Commit graph

140 commits

Author SHA1 Message Date
4a06b455b9
feat(networking): add wifi-auto-toggle dispatcher script
All checks were successful
Test / tests (push) Successful in 10m0s
2025-08-27 16:17:17 +02:00
587134e555
fix(networking): fixes for connect-ice script
- fix regular expression in connect-ice script
- replaces `writeText` with `writeShellScript`
2025-08-27 16:12:52 +02:00
b5341635d9
feat(networking): auto-login for Deutsche Bahn WiFi portals
Some checks failed
Test / tests (push) Failing after 25m51s
2025-07-21 21:22:00 +02:00
576ddc0d69
feat(networking): add train WiFi networks 2025-07-21 21:20:55 +02:00
331ded0ec1
feat(hardened): switch from sudo to sudo-rs 2025-07-21 20:57:08 +02:00
3b3b005fe1
refactor(nix): simplify config 2025-07-21 20:56:01 +02:00
62b6d12d3e
feat(nix): switch from nix.settings.auto-optimise-store to nix.optimise
This runs optimisation periodically instead of during builds.
2025-07-21 20:56:01 +02:00
6b59e71417
feat(nix): add nix-tree 2025-07-21 20:56:01 +02:00
526527f5dc
refactor(system): move boot options into their own file 2025-07-21 20:56:01 +02:00
18674ac22d
feat(system): enable fingerprint reader only if lid is open 2025-07-17 13:55:29 +02:00
77f0ba6d03
feat(nix): use lix-module
Some checks failed
Test / tests (push) Failing after 48s
Initially using Lix 2.93.2 from lix-module to fix critical regression.
Will later switch to Lix from nixpkgs to benefit from the cache.
2025-06-30 13:52:24 +02:00
9dab2d9f49
fix(networking): allow fallback to non-TLS DNS servers
Some checks failed
Test / tests (push) Failing after 9m10s
2025-06-20 21:24:43 +02:00
7d3f467586
fix(system): ignore seven-modules in nixos-upgrade's flake updates
Some checks failed
Test / tests (push) Failing after 47m19s
Prevents nixos-upgrade from failing due to interactive git authorization.
2025-06-08 22:58:13 +02:00
4ebc3d6664
feat(vpn): exclude LANs from tailscale subnet routing
Some checks failed
Test / tests (push) Failing after 2m56s
2025-06-07 00:24:09 +02:00
9b9e8d5ee6
feat(vpn): improve compatibility with other wireguard networks 2025-06-06 20:01:39 +02:00
7ac80d78f1
feat(vpn): improve tailscale routing
Some checks failed
Test / tests (push) Has been cancelled
2025-06-06 18:05:31 +02:00
a1675da8bf
feat(nix): switch to lix 2025-06-06 15:58:30 +02:00
a63e02af0f
fix(networking): fix IPv4 CIDR 2025-06-06 15:58:30 +02:00
5953733aeb
feat(networking): add tools 2025-06-06 15:58:30 +02:00
080d9bb1d2
feat(networking): explicitly disable avahi
Some checks failed
Test / tests (push) Failing after 7m32s
2025-05-20 19:23:35 +02:00
ffaf3226f5
feat(networking): enable networking.useNetworkd 2025-05-20 19:23:08 +02:00
f25ca7a488
fix: share pkgs & overlays with home-manager 2025-05-18 19:32:31 +02:00
418fc173e6
chore: upgrade to NixOS 25.05 2025-05-18 17:10:31 +02:00
2d1925d0c5
fix(system): remove nix-alien again
All checks were successful
Test / tests (push) Successful in 2m45s
Does not work with custom nixpkgs, and I do not want to add another
nixpkgs input just for nix-alien.
2025-05-18 15:53:10 +02:00
460a9970cd
fix(system): fix nix-alien package reference
Some checks failed
Test / tests (push) Failing after 3m25s
2025-05-18 15:41:16 +02:00
a933d00a95
feat(system): add nix-ld and nix-alien 2025-05-18 15:04:24 +02:00
b616a73e66
feat(networking): improve networkd & resolved configuration
Some checks failed
Test / tests (push) Failing after 16m27s
2025-05-11 02:22:34 +02:00
ab086bc49b
feat(networking): enable IPv6 RA
Some checks failed
Test / tests (push) Failing after 13m27s
2025-05-10 21:26:33 +02:00
8c58b35813
feat(networking): disable networking.useDHCP
All checks were successful
Test / tests (push) Successful in 4m8s
This option conflicts with `systemd.network`.
2025-05-10 21:08:02 +02:00
b6e2e0433e
feat(networking): add search domains 2025-05-10 21:02:50 +02:00
a5a4be6f94
feat(networking): configure lan via systemd.network
All checks were successful
Test / tests (push) Successful in 3m27s
2025-05-10 20:53:04 +02:00
c684cebb45
feat(networking): enable DHCP by default 2025-05-10 19:03:55 +02:00
f1a8c4e174
fix(networking): do not enable NetworkManager by default 2025-05-10 19:02:53 +02:00
3fbf1a4436
feat(networking): replace nextdns with self-hosted adguardhome
Some checks failed
Test / tests (push) Failing after 10m16s
2025-05-10 17:37:55 +02:00
09554029fe
feat(services): add adguardhome 2025-05-10 17:37:55 +02:00
43cb9890c9
feat(networking): enable systemd-networkd 2025-05-10 17:37:01 +02:00
3e52c2b922
fix(vpn): disable IPv6 for nginx
All checks were successful
Test / tests (push) Successful in 3m58s
Tailscale Mullvad exit nodes currently don't support IPv6 and this is
causing issues with nginx (proxy pass) requests timing out and high CPU load.
Until Mullvad exit nodes support IPv6, we'll just disable IPv6 for nginx.
2025-02-14 00:21:30 +01:00
3d537fcde0
chore(vpn): switch default exit node 2025-02-13 23:27:34 +01:00
66cdd164ac
fix(sound): restrict bluetooth codecs for better performance with Sonos Ace 2025-02-13 23:27:07 +01:00
00dbb637e7
fix: fix git permissions for system.autoUpgrade 2025-01-19 12:36:37 +01:00
933d7b6994
feat(home-server): add forgejo admin user 2025-01-17 15:25:05 +01:00
fdc8002a0d
fix: make autoUpgrade update flake inputs again 2025-01-16 14:09:55 +01:00
29b693c1c7
fix: fix system.autoUpgrade 2024-12-14 23:19:59 +01:00
1043b12ec9
fix(vpn): disable --accept-routes on home-server
This caused some issues for me when trying to access home-server
services from other devices in my LAN that aren't in the Tailnet.
2024-12-08 21:32:57 +01:00
3764a85757
chore: upgrade to NixOS 24.11 2024-12-08 16:09:48 +01:00
1c5d83d81e
style: reformat with nixfmt-rfc-style 2024-05-26 17:37:08 +02:00
f5d872329b
refactor: remove with lib in some places 2024-05-26 13:04:30 +02:00
a377290326
chore: upgrade to NixOS 24.05 2024-05-26 13:04:30 +02:00
0da0f61068
fix(vpn): fix nginx chown 2024-04-30 23:15:04 +02:00
f1cfbee8e7
chore(vpn): switch exit node 2024-04-30 23:13:50 +02:00