add some initial stuff
This commit is contained in:
commit
62df62c3aa
23 changed files with 2101 additions and 0 deletions
41
README.md
Normal file
41
README.md
Normal file
|
|
@ -0,0 +1,41 @@
|
|||
a new interation of xyno's nixos configurations
|
||||
meow
|
||||
|
||||
## things to think about
|
||||
|
||||
- module imports
|
||||
- manual imo, just have a all-modules.nix or smth
|
||||
- otherwise unexpected stuff can be imported
|
||||
- or smth like /nixos-modules/$moduleName/default.nix
|
||||
- import all the default.nix es, and not more
|
||||
- secret management
|
||||
- age is good, secrets should be completely host scoped tho
|
||||
- todo look into howeverthefuck the whole systemd secrets thing works
|
||||
- maybe build a out of band encryption scheme out of that (laptop has all secrets age encrypted with user host key, ssh to deploy all secrets with tpm)
|
||||
- systemd-creds + a deployment mechanism would be cool af
|
||||
- language to write that in: nushell?
|
||||
- general folder structure
|
||||
- /hosts/$host/configuration.nix
|
||||
- /hosts/$host/default.nix for settings (system, imports)
|
||||
- /nixos-modules/
|
||||
- /hm-modules/
|
||||
- /apps
|
||||
- /lib
|
||||
- what should be a module
|
||||
- configuration for an application
|
||||
- secrets should be parameters
|
||||
- reverse proxy conf sould be included
|
||||
- podman services are allowed
|
||||
- there should be a framework for podman services (creating networks and such)
|
||||
- quadlet nix wrapper
|
||||
- https://github.com/SEIAROTg/quadlet-nix
|
||||
- a tagging system maybe
|
||||
- eg: tag a confugration with "laptop" and "gaming" so it has steam and powerprofilesctl installed
|
||||
- tooling for remote building
|
||||
- secureboot is a must
|
||||
- systemd init too
|
||||
- CI
|
||||
- auto builds for all systems
|
||||
- auto issues for software updates
|
||||
- both nix and podman
|
||||
- nixpkgs fmt rfc style
|
||||
Loading…
Add table
Add a link
Reference in a new issue