mirror of
https://github.com/Swarsel/.dotfiles.git
synced 2025-12-06 00:57:22 +01:00
docs: outline manual setup steps (WIP)
This commit is contained in:
Leon Schwarzäugl
parent
8813fb5117
commit
f5ff5d5066
GPG key ID:
26A54C31F2A4FD84
3 changed files with 992 additions and 802 deletions
|
|
@ -297,6 +297,18 @@ Here I give a brief overview over the hostmachines that I am using. This is held
|
|||
|🔗 **Link Shortener** | [Shlink](https://github.com/Swarsel/.dotfiles/tree/main/modules/nixos/server/shlink.nix) |
|
||||
#+end_src
|
||||
|
||||
** Manual steps when setting up a new machine
|
||||
|
||||
#+begin_src markdown :noweb yes :exports both :results html
|
||||
|
||||
<<setup>>
|
||||
|
||||
If the new machine is a work machine, these steps are additionally needed:
|
||||
|
||||
<<worksetup>>
|
||||
|
||||
#+end_src
|
||||
|
||||
* flake.nix
|
||||
:PROPERTIES:
|
||||
:CUSTOM_ID: h:c7588c0d-2528-485d-b2df-04d6336428d7
|
||||
|
|
@ -10580,6 +10592,14 @@ This holds configuration that is specific to framework laptops.
|
|||
|
||||
Options that I need specifically at work. There are more options at [[#h:f0b2ea93-94c8-48d8-8d47-6fe58f58e0e6][Work]] (home-manager side).
|
||||
|
||||
When setting up a new machine:
|
||||
|
||||
#+begin_src markdown :noweb-ref worksetup :exports both :results html
|
||||
- setup the work VPN:
|
||||
- using the laptop certificate `.pem` as User cert and private key (CA cert: none)
|
||||
- vpn gateway is found in `nixosConfig.repo.secrets.local.work.vpnGateway`
|
||||
#+end_src
|
||||
|
||||
#+begin_src nix-ts :tangle modules/nixos/optional/work.nix
|
||||
{ self, lib, pkgs, config, configName, ... }:
|
||||
let
|
||||
|
|
@ -14427,7 +14447,18 @@ Currently, I am too lazy to explain every option here, but most of it is very se
|
|||
:CUSTOM_ID: h:7d384e3b-1be7-4644-b304-ada4af0b692b
|
||||
:END:
|
||||
|
||||
Settinfs that are needed for the gpg-agent. Also we are enabling emacs support for unlocking my Yubikey here.
|
||||
Settings that are needed for the gpg-agent. Also we are enabling emacs support for unlocking my Yubikey here.
|
||||
|
||||
When setting up a new machine:
|
||||
|
||||
#+begin_src markdown :noweb-ref setup :exports both :results html
|
||||
- setup gpgsm for signing of mails using S/MIME:
|
||||
- `gpgsm --import ~/Certificates/<certname>.p12`
|
||||
- `gpgsm --import ~/Certificates/harica-root.pem`
|
||||
- `gpgsm --import ~/Certificates/harica-intermediate.pem`
|
||||
- `gpgsm --list-keys --with-validation "HARICA Client RSA Root CA 2021"`
|
||||
- trust the certificate and set passphrase
|
||||
#+end_src
|
||||
|
||||
#+begin_src nix-ts :tangle modules/home/common/gpg-agent.nix
|
||||
{ self, lib, config, pkgs, ... }:
|
||||
|
|
@ -15216,13 +15247,21 @@ The rest of the settings is at [[#h:fb3f3e01-7df4-4b06-9e91-aa9cac61a431][gaming
|
|||
|
||||
#+end_src
|
||||
|
||||
**** Work
|
||||
**** Work (pizauth)
|
||||
:PROPERTIES:
|
||||
:CUSTOM_ID: h:f0b2ea93-94c8-48d8-8d47-6fe58f58e0e6
|
||||
:END:
|
||||
|
||||
The rest of the settings is at [[#h:bbf2ecb6-c8ff-4462-b5d5-d45b28604ddf][work]]. Here, I am setting up the different firefox profiles that I need for the SSO sites that I need to access at work as well as a few ssh shorthands.
|
||||
|
||||
When setting up a new machine:
|
||||
|
||||
#+begin_src markdown :noweb-ref setup :exports both :results html
|
||||
- setup pizauth for microsoft mail sync (account names are possibly `uni` and `work`):
|
||||
- `pizauth auth <account name, e.g. 'work'>`
|
||||
- `pizauth dump > ~/.pizauth.state`
|
||||
#+end_src
|
||||
|
||||
#+begin_src nix-ts :tangle modules/home/optional/work.nix :noweb yes
|
||||
{ self, config, pkgs, lib, vars, nixosConfig ? config, ... }:
|
||||
let
|
||||
|
|
@ -22120,6 +22159,14 @@ This sets up the =dashboard=, which is really quite useless. But, it looks cool
|
|||
:END:
|
||||
|
||||
This sections is no longer used really. An introduction can be found in [[#h:bcc3ebbe-df8a-46bd-b42d-73aad6fc66e5][Structure of this file]] under the historical note. The little noweb-ref blocks that I still use are found in [[#h:48e0cb2c-e412-4ae3-a244-80a8c09dbb02][Hosts]] and [[#h:3bb92528-c61c-4b8d-8214-bf2a40baaa32][Services]].
|
||||
** General steps when setting up a new machine
|
||||
|
||||
These general steps are needed when setting up a new machine and do not fit into another block well:
|
||||
|
||||
#+begin_src markdown :noweb-ref setup :exports both :results html
|
||||
- setup yubikey (automatic yubikey enrollment is not yet supported by `disko`):
|
||||
- `systemd-cryptenroll --fido2-device=auto /dev/<device, e.g. 'nvme0n1p2'>`
|
||||
#+end_src
|
||||
|
||||
* Appendix B: Supplementary Files
|
||||
:PROPERTIES:
|
||||
|
|
|
|||
|
|
@ -1,5 +1,5 @@
|
|||
{
|
||||
"data": "ENC[AES256_GCM,data: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,iv:7YztaPs7GSC4AdIF36G3qb8lQAhUwkaD613z8LcUW7A=,tag:ULku+TZreQNt5/6ZyLtWog==,type:str]",
|
||||
"data": "ENC[AES256_GCM,data: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,iv:9SAQXPwrhy5yjkNxn1lITD77MjqdrYOSlFpUBE8a/fY=,tag:tYApnwq2auUk+/N9alPX3w==,type:str]",
|
||||
"sops": {
|
||||
"age": [
|
||||
{
|
||||
|
|
@ -11,8 +11,8 @@
|
|||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0Z2tONmQxTUhZUW12Z2Jm\nUnoxSnpYcnZDNGNzSko1ckl2RDh3NG1VS2dFCmIwUXhmSk1OUk02S0JPVDR5UWJ4\na0gwWlg0V005ZWxYa29PZ0laS2VqM0kKLS0tIHN5SU9pQ090eHljeXJGWm5hRFQ4\nZ001Nzkyb29RYkNUMDNDNlo4YnVQeTQK34bNIBgxId2+DHKQNVV3Iro3KGkE03Sp\niB1+dADT6nRvGvoyPqnLq/NYfw7eQ6XqYt55zkdCta8v6L1UNUkw8g==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
}
|
||||
],
|
||||
"lastmodified": "2025-10-21T17:51:36Z",
|
||||
"mac": "ENC[AES256_GCM,data:nogwxr8xZVIPv1vnZyBZuGu5WHO7ygxfeoF+Nrmdqin4YrZ8nK3f8oVNAsEBfNvUyr2mkRAbAT3tgcP+u/w+RJgH9ERHWljnw5xy8iGLkTF36B83+lCL7cp3wIzllOQyRUYEHegnQWA79WoWWHD3u4sZmlinByJRUMscRV9uTww=,iv:rZd+3+WlcOVtqgJGhoBkJGm/HF/01wuopeFlEwvcupI=,tag:P7fIdk4ithHyOAfqui6xNw==,type:str]",
|
||||
"lastmodified": "2025-10-21T19:32:24Z",
|
||||
"mac": "ENC[AES256_GCM,data:wM862FQH/qX/abuD+krJOazli9Ci5GrpLtdcnzFgKCeNdjA2cfZ8M3DyzsBwMXjp6HxBHLyO7QXGcQkx3kIKGnRhEBuQzVOtrZhqcDi2Ho8iBV8Dh4xkhcpBYufw7xP8hGWg6ZVZ4JyM3P4NfAdxbfWTdc1VMStAafJ2SZ3pAYI=,iv:tDAKNe8LV40hRCqKzN6j6B71IV81SnrBgerxGPzU4Zk=,tag:7ZsST8pl9TjMog0dNKcUcA==,type:str]",
|
||||
"pgp": [
|
||||
{
|
||||
"created_at": "2025-06-14T22:31:01Z",
|
||||
|
|
|
|||
307
index.html
307
index.html
|
|
@ -3,7 +3,7 @@
|
|||
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
|
||||
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
|
||||
<head>
|
||||
<!-- 2025-10-21 Di 13:09 -->
|
||||
<!-- 2025-10-21 Di 21:37 -->
|
||||
<meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1" />
|
||||
<title>SwarselSystems: NixOS + Emacs Configurationo</title>
|
||||
|
|
@ -209,6 +209,7 @@
|
|||
<li><a href="#h:48e0cb2c-e412-4ae3-a244-80a8c09dbb02">1.4. Hosts</a></li>
|
||||
<li><a href="#h:3bb92528-c61c-4b8d-8214-bf2a40baaa32">1.5. Programs</a></li>
|
||||
<li><a href="#h:191e82b6-6ae5-4ec8-ae6d-dc683ce325d9">1.6. Services</a></li>
|
||||
<li><a href="#org1e210f0">1.7. Manual steps when setting up a new machine</a></li>
|
||||
</ul>
|
||||
</li>
|
||||
<li><a href="#h:c7588c0d-2528-485d-b2df-04d6336428d7">2. flake.nix</a>
|
||||
|
|
@ -443,8 +444,8 @@
|
|||
<li><a href="#h:15b581ab-09fe-4f84-af26-2f1fbf7d726b">3.2.5.8. Hibernation</a></li>
|
||||
<li><a href="#h:86fb3236-9e18-43f0-8a08-3a2acd61cc98">3.2.5.9. BTRFS</a></li>
|
||||
<li><a href="#h:bbf2ecb6-c8ff-4462-b5d5-d45b28604ddf">3.2.5.10. work</a></li>
|
||||
<li><a href="#orgcb2fcb7">3.2.5.11. microvm-host</a></li>
|
||||
<li><a href="#orgcf7e090">3.2.5.12. microvm-guest</a></li>
|
||||
<li><a href="#org3b29611">3.2.5.11. microvm-host</a></li>
|
||||
<li><a href="#org5500ccc">3.2.5.12. microvm-guest</a></li>
|
||||
</ul>
|
||||
</li>
|
||||
</ul>
|
||||
|
|
@ -472,7 +473,7 @@
|
|||
<li><a href="#h:4486b02f-4fb8-432b-bfa2-2e786206341d">3.3.1.12. Sourcing environment variables</a></li>
|
||||
<li><a href="#h:f0e0b580-2e1c-4ca6-a983-f05d3ebbbcde">3.3.1.13. General Programs: bottom, imv, less, lesspipe, sioyek, bat, carapace, wlogout, swayr, yt-dlp, mpv, jq, nix-index, ripgrep, pandoc, fzf, zoxide, timidity</a></li>
|
||||
<li><a href="#h:64dbbb9e-8097-4c1b-813c-8c10cf9b9748">3.3.1.14. nix-index</a></li>
|
||||
<li><a href="#org0bc7fbc">3.3.1.15. nix-your-shell</a></li>
|
||||
<li><a href="#orgef57e77">3.3.1.15. nix-your-shell</a></li>
|
||||
<li><a href="#h:ac0e5e62-0dbf-4782-9a96-9e558eae86ae">3.3.1.16. password-store</a></li>
|
||||
<li><a href="#h:1ab84307-b3fb-4c32-9def-4b89a53a8547">3.3.1.17. direnv</a></li>
|
||||
<li><a href="#h:1bd6b0c7-f201-43e2-9624-6c50de00a1f6">3.3.1.18. eza</a></li>
|
||||
|
|
@ -495,12 +496,12 @@
|
|||
<li><a href="#h:99d05729-df35-4958-9940-3319d6a41359">3.3.1.31.3. Mako</a></li>
|
||||
<li><a href="#h:388e71be-f00a-4d45-ade1-218ce942057d">3.3.1.31.4. SwayOSD</a></li>
|
||||
<li><a href="#h:1598c90b-f195-41a0-9132-94612edf3586">3.3.1.31.5. yubikey-touch-detector</a></li>
|
||||
<li><a href="#org2568de8">3.3.1.31.6. blueman-applet</a></li>
|
||||
<li><a href="#org84c1201">3.3.1.31.7. network-manager-applet</a></li>
|
||||
<li><a href="#org43f6e21">3.3.1.31.8. obsidian service for tray</a></li>
|
||||
<li><a href="#orgaa41ee3">3.3.1.31.9. anki service for tray</a></li>
|
||||
<li><a href="#orgcb4f253">3.3.1.31.10. element service for tray</a></li>
|
||||
<li><a href="#orgb766ab8">3.3.1.31.11. vesktop service for tray</a></li>
|
||||
<li><a href="#org44c9877">3.3.1.31.6. blueman-applet</a></li>
|
||||
<li><a href="#org163a2af">3.3.1.31.7. network-manager-applet</a></li>
|
||||
<li><a href="#orgd6b832c">3.3.1.31.8. obsidian service for tray</a></li>
|
||||
<li><a href="#org7b3c601">3.3.1.31.9. anki service for tray</a></li>
|
||||
<li><a href="#orgaea42f4">3.3.1.31.10. element service for tray</a></li>
|
||||
<li><a href="#org030b0b2">3.3.1.31.11. vesktop service for tray</a></li>
|
||||
</ul>
|
||||
</li>
|
||||
<li><a href="#h:02df9dfc-d1af-4a37-a7a0-d8da0af96a20">3.3.1.32. Sway</a></li>
|
||||
|
|
@ -509,17 +510,17 @@
|
|||
<li><a href="#h:7d384e3b-1be7-4644-b304-ada4af0b692b">3.3.1.35. gpg-agent</a></li>
|
||||
<li><a href="#h:74e236be-a977-4d38-b8c5-0b9feef8af91">3.3.1.36. gammastep</a></li>
|
||||
<li><a href="#h:d1fb3075-ad52-4c1b-ba45-5ddbd0d3b708">3.3.1.37. Spicetify</a></li>
|
||||
<li><a href="#org3f19616">3.3.1.38. Obsidian</a></li>
|
||||
<li><a href="#orgd0e6499">3.3.1.39. Anki</a></li>
|
||||
<li><a href="#orgb6ac1d9">3.3.1.40. Element-desktop</a></li>
|
||||
<li><a href="#org68fbf73">3.3.1.41. Hexchat</a></li>
|
||||
<li><a href="#orgea285a9">3.3.1.42. obs-studio</a></li>
|
||||
<li><a href="#orgd003fee">3.3.1.43. spotify-player</a></li>
|
||||
<li><a href="#org8616bfa">3.3.1.44. vesktop</a></li>
|
||||
<li><a href="#orgab3d85e">3.3.1.45. batsignal</a></li>
|
||||
<li><a href="#orgde9dc92">3.3.1.46. autotiling</a></li>
|
||||
<li><a href="#orge7185ca">3.3.1.47. swayidle</a></li>
|
||||
<li><a href="#org4e801e4">3.3.1.48. swaylock</a></li>
|
||||
<li><a href="#org2444730">3.3.1.38. Obsidian</a></li>
|
||||
<li><a href="#org7ee88af">3.3.1.39. Anki</a></li>
|
||||
<li><a href="#org4137b9c">3.3.1.40. Element-desktop</a></li>
|
||||
<li><a href="#orge83b29c">3.3.1.41. Hexchat</a></li>
|
||||
<li><a href="#orgc6e077d">3.3.1.42. obs-studio</a></li>
|
||||
<li><a href="#org61af274">3.3.1.43. spotify-player</a></li>
|
||||
<li><a href="#orga884d29">3.3.1.44. vesktop</a></li>
|
||||
<li><a href="#org86c0973">3.3.1.45. batsignal</a></li>
|
||||
<li><a href="#org503cbe5">3.3.1.46. autotiling</a></li>
|
||||
<li><a href="#orgf1d300b">3.3.1.47. swayidle</a></li>
|
||||
<li><a href="#org3b0dfc9">3.3.1.48. swaylock</a></li>
|
||||
</ul>
|
||||
</li>
|
||||
<li><a href="#h:b1a00339-6e9b-4ae4-b5dc-6fd5669a2ddb">3.3.2. Server</a>
|
||||
|
|
@ -536,7 +537,7 @@
|
|||
<li><a href="#h:be623200-557e-4bb7-bb11-1ec5d76c6b8b">3.3.4. Optional</a>
|
||||
<ul>
|
||||
<li><a href="#h:84fd7029-ecb6-4131-9333-289982f24ffa">3.3.4.1. Gaming</a></li>
|
||||
<li><a href="#h:f0b2ea93-94c8-48d8-8d47-6fe58f58e0e6">3.3.4.2. Work</a></li>
|
||||
<li><a href="#h:f0b2ea93-94c8-48d8-8d47-6fe58f58e0e6">3.3.4.2. Work (pizauth)</a></li>
|
||||
<li><a href="#h:52b41e73-46f3-4c2c-af64-eafb51e3b6b6">3.3.4.3. Uni</a></li>
|
||||
<li><a href="#h:8a7b1c26-3448-42d3-932a-5d05d54b5490">3.3.4.4. Framework</a></li>
|
||||
</ul>
|
||||
|
|
@ -584,8 +585,8 @@
|
|||
<li><a href="#h:c3362d4e-d3a8-43e8-9ef7-272b6de0572e">3.5.31. swarsel-build</a></li>
|
||||
<li><a href="#h:95ebfd13-1f6b-427f-950d-e30c1ed6f9fa">3.5.32. swarsel-instantiate</a></li>
|
||||
<li><a href="#h:02842543-caca-4d4c-a4d2-7ac749b5c136">3.5.33. sshrm</a></li>
|
||||
<li><a href="#org6a36b50">3.5.34. endme</a></li>
|
||||
<li><a href="#orgb3faf9e">3.5.35. git-replace</a></li>
|
||||
<li><a href="#orgc62e7de">3.5.34. endme</a></li>
|
||||
<li><a href="#orge3590e8">3.5.35. git-replace</a></li>
|
||||
</ul>
|
||||
</li>
|
||||
<li><a href="#h:f0f1c961-3e7a-47b8-99ab-1654bb45dffc">3.6. Profiles</a>
|
||||
|
|
@ -594,7 +595,7 @@
|
|||
<ul>
|
||||
<li><a href="#h:32d654de-8db2-403a-9a27-4c46d7b9172d">3.6.1.1. Personal</a></li>
|
||||
<li><a href="#h:b926f0c8-7968-4079-924c-a5d0ae4d3a45">3.6.1.2. Minimal</a></li>
|
||||
<li><a href="#orgefd2161">3.6.1.3. Optionals</a></li>
|
||||
<li><a href="#org30fc974">3.6.1.3. Optionals</a></li>
|
||||
<li><a href="#h:b79fbb59-9cf2-48eb-b469-2589223dda95">3.6.1.4. Chaostheatre</a></li>
|
||||
<li><a href="#h:cb3631a8-9c1b-42f2-ab01-502c7b4c273d">3.6.1.5. Work</a></li>
|
||||
<li><a href="#h:87a83b10-3c2f-407c-89aa-922ad77748a4">3.6.1.6. Uni</a></li>
|
||||
|
|
@ -775,6 +776,7 @@
|
|||
<ul>
|
||||
<li><a href="#h:b92a18cf-eec3-4605-a8c2-37133ade3574">4.4.39.1. mu4e</a></li>
|
||||
<li><a href="#h:43209eeb-5d46-472e-b7c2-58a3fb465199">4.4.39.2. mu4e-alert</a></li>
|
||||
<li><a href="#org234e39c">4.4.39.3. Work: Signing Mails (S/MIME, smime)</a></li>
|
||||
</ul>
|
||||
</li>
|
||||
<li><a href="#h:c760f04e-622f-4b3e-8916-53ca8cce6edc">4.4.40. Calendar</a></li>
|
||||
|
|
@ -787,7 +789,11 @@
|
|||
</li>
|
||||
</ul>
|
||||
</li>
|
||||
<li><a href="#h:dae0c5bb-edb7-4fe4-ae31-9f8f064cc53c">5. Appendix A: Noweb-Ref blocks</a></li>
|
||||
<li><a href="#h:dae0c5bb-edb7-4fe4-ae31-9f8f064cc53c">5. Appendix A: Noweb-Ref blocks</a>
|
||||
<ul>
|
||||
<li><a href="#orge8ed16b">5.1. General steps when setting up a new machine</a></li>
|
||||
</ul>
|
||||
</li>
|
||||
<li><a href="#h:8fc9f66a-7412-4091-8dee-a06f897baf67">6. Appendix B: Supplementary Files</a>
|
||||
<ul>
|
||||
<li><a href="#h:c1e53aed-fb47-4aff-930c-dc52f3c5dcb8">6.1. Server Emacs config</a></li>
|
||||
|
|
@ -837,7 +843,7 @@
|
|||
</div>
|
||||
</div>
|
||||
<p>
|
||||
<b>This file has 96128 words spanning 24842 lines and was last revised on 2025-10-21 13:09:36 +0200.</b>
|
||||
<b>This file has 96609 words spanning 24942 lines and was last revised on 2025-10-21 21:36:59 +0200.</b>
|
||||
</p>
|
||||
|
||||
<p>
|
||||
|
|
@ -906,7 +912,7 @@ This section defines my Emacs configuration. For a while, I considered to use ry
|
|||
</p>
|
||||
|
||||
<p>
|
||||
My emacs is built using the emacs-overlay nix flake, which builds a bleeding edge emacs on wayland (pgtk) with utilities like treesitter support. By executing the below source block, the current build setting can be updated at any time, and you can see my most up-to-date build options (last updated: 2025-10-21 13:09:36 +0200)
|
||||
My emacs is built using the emacs-overlay nix flake, which builds a bleeding edge emacs on wayland (pgtk) with utilities like treesitter support. By executing the below source block, the current build setting can be updated at any time, and you can see my most up-to-date build options (last updated: 2025-10-21 21:36:59 +0200)
|
||||
</p></li>
|
||||
</ul>
|
||||
|
||||
|
|
@ -1205,6 +1211,33 @@ Here I give a brief overview over the hostmachines that I am using. This is held
|
|||
|✂️ **Paste Tool** | [Microbin](https://github.com/Swarsel/.dotfiles/tree/main/modules/nixos/server/microbin.nix) |
|
||||
|📸 **Image Sharing** | [Slink](https://github.com/Swarsel/.dotfiles/tree/main/modules/nixos/server/slink.nix) |
|
||||
|🔗 **Link Shortener** | [Shlink](https://github.com/Swarsel/.dotfiles/tree/main/modules/nixos/server/shlink.nix) |
|
||||
</pre>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div id="outline-container-org1e210f0" class="outline-3">
|
||||
<h3 id="org1e210f0"><span class="section-number-3">1.7.</span> Manual steps when setting up a new machine</h3>
|
||||
<div class="outline-text-3" id="text-1-7">
|
||||
<div class="org-src-container">
|
||||
<pre class="src src-markdown">
|
||||
- setup gpgsm for signing of mails using S/MIME:
|
||||
- `gpgsm --import ~/Certificates/<certname>.p12`
|
||||
- `gpgsm --import ~/Certificates/harica-root.pem`
|
||||
- `gpgsm --import ~/Certificates/harica-intermediate.pem`
|
||||
- `gpgsm --list-keys --with-validation "HARICA Client RSA Root CA 2021"`
|
||||
- trust the certificate and set passphrase
|
||||
- setup pizauth for microsoft mail sync (account names are possibly `uni` and `work`):
|
||||
- `pizauth auth <account name, e.g. 'work'>`
|
||||
- `pizauth dump > ~/.pizauth.state`
|
||||
- setup yubikey (automatic yubikey enrollment is not yet supported by `disko`):
|
||||
- `systemd-cryptenroll --fido2-device=auto /dev/<device, e.g. 'nvme0n1p2'>`
|
||||
|
||||
If the new machine is a work machine, these steps are additionally needed:
|
||||
|
||||
- setup the work VPN:
|
||||
- using the laptop certificate `.pem` as User cert and private key (CA cert: none)
|
||||
- vpn gateway is found in `nixosConfig.repo.secrets.local.work.vpnGateway`
|
||||
|
||||
</pre>
|
||||
</div>
|
||||
</div>
|
||||
|
|
@ -11895,6 +11928,17 @@ This holds configuration that is specific to framework laptops.
|
|||
Options that I need specifically at work. There are more options at <a href="#h:f0b2ea93-94c8-48d8-8d47-6fe58f58e0e6">Work</a> (home-manager side).
|
||||
</p>
|
||||
|
||||
<p>
|
||||
When setting up a new machine:
|
||||
</p>
|
||||
|
||||
<div class="org-src-container">
|
||||
<pre class="src src-markdown">- setup the work VPN:
|
||||
- using the laptop certificate `.pem` as User cert and private key (CA cert: none)
|
||||
- vpn gateway is found in `nixosConfig.repo.secrets.local.work.vpnGateway`
|
||||
</pre>
|
||||
</div>
|
||||
|
||||
<div class="org-src-container">
|
||||
<pre class="src src-nix-ts">{ self, lib, pkgs, config, configName, ... }:
|
||||
let
|
||||
|
|
@ -12134,8 +12178,8 @@ in
|
|||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div id="outline-container-orgcb2fcb7" class="outline-5">
|
||||
<h5 id="orgcb2fcb7"><span class="section-number-5">3.2.5.11.</span> microvm-host</h5>
|
||||
<div id="outline-container-org3b29611" class="outline-5">
|
||||
<h5 id="org3b29611"><span class="section-number-5">3.2.5.11.</span> microvm-host</h5>
|
||||
<div class="outline-text-5" id="text-3-2-5-11">
|
||||
<p>
|
||||
Some standard options that should be set for every microvm host.
|
||||
|
|
@ -12161,8 +12205,8 @@ Some standard options that should be set for every microvm host.
|
|||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div id="outline-container-orgcf7e090" class="outline-5">
|
||||
<h5 id="orgcf7e090"><span class="section-number-5">3.2.5.12.</span> microvm-guest</h5>
|
||||
<div id="outline-container-org5500ccc" class="outline-5">
|
||||
<h5 id="org5500ccc"><span class="section-number-5">3.2.5.12.</span> microvm-guest</h5>
|
||||
<div class="outline-text-5" id="text-3-2-5-12">
|
||||
<p>
|
||||
Some standard options that should be set vor every microvm guest. We set the default
|
||||
|
|
@ -13089,7 +13133,7 @@ in
|
|||
SWARSEL_CAL3 = source3;
|
||||
SWARSEL_CAL3NAME = source3-name;
|
||||
SWARSEL_FULLNAME = fullName;
|
||||
SWARSEL_MAIL_ALL = allMailAddresses;
|
||||
SWARSEL_MAIL_ALL = lib.mkDefault allMailAddresses;
|
||||
GITHUB_NOTIFICATION_TOKEN_PATH = nixosConfig.sops.secrets.github-notifications-token.path;
|
||||
OPENROUTER_API_KEY = openrouterApi;
|
||||
};
|
||||
|
|
@ -13232,8 +13276,8 @@ nix-index provides a way to find out which packages are provided by which deriva
|
|||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div id="outline-container-org0bc7fbc" class="outline-5">
|
||||
<h5 id="org0bc7fbc"><span class="section-number-5">3.3.1.15.</span> nix-your-shell</h5>
|
||||
<div id="outline-container-orgef57e77" class="outline-5">
|
||||
<h5 id="orgef57e77"><span class="section-number-5">3.3.1.15.</span> nix-your-shell</h5>
|
||||
<div class="outline-text-5" id="text-3-3-1-15">
|
||||
<div class="org-src-container">
|
||||
<pre class="src src-nix-ts">{ lib, config, ... }:
|
||||
|
|
@ -14946,8 +14990,8 @@ The `extraConfig` section here CANNOT be reindented. This has something to do wi
|
|||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div id="outline-container-org2568de8" class="outline-6">
|
||||
<h6 id="org2568de8"><span class="section-number-6">3.3.1.31.6.</span> blueman-applet</h6>
|
||||
<div id="outline-container-org44c9877" class="outline-6">
|
||||
<h6 id="org44c9877"><span class="section-number-6">3.3.1.31.6.</span> blueman-applet</h6>
|
||||
<div class="outline-text-6" id="text-3-3-1-31-6">
|
||||
<div class="org-src-container">
|
||||
<pre class="src src-nix-ts">{ lib, config, ... }:
|
||||
|
|
@ -14961,8 +15005,8 @@ The `extraConfig` section here CANNOT be reindented. This has something to do wi
|
|||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div id="outline-container-org84c1201" class="outline-6">
|
||||
<h6 id="org84c1201"><span class="section-number-6">3.3.1.31.7.</span> network-manager-applet</h6>
|
||||
<div id="outline-container-org163a2af" class="outline-6">
|
||||
<h6 id="org163a2af"><span class="section-number-6">3.3.1.31.7.</span> network-manager-applet</h6>
|
||||
<div class="outline-text-6" id="text-3-3-1-31-7">
|
||||
<div class="org-src-container">
|
||||
<pre class="src src-nix-ts">{ lib, config, ... }:
|
||||
|
|
@ -14977,8 +15021,8 @@ The `extraConfig` section here CANNOT be reindented. This has something to do wi
|
|||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div id="outline-container-org43f6e21" class="outline-6">
|
||||
<h6 id="org43f6e21"><span class="section-number-6">3.3.1.31.8.</span> obsidian service for tray</h6>
|
||||
<div id="outline-container-orgd6b832c" class="outline-6">
|
||||
<h6 id="orgd6b832c"><span class="section-number-6">3.3.1.31.8.</span> obsidian service for tray</h6>
|
||||
<div class="outline-text-6" id="text-3-3-1-31-8">
|
||||
<div class="org-src-container">
|
||||
<pre class="src src-nix-ts">{ lib, config, ... }:
|
||||
|
|
@ -15012,9 +15056,13 @@ The `extraConfig` section here CANNOT be reindented. This has something to do wi
|
|||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div id="outline-container-orgaa41ee3" class="outline-6">
|
||||
<h6 id="orgaa41ee3"><span class="section-number-6">3.3.1.31.9.</span> anki service for tray</h6>
|
||||
<div id="outline-container-org7b3c601" class="outline-6">
|
||||
<h6 id="org7b3c601"><span class="section-number-6">3.3.1.31.9.</span> anki service for tray</h6>
|
||||
<div class="outline-text-6" id="text-3-3-1-31-9">
|
||||
<p>
|
||||
Sets up a systemd user service for anki that does not stall the shutdown process. Note that the outcommented <code>ExecStart</code> does not work because the home-manager anki package builds a separate anki package that - I think - cannot be referenced as no such expression exists in the module.
|
||||
</p>
|
||||
|
||||
<div class="org-src-container">
|
||||
<pre class="src src-nix-ts">{ lib, config, ... }:
|
||||
{
|
||||
|
|
@ -15038,10 +15086,15 @@ The `extraConfig` section here CANNOT be reindented. This has something to do wi
|
|||
|
||||
Service = {
|
||||
# ExecStart = "${lib.getExe config.programs.anki.package}";
|
||||
ExecStart = "/etc/profiles/per-user/swarsel/bin/anki";
|
||||
Type = "simple";
|
||||
ExecStart = "/etc/profiles/per-user/${config.swarselsystems.mainUser}/bin/anki";
|
||||
Environment = [
|
||||
"QT_QPA_PLATFORM=xcb"
|
||||
];
|
||||
TimeoutStopSec = "2s";
|
||||
KillMode = "mixed";
|
||||
KillSignal = "SIGTERM";
|
||||
SendSIGKILL = "yes";
|
||||
};
|
||||
};
|
||||
|
||||
|
|
@ -15051,8 +15104,8 @@ The `extraConfig` section here CANNOT be reindented. This has something to do wi
|
|||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div id="outline-container-orgcb4f253" class="outline-6">
|
||||
<h6 id="orgcb4f253"><span class="section-number-6">3.3.1.31.10.</span> element service for tray</h6>
|
||||
<div id="outline-container-orgaea42f4" class="outline-6">
|
||||
<h6 id="orgaea42f4"><span class="section-number-6">3.3.1.31.10.</span> element service for tray</h6>
|
||||
<div class="outline-text-6" id="text-3-3-1-31-10">
|
||||
<div class="org-src-container">
|
||||
<pre class="src src-nix-ts">{ lib, config, pkgs, ... }:
|
||||
|
|
@ -15086,8 +15139,8 @@ The `extraConfig` section here CANNOT be reindented. This has something to do wi
|
|||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div id="outline-container-orgb766ab8" class="outline-6">
|
||||
<h6 id="orgb766ab8"><span class="section-number-6">3.3.1.31.11.</span> vesktop service for tray</h6>
|
||||
<div id="outline-container-org030b0b2" class="outline-6">
|
||||
<h6 id="org030b0b2"><span class="section-number-6">3.3.1.31.11.</span> vesktop service for tray</h6>
|
||||
<div class="outline-text-6" id="text-3-3-1-31-11">
|
||||
<div class="org-src-container">
|
||||
<pre class="src src-nix-ts">{ lib, config, pkgs, ... }:
|
||||
|
|
@ -15891,9 +15944,23 @@ Currently, I am too lazy to explain every option here, but most of it is very se
|
|||
<h5 id="h:7d384e3b-1be7-4644-b304-ada4af0b692b"><span class="section-number-5">3.3.1.35.</span> gpg-agent</h5>
|
||||
<div class="outline-text-5" id="text-h:7d384e3b-1be7-4644-b304-ada4af0b692b">
|
||||
<p>
|
||||
Settinfs that are needed for the gpg-agent. Also we are enabling emacs support for unlocking my Yubikey here.
|
||||
Settings that are needed for the gpg-agent. Also we are enabling emacs support for unlocking my Yubikey here.
|
||||
</p>
|
||||
|
||||
<p>
|
||||
When setting up a new machine:
|
||||
</p>
|
||||
|
||||
<div class="org-src-container">
|
||||
<pre class="src src-markdown">- setup gpgsm for signing of mails using S/MIME:
|
||||
- `gpgsm --import ~/Certificates/<certname>.p12`
|
||||
- `gpgsm --import ~/Certificates/harica-root.pem`
|
||||
- `gpgsm --import ~/Certificates/harica-intermediate.pem`
|
||||
- `gpgsm --list-keys --with-validation "HARICA Client RSA Root CA 2021"`
|
||||
- trust the certificate and set passphrase
|
||||
</pre>
|
||||
</div>
|
||||
|
||||
<div class="org-src-container">
|
||||
<pre class="src src-nix-ts">{ self, lib, config, pkgs, ... }:
|
||||
let
|
||||
|
|
@ -16001,8 +16068,8 @@ in
|
|||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div id="outline-container-org3f19616" class="outline-5">
|
||||
<h5 id="org3f19616"><span class="section-number-5">3.3.1.38.</span> Obsidian</h5>
|
||||
<div id="outline-container-org2444730" class="outline-5">
|
||||
<h5 id="org2444730"><span class="section-number-5">3.3.1.38.</span> Obsidian</h5>
|
||||
<div class="outline-text-5" id="text-3-3-1-38">
|
||||
<div class="org-src-container">
|
||||
<pre class="src src-nix-ts">{ lib, config, pkgs, nixosConfig ? config, ... }:
|
||||
|
|
@ -16034,6 +16101,19 @@ in
|
|||
vimMode = false;
|
||||
newFileLocation = "current";
|
||||
};
|
||||
hotkeys = {
|
||||
"graph:open" = [ ];
|
||||
"omnisearch:show-modal" = [
|
||||
{
|
||||
modifiers = [
|
||||
"Mod"
|
||||
];
|
||||
key = "S";
|
||||
}
|
||||
];
|
||||
"editor:save-file" = [ ];
|
||||
"editor:delete-paragraph" = [ ];
|
||||
};
|
||||
corePlugins = [
|
||||
"backlink"
|
||||
"bookmarks"
|
||||
|
|
@ -16146,8 +16226,8 @@ in
|
|||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div id="outline-container-orgd0e6499" class="outline-5">
|
||||
<h5 id="orgd0e6499"><span class="section-number-5">3.3.1.39.</span> Anki</h5>
|
||||
<div id="outline-container-org7ee88af" class="outline-5">
|
||||
<h5 id="org7ee88af"><span class="section-number-5">3.3.1.39.</span> Anki</h5>
|
||||
<div class="outline-text-5" id="text-3-3-1-39">
|
||||
<div class="org-src-container">
|
||||
<pre class="src src-nix-ts">{ lib, config, pkgs, globals, nixosConfig ? config, ... }:
|
||||
|
|
@ -16219,8 +16299,8 @@ in
|
|||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div id="outline-container-orgb6ac1d9" class="outline-5">
|
||||
<h5 id="orgb6ac1d9"><span class="section-number-5">3.3.1.40.</span> Element-desktop</h5>
|
||||
<div id="outline-container-org4137b9c" class="outline-5">
|
||||
<h5 id="org4137b9c"><span class="section-number-5">3.3.1.40.</span> Element-desktop</h5>
|
||||
<div class="outline-text-5" id="text-3-3-1-40">
|
||||
<div class="org-src-container">
|
||||
<pre class="src src-nix-ts">{ lib, config, ... }:
|
||||
|
|
@ -16256,8 +16336,8 @@ in
|
|||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div id="outline-container-org68fbf73" class="outline-5">
|
||||
<h5 id="org68fbf73"><span class="section-number-5">3.3.1.41.</span> Hexchat</h5>
|
||||
<div id="outline-container-orge83b29c" class="outline-5">
|
||||
<h5 id="orge83b29c"><span class="section-number-5">3.3.1.41.</span> Hexchat</h5>
|
||||
<div class="outline-text-5" id="text-3-3-1-41">
|
||||
<div class="org-src-container">
|
||||
<pre class="src src-nix-ts">{ lib, config, nixosConfig ? config, ... }:
|
||||
|
|
@ -16281,8 +16361,8 @@ in
|
|||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div id="outline-container-orgea285a9" class="outline-5">
|
||||
<h5 id="orgea285a9"><span class="section-number-5">3.3.1.42.</span> obs-studio</h5>
|
||||
<div id="outline-container-orgc6e077d" class="outline-5">
|
||||
<h5 id="orgc6e077d"><span class="section-number-5">3.3.1.42.</span> obs-studio</h5>
|
||||
<div class="outline-text-5" id="text-3-3-1-42">
|
||||
<div class="org-src-container">
|
||||
<pre class="src src-nix-ts">{ lib, config, ... }:
|
||||
|
|
@ -16302,8 +16382,8 @@ in
|
|||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div id="outline-container-orgd003fee" class="outline-5">
|
||||
<h5 id="orgd003fee"><span class="section-number-5">3.3.1.43.</span> spotify-player</h5>
|
||||
<div id="outline-container-org61af274" class="outline-5">
|
||||
<h5 id="org61af274"><span class="section-number-5">3.3.1.43.</span> spotify-player</h5>
|
||||
<div class="outline-text-5" id="text-3-3-1-43">
|
||||
<div class="org-src-container">
|
||||
<pre class="src src-nix-ts">{ lib, config, ... }:
|
||||
|
|
@ -16323,8 +16403,8 @@ in
|
|||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div id="outline-container-org8616bfa" class="outline-5">
|
||||
<h5 id="org8616bfa"><span class="section-number-5">3.3.1.44.</span> vesktop</h5>
|
||||
<div id="outline-container-orga884d29" class="outline-5">
|
||||
<h5 id="orga884d29"><span class="section-number-5">3.3.1.44.</span> vesktop</h5>
|
||||
<div class="outline-text-5" id="text-3-3-1-44">
|
||||
<div class="org-src-container">
|
||||
<pre class="src src-nix-ts">{ lib, config, ... }:
|
||||
|
|
@ -16410,8 +16490,8 @@ in
|
|||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div id="outline-container-orgab3d85e" class="outline-5">
|
||||
<h5 id="orgab3d85e"><span class="section-number-5">3.3.1.45.</span> batsignal</h5>
|
||||
<div id="outline-container-org86c0973" class="outline-5">
|
||||
<h5 id="org86c0973"><span class="section-number-5">3.3.1.45.</span> batsignal</h5>
|
||||
<div class="outline-text-5" id="text-3-3-1-45">
|
||||
<div class="org-src-container">
|
||||
<pre class="src src-nix-ts">{ lib, config, ... }:
|
||||
|
|
@ -16443,8 +16523,8 @@ in
|
|||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div id="outline-container-orgde9dc92" class="outline-5">
|
||||
<h5 id="orgde9dc92"><span class="section-number-5">3.3.1.46.</span> autotiling</h5>
|
||||
<div id="outline-container-org503cbe5" class="outline-5">
|
||||
<h5 id="org503cbe5"><span class="section-number-5">3.3.1.46.</span> autotiling</h5>
|
||||
<div class="outline-text-5" id="text-3-3-1-46">
|
||||
<div class="org-src-container">
|
||||
<pre class="src src-nix-ts">{ lib, config, ... }:
|
||||
|
|
@ -16465,8 +16545,8 @@ in
|
|||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div id="outline-container-orge7185ca" class="outline-5">
|
||||
<h5 id="orge7185ca"><span class="section-number-5">3.3.1.47.</span> swayidle</h5>
|
||||
<div id="outline-container-orgf1d300b" class="outline-5">
|
||||
<h5 id="orgf1d300b"><span class="section-number-5">3.3.1.47.</span> swayidle</h5>
|
||||
<div class="outline-text-5" id="text-3-3-1-47">
|
||||
<div class="org-src-container">
|
||||
<pre class="src src-nix-ts">{ lib, config, pkgs, ... }:
|
||||
|
|
@ -16507,8 +16587,8 @@ in
|
|||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div id="outline-container-org4e801e4" class="outline-5">
|
||||
<h5 id="org4e801e4"><span class="section-number-5">3.3.1.48.</span> swaylock</h5>
|
||||
<div id="outline-container-org3b0dfc9" class="outline-5">
|
||||
<h5 id="org3b0dfc9"><span class="section-number-5">3.3.1.48.</span> swaylock</h5>
|
||||
<div class="outline-text-5" id="text-3-3-1-48">
|
||||
<div class="org-src-container">
|
||||
<pre class="src src-nix-ts">{ lib, config, pkgs, ... }:
|
||||
|
|
@ -16714,16 +16794,29 @@ in
|
|||
</div>
|
||||
</div>
|
||||
<div id="outline-container-h:f0b2ea93-94c8-48d8-8d47-6fe58f58e0e6" class="outline-5">
|
||||
<h5 id="h:f0b2ea93-94c8-48d8-8d47-6fe58f58e0e6"><span class="section-number-5">3.3.4.2.</span> Work</h5>
|
||||
<h5 id="h:f0b2ea93-94c8-48d8-8d47-6fe58f58e0e6"><span class="section-number-5">3.3.4.2.</span> Work (pizauth)</h5>
|
||||
<div class="outline-text-5" id="text-h:f0b2ea93-94c8-48d8-8d47-6fe58f58e0e6">
|
||||
<p>
|
||||
The rest of the settings is at <a href="#h:bbf2ecb6-c8ff-4462-b5d5-d45b28604ddf">work</a>. Here, I am setting up the different firefox profiles that I need for the SSO sites that I need to access at work as well as a few ssh shorthands.
|
||||
</p>
|
||||
|
||||
<p>
|
||||
When setting up a new machine:
|
||||
</p>
|
||||
|
||||
<div class="org-src-container">
|
||||
<pre class="src src-markdown">- setup pizauth for microsoft mail sync (account names are possibly `uni` and `work`):
|
||||
- `pizauth auth <account name, e.g. 'work'>`
|
||||
- `pizauth dump > ~/.pizauth.state`
|
||||
</pre>
|
||||
</div>
|
||||
|
||||
<div class="org-src-container">
|
||||
<pre class="src src-nix-ts">{ self, config, pkgs, lib, vars, nixosConfig ? config, ... }:
|
||||
let
|
||||
inherit (config.swarselsystems) homeDir;
|
||||
inherit (nixosConfig.repo.secrets.local.mail) allMailAddresses;
|
||||
inherit (nixosConfig.repo.secrets.local.work) mailAddress;
|
||||
in
|
||||
{
|
||||
options.swarselmodules.optional.work = lib.mkEnableOption "optional work settings";
|
||||
|
|
@ -16744,14 +16837,16 @@ The rest of the settings is at <a href="#h:bbf2ecb6-c8ff-4462-b5d5-d45b28604ddf"
|
|||
vscode
|
||||
];
|
||||
|
||||
|
||||
systemd.user.sessionVariables = {
|
||||
DOCUMENT_DIR_WORK = lib.mkForce "${homeDir}/Documents/Work";
|
||||
} // lib.optionalAttrs (!config.swarselsystems.isPublic) {
|
||||
SWARSEL_MAIL_ALL = lib.mkForce allMailAddresses;
|
||||
SWARSEL_MAIL_WORK = lib.mkForce mailAddress;
|
||||
};
|
||||
|
||||
accounts.email.accounts.work =
|
||||
let
|
||||
inherit (nixosConfig.repo.secrets.local.work) mailAddress mailName;
|
||||
inherit (nixosConfig.repo.secrets.local.work) mailName;
|
||||
in
|
||||
{
|
||||
primary = false;
|
||||
|
|
@ -19713,8 +19808,8 @@ writeShellApplication {
|
|||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div id="outline-container-org6a36b50" class="outline-4">
|
||||
<h4 id="org6a36b50"><span class="section-number-4">3.5.34.</span> endme</h4>
|
||||
<div id="outline-container-orgc62e7de" class="outline-4">
|
||||
<h4 id="orgc62e7de"><span class="section-number-4">3.5.34.</span> endme</h4>
|
||||
<div class="outline-text-4" id="text-3-5-34">
|
||||
<p>
|
||||
Sometimes my DE crashes after putting it to suspend - to be precise, it happens when I put it into suspend when I have multiple screens plugged in. I have never taken the time to debug the issue, but instead just switch to a different TTY and then use this script to kill the hanging session.
|
||||
|
|
@ -19735,8 +19830,8 @@ writeShellApplication {
|
|||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div id="outline-container-orgb3faf9e" class="outline-4">
|
||||
<h4 id="orgb3faf9e"><span class="section-number-4">3.5.35.</span> git-replace</h4>
|
||||
<div id="outline-container-orge3590e8" class="outline-4">
|
||||
<h4 id="orge3590e8"><span class="section-number-4">3.5.35.</span> git-replace</h4>
|
||||
<div class="outline-text-4" id="text-3-5-35">
|
||||
<p>
|
||||
This script allows for quick git replace of a string.
|
||||
|
|
@ -19898,8 +19993,8 @@ in
|
|||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div id="outline-container-orgefd2161" class="outline-5">
|
||||
<h5 id="orgefd2161"><span class="section-number-5">3.6.1.3.</span> Optionals</h5>
|
||||
<div id="outline-container-org30fc974" class="outline-5">
|
||||
<h5 id="org30fc974"><span class="section-number-5">3.6.1.3.</span> Optionals</h5>
|
||||
<div class="outline-text-5" id="text-3-6-1-3">
|
||||
<div class="org-src-container">
|
||||
<pre class="src src-nix-ts">{ lib, config, ... }:
|
||||
|
|
@ -23807,6 +23902,40 @@ This adds the simple utility of sending desktop notifications whenever a new mai
|
|||
(add-hook 'after-init-hook #'mu4e-alert-enable-notifications)
|
||||
|
||||
(mu4e t)
|
||||
</pre>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div id="outline-container-org234e39c" class="outline-5">
|
||||
<h5 id="org234e39c"><span class="section-number-5">4.4.39.3.</span> Work: Signing Mails (S/MIME, smime)</h5>
|
||||
<div class="outline-text-5" id="text-4-4-39-3">
|
||||
<p>
|
||||
Used to automatically sign messages sent from my work email address using S/MIME certificate.
|
||||
</p>
|
||||
|
||||
<div class="org-src-container">
|
||||
<pre class="src src-emacs-lisp">(let ((work (getenv "SWARSEL_MAIL_WORK")))
|
||||
(when (and work (not (string-empty-p work)))
|
||||
|
||||
(setq swarsel-smime-cert-path "~/.Certificates/$SWARSEL_MAIL_WORK.pem")
|
||||
(setq swarsel-smime-cert-path (substitute-env-vars swarsel-smime-cert-path))
|
||||
(setq mml-secure-prefer-scheme 'smime)
|
||||
(setq mml-secure-smime-sign-with-sender t)
|
||||
(add-hook 'mu4e-compose-mode-hook
|
||||
(lambda ()
|
||||
(when (and (boundp 'user-mail-address)
|
||||
(stringp user-mail-address)
|
||||
(string-equal user-mail-address (getenv "SWARSEL_MAIL_WORK")))
|
||||
(mml-secure-message-sign-smime))))
|
||||
|
||||
(setq smime-keys
|
||||
`((,(getenv "SWARSEL_MAIL_WORK")
|
||||
,swarsel-smime-cert-path
|
||||
("~/Certificates/harica-root.pem"
|
||||
"~/Certificates/harica-intermediate.pem"
|
||||
))))
|
||||
))
|
||||
|
||||
</pre>
|
||||
</div>
|
||||
</div>
|
||||
|
|
@ -24062,6 +24191,20 @@ Also see `prot-window-delete-popup-frame'." command)
|
|||
This sections is no longer used really. An introduction can be found in <a href="#h:bcc3ebbe-df8a-46bd-b42d-73aad6fc66e5">Structure of this file</a> under the historical note. The little noweb-ref blocks that I still use are found in <a href="#h:48e0cb2c-e412-4ae3-a244-80a8c09dbb02">Hosts</a> and <a href="#h:3bb92528-c61c-4b8d-8214-bf2a40baaa32">Services</a>.
|
||||
</p>
|
||||
</div>
|
||||
<div id="outline-container-orge8ed16b" class="outline-3">
|
||||
<h3 id="orge8ed16b"><span class="section-number-3">5.1.</span> General steps when setting up a new machine</h3>
|
||||
<div class="outline-text-3" id="text-5-1">
|
||||
<p>
|
||||
These general steps are needed when setting up a new machine and do not fit into another block well:
|
||||
</p>
|
||||
|
||||
<div class="org-src-container">
|
||||
<pre class="src src-markdown">- setup yubikey (automatic yubikey enrollment is not yet supported by `disko`):
|
||||
- `systemd-cryptenroll --fido2-device=auto /dev/<device, e.g. 'nvme0n1p2'>`
|
||||
</pre>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div id="outline-container-h:8fc9f66a-7412-4091-8dee-a06f897baf67" class="outline-2">
|
||||
<h2 id="h:8fc9f66a-7412-4091-8dee-a06f897baf67"><span class="section-number-2">6.</span> Appendix B: Supplementary Files</h2>
|
||||
|
|
@ -24303,7 +24446,7 @@ set allowautofocus false
|
|||
jsb browser.webRequest.onHeadersReceived.addListener(tri.request.clobberCSP,{urls:["<all_urls>"],types:["main_frame"]},["blocking","responseHeaders"])
|
||||
|
||||
" default is 300ms
|
||||
set hintdelay 100
|
||||
set hintdelay 500
|
||||
|
||||
" Some pages like github break on the tridactyl quick search. have this as a fallback
|
||||
unbind <C-f>
|
||||
|
|
@ -26993,7 +27136,7 @@ similarly, there exists an version that starts from the right.
|
|||
</div>
|
||||
<div id="postamble" class="status">
|
||||
<p class="author">Author: Leon Schwarzäugl</p>
|
||||
<p class="date">Created: 2025-10-21 Di 13:09</p>
|
||||
<p class="date">Created: 2025-10-21 Di 21:37</p>
|
||||
<p class="validation"><a href="https://validator.w3.org/check?uri=referer">Validate</a></p>
|
||||
</div>
|
||||
</body>
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue