| Commit message (Collapse) | Author | Age | Files |
|---|
| | |
|
| |
|
|
|
|
|
|
| |
services.openssh.settings.PasswordAuthentication = false was enabled
with no authorized key ever provisioned for the tom user, locking out
all SSH access on the first real host (floep). Adds the public keys
from https://github.com/tomvanderlee.keys as static literals -- a
one-time fetch, not a build-time network dependency, to stay pure.
|
| |
|
|
|
|
|
|
|
|
| |
modules/home/dev-tools.nix provisions the developer's evidenced most-
used CLI/client tooling (gh, tmux, htop, yq-go, tree-sitter, docker,
docker-compose, kubectl, awscli2). modules/home/shell.nix drops zsh/
starship/direnv in favor of bash + liquidprompt, both left entirely to
the user's own dotfiles for config since home-manager can't own
~/.bashrc without conflicting with it. modules/nixos/common.nix adds
sshd (key-only auth) and a firewall baseline for future NixOS hosts.
|
| |
|
|
|
|
|
|
|
|
| |
modules/home/dotfiles.nix clones ~/dotfiles on activation (only if not
already present) and stows every top-level package directory into
$HOME, independently per package so one conflict doesn't block the
rest. Removes home-manager's own git config management in favor of
letting the stowed ~/dotfiles/git/.gitconfig own it, and adds
homeConfigurations."tom@darwin" so the feature is usable on this Mac.
users/tom.nix now points home.dotfiles.repoUrl at the real repo.
|
|
|
Adds a flake providing shared modules for NixOS and standalone
home-manager, a copyable NixOS host template, and the OpenSpec
tooling/change scaffolding used to plan this work.
|
Tom van der Lee