Kieran's opinionated (and probably slightly dumb) nix config

feat: add iodine

dunkirk.sh 2e731bcf e52611d5

verified
+334 -22
+3
home-manager/machines/ember/default.nix
··· 57 57 unzip 58 58 inputs.nixvim.packages.${system}.default 59 59 dog 60 + 61 + # apps 62 + iodine 60 63 ]; 61 64 }; 62 65
+328 -22
moonlark/configuration.nix
··· 66 66 pkgs.wget 67 67 pkgs.dogdns 68 68 inputs.agenix.packages.x86_64-linux.default 69 - pkgs.wpa_supplicant_gui 70 69 pkgs.overskride 71 70 pkgs.alacritty 72 71 pkgs.zsh ··· 197 196 pkgs.unstable.wakatime-cli 198 197 pkgs.nixd 199 198 pkgs.nil 199 + pkgs.networkmanagerapplet 200 + pkgs.networkmanager-iodine 200 201 ]; 201 202 202 203 programs.nh = { ··· 257 258 file = ../secrets/bluesky.age; 258 259 owner = "kierank"; 259 260 }; 261 + iodine = { 262 + file = ../secrets/iodine.age; 263 + owner = "kierank"; 264 + }; 260 265 }; 261 266 262 267 environment.sessionVariables = { ··· 277 282 278 283 # setup the network 279 284 networking = { 285 + networkmanager = { 286 + enable = true; 287 + dns = "none"; 288 + ensureProfiles = { 289 + environmentFiles = [ 290 + config.age.secrets.wifi.path 291 + ]; 292 + profiles = { 293 + "KlukasNet" = { 294 + connection = { 295 + id = "KlukasNet"; 296 + type = "wifi"; 297 + }; 298 + ipv4 = { 299 + method = "auto"; 300 + }; 301 + ipv6 = { 302 + addr-gen-mode = "stable-privacy"; 303 + method = "auto"; 304 + }; 305 + wifi = { 306 + mode = "infrastructure"; 307 + ssid = "KlukasNet"; 308 + }; 309 + wifi-security = { 310 + key-mgmt = "wpa-psk"; 311 + psk = "$psk_home"; 312 + }; 313 + }; 314 + "Everseen" = { 315 + connection = { 316 + id = "Everseen"; 317 + type = "wifi"; 318 + }; 319 + ipv4 = { 320 + method = "auto"; 321 + }; 322 + ipv6 = { 323 + addr-gen-mode = "stable-privacy"; 324 + method = "auto"; 325 + }; 326 + wifi = { 327 + mode = "infrastructure"; 328 + ssid = "Everseen"; 329 + }; 330 + wifi-security = { 331 + key-mgmt = "wpa-psk"; 332 + psk = "$psk_hotspot"; 333 + }; 334 + }; 335 + "SAAC Sanctuary" = { 336 + connection = { 337 + id = "SAAC Sanctuary"; 338 + type = "wifi"; 339 + }; 340 + ipv4 = { 341 + method = "auto"; 342 + }; 343 + ipv6 = { 344 + addr-gen-mode = "stable-privacy"; 345 + method = "auto"; 346 + }; 347 + wifi = { 348 + mode = "infrastructure"; 349 + ssid = "SAAC Sanctuary"; 350 + }; 351 + wifi-security = { 352 + key-mgmt = "wpa-psk"; 353 + psk = "$psk_church"; 354 + }; 355 + }; 356 + "MVNU-student" = { 357 + connection = { 358 + id = "MVNU-student"; 359 + type = "wifi"; 360 + }; 361 + ipv4 = { 362 + method = "auto"; 363 + }; 364 + ipv6 = { 365 + addr-gen-mode = "stable-privacy"; 366 + method = "auto"; 367 + }; 368 + wifi = { 369 + mode = "infrastructure"; 370 + ssid = "MVNU-student"; 371 + }; 372 + }; 373 + "Status Solutions Guest" = { 374 + connection = { 375 + id = "Status Solutions Guest"; 376 + type = "wifi"; 377 + }; 378 + ipv4 = { 379 + method = "auto"; 380 + }; 381 + ipv6 = { 382 + addr-gen-mode = "stable-privacy"; 383 + method = "auto"; 384 + }; 385 + wifi = { 386 + mode = "infrastructure"; 387 + ssid = "Status Solutions Guest"; 388 + }; 389 + wifi-security = { 390 + key-mgmt = "wpa-psk"; 391 + psk = "$psk_robotics"; 392 + }; 393 + }; 394 + "FRC-1317-CECE" = { 395 + connection = { 396 + id = "FRC-1317-CECE"; 397 + type = "wifi"; 398 + }; 399 + ipv4 = { 400 + method = "auto"; 401 + }; 402 + ipv6 = { 403 + addr-gen-mode = "stable-privacy"; 404 + method = "auto"; 405 + }; 406 + wifi = { 407 + mode = "infrastructure"; 408 + ssid = "FRC-1317-CECE"; 409 + }; 410 + wifi-security = { 411 + key-mgmt = "wpa-psk"; 412 + psk = "digitalfusion"; 413 + }; 414 + }; 415 + "1317-fortress-of-awesomeness" = { 416 + connection = { 417 + id = "1317-fortress-of-awesomeness"; 418 + type = "wifi"; 419 + }; 420 + ipv4 = { 421 + method = "auto"; 422 + }; 423 + ipv6 = { 424 + addr-gen-mode = "stable-privacy"; 425 + method = "auto"; 426 + }; 427 + wifi = { 428 + mode = "infrastructure"; 429 + ssid = "1317-fortress-of-awesomeness"; 430 + }; 431 + }; 432 + "PAST PD" = { 433 + connection = { 434 + id = "PAST PD"; 435 + type = "wifi"; 436 + }; 437 + ipv4 = { 438 + method = "auto"; 439 + }; 440 + ipv6 = { 441 + addr-gen-mode = "stable-privacy"; 442 + method = "auto"; 443 + }; 444 + wifi = { 445 + mode = "infrastructure"; 446 + ssid = "PAST PD"; 447 + }; 448 + wifi-security = { 449 + key-mgmt = "wpa-psk"; 450 + psk = "$psk_past"; 451 + }; 452 + }; 453 + "Heartland" = { 454 + connection = { 455 + id = "Heartland"; 456 + type = "wifi"; 457 + }; 458 + ipv4 = { 459 + method = "auto"; 460 + }; 461 + ipv6 = { 462 + addr-gen-mode = "stable-privacy"; 463 + method = "auto"; 464 + }; 465 + wifi = { 466 + mode = "infrastructure"; 467 + ssid = "Heartland"; 468 + }; 469 + wifi-security = { 470 + key-mgmt = "wpa-psk"; 471 + psk = "beourguest"; 472 + }; 473 + }; 474 + "WPL_Public_AccessII" = { 475 + connection = { 476 + id = "WPL_Public_AccessII"; 477 + type = "wifi"; 478 + }; 479 + ipv4 = { 480 + method = "auto"; 481 + }; 482 + ipv6 = { 483 + addr-gen-mode = "stable-privacy"; 484 + method = "auto"; 485 + }; 486 + wifi = { 487 + mode = "infrastructure"; 488 + ssid = "WPL_Public_AccessII"; 489 + }; 490 + }; 491 + "Yowzaford" = { 492 + connection = { 493 + id = "Yowzaford"; 494 + type = "wifi"; 495 + }; 496 + ipv4 = { 497 + method = "auto"; 498 + }; 499 + ipv6 = { 500 + addr-gen-mode = "stable-privacy"; 501 + method = "auto"; 502 + }; 503 + wifi = { 504 + mode = "infrastructure"; 505 + ssid = "Yowzaford"; 506 + }; 507 + wifi-security = { 508 + key-mgmt = "wpa-psk"; 509 + psk = "$psk_rhoda"; 510 + }; 511 + }; 512 + "cu-events" = { 513 + connection = { 514 + id = "cu-events"; 515 + type = "wifi"; 516 + }; 517 + ipv4 = { 518 + method = "auto"; 519 + }; 520 + ipv6 = { 521 + addr-gen-mode = "stable-privacy"; 522 + method = "auto"; 523 + }; 524 + wifi = { 525 + mode = "infrastructure"; 526 + ssid = "cu-events"; 527 + }; 528 + wifi-security = { 529 + key-mgmt = "wpa-psk"; 530 + psk = "freesmile82"; 531 + }; 532 + }; 533 + "QargoCoffee-Guest" = { 534 + connection = { 535 + id = "QargoCoffee-Guest"; 536 + type = "wifi"; 537 + }; 538 + ipv4 = { 539 + method = "auto"; 540 + }; 541 + ipv6 = { 542 + addr-gen-mode = "stable-privacy"; 543 + method = "auto"; 544 + }; 545 + wifi = { 546 + mode = "infrastructure"; 547 + ssid = "QargoCoffee-Guest"; 548 + }; 549 + wifi-security = { 550 + key-mgmt = "wpa-psk"; 551 + psk = "Lavazza@7"; 552 + }; 553 + }; 554 + "Fulton" = { 555 + connection = { 556 + id = "Fulton"; 557 + type = "wifi"; 558 + }; 559 + ipv4 = { 560 + method = "auto"; 561 + }; 562 + ipv6 = { 563 + addr-gen-mode = "stable-privacy"; 564 + method = "auto"; 565 + }; 566 + wifi = { 567 + mode = "infrastructure"; 568 + ssid = "Fulton"; 569 + }; 570 + wifi-security = { 571 + key-mgmt = "wpa-psk"; 572 + psk = "9064405930"; 573 + }; 574 + }; 575 + "TP-LINK_ECF0" = { 576 + connection = { 577 + id = "TP-LINK_ECF0"; 578 + type = "wifi"; 579 + }; 580 + ipv4 = { 581 + method = "auto"; 582 + }; 583 + ipv6 = { 584 + addr-gen-mode = "stable-privacy"; 585 + method = "auto"; 586 + }; 587 + wifi = { 588 + mode = "infrastructure"; 589 + ssid = "TP-LINK_ECF0"; 590 + }; 591 + wifi-security = { 592 + key-mgmt = "wpa-psk"; 593 + psk = "ad1066AD!"; 594 + }; 595 + }; 596 + }; 597 + }; 598 + }; 280 599 hostName = "moonlark"; 281 600 nameservers = [ 282 601 "1.1.1.1" 283 602 "9.9.9.9" 284 603 ]; 285 - wireless = { 286 - secretsFile = config.age.secrets.wifi.path; 287 - userControlled.enable = true; 288 - enable = true; 289 - networks = { 290 - "KlukasNet".pskRaw = "ext:psk_home"; 291 - "Everseen".pskRaw = "ext:psk_hotspot"; 292 - "SAAC Sanctuary".pskRaw = "ext:psk_church"; 293 - "MVNU-student" = { }; 294 - "Status Solutions Guest".pskRaw = "ext:psk_robotics"; 295 - "FRC-1317-CECE".psk = "digitalfusion"; 296 - "1317-fortress-of-awesomeness" = { }; 297 - "PAST PD".pskRaw = "ext:psk_past"; 298 - "Heartland".psk = "beourguest"; 299 - "WPL_Public_AccessII" = { }; 300 - "Yowzaford".pskRaw = "ext:psk_rhoda"; 301 - "cu-events".psk = "freesmile82"; 302 - "QargoCoffee-Guest".psk = "Lavazza@7"; 303 - "Fulton".psk = "9064405930"; 304 - "TP-LINK_ECF0".psk = "ad1066AD!"; 305 - }; 604 + useDHCP = false; 605 + dhcpcd.enable = false; 606 + }; 607 + 608 + services.iodine.clients = { 609 + t1 = { 610 + server = "t1.dunkirk.sh"; 611 + passwordFile = config.age.secrets.iodine.path; 306 612 }; 307 613 }; 308 614
secrets/iodine.age

This is a binary file and will not be displayed.

+3
secrets/secrets.nix
··· 14 14 "bluesky.age".publicKeys = [ 15 15 kierank 16 16 ]; 17 + "iodine.age".publicKeys = [ 18 + kierank 19 + ]; 17 20 }