Commit graph

190 commits

Author SHA1 Message Date
c9af571fd4
nixos/hardening: remove systemd service hardening 2024-05-01 08:19:25 +08:00
59e634a071
nixos/overlays: add tailscale hardening 2024-05-01 08:18:54 +08:00
0c8cbfde27
flake: update lock file 2024-04-23 16:08:11 +08:00
a8e8cf23f7
fixup! nixos/clash-meta-client: use lightsail-tokyo 2024-04-23 05:03:26 +08:00
acd31e0be1
nixos/clash-meta-client: use lightsail-tokyo 2024-04-23 04:40:41 +08:00
ad019cf3f2
hosts: add lightsail-tokyo 2024-04-23 02:35:50 +08:00
19c8ad7b34
nixos/core: set bootloader for per-host 2024-04-22 22:34:20 +08:00
59494644db
nixos/core: cleanup unused groups 2024-04-22 22:30:46 +08:00
fb6a21be12
Revert "nixos: add xz backdoor killswitch"
This reverts commit d575fa95ba.
2024-04-22 22:29:04 +08:00
c22ce80ad0
home/steam: set GTK_IM_MODULE 2024-04-12 17:23:30 +08:00
77b051fd6f
nixos/fonts: use vf only 2024-04-05 16:41:07 +08:00
4aa34b2a0f
flake: update lock file 2024-04-05 16:18:45 +08:00
5b4d2db891
fixup! nixos: add xz backdoor killswitch 2024-04-01 12:27:58 +08:00
d575fa95ba
nixos: add xz backdoor killswitch 2024-03-31 15:26:07 +08:00
c88ca5b1fb
flake: update lock file 2024-03-31 10:06:50 +08:00
28a16cfc8d
nixos/networking: use dns from dhcp 2024-03-28 03:52:51 +08:00
0afa535473
flake: use nixos-sensible 2024-03-26 22:24:51 +08:00
1d6adde578
home: cleanup 2024-03-26 16:49:35 +08:00
dd785d8825
treewide: remove unneeded files 2024-03-26 16:12:28 +08:00
9049baccd1
nixos: harden tailscaled 2024-03-23 16:29:09 +08:00
46c2d1589e
nixos/clash: use upstream module 2024-03-23 14:17:14 +08:00
1493848136
home/fonts: use symbols only nerd font 2024-03-21 00:23:18 +08:00
fcca57f2ad
nixos/core: use dbus-broker && minor tweaks 2024-03-06 06:06:30 +08:00
a963d7fc39
nixos/physical: add yubikey 2024-03-06 05:08:53 +08:00
6057cf181d
home/scripts: move to pkgs 2024-03-02 21:05:54 +08:00
352d1dcb30
nixos: clean up unused applications 2024-03-01 04:21:51 +08:00
147c40bb82
nixos/clash-meta-client: various tweaks to config 2024-03-01 01:21:57 +08:00
158dbbfd3b
flake: update lock file, switch to nixpkgs-unstable 2024-03-01 01:21:06 +08:00
2cf1095b99
nix/substituters: use my personal cachix 2024-02-27 15:44:40 +08:00
dfa1ebc37f
treewide: migrate packages to NUR 2024-02-27 15:38:46 +08:00
66d7539eab
sway: use latest git version
https://github.com/swaywm/sway/pull/7226 is merged
https://github.com/swaywm/sway/pull/6249 looks dead :(

also simplified ./overlays
2024-02-25 02:43:25 +08:00
16f9a29d7e
treewide: fix typos with crate-ci/typos 2024-02-23 01:03:13 +08:00
1cab188b0d
home/fonts: update fontconfig 2024-02-19 18:14:02 +08:00
87635c85d1
home/theme: use adwaita icon && cleanup 2024-02-19 18:13:57 +08:00
21911abf53
fixup! blacksteel: add qbittorrent 2024-02-18 18:31:31 +08:00
c1de68cfd4
blacksteel: add qbittorrent 2024-02-17 21:45:58 +08:00
be2862c68a
nixos: add ssh key 2024-02-17 21:44:40 +08:00
9f9fe8cb8f
repo: add editorconfig && format 2024-02-16 01:04:01 +08:00
4d38591c6e
home: librewolf -> firefox
- LibreWolf uses custom UA when RFP isn't enabled, this leads to inconviences
  and weird beheviour when website detects your browser's UA. For example,
  Google renders with weird styling, installing Firefox Add-ons does not work,
  etc.

- Sandboxing with NixPak does not work with programs.firefox, unsure why.
  But NixPak also breaks hardware video accelerating (on LibreWolf), so
  anyway.

- Also sorted thunderbird's user-override.js and impermanence.nix
2024-02-16 01:03:57 +08:00
c32f4ce701
secrets/clash: update 2024-02-14 01:56:27 +08:00
5d709ee9b6
home/wallpapers/summer.jpg: crop black bars 2024-02-13 14:02:45 +08:00
a445c7a94b
home/wallpapers/pixiv: fetch from source 2024-02-12 21:52:25 +08:00
997dfa1f1a
fixup! secrets/clash: update 2024-02-12 21:51:51 +08:00
1cfd99fc53
secrets/clash: update 2024-02-12 14:13:32 +08:00
4c28b44351
overlays: fine grain patches 2024-02-12 13:27:05 +08:00
79e5aa0fd9
home/gaming: disable osu-stable
- it does not work well on wayland
- wine takes too much space
- it is unfree
- i usually prefer osu-lazer anyway
2024-02-11 22:58:50 +08:00
29a35e0e9c
fixup! flake: cleanup 2024-02-11 22:11:31 +08:00
b138b7e8e8
hosts: per-device anti-feature 2024-02-08 13:34:37 +08:00
d2d4693e1c
flake: expose overlays 2024-02-06 18:11:29 +08:00
15aee256dd
home/fonts: drop source-han-mono 2024-02-06 17:48:44 +08:00
de6da2748c
home/scripts: cleanup 2024-02-06 17:20:38 +08:00
ac8475706e
nixos: apply more hardening 2024-02-05 17:20:45 +08:00
6e2c24bb7a
nixos/networking/dns: add sni 2024-02-05 17:20:45 +08:00
417fa9d9dd
nixos/clash-meta-client: update rules 2024-02-05 17:20:45 +08:00
d7502e0044
treewide: sed s/--replace/--replace-warn/g 2024-02-05 17:13:32 +08:00
fa208b9ac1
home/scripts: refactor 2024-02-05 10:29:07 +08:00
d258257f5e
nixos: drop scripts 2024-02-03 12:11:27 +08:00
288a46abd3
nixos: disable plymouth 2024-02-02 15:00:26 +08:00
9103cabb4b
nixos: nix-monitored -> nh 2024-02-02 09:22:00 +08:00
bd26cbe0a6
secrets: remove clash/proxy-providers/efcloud 2024-01-31 12:51:29 +08:00
f83093a966
secrets: add clash/proxy-providers/kogeki 2024-01-31 12:50:59 +08:00
9248aeb338
nixos: disko: compress -> compress-force 2024-01-30 12:20:52 +08:00
a0e4dcd93f
nixos: resolved: use cfg.dnsovertls 2024-01-28 07:29:32 +08:00
2e30b2cd12
flake: update lock file 2024-01-27 10:05:38 +08:00
0dcf6ffd7c
nixos: clash-meta-client: move setproxy aliaes 2024-01-27 04:13:55 +08:00
fc231ebf75
nixos: clash-meta-client: use geodata from nixpkgs 2024-01-27 04:13:52 +08:00
e6d7a787a1
secrets: add clash/proxies/lon0 2024-01-26 05:43:06 +08:00
b19ee82d31
nixos: source-han-{sans,serif} -> source-han-{sans,serif}-vf-otf
Steam Beta has updated embedded Chromium build to 109.0.5414.120,
now it supports rendering variable fonts.
2024-01-25 05:34:34 +08:00
4083560054
nixos: nix: enable some settings 2024-01-25 02:06:42 +08:00
6c433753c1
nixos: disko: enable hibernation 2024-01-17 19:53:00 +08:00
410bef4679
treewide: sorting 2024-01-17 19:53:00 +08:00
b5998cbfe9
nixos: sway: add patch: Tray D-Bus Menu 2024-01-16 13:03:50 +08:00
7d47e189f8
home: neochat -> fractal 2024-01-16 10:02:46 +08:00
095706efcd
fixup! sed 's/_: {/{/g' 2024-01-16 10:02:44 +08:00
4285f6330d
sed 's/_: {/{/g' 2024-01-16 10:02:44 +08:00
5ded322805
nixos: nix: use cache from nix-gaming's cachix 2024-01-16 10:02:43 +08:00
48b40fd878
flake: update lock file 2024-01-16 10:02:41 +08:00
71a8623821
nixos: disko: use bypassWorkqueues 2024-01-16 08:55:53 +08:00
dc4ad8f939
nixos: disko: simplify 2024-01-16 08:55:53 +08:00
0ec421f185
nixos: networking: google dns -> alidns 2024-01-16 08:55:50 +08:00
2323bfcc3e
nixos: profiles: simplify 2024-01-16 08:55:49 +08:00
ab143cf59d
nixos: core: boot: simplify 2024-01-08 18:53:08 +08:00
ecfa59e73d
fixup! nixos: gaming: gamemode: integrate with offloading 2024-01-08 18:51:49 +08:00
55c239266f
home: add thunderbird 2024-01-08 00:31:04 +08:00
f79e3a569f
nixos: audio: setup pipewire low latency 2024-01-06 06:04:23 +08:00
5714fa5d7d
fixup! nixos: setup home on tmpfs 2024-01-06 04:18:27 +08:00
ae014b410c
hosts: aristotle: remove virt-manager 2024-01-06 04:18:16 +08:00
185f08af82
nixos: disko: cleanup 2024-01-03 16:20:17 +08:00
9de12f1548
flake: update lock file 2024-01-03 16:20:15 +08:00
b4a9fa903f
nixos/clash: use systemd DynamicUser 2024-01-03 00:27:15 +08:00
506ad73136
fixup! nixos: setup home on tmpfs 2024-01-01 16:26:53 +08:00
0d5fc6d005
nixos: use newer version of nvidia driver 2024-01-01 16:26:51 +08:00
f9161573ff
nixos: sorting 2023-12-31 00:18:35 +08:00
8e0cd38d5a
nixos: profiles: indicate unused stuff 2023-12-29 23:27:01 +08:00
88e6cea3f3
nixos: networking: simplify 2023-12-29 23:26:56 +08:00
d313750925
treewide: remove aliases 2023-12-27 15:28:18 +08:00
92b85bee28
flake: update lock file 2023-12-27 15:12:13 +08:00
e745404fa6
fixup! nixos: setup home on tmpfs 2023-12-27 15:12:11 +08:00
4cecc06627
nixos: add a list of default programs 2023-12-25 22:27:42 +08:00
fa0e9ccc74
nixos: core: use sudo-rs 2023-12-25 21:03:49 +08:00