From ab677d810b268320bf022ff0726fc35536cd5272 Mon Sep 17 00:00:00 2001 From: sokai Date: Tue, 7 Oct 2025 22:26:00 +0200 Subject: [PATCH] =?UTF-8?q?chore:=20nixos=20=E2=86=92=20mynixos;=20-previe?= =?UTF-8?q?w;=20urls=20changed;=20+line=20breaks=20(in=20new=20default=20b?= =?UTF-8?q?ranch:=20mynixos)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- README.md | 32 +++++++++++--------------------- 1 file changed, 11 insertions(+), 21 deletions(-) diff --git a/README.md b/README.md index 059c9db..8247010 100644 --- a/README.md +++ b/README.md @@ -1,11 +1,8 @@ [Hosts](#hosts) \| [Overview](#overview) \| [Structure](./STRUCTURE.md) -![preview](https://github.com/oddlama/nix-config/assets/31919558/139c94de-9ecd-4b36-ab5c-c654d9e38888) +## ❄️ `mynixos`, a NixOS Infrastructure Configuration -## ❄️ My NixOS Configuration - -This is my personal nix config which I use to maintain my whole infrastructure, -including my homelab, external servers and my development machines. +This is my personal nix config which I use to maintain my whole infrastructure, including my homelab, external servers and my development machines. ## Hosts @@ -22,9 +19,7 @@ including my homelab, external servers and my development machines. ## Overview -An overview over what you will find in this repository. I usually put a lot of -effort into all my configurations and try to go over every option in detail. -I've included the major components in the lists below. +An overview over what you will find in this repository. I usually put a lot of effort into all my configurations and try to go over every option in detail. I've included the major components in the lists below. #### Dotfiles @@ -93,11 +88,9 @@ I've included the major components in the lists below. ## Structure -If you are interested in parts of my configuration, -you probably want to examine the contents of `users/`, `config/`, `modules/` and `hosts/`. -Also, a lot of interesting modules have been moved to [nixos-extra-modules](https://github.com/oddlama/nixos-extra-modules), a separate repository specifically for reusable stuff. -The full structure of this flake is described in [STRUCTURE.md](./STRUCTURE.md), -but here's a quick breakdown of the what you will find where. +If you are interested in parts of my configuration, you probably want to examine the contents of `users/`, `config/`, `modules/` and `hosts/`. +Also, a lot of interesting modules have been moved to [mynixos-extra-modules](https://git.mediani.de/sokai/mynixos-extra-modules), a separate repository specifically for reusable stuff. +The full structure of this flake is described in [STRUCTURE.md](./STRUCTURE.md), but here's a quick breakdown of the what you will find where. | | | |---|---| @@ -114,7 +107,7 @@ but here's a quick breakdown of the what you will find where. #### Add new machine -... incomplete. +… incomplete. - Add to `hosts` in `flake.nix` - Create hosts/ @@ -138,14 +131,13 @@ Afterwards: #### New secret -... +… ## Stuff - Generate, edit and rekey secrets with `agenix ` -To be able to decrypt the repository-wide secrets (files that contain my PII and are thus hidden from public view), -you will need to (be me and) add nix-plugins and point it to `./nix/extra-builtins.nix`. +To be able to decrypt the repository-wide secrets (files that contain my PII and are thus hidden from public view), you will need to (be me and) add nix-plugins and point it to `./nix/extra-builtins.nix`. The devshell will do this for you automatically. If this doesn't work for any reason, this can also be done manually: 1. Get nix-plugins: `NIX_PLUGINS=$(nix build --print-out-paths --no-link nixpkgs#nix-plugins)` @@ -153,10 +145,8 @@ The devshell will do this for you automatically. If this doesn't work for any re ## Misc -Generate self-signed cert, e.g. for kanidm internal communication to proxy: +Generate self-signed cert, e. g. for Kanidm internal communication to proxy: ```bash -openssl req -x509 -newkey rsa:4096 -sha256 -days 3650 -nodes \ - -keyout selfcert.key -out selfcert.crt -subj \ - "/CN=example.com" -addext "subjectAltName=DNS:example.com,DNS:sub1.example.com,DNS:sub2.example.com,IP:10.0.0.1" +openssl req -x509 -newkey rsa:4096 -sha256 -days 3650 -nodes -keyout selfcert.key -out selfcert.crt -subj "/CN=example.com" -addext "subjectAltName=DNS:example.com,DNS:sub1.example.com,DNS:sub2.example.com,IP:10.0.0.1" ```