thegeneralist01/config
1
Fork 0
mirror of https://github.com/thegeneralist01/config.git synced 2026-10-09 21:03:30 +02:00
Code Issues Activity

nixos: migrate server services to thegeneralist

Browse source 
Move hosted services and secrets from the retired central hosts, persist USB storage and ownership, harden RTL8822BU Wi-Fi, repair DNS behavior, and order CoreDNS after Tailscale.
This commit is contained in:
TheGeneralist 2026-10-09 14:21:55 +02:00
parent 7f5ecd917b
commit bd887883f7
Signed by: thegeneralist01
SSH key fingerprint: SHA256:pp9qddbCNmVNoSjevdvQvM5z0DHN7LTa8qBMbcMq/R4
41 changed files with 183 additions and 511 deletions
Download patch file Download diff file Expand all files Collapse all files

8
modules/common/llm.nix
View file

@ -60,12 +60,14 @@ in
# Same pattern as Volta activation: Nix declares intent, tool manager installs.
home.activation.uvToolLlm = lib.hm.dag.entryAfter [ "writeBoundary" ] ''
export PATH="${pkgs.uv}/bin:$HOME/.local/bin:$PATH"
export UV_PYTHON_DOWNLOADS=never
if [ -n "''${DRY_RUN:-}" ]; then
echo "${uvBin} tool install llm"
echo "${uvBin} tool install --python ${pkgs.python3}/bin/python3 llm"
else
# Idempotent: installs or refreshes the uv-managed tool env + ~/.local/bin/llm
${uvBin} tool install llm
# Pin the tool environment to Nix's Python; generic uv-managed
# Python binaries do not run on NixOS without an FHS loader.
${uvBin} tool install --python ${pkgs.python3}/bin/python3 llm
fi
'';
}

11
modules/common/nix.nix
View file

@ -25,22 +25,13 @@ in {
"niri.cachix.org-1:Wv0OmO7PsuocRKzfDoJ3mulSl7Z6oezYhGhR+3W2964="
];
trusted-users = [ "thegeneralist" "central" "root" "@build" "@wheel" "@admin" "jellyfin" "git" ];
trusted-users = [ "thegeneralist" "root" "@wheel" "@admin" "jellyfin" "git" ];
builders-use-substitutes = true;
};
nix.package = pkgs.nixVersions.latest;
nix.distributedBuilds = true;
nix.buildMachines = if (config.networking.hostName != "thegeneralist-central") then [{
hostName = "thegeneralist-central";
maxJobs = 20;
protocol = "ssh-ng";
sshUser = "build";
supportedFeatures = [ "benchmark" "big-parallel" "kvm" "nixos-test" ];
system = "aarch64-linux";
}] else [];
home-manager.sharedModules = [{
programs.nh = {