Currently custom package definitions are stored in /packages. This is mainly used to work around temporarily broken packages in nixpkgs (maintain own version, until fix hits unstable) or to add own packages that are not worth submitting to nixpkgs itself e.g. personal scripts.

It would be nicer to add all these to an overlay so they can be uniformly used.
A example for a flake-based overlay and it's usage can be seen here

Currently colors are hard-coded

https://github.com/krebs/krops#buildtarget-optional

Backups

General

• empty backup module
• paths specified in other modules

Locations

• birne
• contabo

Data

By modules

default-desktop

• /home
• /root

Exclude:

• /

default-server

• TODO

filebrowser

• /var/lib/filebrowser

fonts

• ~/.local/share/fonts

hedgedoc

• /var/lib/hedgedoc/uploads
• /var/lib/hedgedoc/db.sqlite

home-assistant

• TODO

http2irc

• /var/lib/http2irc

mattermost

• /var/lib/mattermost
• postgres

miniflux

• postgres

minio

• /mnt/data/minio/config
• /mnt/data/minio/data

monitoring

• /var/lib/loki
• /var/lib/grafana
• /var/lib/prometheus2

nextcloud

• TODO

ntfy-sh

• /var/lib/ntfy-sh

thelounge

• /var/lib/thelounge

home-manager/zk

• ~/Notes

By hosts

ahorn
birne
bob
kartoffel
kfbox
porree

module comments: use systemd StateDirectory and Dynamic user to get rid of init and explicit users. In nixpkgs, you'd want an option to open the firewall instead of just doing it

@ryantm on IRC

Pass vars.nix as an option?

https://gitlab.com/rycee/nur-expressions/-/blob/6388aab2d86f518f85b267d594b00d99caa6e666/hm-modules/theme-base16/gtk.nix

nix-community/home-manager#1683

LSP config: zk-org/zk#21 (comment)

Backup is not set up yet for some hosts

• kartoffel
• ahorn
• kfbox
• mega
• porree
• birne

Other TODO's:

• Make paths to backup configurable
• Extract monitor script package to /packages
• Evaluate whether prometheus + telegraph would be a better option
  See:
• https://github.com/Mic92/dotfiles/blob/master/nixos/modules/telegraf.nix
• https://github.com/Mic92/dotfiles/blob/master/nixos/eva/modules/prometheus/default.nix
• https://github.com/Mic92/dotfiles/blob/master/nixos/turingmachine/modules/backup.nix

https://github.com/mickael-menu/zk

Normal build from source fails to build mattn/go-sqlite3. Not sure how to fix that yet

The envfile previously used by the dockercontainer should work just fine.

The plugins in shell.nix are currently loaded from GitHub using a pinned rev. This has the downside, that they are not updated when updating the flake inputs. It should be possible to use flake inputs to get these and then just include them from there.

The firefox extensinos where installed from NUR and are currently commented out, as nur is not yet working.

Wireguard's should be separated in a module.

• Consider separate config for server or option to select
• Add an option to set the public key (and maybe ip?)
• Consider a central registry of variables like vars.nix to manage wireguard clients (ip and key)

Host birne is running on arch, migrate to nixos

Home manager is currently a separate repository. It should be integrated with flakes

• add repository as flake
• create separate home configuration for servers (without the GUI stuff)
• deploy where needed on current machines
• update readme

from stackoverflow

If you are only looking to point to a different location for you identity file, the you can modify your ~/.ssh/config file with the following entry:

IdentityFile ~/.foo/identity

User root might need git correctly configured:

  git config --global user.email "[email protected]"
  git config --global user.name "Your Name"

Host mega is running on ubuntu server, consider migration to nixos

Host kfbox is running on arch, migrate to nixos

The Creating new Hosts section was written before the use of flakes. New instructions should be written.
The old documentation for reference:

# Creating new Hosts. [TODO, this section is outdated!]

The following describes how to create new hosts to be included in this project
structure. It assumes a working NixOS installation on a new machine. The
following steps further assume you are logged in as root (e.g. via SSH)

## Preliminary Checks

- Check that hostname is set
- Check machine is connected to the internet
- Check timezone is correct
- Check nix-channel is correct

## Create Secrets

The following will create a new set of keys to be added to the `/secrets`
directory of this host.

```bash
# Create SSH keys
ssh-keygen -t ed25519 -f /secrets/$(hostname)/ssh/id_ed25519

# Create wireguard keys
# Use if `wireguard` is not installed: nix-shell -p pkgs.wireguard
wg genkey > /secrets/$(hostname)/wireguard/privatekey
wg pubkey < /secrets/$(hostname)/wireguard/privatekey > /secrets/$(hostname)/wireguard/publickey

# Create borg passphrase
# Use if `pwgen` is not installed: nix-shell -p pkgs.pwgen
pwgen 20 > /secrets/$(hostname)/borg/repo-passphrase

TODO add to pass

commented out for now.

Continuation of #9
Add alerts and charts in grafna for all hosts