3oFyhjGoKU
|
|
||||||
ƒ«›ùì%þiž5ºÔéĵkUÀû÷©ÖDÌ=m=Џ‡šÅõ(~™Â¿¤tY‰N©3öVý5Hñˆ¨mMÙÉä7Ü*
|
|
||||||
@ -1,5 +0,0 @@
|
|||||||
age-encryption.org/v1
|
|
||||||
-> ssh-ed25519 XBJw1w xlTqx7SHEtpjf7o09+3NRQcdOU8O6G8RayAln5nXa3k
|
|
||||||
hqneq8qtnDlzpg10LCKQZFoxzmHP0TmdwaGzVJwqDT8
|
|
||||||
--- bADrlXdsANlKpeI6aPqlP23JAM480M1DQ8uWfRNf2FI
|
|
||||||
8 b†2‘<32>~‘Ó)Gõ[ŠÞûT¦¿²¸Í*\² îW#=&Ô˃Bzer‘
|
|
||||||
@ -1,5 +0,0 @@
|
|||||||
age-encryption.org/v1
|
|
||||||
-> ssh-ed25519 XBJw1w uDKGYe0iG2aYNC0qbdMxZde4WoveT2w/qYCcXYiAvAI
|
|
||||||
Z83hIm4UPo1Y0GC4q9A5yh0hrwdMhedJ/Q7WM34iEJw
|
|
||||||
--- AFJLZCIEtkkFsmCJhz2NOjeyXVjMON+6ho57r0WGOQo
|
|
||||||
(×ÒÍß´ Âà+ šáMt¬¤©‰!à¨<C3A0>› ½C]ºËßÖ„>“ánk
|
|
||||||
@ -1,5 +0,0 @@
|
|||||||
age-encryption.org/v1
|
|
||||||
-> ssh-ed25519 XBJw1w b2jXA+YoWTi+0k4hGa4PpXWnDNdvYlAabsbFEtQVuxs
|
|
||||||
xxVUlBbreKZ43LkNMxC4EkHeQM9N7zg+Os07MMO/tUo
|
|
||||||
--- zulfS/NwoQvQJaHcKLsE0y4Zgd9pdaI5HTFeLn1aWww
|
|
||||||
È"xñ޶(wmf<éÎÒÑÇ*Ý/wK«XìðÞ“Œ/}2Þ±ú¸žÜŸ
|
|
||||||
@ -1,5 +0,0 @@
|
|||||||
age-encryption.org/v1
|
|
||||||
-> ssh-ed25519 XBJw1w FUG2pT0R1avaaqVy8Vpy5QrYxlvY3+vVCCgavBw3xlg
|
|
||||||
12nHFrhBaMB6cSIkoFwJBQJoR6LHDDOdOrvtHKWtXhg
|
|
||||||
--- 0WGJ0gBPnNZen1p6BjRTtO//Fcth6bP+kF6UGuHoZ1g
|
|
||||||
.¼â0²V'ÑлÄ<C2BB>Ò}×ý4ó~ï'*[L^Õ2æõcásn¶“¸ô
|
|
||||||
Binary file not shown.
@ -1,5 +0,0 @@
|
|||||||
age-encryption.org/v1
|
|
||||||
-> ssh-ed25519 XBJw1w IeLI2Bq8rRH28AytcdzLZmY0qI3HE1NRazbXlZ9m0DA
|
|
||||||
m6LOrMY3s4oEizfeSk0k94xSHCs1ONXvtU4DZU612DA
|
|
||||||
--- 2FuHGub471XSe8rh4N/cuWNGCxH/eptxV+uc0vqzBCs
|
|
||||||
Ù_ ¦È’ì;¯-gµôH©o ö•„'n–÷W¡»1IhÉà<C389>NìÁT|£W
|
|
||||||
@ -1,5 +0,0 @@
|
|||||||
age-encryption.org/v1
|
|
||||||
-> ssh-ed25519 XBJw1w 57h4tQZaUZb2KEeBJYvFm540IJdKtOMZKUy+IoMhSCc
|
|
||||||
DWqRNJ4tIug47ZfGKZZ4lA6fuOjen/1G7mViwuwdXnw
|
|
||||||
--- /j7V6AfcdpzpApHvNWyNWEivlup/t41thrItJe9ZNXg
|
|
||||||
}I
Ùϵ+q*À…ýÊãw†«M…~"އðW@<40>seõÒ•êh‚6<E2809A>v¡-Ø’u7h_Ã
|
|
||||||
Binary file not shown.
Binary file not shown.
Binary file not shown.
@ -1,5 +0,0 @@
|
|||||||
age-encryption.org/v1
|
|
||||||
-> ssh-ed25519 XBJw1w 6rRcfL/VxHcTPjh+iS8nDleqqBbd3/zkHjj89eYGLDU
|
|
||||||
YSdAVEsmO4L2TbYMY/fjUwYo91GHSRxtDmG4MqYY2i8
|
|
||||||
--- JPrUeceRt2ABYPpX8nnyKl/Kxd2zEix2MQAmiR/eD84
|
|
||||||
„GTÅü¦â$èø ÀHk-.{j–LË»dLrLˆ5â‹,éZö´$©>b<62>ô`¾Œ+£w|"޽$޳z°–eqËa•£œuªQ÷gÐãËm(Ïæé¹
dÂø7…I׿þй$xü[i¹?i2Í4üÇÀ^ùÜQ^P£9»Û¡; ˆŸ¼<C5B8>W¼¨úà<›c²I
|
|
||||||
Binary file not shown.
@ -1,6 +0,0 @@
|
|||||||
age-encryption.org/v1
|
|
||||||
-> ssh-ed25519 XBJw1w 5QBy9W87Ku629S6LyEnmP0D9XjZ+lprKLfgfKhKEliA
|
|
||||||
slX94kja145e7sKi+kSF6HgrRIgnb7P8N1jT/BgzvWM
|
|
||||||
--- kEdZbGsXLYj3s917fUUV93Ht7x90hSjEMUXS82nWmho
|
|
||||||
Â÷×£5ïõÀéD;ŸÔÑݤ9üÀ²‰IuÞL$˶
|
|
||||||
'™]Ù"V’g¼%x<>°5¬<Sï©òu”Îêèó,âÚžé<C5BE>„¡C+m©Ý°Â¥š‹úå›<C3A5>&2ú¿Á7Ð(f0×Ò:ËÛ‡}Gé¬Õ }ëÈcÅèvi¶,
|
|
||||||
@ -1,6 +0,0 @@
|
|||||||
age-encryption.org/v1
|
|
||||||
-> ssh-ed25519 XBJw1w ZDccgWxYDXp8C4PUSnFJvUsHD9dvkVgy7sHdKpRNhgg
|
|
||||||
DTWL2jyTo79eB9npr0CRHQYH7yx/OFowpjUTt2HUx7I
|
|
||||||
--- APu/KvLmlr8noZOouXaSo4/sVGcxYzfnbGB4S/DKpkM
|
|
||||||
HÄ„¾5Ù÷Y!gÍ–©Vu’¾æK<C3A6>
˜U“¨t‰‘t<’Nå(
|
|
||||||
Ë‘Ã'º²†À¨Gx£öÉÖôþœŠÌ
|
|
||||||
Binary file not shown.
@ -1,24 +0,0 @@
|
|||||||
let
|
|
||||||
agenix = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOW2QuTDyMA/sdEWkKBAQmcqc164/RmQ6PULKGAb3jiD";
|
|
||||||
in
|
|
||||||
{
|
|
||||||
"podman/default.age".publicKeys = [ agenix ];
|
|
||||||
"podman/archivebox.age".publicKeys = [ agenix ];
|
|
||||||
"podman/frigate.age".publicKeys = [ agenix ];
|
|
||||||
"podman/gitea.age".publicKeys = [ agenix ];
|
|
||||||
"podman/immich.age".publicKeys = [ agenix ];
|
|
||||||
"podman/joplin.age".publicKeys = [ agenix ];
|
|
||||||
"podman/nginx.age".publicKeys = [ agenix ];
|
|
||||||
"podman/ollama.age".publicKeys = [ agenix ];
|
|
||||||
"podman/open-webui.age".publicKeys = [ agenix ];
|
|
||||||
"podman/tandoor.age".publicKeys = [ agenix ];
|
|
||||||
"podman/unifi-network-application.age".publicKeys = [ agenix ];
|
|
||||||
"podman/vaultwarden.age".publicKeys = [ agenix ];
|
|
||||||
"podman/wireguard.age".publicKeys = [ agenix ];
|
|
||||||
|
|
||||||
"restic/environmentFile.age".publicKeys = [ agenix ];
|
|
||||||
"restic/passwordFile.age".publicKeys = [ agenix ];
|
|
||||||
"restic/repositoryFile.age".publicKeys = [ agenix ];
|
|
||||||
|
|
||||||
"zfs/pool.key.age".publicKeys = [ agenix ];
|
|
||||||
}
|
|
||||||
@ -1,6 +0,0 @@
|
|||||||
age-encryption.org/v1
|
|
||||||
-> ssh-ed25519 XBJw1w aT4N7lGsXH1XV4wBrZ1xoRVOjWrpMcBtNR8gMHUyfRM
|
|
||||||
sz4CvrJNgx+ms7kGTfg0Wly6Mc2NDwn4sWYvfsJI5lA
|
|
||||||
--- 9c9kfNpfGRAC6qAkHsfe65j2/83xeo1iIYqNxWMqLy8
|
|
||||||
#èefIú¬fƒ/ï¨*[0Š~W q¯¾y'j*½ägSþy™Bñ’y@j£jÜv¨kæ<6B>ÿ<EFBFBD>ê<>Ï<EFBFBD>
|
|
||||||
ø¨&®0PÞß×ù‡Õ×ùƒ`œ" +ÜȲ«%ó¦r”«GÀ·ñ
|
|
||||||
@ -1,324 +0,0 @@
|
|||||||
|
|
||||||
SSUUMMMMAARRYY OOFF LLEESSSS CCOOMMMMAANNDDSS
|
|
||||||
|
|
||||||
Commands marked with * may be preceded by a number, _N.
|
|
||||||
Notes in parentheses indicate the behavior if _N is given.
|
|
||||||
A key preceded by a caret indicates the Ctrl key; thus ^K is ctrl-K.
|
|
||||||
|
|
||||||
h H Display this help.
|
|
||||||
q :q Q :Q ZZ Exit.
|
|
||||||
---------------------------------------------------------------------------
|
|
||||||
|
|
||||||
MMOOVVIINNGG
|
|
||||||
|
|
||||||
e ^E j ^N CR * Forward one line (or _N lines).
|
|
||||||
y ^Y k ^K ^P * Backward one line (or _N lines).
|
|
||||||
ESC-j * Forward one file line (or _N file lines).
|
|
||||||
ESC-k * Backward one file line (or _N file lines).
|
|
||||||
f ^F ^V SPACE * Forward one window (or _N lines).
|
|
||||||
b ^B ESC-v * Backward one window (or _N lines).
|
|
||||||
z * Forward one window (and set window to _N).
|
|
||||||
w * Backward one window (and set window to _N).
|
|
||||||
ESC-SPACE * Forward one window, but don't stop at end-of-file.
|
|
||||||
ESC-b * Backward one window, but don't stop at beginning-of-file.
|
|
||||||
d ^D * Forward one half-window (and set half-window to _N).
|
|
||||||
u ^U * Backward one half-window (and set half-window to _N).
|
|
||||||
ESC-) RightArrow * Right one half screen width (or _N positions).
|
|
||||||
ESC-( LeftArrow * Left one half screen width (or _N positions).
|
|
||||||
ESC-} ^RightArrow Right to last column displayed.
|
|
||||||
ESC-{ ^LeftArrow Left to first column.
|
|
||||||
F Forward forever; like "tail -f".
|
|
||||||
ESC-F Like F but stop when search pattern is found.
|
|
||||||
r ^R ^L Repaint screen.
|
|
||||||
R Repaint screen, discarding buffered input.
|
|
||||||
---------------------------------------------------
|
|
||||||
Default "window" is the screen height.
|
|
||||||
Default "half-window" is half of the screen height.
|
|
||||||
---------------------------------------------------------------------------
|
|
||||||
|
|
||||||
SSEEAARRCCHHIINNGG
|
|
||||||
|
|
||||||
/_p_a_t_t_e_r_n * Search forward for (_N-th) matching line.
|
|
||||||
?_p_a_t_t_e_r_n * Search backward for (_N-th) matching line.
|
|
||||||
n * Repeat previous search (for _N-th occurrence).
|
|
||||||
N * Repeat previous search in reverse direction.
|
|
||||||
ESC-n * Repeat previous search, spanning files.
|
|
||||||
ESC-N * Repeat previous search, reverse dir. & spanning files.
|
|
||||||
^O^N ^On * Search forward for (_N-th) OSC8 hyperlink.
|
|
||||||
^O^P ^Op * Search backward for (_N-th) OSC8 hyperlink.
|
|
||||||
^O^L ^Ol Jump to the currently selected OSC8 hyperlink.
|
|
||||||
ESC-u Undo (toggle) search highlighting.
|
|
||||||
ESC-U Clear search highlighting.
|
|
||||||
&_p_a_t_t_e_r_n * Display only matching lines.
|
|
||||||
---------------------------------------------------
|
|
||||||
Search is case-sensitive unless changed with -i or -I.
|
|
||||||
A search pattern may begin with one or more of:
|
|
||||||
^N or ! Search for NON-matching lines.
|
|
||||||
^E or * Search multiple files (pass thru END OF FILE).
|
|
||||||
^F or @ Start search at FIRST file (for /) or last file (for ?).
|
|
||||||
^K Highlight matches, but don't move (KEEP position).
|
|
||||||
^R Don't use REGULAR EXPRESSIONS.
|
|
||||||
^S _n Search for match in _n-th parenthesized subpattern.
|
|
||||||
^W WRAP search if no match found.
|
|
||||||
^L Enter next character literally into pattern.
|
|
||||||
---------------------------------------------------------------------------
|
|
||||||
|
|
||||||
JJUUMMPPIINNGG
|
|
||||||
|
|
||||||
g < ESC-< * Go to first line in file (or line _N).
|
|
||||||
G > ESC-> * Go to last line in file (or line _N).
|
|
||||||
p % * Go to beginning of file (or _N percent into file).
|
|
||||||
t * Go to the (_N-th) next tag.
|
|
||||||
T * Go to the (_N-th) previous tag.
|
|
||||||
{ ( [ * Find close bracket } ) ].
|
|
||||||
} ) ] * Find open bracket { ( [.
|
|
||||||
ESC-^F _<_c_1_> _<_c_2_> * Find close bracket _<_c_2_>.
|
|
||||||
ESC-^B _<_c_1_> _<_c_2_> * Find open bracket _<_c_1_>.
|
|
||||||
---------------------------------------------------
|
|
||||||
Each "find close bracket" command goes forward to the close bracket
|
|
||||||
matching the (_N-th) open bracket in the top line.
|
|
||||||
Each "find open bracket" command goes backward to the open bracket
|
|
||||||
matching the (_N-th) close bracket in the bottom line.
|
|
||||||
|
|
||||||
m_<_l_e_t_t_e_r_> Mark the current top line with <letter>.
|
|
||||||
M_<_l_e_t_t_e_r_> Mark the current bottom line with <letter>.
|
|
||||||
'_<_l_e_t_t_e_r_> Go to a previously marked position.
|
|
||||||
'' Go to the previous position.
|
|
||||||
^X^X Same as '.
|
|
||||||
ESC-m_<_l_e_t_t_e_r_> Clear a mark.
|
|
||||||
---------------------------------------------------
|
|
||||||
A mark is any upper-case or lower-case letter.
|
|
||||||
Certain marks are predefined:
|
|
||||||
^ means beginning of the file
|
|
||||||
$ means end of the file
|
|
||||||
---------------------------------------------------------------------------
|
|
||||||
|
|
||||||
CCHHAANNGGIINNGG FFIILLEESS
|
|
||||||
|
|
||||||
:e [_f_i_l_e] Examine a new file.
|
|
||||||
^X^V Same as :e.
|
|
||||||
:n * Examine the (_N-th) next file from the command line.
|
|
||||||
:p * Examine the (_N-th) previous file from the command line.
|
|
||||||
:x * Examine the first (or _N-th) file from the command line.
|
|
||||||
^O^O Open the currently selected OSC8 hyperlink.
|
|
||||||
:d Delete the current file from the command line list.
|
|
||||||
= ^G :f Print current file name.
|
|
||||||
---------------------------------------------------------------------------
|
|
||||||
|
|
||||||
MMIISSCCEELLLLAANNEEOOUUSS CCOOMMMMAANNDDSS
|
|
||||||
|
|
||||||
-_<_f_l_a_g_> Toggle a command line option [see OPTIONS below].
|
|
||||||
--_<_n_a_m_e_> Toggle a command line option, by name.
|
|
||||||
__<_f_l_a_g_> Display the setting of a command line option.
|
|
||||||
___<_n_a_m_e_> Display the setting of an option, by name.
|
|
||||||
+_c_m_d Execute the less cmd each time a new file is examined.
|
|
||||||
|
|
||||||
!_c_o_m_m_a_n_d Execute the shell command with $SHELL.
|
|
||||||
#_c_o_m_m_a_n_d Execute the shell command, expanded like a prompt.
|
|
||||||
|XX_c_o_m_m_a_n_d Pipe file between current pos & mark XX to shell command.
|
|
||||||
s _f_i_l_e Save input to a file.
|
|
||||||
v Edit the current file with $VISUAL or $EDITOR.
|
|
||||||
V Print version number of "less".
|
|
||||||
---------------------------------------------------------------------------
|
|
||||||
|
|
||||||
OOPPTTIIOONNSS
|
|
||||||
|
|
||||||
Most options may be changed either on the command line,
|
|
||||||
or from within less by using the - or -- command.
|
|
||||||
Options may be given in one of two forms: either a single
|
|
||||||
character preceded by a -, or a name preceded by --.
|
|
||||||
|
|
||||||
-? ........ --help
|
|
||||||
Display help (from command line).
|
|
||||||
-a ........ --search-skip-screen
|
|
||||||
Search skips current screen.
|
|
||||||
-A ........ --SEARCH-SKIP-SCREEN
|
|
||||||
Search starts just after target line.
|
|
||||||
-b [_N] .... --buffers=[_N]
|
|
||||||
Number of buffers.
|
|
||||||
-B ........ --auto-buffers
|
|
||||||
Don't automatically allocate buffers for pipes.
|
|
||||||
-c ........ --clear-screen
|
|
||||||
Repaint by clearing rather than scrolling.
|
|
||||||
-d ........ --dumb
|
|
||||||
Dumb terminal.
|
|
||||||
-D xx_c_o_l_o_r . --color=xx_c_o_l_o_r
|
|
||||||
Set screen colors.
|
|
||||||
-e -E .... --quit-at-eof --QUIT-AT-EOF
|
|
||||||
Quit at end of file.
|
|
||||||
-f ........ --force
|
|
||||||
Force open non-regular files.
|
|
||||||
-F ........ --quit-if-one-screen
|
|
||||||
Quit if entire file fits on first screen.
|
|
||||||
-g ........ --hilite-search
|
|
||||||
Highlight only last match for searches.
|
|
||||||
-G ........ --HILITE-SEARCH
|
|
||||||
Don't highlight any matches for searches.
|
|
||||||
-h [_N] .... --max-back-scroll=[_N]
|
|
||||||
Backward scroll limit.
|
|
||||||
-i ........ --ignore-case
|
|
||||||
Ignore case in searches that do not contain uppercase.
|
|
||||||
-I ........ --IGNORE-CASE
|
|
||||||
Ignore case in all searches.
|
|
||||||
-j [_N] .... --jump-target=[_N]
|
|
||||||
Screen position of target lines.
|
|
||||||
-J ........ --status-column
|
|
||||||
Display a status column at left edge of screen.
|
|
||||||
-k _f_i_l_e ... --lesskey-file=_f_i_l_e
|
|
||||||
Use a compiled lesskey file.
|
|
||||||
-K ........ --quit-on-intr
|
|
||||||
Exit less in response to ctrl-C.
|
|
||||||
-L ........ --no-lessopen
|
|
||||||
Ignore the LESSOPEN environment variable.
|
|
||||||
-m -M .... --long-prompt --LONG-PROMPT
|
|
||||||
Set prompt style.
|
|
||||||
-n ......... --line-numbers
|
|
||||||
Suppress line numbers in prompts and messages.
|
|
||||||
-N ......... --LINE-NUMBERS
|
|
||||||
Display line number at start of each line.
|
|
||||||
-o [_f_i_l_e] .. --log-file=[_f_i_l_e]
|
|
||||||
Copy to log file (standard input only).
|
|
||||||
-O [_f_i_l_e] .. --LOG-FILE=[_f_i_l_e]
|
|
||||||
Copy to log file (unconditionally overwrite).
|
|
||||||
-p _p_a_t_t_e_r_n . --pattern=[_p_a_t_t_e_r_n]
|
|
||||||
Start at pattern (from command line).
|
|
||||||
-P [_p_r_o_m_p_t] --prompt=[_p_r_o_m_p_t]
|
|
||||||
Define new prompt.
|
|
||||||
-q -Q .... --quiet --QUIET --silent --SILENT
|
|
||||||
Quiet the terminal bell.
|
|
||||||
-r -R .... --raw-control-chars --RAW-CONTROL-CHARS
|
|
||||||
Output "raw" control characters.
|
|
||||||
-s ........ --squeeze-blank-lines
|
|
||||||
Squeeze multiple blank lines.
|
|
||||||
-S ........ --chop-long-lines
|
|
||||||
Chop (truncate) long lines rather than wrapping.
|
|
||||||
-t _t_a_g .... --tag=[_t_a_g]
|
|
||||||
Find a tag.
|
|
||||||
-T [_t_a_g_s_f_i_l_e] --tag-file=[_t_a_g_s_f_i_l_e]
|
|
||||||
Use an alternate tags file.
|
|
||||||
-u -U .... --underline-special --UNDERLINE-SPECIAL
|
|
||||||
Change handling of backspaces, tabs and carriage returns.
|
|
||||||
-V ........ --version
|
|
||||||
Display the version number of "less".
|
|
||||||
-w ........ --hilite-unread
|
|
||||||
Highlight first new line after forward-screen.
|
|
||||||
-W ........ --HILITE-UNREAD
|
|
||||||
Highlight first new line after any forward movement.
|
|
||||||
-x [_N[,...]] --tabs=[_N[,...]]
|
|
||||||
Set tab stops.
|
|
||||||
-X ........ --no-init
|
|
||||||
Don't use termcap init/deinit strings.
|
|
||||||
-y [_N] .... --max-forw-scroll=[_N]
|
|
||||||
Forward scroll limit.
|
|
||||||
-z [_N] .... --window=[_N]
|
|
||||||
Set size of window.
|
|
||||||
-" [_c[_c]] . --quotes=[_c[_c]]
|
|
||||||
Set shell quote characters.
|
|
||||||
-~ ........ --tilde
|
|
||||||
Don't display tildes after end of file.
|
|
||||||
-# [_N] .... --shift=[_N]
|
|
||||||
Set horizontal scroll amount (0 = one half screen width).
|
|
||||||
|
|
||||||
--exit-follow-on-close
|
|
||||||
Exit F command on a pipe when writer closes pipe.
|
|
||||||
--file-size
|
|
||||||
Automatically determine the size of the input file.
|
|
||||||
--follow-name
|
|
||||||
The F command changes files if the input file is renamed.
|
|
||||||
--form-feed
|
|
||||||
Stop scrolling when a form feed character is reached.
|
|
||||||
--header=[_L[,_C[,_N]]]
|
|
||||||
Use _L lines (starting at line _N) and _C columns as headers.
|
|
||||||
--incsearch
|
|
||||||
Search file as each pattern character is typed in.
|
|
||||||
--intr=[_C]
|
|
||||||
Use _C instead of ^X to interrupt a read.
|
|
||||||
--lesskey-context=_t_e_x_t
|
|
||||||
Use lesskey source file contents.
|
|
||||||
--lesskey-src=_f_i_l_e
|
|
||||||
Use a lesskey source file.
|
|
||||||
--line-num-width=[_N]
|
|
||||||
Set the width of the -N line number field to _N characters.
|
|
||||||
--match-shift=[_N]
|
|
||||||
Show at least _N characters to the left of a search match.
|
|
||||||
--modelines=[_N]
|
|
||||||
Read _N lines from the input file and look for vim modelines.
|
|
||||||
--mouse
|
|
||||||
Enable mouse input.
|
|
||||||
--no-edit-warn
|
|
||||||
Don't warn when using v command on a file opened via LESSOPEN.
|
|
||||||
--no-keypad
|
|
||||||
Don't send termcap keypad init/deinit strings.
|
|
||||||
--no-histdups
|
|
||||||
Remove duplicates from command history.
|
|
||||||
--no-number-headers
|
|
||||||
Don't give line numbers to header lines.
|
|
||||||
--no-paste
|
|
||||||
Ignore pasted input.
|
|
||||||
--no-search-header-lines
|
|
||||||
Searches do not include header lines.
|
|
||||||
--no-search-header-columns
|
|
||||||
Searches do not include header columns.
|
|
||||||
--no-search-headers
|
|
||||||
Searches do not include header lines or columns.
|
|
||||||
--no-vbell
|
|
||||||
Disable the terminal's visual bell.
|
|
||||||
--redraw-on-quit
|
|
||||||
Redraw final screen when quitting.
|
|
||||||
--rscroll=[_C]
|
|
||||||
Set the character used to mark truncated lines.
|
|
||||||
--save-marks
|
|
||||||
Retain marks across invocations of less.
|
|
||||||
--search-options=[EFKNRW-]
|
|
||||||
Set default options for every search.
|
|
||||||
--show-preproc-errors
|
|
||||||
Display a message if preprocessor exits with an error status.
|
|
||||||
--proc-backspace
|
|
||||||
Process backspaces for bold/underline.
|
|
||||||
--PROC-BACKSPACE
|
|
||||||
Treat backspaces as control characters.
|
|
||||||
--proc-return
|
|
||||||
Delete carriage returns before newline.
|
|
||||||
--PROC-RETURN
|
|
||||||
Treat carriage returns as control characters.
|
|
||||||
--proc-tab
|
|
||||||
Expand tabs to spaces.
|
|
||||||
--PROC-TAB
|
|
||||||
Treat tabs as control characters.
|
|
||||||
--status-col-width=[_N]
|
|
||||||
Set the width of the -J status column to _N characters.
|
|
||||||
--status-line
|
|
||||||
Highlight or color the entire line containing a mark.
|
|
||||||
--use-backslash
|
|
||||||
Subsequent options use backslash as escape char.
|
|
||||||
--use-color
|
|
||||||
Enables colored text.
|
|
||||||
--wheel-lines=[_N]
|
|
||||||
Each click of the mouse wheel moves _N lines.
|
|
||||||
--wordwrap
|
|
||||||
Wrap lines at spaces.
|
|
||||||
|
|
||||||
|
|
||||||
---------------------------------------------------------------------------
|
|
||||||
|
|
||||||
LLIINNEE EEDDIITTIINNGG
|
|
||||||
|
|
||||||
These keys can be used to edit text being entered
|
|
||||||
on the "command line" at the bottom of the screen.
|
|
||||||
|
|
||||||
RightArrow ..................... ESC-l ... Move cursor right one character.
|
|
||||||
LeftArrow ...................... ESC-h ... Move cursor left one character.
|
|
||||||
ctrl-RightArrow ESC-RightArrow ESC-w ... Move cursor right one word.
|
|
||||||
ctrl-LeftArrow ESC-LeftArrow ESC-b ... Move cursor left one word.
|
|
||||||
HOME ........................... ESC-0 ... Move cursor to start of line.
|
|
||||||
END ............................ ESC-$ ... Move cursor to end of line.
|
|
||||||
BACKSPACE ................................ Delete char to left of cursor.
|
|
||||||
DELETE ......................... ESC-x ... Delete char under cursor.
|
|
||||||
ctrl-BACKSPACE ESC-BACKSPACE ........... Delete word to left of cursor.
|
|
||||||
ctrl-DELETE .... ESC-DELETE .... ESC-X ... Delete word under cursor.
|
|
||||||
ctrl-U ......... ESC (MS-DOS only) ....... Delete entire line.
|
|
||||||
UpArrow ........................ ESC-k ... Retrieve previous command line.
|
|
||||||
DownArrow ...................... ESC-j ... Retrieve next command line.
|
|
||||||
TAB ...................................... Complete filename & cycle.
|
|
||||||
SHIFT-TAB ...................... ESC-TAB Complete filename & reverse cycle.
|
|
||||||
ctrl-L ................................... Complete filename, list all.
|
|
||||||
Loading…
x
Reference in New Issue
Block a user