anomalos/secrets/ at main · weegs710.tngl.sh/anomalos · Tangled

weegs710.tngl.sh / anomalos

0

A weird way of doing NixOS

0

anomalos / secrets /

at main 8 files

weegs710 chore(concord): drop it, and the eval warnings it dragged in 7d ago

disroot-xmpp-password.age

feat(chat-stack): replace weechat+bitlbee with profanity+biboumi - add modules/hjem/profanity.nix with profanity package, eldritch theme, libera startup script, and account bootstrap - add secrets/disroot-xmpp-password.age for XMPP account auth via eval_password - remove modules/hjem/weechat.nix and modules/nixos-modules/chat-stack.nix (bitlbee) - remove secrets/weechat-passphrase.age - add profanity windowrule to workspace 1 in hyprland.nix - replace weechat keybind with profanity (p) in wlr-which-key comms submenu - update discord-token.age with refreshed token

4 months ago

github-token.age

feat(tack): give it a token solution so it stops complaining and lying - modules/system-level/core.nix: enable programs.tack with nixConfTokens and the flake pin's package, add the nix.extraOptions include for the agenix token, drop tack from systemPackages - modules/system-level/security/secrets.nix: add age.secrets.github-token at 0400 owned by the user - secrets/secrets.nix: add the github-token.age rule for both keys - secrets/github-token.age: new secret

1 month ago

jellyfin-api-key.age

feat(media): add flaresolverr, recyclarr, and media-churn - add services.flaresolverr to media-stack.nix (port 8191, localhost only) - add services.recyclarr to media-stack.nix (weekly timer, recyclarr v8 schema) - radarr: hd-bluray-web quality profile, movie quality definition, unwanted CFs, anime dual audio +10 - sonarr: web-1080p quality profile, series quality definition, unwanted CFs, anime dual audio +10 - add modules/nixos-modules/media-churn.nix: python script + systemd timer (3am daily) - media-churn deletes watched movies/episodes 14d after LastPlayedDate, keep tag (id=1) exempts - media-churn-dry-run service variant for safe testing - add age secrets for radarr-api-key, sonarr-api-key, jellyfin-api-key - wire secrets into secrets.nix and modules/nixos-modules/secrets.nix

4 months ago

radarr-api-key.age

feat(media): add flaresolverr, recyclarr, and media-churn - add services.flaresolverr to media-stack.nix (port 8191, localhost only) - add services.recyclarr to media-stack.nix (weekly timer, recyclarr v8 schema) - radarr: hd-bluray-web quality profile, movie quality definition, unwanted CFs, anime dual audio +10 - sonarr: web-1080p quality profile, series quality definition, unwanted CFs, anime dual audio +10 - add modules/nixos-modules/media-churn.nix: python script + systemd timer (3am daily) - media-churn deletes watched movies/episodes 14d after LastPlayedDate, keep tag (id=1) exempts - media-churn-dry-run service variant for safe testing - add age secrets for radarr-api-key, sonarr-api-key, jellyfin-api-key - wire secrets into secrets.nix and modules/nixos-modules/secrets.nix

4 months ago

searx-secret-key.age

feat(searx): self-host searxng - add modules/nixos-modules/searx.nix -- searxng via uwsgi on :8080 - agenix searx-secret-key via environmentFile; add to security/secrets.nix + secrets/secrets.nix - limiter off, public_instance off, image_proxy on, formats html+json - engines: brave disabled, bing enabled, google cse + startpage weight 3 - ui: simple_style black, center_alignment on, infinite_scroll plugin on

2 months ago

chore(concord): drop it, and the eval warnings it dragged in - .tack/pins.toml: drop [inputs.concord] - .tack/pins.lock.json: drop the concord node - modules/user-level/comms/concord/{concord.nix,config.toml}: delete - modules/system-level/security/secrets.nix: drop age.secrets.concord-credential - secrets/secrets.nix: drop the concord-credential.age rule - secrets/concord-credential.age: delete - lib/scripts/draw.nu: repoint at the bumbriel pin, read VERSION not meson.build - assets/anomalOS-{diagram,overview}.svg: regenerate

1 week ago

sonarr-api-key.age

feat(media): add flaresolverr, recyclarr, and media-churn - add services.flaresolverr to media-stack.nix (port 8191, localhost only) - add services.recyclarr to media-stack.nix (weekly timer, recyclarr v8 schema) - radarr: hd-bluray-web quality profile, movie quality definition, unwanted CFs, anime dual audio +10 - sonarr: web-1080p quality profile, series quality definition, unwanted CFs, anime dual audio +10 - add modules/nixos-modules/media-churn.nix: python script + systemd timer (3am daily) - media-churn deletes watched movies/episodes 14d after LastPlayedDate, keep tag (id=1) exempts - media-churn-dry-run service variant for safe testing - add age secrets for radarr-api-key, sonarr-api-key, jellyfin-api-key - wire secrets into secrets.nix and modules/nixos-modules/secrets.nix

4 months ago

tailscale-authkey.age

feat(tailscale): wire up headless OAuth auth via agenix - add secrets/secrets.nix with weegs + HX99G host key recipients - add secrets/tailscale-authkey.age (encrypted OAuth client secret) - wire age.secrets.tailscale-authkey into secrets.nix nixos module - set services.tailscale.authKeyFile to agenix-managed secret path - fix stale HX99G host key (was root@nixos, now root@HX99G)

6 months ago