nix machine / user configurations

feat(wolumonde): drew handle

ptr.pet a6fec244 dace81e0

verified
Changed files
+29 -13
dns
hosts
wolumonde
modules
users
dusk@devel.mobi
modules
+4 -2
dns/dnsconfig.js
···
DnsProvider(DSP_CLOUDFLARE),
DefaultTTL(1),
A("@", WOLUMONDE_IP, CF_PROXY_OFF),
-
A("dawn", WOLUMONDE_IP, CF_PROXY_OFF),
A("doc", WOLUMONDE_IP, CF_PROXY_OFF),
A("git", WOLUMONDE_IP, CF_PROXY_OFF),
-
A("guestbook", WOLUMONDE_IP, CF_PROXY_OFF),
A("limbus", WOLUMONDE_IP, CF_PROXY_OFF),
A("pmart", WOLUMONDE_IP, CF_PROXY_OFF),
A("webhook", WOLUMONDE_IP, CF_PROXY_OFF),
···
A("likes", WOLUMONDE_IP, CF_PROXY_OFF),
A("vpn", WOLUMONDE_IP, CF_PROXY_OFF),
A("id", WOLUMONDE_IP, CF_PROXY_OFF),
+
// atp handles
+
A("dawn", WOLUMONDE_IP, CF_PROXY_OFF),
+
A("guestbook", WOLUMONDE_IP, CF_PROXY_OFF),
+
A("drew", WOLUMONDE_IP, CF_PROXY_OFF),
// A("meow", WOLUMONDE_IP, CF_PROXY_OFF),
// thing
// TXT("id", "a data endpoint for entity with serial id /90008/."),
+7 -8
hosts/wolumonde/modules/atproto.nix
···
in
{
security.acme.certs."gaze.systems".extraDomainNames = [
-
dawnDid guestbookDid
-
# "meow.gaze.systems"
+
dawnDid guestbookDid "drew.gaze.systems"
];
services.nginx.virtualHosts = {
# "gaze.systems" = mkWellKnownCfg {
···
# "9.0.0.0.8.e.f.1.5.0.7.4.0.1.0.0.2.ip6.arpa" = mkWellKnownCfg {
# "atproto-did" = pkgs.writeText "server" "did:plc:dfl62fgb7wtjj3fcbb72naae";
# };
-
# "meow.gaze.systems" = {
-
# useACMEHost = "gaze.systems";
-
# quic = true;
-
# kTLS = true;
-
# forceSSL = true;
-
# };
+
"drew.gaze.systems" = (mkWellKnownCfg {
+
"atproto-did" = pkgs.writeText "server" "did:plc:vo6ie3kd6xvpjlof4pnb2zzp";
+
}) // {
+
useACMEHost = "gaze.systems";
+
forceSSL = true;
+
};
}
// (mkDidWebCfg dawnDid)
// (mkDidWebCfg guestbookDid);
+5
users/dusk@devel.mobi/default.nix
···
shellAliases = {
ctl = "systemctl --user";
jtl = "journalctl --user";
+
g = "git";
+
e = "hx";
+
};
+
sessionVariables = {
+
EDITOR = "hx";
};
};
+13 -3
users/modules/ssh/default.nix
···
{
programs.ssh = {
enable = true;
-
compression = true;
-
hashKnownHosts = true;
-
addKeysToAgent = "yes";
+
enableDefaultConfig = false;
+
matchBlocks."*" = {
+
forwardAgent = false;
+
serverAliveInterval = 0;
+
serverAliveCountMax = 3;
+
compression = true;
+
hashKnownHosts = true;
+
addKeysToAgent = "yes";
+
userKnownHostsFile = "~/.ssh/known_hosts";
+
controlMaster = "no";
+
controlPath = "~/.ssh/master-%r@%n:%p";
+
controlPersist = "no";
+
};
# Only needed for darcs hub
# extraConfig = ''
# Host hub.darcs.net