diff --git a/AGENTS.md b/AGENTS.md old mode 100644 new mode 100755 diff --git a/WORKAROUNDS.md b/WORKAROUNDS.md old mode 100644 new mode 100755 diff --git a/checks/pre-commit-hooks/default.nix b/checks/pre-commit-hooks/default.nix old mode 100644 new mode 100755 diff --git a/docs/README.md b/docs/README.md old mode 100644 new mode 100755 diff --git a/docs/architecture.md b/docs/architecture.md old mode 100644 new mode 100755 diff --git a/docs/flake-improvements.md b/docs/flake-improvements.md old mode 100644 new mode 100755 diff --git a/docs/getting-started.md b/docs/getting-started.md old mode 100644 new mode 100755 diff --git a/docs/home-assistant/README.md b/docs/home-assistant/README.md old mode 100644 new mode 100755 diff --git a/docs/home-assistant/automations.md b/docs/home-assistant/automations.md old mode 100644 new mode 100755 diff --git a/docs/home-assistant/fountain-automation.md b/docs/home-assistant/fountain-automation.md old mode 100644 new mode 100755 diff --git a/docs/modules/README.md b/docs/modules/README.md old mode 100644 new mode 100755 diff --git a/docs/modules/homeassistant.md b/docs/modules/homeassistant.md old mode 100644 new mode 100755 diff --git a/docs/services.md b/docs/services.md old mode 100644 new mode 100755 diff --git a/docs/systems/README.md b/docs/systems/README.md old mode 100644 new mode 100755 diff --git a/docs/systems/allyx.md b/docs/systems/allyx.md old mode 100644 new mode 100755 diff --git a/docs/systems/jallen-nas.md b/docs/systems/jallen-nas.md old mode 100644 new mode 100755 diff --git a/docs/systems/macbook-pro-nixos.md b/docs/systems/macbook-pro-nixos.md old mode 100644 new mode 100755 diff --git a/docs/systems/macbook-pro.md b/docs/systems/macbook-pro.md old mode 100644 new mode 100755 diff --git a/docs/systems/matt-nixos.md b/docs/systems/matt-nixos.md old mode 100644 new mode 100755 diff --git a/docs/systems/nuc-nixos.md b/docs/systems/nuc-nixos.md old mode 100644 new mode 100755 diff --git a/docs/systems/pi5.md b/docs/systems/pi5.md old mode 100644 new mode 100755 diff --git a/docs/troubleshooting.md b/docs/troubleshooting.md old mode 100644 new mode 100755 diff --git a/docs/version.schema.json b/docs/version.schema.json old mode 100644 new mode 100755 diff --git a/flake.lock b/flake.lock old mode 100644 new mode 100755 diff --git a/flake.nix b/flake.nix old mode 100644 new mode 100755 diff --git a/lib/README.md b/lib/README.md old mode 100644 new mode 100755 diff --git a/lib/default.nix b/lib/default.nix old mode 100644 new mode 100755 diff --git a/lib/file/default.nix b/lib/file/default.nix old mode 100644 new mode 100755 diff --git a/lib/module/default.nix b/lib/module/default.nix old mode 100644 new mode 100755 diff --git a/lib/network/default.nix b/lib/network/default.nix old mode 100644 new mode 100755 diff --git a/lib/nix-settings/default.nix b/lib/nix-settings/default.nix old mode 100644 new mode 100755 diff --git a/lib/versioning/default.nix b/lib/versioning/default.nix old mode 100644 new mode 100755 diff --git a/modules/darwin/home/default.nix b/modules/darwin/home/default.nix old mode 100644 new mode 100755 diff --git a/modules/darwin/nix/default.nix b/modules/darwin/nix/default.nix old mode 100644 new mode 100755 diff --git a/modules/darwin/programs/ssh/default.nix b/modules/darwin/programs/ssh/default.nix old mode 100644 new mode 100755 diff --git a/modules/home/accounts/default.nix b/modules/home/accounts/default.nix old mode 100644 new mode 100755 diff --git a/modules/home/desktop/gnome/default.nix b/modules/home/desktop/gnome/default.nix old mode 100644 new mode 100755 diff --git a/modules/home/desktop/gnome/options.nix b/modules/home/desktop/gnome/options.nix old mode 100644 new mode 100755 diff --git a/modules/home/desktop/plasma/default.nix b/modules/home/desktop/plasma/default.nix old mode 100644 new mode 100755 diff --git a/modules/home/desktop/plasma/options.nix b/modules/home/desktop/plasma/options.nix old mode 100644 new mode 100755 diff --git a/modules/home/gpg/default.nix b/modules/home/gpg/default.nix old mode 100644 new mode 100755 diff --git a/modules/home/home/default.nix b/modules/home/home/default.nix old mode 100644 new mode 100755 diff --git a/modules/home/programs/calibre/default.nix b/modules/home/programs/calibre/default.nix old mode 100644 new mode 100755 diff --git a/modules/home/programs/code/default.nix b/modules/home/programs/code/default.nix old mode 100644 new mode 100755 diff --git a/modules/home/programs/common/default-apps.nix b/modules/home/programs/common/default-apps.nix old mode 100644 new mode 100755 diff --git a/modules/home/programs/git/default.nix b/modules/home/programs/git/default.nix old mode 100644 new mode 100755 diff --git a/modules/home/programs/hyprland/avizo.nix b/modules/home/programs/hyprland/avizo.nix old mode 100644 new mode 100755 diff --git a/modules/home/programs/hyprland/default.nix b/modules/home/programs/hyprland/default.nix old mode 100644 new mode 100755 diff --git a/modules/home/programs/hyprland/options.nix b/modules/home/programs/hyprland/options.nix old mode 100644 new mode 100755 diff --git a/modules/home/programs/librewolf/default.nix b/modules/home/programs/librewolf/default.nix old mode 100644 new mode 100755 diff --git a/modules/home/programs/nwg-dock/default.nix b/modules/home/programs/nwg-dock/default.nix old mode 100644 new mode 100755 diff --git a/modules/home/programs/nwg-drawer/default.nix b/modules/home/programs/nwg-drawer/default.nix old mode 100644 new mode 100755 diff --git a/modules/home/programs/nwg-panel/default.nix b/modules/home/programs/nwg-panel/default.nix old mode 100644 new mode 100755 diff --git a/modules/home/programs/nwg-panel/options.nix b/modules/home/programs/nwg-panel/options.nix old mode 100644 new mode 100755 diff --git a/modules/home/programs/onlyoffice/default.nix b/modules/home/programs/onlyoffice/default.nix old mode 100644 new mode 100755 diff --git a/modules/home/programs/opencode/default.nix b/modules/home/programs/opencode/default.nix old mode 100644 new mode 100755 diff --git a/modules/home/programs/password-store/default.nix b/modules/home/programs/password-store/default.nix old mode 100644 new mode 100755 diff --git a/modules/home/programs/thunderbird/default.nix b/modules/home/programs/thunderbird/default.nix old mode 100644 new mode 100755 diff --git a/modules/home/programs/update-checker/default.nix b/modules/home/programs/update-checker/default.nix old mode 100644 new mode 100755 diff --git a/modules/home/programs/waybar/options.nix b/modules/home/programs/waybar/options.nix old mode 100644 new mode 100755 diff --git a/modules/home/programs/waybar/scripts/audio-control.nix b/modules/home/programs/waybar/scripts/audio-control.nix old mode 100644 new mode 100755 diff --git a/modules/home/programs/waybar/scripts/media.nix b/modules/home/programs/waybar/scripts/media.nix old mode 100644 new mode 100755 diff --git a/modules/home/programs/waybar/scripts/notifications.nix b/modules/home/programs/waybar/scripts/notifications.nix old mode 100644 new mode 100755 diff --git a/modules/home/programs/waybar/scripts/weather.nix b/modules/home/programs/waybar/scripts/weather.nix old mode 100644 new mode 100755 diff --git a/modules/home/programs/wlogout/default.nix b/modules/home/programs/wlogout/default.nix old mode 100644 new mode 100755 diff --git a/modules/home/programs/zsh/default.nix b/modules/home/programs/zsh/default.nix old mode 100644 new mode 100755 diff --git a/modules/home/services/pass/default.nix b/modules/home/services/pass/default.nix old mode 100644 new mode 100755 diff --git a/modules/home/services/protonmail-bridge/default.nix b/modules/home/services/protonmail-bridge/default.nix old mode 100644 new mode 100755 diff --git a/modules/home/shell-aliases/default.nix b/modules/home/shell-aliases/default.nix old mode 100644 new mode 100755 diff --git a/modules/home/sops/default.nix b/modules/home/sops/default.nix old mode 100644 new mode 100755 diff --git a/modules/home/sops/options.nix b/modules/home/sops/options.nix old mode 100644 new mode 100755 diff --git a/modules/home/stylix/default.nix b/modules/home/stylix/default.nix old mode 100644 new mode 100755 diff --git a/modules/home/user/default.nix b/modules/home/user/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/boot/common/default.nix b/modules/nixos/boot/common/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/boot/lanzaboote/default.nix b/modules/nixos/boot/lanzaboote/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/boot/plymouth/default.nix b/modules/nixos/boot/plymouth/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/boot/systemd-boot/default.nix b/modules/nixos/boot/systemd-boot/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/desktop/gnome/default.nix b/modules/nixos/desktop/gnome/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/desktop/hyprland/options.nix b/modules/nixos/desktop/hyprland/options.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/desktop/hyprland/wallpapers/default.nix b/modules/nixos/desktop/hyprland/wallpapers/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/desktop/plasma/default.nix b/modules/nixos/desktop/plasma/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/development/default.nix b/modules/nixos/development/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/disko/default.nix b/modules/nixos/disko/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/disko/options.nix b/modules/nixos/disko/options.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/fonts/default.nix b/modules/nixos/fonts/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/hardware/battery/default.nix b/modules/nixos/hardware/battery/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/hardware/btrfs/default.nix b/modules/nixos/hardware/btrfs/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/hardware/common/default.nix b/modules/nixos/hardware/common/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/hardware/npu/default.nix b/modules/nixos/hardware/npu/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/hardware/openrgb/default.nix b/modules/nixos/hardware/openrgb/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/hardware/raspberry-pi/apply-overlays-dtmerge.nix b/modules/nixos/hardware/raspberry-pi/apply-overlays-dtmerge.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/hardware/raspberry-pi/audio.nix b/modules/nixos/hardware/raspberry-pi/audio.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/hardware/raspberry-pi/bluetooth.nix b/modules/nixos/hardware/raspberry-pi/bluetooth.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/hardware/raspberry-pi/config.nix b/modules/nixos/hardware/raspberry-pi/config.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/hardware/raspberry-pi/default.nix b/modules/nixos/hardware/raspberry-pi/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/hardware/raspberry-pi/firmware-builder.nix b/modules/nixos/hardware/raspberry-pi/firmware-builder.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/hardware/raspberry-pi/firmware-builder.sh b/modules/nixos/hardware/raspberry-pi/firmware-builder.sh old mode 100644 new mode 100755 diff --git a/modules/nixos/hardware/raspberry-pi/generational/install-device-tree.sh b/modules/nixos/hardware/raspberry-pi/generational/install-device-tree.sh old mode 100644 new mode 100755 diff --git a/modules/nixos/hardware/raspberry-pi/generational/install-firmware.sh b/modules/nixos/hardware/raspberry-pi/generational/install-firmware.sh old mode 100644 new mode 100755 diff --git a/modules/nixos/hardware/raspberry-pi/generational/kernelboot-gen-builder.sh b/modules/nixos/hardware/raspberry-pi/generational/kernelboot-gen-builder.sh old mode 100644 new mode 100755 diff --git a/modules/nixos/hardware/raspberry-pi/generational/nixos-generations-builder.sh b/modules/nixos/hardware/raspberry-pi/generational/nixos-generations-builder.sh old mode 100644 new mode 100755 diff --git a/modules/nixos/hardware/raspberry-pi/i2c.nix b/modules/nixos/hardware/raspberry-pi/i2c.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/hardware/raspberry-pi/kernelboot-builder.nix b/modules/nixos/hardware/raspberry-pi/kernelboot-builder.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/hardware/raspberry-pi/kernelboot-builder.sh b/modules/nixos/hardware/raspberry-pi/kernelboot-builder.sh old mode 100644 new mode 100755 diff --git a/modules/nixos/hardware/raspberry-pi/leds.nix b/modules/nixos/hardware/raspberry-pi/leds.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/hardware/raspberry-pi/modesetting.nix b/modules/nixos/hardware/raspberry-pi/modesetting.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/hardware/raspberry-pi/overlays/default.nix b/modules/nixos/hardware/raspberry-pi/overlays/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/hardware/raspberry-pi/pwm.nix b/modules/nixos/hardware/raspberry-pi/pwm.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/hardware/raspberry-pi/uboot-builder.nix b/modules/nixos/hardware/raspberry-pi/uboot-builder.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/hardware/raspberry-pi/uboot-builder.sh b/modules/nixos/hardware/raspberry-pi/uboot-builder.sh old mode 100644 new mode 100755 diff --git a/modules/nixos/hardware/raspberry-pi/uefi-builder.nix b/modules/nixos/hardware/raspberry-pi/uefi-builder.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/hardware/raspberry-pi/uefi-builder.sh b/modules/nixos/hardware/raspberry-pi/uefi-builder.sh old mode 100644 new mode 100755 diff --git a/modules/nixos/hardware/raspberry-pi/wifi.nix b/modules/nixos/hardware/raspberry-pi/wifi.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/headless/default.nix b/modules/nixos/headless/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/home/default.nix b/modules/nixos/home/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/homeassistant/automations/lightswitch/default.nix b/modules/nixos/homeassistant/automations/lightswitch/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/homeassistant/automations/motion-light/default.nix b/modules/nixos/homeassistant/automations/motion-light/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/homeassistant/automations/voice-routines/default.nix b/modules/nixos/homeassistant/automations/voice-routines/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/homeassistant/dashboards/default.nix b/modules/nixos/homeassistant/dashboards/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/homeassistant/dashboards/options.nix b/modules/nixos/homeassistant/dashboards/options.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/homeassistant/options.nix b/modules/nixos/homeassistant/options.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/homeassistant/services/esphome/default.nix b/modules/nixos/homeassistant/services/esphome/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/homeassistant/services/govee2mqtt/default.nix b/modules/nixos/homeassistant/services/govee2mqtt/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/homeassistant/services/homeassistant/default.nix b/modules/nixos/homeassistant/services/homeassistant/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/homeassistant/services/music-assistant/default.nix b/modules/nixos/homeassistant/services/music-assistant/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/homeassistant/services/thread/default.nix b/modules/nixos/homeassistant/services/thread/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/homeassistant/services/zigbee2mqtt/default.nix b/modules/nixos/homeassistant/services/zigbee2mqtt/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/monitoring/default.nix b/modules/nixos/monitoring/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/network/default.nix b/modules/nixos/network/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/network/options.nix b/modules/nixos/network/options.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/nix/ccache/default.nix.ori b/modules/nixos/nix/ccache/default.nix.ori old mode 100644 new mode 100755 diff --git a/modules/nixos/nix/default.nix b/modules/nixos/nix/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/power/default.nix b/modules/nixos/power/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/programs/default.nix b/modules/nixos/programs/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/security/common/default.nix b/modules/nixos/security/common/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/security/tpm/default.nix b/modules/nixos/security/tpm/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/actual/default.nix b/modules/nixos/services/actual/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/appimage/default.nix b/modules/nixos/services/appimage/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/arrs/default.nix b/modules/nixos/services/arrs/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/attic/default.nix b/modules/nixos/services/attic/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/authentik/default.nix b/modules/nixos/services/authentik/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/bookshelf/default.nix b/modules/nixos/services/bookshelf/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/caddy/default.nix b/modules/nixos/services/caddy/default.nix old mode 100644 new mode 100755 index a8f233a..f021d45 --- a/modules/nixos/services/caddy/default.nix +++ b/modules/nixos/services/caddy/default.nix @@ -15,7 +15,7 @@ let plugins = [ "github.com/caddy-dns/cloudflare@v0.2.3" ]; - hash = "sha256-bL1cpMvDogD/pdVxGA8CAMEXazWpFDBiGBxG83SmXLA="; + hash = "sha256-20o+14cn/eeLuf1c8uGE1ODRZGC0oxocaIVlv4tFSvA="; }; # "github.com/hslatman/caddy-crowdsec-bouncer/http@v0.9.2" diff --git a/modules/nixos/services/caddy/sops.nix b/modules/nixos/services/caddy/sops.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/calibre/default.nix b/modules/nixos/services/calibre/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/cockpit/default.nix b/modules/nixos/services/cockpit/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/code-server/default.nix b/modules/nixos/services/code-server/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/collabora/default.nix b/modules/nixos/services/collabora/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/common/default.nix b/modules/nixos/services/common/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/coturn/default.nix b/modules/nixos/services/coturn/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/databasus/default.nix b/modules/nixos/services/databasus/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/dispatcharr/default.nix b/modules/nixos/services/dispatcharr/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/gitea/default.nix b/modules/nixos/services/gitea/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/glance/default.nix b/modules/nixos/services/glance/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/glances/default.nix b/modules/nixos/services/glances/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/grafana/dashboards/caddy.json b/modules/nixos/services/grafana/dashboards/caddy.json old mode 100644 new mode 100755 diff --git a/modules/nixos/services/grafana/dashboards/gitea.json b/modules/nixos/services/grafana/dashboards/gitea.json old mode 100644 new mode 100755 diff --git a/modules/nixos/services/grafana/dashboards/nas-overview.json b/modules/nixos/services/grafana/dashboards/nas-overview.json old mode 100644 new mode 100755 diff --git a/modules/nixos/services/grafana/dashboards/nut.json b/modules/nixos/services/grafana/dashboards/nut.json old mode 100644 new mode 100755 diff --git a/modules/nixos/services/grafana/default.nix b/modules/nixos/services/grafana/default.nix index 4ced210..490e21f 100755 --- a/modules/nixos/services/grafana/default.nix +++ b/modules/nixos/services/grafana/default.nix @@ -52,7 +52,7 @@ let name = "node-exporter-full.json"; path = patchDashboard "node-exporter-full.json" (pkgs.fetchurl { url = "https://grafana.com/api/dashboards/1860/revisions/latest/download"; - sha256 = "sha256-pNgn6xgZBEu6LW0lc0cXX2gRkQ8lg/rer34SPE3yEl4="; + sha256 = "sha256-mEWSdsTn1EKpW6xoJv/s0XST46EOoUPbDugQwyngIss="; }) "ds_prometheus"; } { @@ -880,6 +880,16 @@ let # Inject ntfy credentials into Grafana's environment so the $__env{} # provider in contactPoints.yaml can resolve them at runtime. # The grafana.env template is managed by SOPS and owned by grafana:grafana. + sops.templates."grafana.env" = { + content = '' + GRAFANA_NTFY_USER=${config.sops.placeholder."jallen-nas/ntfy/user"} + GRAFANA_NTFY_PASSWORD=${config.sops.placeholder."jallen-nas/ntfy/password"} + ''; + mode = "0400"; + owner = "grafana"; + restartUnits = [ "grafana.service" ]; + }; + systemd.services.grafana.serviceConfig.EnvironmentFile = config.sops.templates."grafana.env".path; # The redis exporter needs AF_INET to reach TCP Redis instances. diff --git a/modules/nixos/services/grimmory/default.nix b/modules/nixos/services/grimmory/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/headscale/default.nix b/modules/nixos/services/headscale/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/jellyseerr/default.nix b/modules/nixos/services/jellyseerr/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/kavita/default.nix b/modules/nixos/services/kavita/default.nix old mode 100644 new mode 100755 index 709132f..f57813a --- a/modules/nixos/services/kavita/default.nix +++ b/modules/nixos/services/kavita/default.nix @@ -27,9 +27,9 @@ let enable = true; dataDir = "${cfg.configDir}/kavita"; tokenKeyFile = config.sops.secrets."jallen-nas/kavita/token".path; - settings = { - inherit (cfg) port; - }; + # settings = { + # inherit (cfg) port; + # }; }; }; }; diff --git a/modules/nixos/services/lemonade/default.nix b/modules/nixos/services/lemonade/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/lubelogger/default.nix b/modules/nixos/services/lubelogger/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/matrix/default.nix b/modules/nixos/services/matrix/default.nix old mode 100644 new mode 100755 index e98f69c..4da3cb6 --- a/modules/nixos/services/matrix/default.nix +++ b/modules/nixos/services/matrix/default.nix @@ -149,6 +149,17 @@ let systemd.services.matrix-synapse = { after = [ "postgresql.service" ]; requires = [ "postgresql.service" ]; + # Prevent unbounded restart loops (e.g. when authentik/OIDC is unreachable at startup). + # Without this, synapse will respawn hundreds of times per hour, flooding the kernel + # message buffer and risking filesystem corruption on unclean shutdown. + startLimitIntervalSec = 300; # 5 minute window + startLimitBurst = 5; # max 5 attempts per window, then give up until manual intervention + serviceConfig = { + # Exponential backoff: starts at 10s, doubles each attempt up to 5 minutes + RestartSec = "10s"; + RestartSteps = 5; + RestartMaxDelaySec = "5min"; + }; }; }; }; diff --git a/modules/nixos/services/matrix/livekit.nix b/modules/nixos/services/matrix/livekit.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/minecraft/default.nix b/modules/nixos/services/minecraft/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/nebula/default.nix b/modules/nixos/services/nebula/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/nebula/sops.nix b/modules/nixos/services/nebula/sops.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/netbootxyz/default.nix b/modules/nixos/services/netbootxyz/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/nextcloud/default.nix b/modules/nixos/services/nextcloud/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/ntfy/default.nix b/modules/nixos/services/ntfy/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/onlyoffice/default.nix b/modules/nixos/services/onlyoffice/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/opencloud/default.nix b/modules/nixos/services/opencloud/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/orca/default.nix b/modules/nixos/services/orca/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/protonmail-bridge/default.nix b/modules/nixos/services/protonmail-bridge/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/restic-server/default.nix b/modules/nixos/services/restic-server/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/restic/default.nix b/modules/nixos/services/restic/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/sparky-fitness/default.nix b/modules/nixos/services/sparky-fitness/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/suggestarr/default.nix b/modules/nixos/services/suggestarr/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/sunshine/default.nix b/modules/nixos/services/sunshine/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/termix/default.nix b/modules/nixos/services/termix/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/termix/guacd.nix b/modules/nixos/services/termix/guacd.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/tunarr/default.nix b/modules/nixos/services/tunarr/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/unmanic/default.nix b/modules/nixos/services/unmanic/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/services/uptimekuma/default.nix b/modules/nixos/services/uptimekuma/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/sops/default.nix b/modules/nixos/sops/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/sops/options.nix b/modules/nixos/sops/options.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/system/default.nix b/modules/nixos/system/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/user/default.nix b/modules/nixos/user/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/virtualization/default.nix b/modules/nixos/virtualization/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/wallpaper/default.nix b/modules/nixos/wallpaper/default.nix old mode 100644 new mode 100755 diff --git a/modules/nixos/wallpaper/options.nix b/modules/nixos/wallpaper/options.nix old mode 100644 new mode 100755 diff --git a/overlays/homeassistant/default.nix b/overlays/homeassistant/default.nix old mode 100644 new mode 100755 diff --git a/overlays/linux-rpi/default.nix b/overlays/linux-rpi/default.nix old mode 100644 new mode 100755 diff --git a/overlays/proton-cachyos/default.nix b/overlays/proton-cachyos/default.nix old mode 100644 new mode 100755 diff --git a/overlays/redis/default.nix b/overlays/redis/default.nix old mode 100644 new mode 100755 diff --git a/packages/arm-trusted-firmware/default.nix b/packages/arm-trusted-firmware/default.nix old mode 100644 new mode 100755 diff --git a/packages/arm-trusted-firmware/version.json b/packages/arm-trusted-firmware/version.json old mode 100644 new mode 100755 diff --git a/packages/bcachefs/default.nix b/packages/bcachefs/default.nix old mode 100644 new mode 100755 diff --git a/packages/bcachefs/kernel-module.nix b/packages/bcachefs/kernel-module.nix old mode 100644 new mode 100755 diff --git a/packages/bcachefs/version.json b/packages/bcachefs/version.json old mode 100644 new mode 100755 diff --git a/packages/calibrePlugin/dedrm/default.nix b/packages/calibrePlugin/dedrm/default.nix old mode 100644 new mode 100755 diff --git a/packages/cockpit-benchmark/default.nix b/packages/cockpit-benchmark/default.nix old mode 100644 new mode 100755 diff --git a/packages/cockpit-benchmark/version.json b/packages/cockpit-benchmark/version.json old mode 100644 new mode 100755 diff --git a/packages/cockpit-machines/default.nix b/packages/cockpit-machines/default.nix old mode 100644 new mode 100755 diff --git a/packages/cockpit-machines/version.json b/packages/cockpit-machines/version.json old mode 100644 new mode 100755 diff --git a/packages/cockpit-podman/default.nix b/packages/cockpit-podman/default.nix old mode 100644 new mode 100755 diff --git a/packages/cockpit-podman/version.json b/packages/cockpit-podman/version.json old mode 100644 new mode 100755 diff --git a/packages/comfyui/.asddefault.nix b/packages/comfyui/.asddefault.nix old mode 100644 new mode 100755 diff --git a/packages/comfyui/comfyui-desktop/default.nix b/packages/comfyui/comfyui-desktop/default.nix old mode 100644 new mode 100755 diff --git a/packages/comfyui/comfyui-frontend/default.nix b/packages/comfyui/comfyui-frontend/default.nix old mode 100644 new mode 100755 diff --git a/packages/comfyui/comfyui/default.nix b/packages/comfyui/comfyui/default.nix old mode 100644 new mode 100755 diff --git a/packages/discord-krisp/default.nix b/packages/discord-krisp/default.nix old mode 100644 new mode 100755 diff --git a/packages/discord-krisp/krisp-patcher.py b/packages/discord-krisp/krisp-patcher.py old mode 100644 new mode 100755 diff --git a/packages/edk2-basetools/default.nix b/packages/edk2-basetools/default.nix old mode 100644 new mode 100755 diff --git a/packages/edk2/default.nix b/packages/edk2/default.nix old mode 100644 new mode 100755 diff --git a/packages/edk2/version.json b/packages/edk2/version.json old mode 100644 new mode 100755 diff --git a/packages/fastflowlm/default.nix b/packages/fastflowlm/default.nix old mode 100644 new mode 100755 diff --git a/packages/homeassistant/ha-anycubic/default.nix b/packages/homeassistant/ha-anycubic/default.nix old mode 100644 new mode 100755 diff --git a/packages/homeassistant/ha-anycubic/version.json b/packages/homeassistant/ha-anycubic/version.json old mode 100644 new mode 100755 diff --git a/packages/homeassistant/ha-bambulab/default.nix b/packages/homeassistant/ha-bambulab/default.nix old mode 100644 new mode 100755 diff --git a/packages/homeassistant/ha-bambulab/version.json b/packages/homeassistant/ha-bambulab/version.json old mode 100644 new mode 100755 diff --git a/packages/homeassistant/ha-bedjet/default.nix b/packages/homeassistant/ha-bedjet/default.nix old mode 100644 new mode 100755 diff --git a/packages/homeassistant/ha-bedjet/version.json b/packages/homeassistant/ha-bedjet/version.json old mode 100644 new mode 100755 diff --git a/packages/homeassistant/ha-gehome/default.nix b/packages/homeassistant/ha-gehome/default.nix old mode 100644 new mode 100755 diff --git a/packages/homeassistant/ha-gehome/version.json b/packages/homeassistant/ha-gehome/version.json old mode 100644 new mode 100755 diff --git a/packages/homeassistant/ha-govee/default.nix b/packages/homeassistant/ha-govee/default.nix old mode 100644 new mode 100755 diff --git a/packages/homeassistant/ha-govee/version.json b/packages/homeassistant/ha-govee/version.json old mode 100644 new mode 100755 diff --git a/packages/homeassistant/ha-icloud3/default.nix b/packages/homeassistant/ha-icloud3/default.nix old mode 100644 new mode 100755 diff --git a/packages/homeassistant/ha-icloud3/version.json b/packages/homeassistant/ha-icloud3/version.json old mode 100644 new mode 100755 diff --git a/packages/homeassistant/ha-local-llm/default.nix b/packages/homeassistant/ha-local-llm/default.nix old mode 100644 new mode 100755 diff --git a/packages/homeassistant/ha-local-llm/version.json b/packages/homeassistant/ha-local-llm/version.json old mode 100644 new mode 100755 diff --git a/packages/homeassistant/ha-mail-and-packages/default.nix b/packages/homeassistant/ha-mail-and-packages/default.nix old mode 100644 new mode 100755 diff --git a/packages/homeassistant/ha-mail-and-packages/version.json b/packages/homeassistant/ha-mail-and-packages/version.json old mode 100644 new mode 100755 diff --git a/packages/homeassistant/ha-nanokvm/default.nix b/packages/homeassistant/ha-nanokvm/default.nix old mode 100644 new mode 100755 diff --git a/packages/homeassistant/ha-nanokvm/version.json b/packages/homeassistant/ha-nanokvm/version.json old mode 100644 new mode 100755 diff --git a/packages/homeassistant/ha-openhasp/default.nix b/packages/homeassistant/ha-openhasp/default.nix old mode 100644 new mode 100755 diff --git a/packages/homeassistant/ha-openhasp/version.json b/packages/homeassistant/ha-openhasp/version.json old mode 100644 new mode 100755 diff --git a/packages/homeassistant/ha-overseerr/default.nix b/packages/homeassistant/ha-overseerr/default.nix old mode 100644 new mode 100755 diff --git a/packages/homeassistant/ha-overseerr/version.json b/packages/homeassistant/ha-overseerr/version.json old mode 100644 new mode 100755 diff --git a/packages/homeassistant/ha-petlibro/default.nix b/packages/homeassistant/ha-petlibro/default.nix old mode 100644 new mode 100755 diff --git a/packages/homeassistant/ha-petlibro/version.json b/packages/homeassistant/ha-petlibro/version.json old mode 100644 new mode 100755 diff --git a/packages/homeassistant/ha-wyzeapi/default.nix b/packages/homeassistant/ha-wyzeapi/default.nix old mode 100644 new mode 100755 diff --git a/packages/homeassistant/ha-wyzeapi/version.json b/packages/homeassistant/ha-wyzeapi/version.json old mode 100644 new mode 100755 diff --git a/packages/homeassistant/homeassistant-api/default.nix b/packages/homeassistant/homeassistant-api/default.nix old mode 100644 new mode 100755 diff --git a/packages/homeassistant/homeassistant-api/version.json b/packages/homeassistant/homeassistant-api/version.json old mode 100644 new mode 100755 diff --git a/packages/lemonade/default.nix b/packages/lemonade/default.nix old mode 100644 new mode 100755 diff --git a/packages/librepods-beta/default.nix b/packages/librepods-beta/default.nix old mode 100644 new mode 100755 diff --git a/packages/librepods-beta/version.json b/packages/librepods-beta/version.json old mode 100644 new mode 100755 diff --git a/packages/librepods/default.nix b/packages/librepods/default.nix old mode 100644 new mode 100755 diff --git a/packages/librepods/version.json b/packages/librepods/version.json old mode 100644 new mode 100755 diff --git a/packages/moondeck-buddy/default.nix b/packages/moondeck-buddy/default.nix old mode 100644 new mode 100755 diff --git a/packages/moondeck-buddy/version.json b/packages/moondeck-buddy/version.json old mode 100644 new mode 100755 diff --git a/packages/nextcloud/nextcloud-app-assistant/default.nix b/packages/nextcloud/nextcloud-app-assistant/default.nix old mode 100644 new mode 100755 diff --git a/packages/nextcloud/nextcloud-app-pdfviewer/default.nix b/packages/nextcloud/nextcloud-app-pdfviewer/default.nix old mode 100644 new mode 100755 diff --git a/packages/nextcloud/nextcloud-app-photos/default.nix b/packages/nextcloud/nextcloud-app-photos/default.nix old mode 100644 new mode 100755 diff --git a/packages/nextcloud/nextcloud-code-server/default.nix b/packages/nextcloud/nextcloud-code-server/default.nix old mode 100644 new mode 100755 diff --git a/packages/nextcloud/nextcloud-richdocuments/default.nix b/packages/nextcloud/nextcloud-richdocuments/default.nix old mode 100644 new mode 100755 diff --git a/packages/omnissa/default.nix b/packages/omnissa/default.nix old mode 100644 new mode 100755 diff --git a/packages/plymouth-bgrt-apple/default.nix b/packages/plymouth-bgrt-apple/default.nix old mode 100644 new mode 100755 diff --git a/packages/profile-pic/default.nix b/packages/profile-pic/default.nix old mode 100644 new mode 100755 diff --git a/packages/proton-cachyos/default.nix b/packages/proton-cachyos/default.nix old mode 100644 new mode 100755 diff --git a/packages/proton-cachyos/version.json b/packages/proton-cachyos/version.json old mode 100644 new mode 100755 diff --git a/packages/python/comfy-aimdo/default.nix b/packages/python/comfy-aimdo/default.nix old mode 100644 new mode 100755 diff --git a/packages/python/comfy-aimdo/version.json b/packages/python/comfy-aimdo/version.json old mode 100644 new mode 100755 diff --git a/packages/python/comfy-kitchen/default.nix b/packages/python/comfy-kitchen/default.nix old mode 100644 new mode 100755 diff --git a/packages/python/comfy-kitchen/version.json b/packages/python/comfy-kitchen/version.json old mode 100644 new mode 100755 diff --git a/packages/python/gehomesdk/default.nix b/packages/python/gehomesdk/default.nix old mode 100644 new mode 100755 diff --git a/packages/python/gehomesdk/version.json b/packages/python/gehomesdk/version.json old mode 100644 new mode 100755 diff --git a/packages/python/magicattr/default.nix b/packages/python/magicattr/default.nix old mode 100644 new mode 100755 diff --git a/packages/python/magicattr/version.json b/packages/python/magicattr/version.json old mode 100644 new mode 100755 diff --git a/packages/python/pipewire-python/default.nix b/packages/python/pipewire-python/default.nix old mode 100644 new mode 100755 diff --git a/packages/python/pipewire-python/version.json b/packages/python/pipewire-python/version.json old mode 100644 new mode 100755 diff --git a/packages/python/pyoverseerr/default.nix b/packages/python/pyoverseerr/default.nix old mode 100644 new mode 100755 diff --git a/packages/python/pyoverseerr/version.json b/packages/python/pyoverseerr/version.json old mode 100644 new mode 100755 diff --git a/packages/python/python-nanokvm/default.nix b/packages/python/python-nanokvm/default.nix old mode 100644 new mode 100755 diff --git a/packages/python/python-nanokvm/version.json b/packages/python/python-nanokvm/version.json old mode 100644 new mode 100755 diff --git a/packages/python/python-roborock/default.nix b/packages/python/python-roborock/default.nix old mode 100644 new mode 100755 diff --git a/packages/python/python-steam/default.nix b/packages/python/python-steam/default.nix old mode 100644 new mode 100755 diff --git a/packages/python/python-steam/version.json b/packages/python/python-steam/version.json old mode 100644 new mode 100755 diff --git a/packages/python/pyvesync/default.nix b/packages/python/pyvesync/default.nix old mode 100644 new mode 100755 diff --git a/packages/python/pyvesync/version.json b/packages/python/pyvesync/version.json old mode 100644 new mode 100755 diff --git a/packages/python/wyzeapy/default.nix b/packages/python/wyzeapy/default.nix old mode 100644 new mode 100755 diff --git a/packages/python/wyzeapy/version.json b/packages/python/wyzeapy/version.json old mode 100644 new mode 100755 diff --git a/packages/raspberrypi/ffmpeg-rpi/default.nix b/packages/raspberrypi/ffmpeg-rpi/default.nix old mode 100644 new mode 100755 diff --git a/packages/raspberrypi/ffmpeg-rpi/version.json b/packages/raspberrypi/ffmpeg-rpi/version.json old mode 100644 new mode 100755 diff --git a/packages/raspberrypi/libraspberrypi/default.nix b/packages/raspberrypi/libraspberrypi/default.nix old mode 100644 new mode 100755 diff --git a/packages/raspberrypi/libraspberrypi/version.json b/packages/raspberrypi/libraspberrypi/version.json old mode 100644 new mode 100755 diff --git a/packages/raspberrypi/linux-rpi/default.nix b/packages/raspberrypi/linux-rpi/default.nix old mode 100644 new mode 100755 diff --git a/packages/raspberrypi/linux-rpi/version.json b/packages/raspberrypi/linux-rpi/version.json old mode 100644 new mode 100755 diff --git a/packages/raspberrypi/raspberryPiWirelessFirmware/default.nix b/packages/raspberrypi/raspberryPiWirelessFirmware/default.nix old mode 100644 new mode 100755 diff --git a/packages/raspberrypi/raspberryPiWirelessFirmware/version.json b/packages/raspberrypi/raspberryPiWirelessFirmware/version.json old mode 100644 new mode 100755 diff --git a/packages/raspberrypi/raspberrypi-overlays/default.nix b/packages/raspberrypi/raspberrypi-overlays/default.nix old mode 100644 new mode 100755 diff --git a/packages/raspberrypi/raspberrypi-overlays/version.json b/packages/raspberrypi/raspberrypi-overlays/version.json old mode 100644 new mode 100755 diff --git a/packages/raspberrypi/raspberrypi-utils/default.nix b/packages/raspberrypi/raspberrypi-utils/default.nix old mode 100644 new mode 100755 diff --git a/packages/raspberrypi/raspberrypi-utils/version.json b/packages/raspberrypi/raspberrypi-utils/version.json old mode 100644 new mode 100755 diff --git a/packages/raspberrypi/raspberrypifw/default.nix b/packages/raspberrypi/raspberrypifw/default.nix old mode 100644 new mode 100755 diff --git a/packages/raspberrypi/raspberrypifw/version.json b/packages/raspberrypi/raspberrypifw/version.json old mode 100644 new mode 100755 diff --git a/packages/raspberrypi/udev-rules/default.nix b/packages/raspberrypi/udev-rules/default.nix old mode 100644 new mode 100755 diff --git a/packages/raspberrypi/udev-rules/version.json b/packages/raspberrypi/udev-rules/version.json old mode 100644 new mode 100755 diff --git a/packages/raspberrypi/uefi-rpi4/default.nix b/packages/raspberrypi/uefi-rpi4/default.nix old mode 100644 new mode 100755 diff --git a/packages/raspberrypi/uefi-rpi4/version.json b/packages/raspberrypi/uefi-rpi4/version.json old mode 100644 new mode 100755 diff --git a/packages/raspberrypi/uefi-rpi5/default.nix b/packages/raspberrypi/uefi-rpi5/default.nix old mode 100644 new mode 100755 diff --git a/packages/raspberrypi/uefi-rpi5/nvram-block.bin b/packages/raspberrypi/uefi-rpi5/nvram-block.bin old mode 100644 new mode 100755 diff --git a/packages/raspberrypi/uefi-rpi5/version.json b/packages/raspberrypi/uefi-rpi5/version.json old mode 100644 new mode 100755 diff --git a/packages/system/gnome-nebula-vpn/default.nix b/packages/system/gnome-nebula-vpn/default.nix old mode 100644 new mode 100755 diff --git a/packages/system/gnome-nebula-vpn/extension/extension.js b/packages/system/gnome-nebula-vpn/extension/extension.js old mode 100644 new mode 100755 diff --git a/packages/system/gnome-nebula-vpn/extension/metadata.json b/packages/system/gnome-nebula-vpn/extension/metadata.json old mode 100644 new mode 100755 diff --git a/packages/system/nebula-sign-cert/default.nix b/packages/system/nebula-sign-cert/default.nix old mode 100644 new mode 100755 diff --git a/packages/system/open-remote-ssh/default.nix b/packages/system/open-remote-ssh/default.nix old mode 100644 new mode 100755 diff --git a/packages/system/open-remote-ssh/version.json b/packages/system/open-remote-ssh/version.json old mode 100644 new mode 100755 diff --git a/packages/system/uart-wifi/default.nix b/packages/system/uart-wifi/default.nix old mode 100644 new mode 100755 diff --git a/packages/xrt/default.nix b/packages/xrt/default.nix old mode 100644 new mode 100755 diff --git a/qemu.nix b/qemu.nix old mode 100644 new mode 100755 diff --git a/scripts/README_tui.md b/scripts/README_tui.md old mode 100644 new mode 100755 diff --git a/scripts/hooks.py b/scripts/hooks.py old mode 100644 new mode 100755 diff --git a/scripts/lib.py b/scripts/lib.py old mode 100644 new mode 100755 diff --git a/scripts/update.py b/scripts/update.py old mode 100644 new mode 100755 diff --git a/secrets/allyx-secrets.yaml b/secrets/allyx-secrets.yaml old mode 100644 new mode 100755 diff --git a/secrets/desktop-secrets.yaml b/secrets/desktop-secrets.yaml old mode 100644 new mode 100755 diff --git a/secrets/disk.jwe b/secrets/disk.jwe old mode 100644 new mode 100755 diff --git a/secrets/hdd.jwe b/secrets/hdd.jwe old mode 100644 new mode 100755 diff --git a/secrets/mac-secrets.yaml b/secrets/mac-secrets.yaml old mode 100644 new mode 100755 diff --git a/secrets/nas-secrets.yaml b/secrets/nas-secrets.yaml old mode 100644 new mode 100755 diff --git a/secrets/nas_pool.key b/secrets/nas_pool.key old mode 100644 new mode 100755 diff --git a/secrets/nuc-nixos.jwe b/secrets/nuc-nixos.jwe old mode 100644 new mode 100755 diff --git a/secrets/nuc-secrets.yaml b/secrets/nuc-secrets.yaml old mode 100644 new mode 100755 diff --git a/secrets/pi5-secrets.yaml b/secrets/pi5-secrets.yaml old mode 100644 new mode 100755 diff --git a/statix.toml b/statix.toml old mode 100644 new mode 100755 diff --git a/systems/aarch64-darwin/macbook-pro/homebrew.nix b/systems/aarch64-darwin/macbook-pro/homebrew.nix old mode 100644 new mode 100755 diff --git a/systems/aarch64-darwin/macbook-pro/programs.nix b/systems/aarch64-darwin/macbook-pro/programs.nix old mode 100644 new mode 100755 diff --git a/systems/aarch64-darwin/macbook-pro/settings.nix b/systems/aarch64-darwin/macbook-pro/settings.nix old mode 100644 new mode 100755 diff --git a/systems/aarch64-darwin/macbook-pro/system.nix b/systems/aarch64-darwin/macbook-pro/system.nix old mode 100644 new mode 100755 diff --git a/systems/aarch64-linux/macbook-pro-nixos/NixOS.png b/systems/aarch64-linux/macbook-pro-nixos/NixOS.png old mode 100644 new mode 100755 diff --git a/systems/aarch64-linux/macbook-pro-nixos/apple.png b/systems/aarch64-linux/macbook-pro-nixos/apple.png old mode 100644 new mode 100755 diff --git a/systems/aarch64-linux/macbook-pro-nixos/boot.nix b/systems/aarch64-linux/macbook-pro-nixos/boot.nix old mode 100644 new mode 100755 diff --git a/systems/aarch64-linux/macbook-pro-nixos/filesystems.nix b/systems/aarch64-linux/macbook-pro-nixos/filesystems.nix old mode 100644 new mode 100755 diff --git a/systems/aarch64-linux/macbook-pro-nixos/hardware-configuration.nix b/systems/aarch64-linux/macbook-pro-nixos/hardware-configuration.nix old mode 100644 new mode 100755 diff --git a/systems/aarch64-linux/macbook-pro-nixos/services.nix b/systems/aarch64-linux/macbook-pro-nixos/services.nix old mode 100644 new mode 100755 diff --git a/systems/aarch64-linux/macbook-pro-nixos/specialisations/asahi-fairydust.nix b/systems/aarch64-linux/macbook-pro-nixos/specialisations/asahi-fairydust.nix old mode 100644 new mode 100755 diff --git a/systems/aarch64-linux/pi5/adguard.nix b/systems/aarch64-linux/pi5/adguard.nix old mode 100644 new mode 100755 diff --git a/systems/aarch64-linux/pi5/default.nix b/systems/aarch64-linux/pi5/default.nix old mode 100644 new mode 100755 diff --git a/systems/x86_64-install-iso/graphical/default.nix b/systems/x86_64-install-iso/graphical/default.nix old mode 100644 new mode 100755 diff --git a/systems/x86_64-linux/allyx/boot.nix b/systems/x86_64-linux/allyx/boot.nix old mode 100644 new mode 100755 diff --git a/systems/x86_64-linux/allyx/default.nix b/systems/x86_64-linux/allyx/default.nix old mode 100644 new mode 100755 diff --git a/systems/x86_64-linux/jallen-nas/default.nix b/systems/x86_64-linux/jallen-nas/default.nix index d074ec8..ce1253f 100755 --- a/systems/x86_64-linux/jallen-nas/default.nix +++ b/systems/x86_64-linux/jallen-nas/default.nix @@ -287,6 +287,9 @@ in options = [ "version_upgrade=incompatible" "nofail" + # Allow bcachefs to self-heal journal errors (e.g. duplicate entries from unclean shutdown) + # instead of refusing to mount with fsck_errors_not_fixed. + "errors=fix_safe" ]; }; }; diff --git a/systems/x86_64-linux/jallen-nas/disabled.nix b/systems/x86_64-linux/jallen-nas/disabled.nix old mode 100644 new mode 100755 index 19d6592..514bec7 --- a/systems/x86_64-linux/jallen-nas/disabled.nix +++ b/systems/x86_64-linux/jallen-nas/disabled.nix @@ -23,22 +23,29 @@ in ai = mkForce disabled; arrs = mkForce disabled; attic = mkForce disabled; + bookshelf = mkForce disabled; authentik = mkForce disabled; authentikRac = mkForce disabled; + caddy = mkForce disabled; calibre = mkForce disabled; calibre-web = mkForce disabled; code-server = mkForce disabled; collabora = mkForce disabled; + coturn = mkForce disabled; crowdsec = mkForce disabled; + databasus = mkForce disabled; dispatcharr = mkForce disabled; tunarr = mkForce disabled; free-games-claimer = mkForce disabled; gitea = mkForce disabled; glance = mkForce disabled; glances = mkForce disabled; + grafana = mkForce disabled; + guacd = mkForce disabled; headscale = mkForce disabled; immich = mkForce disabled; jellyfin = mkForce disabled; + kavita = mkForce disabled; seerr = mkForce disabled; lubelogger = mkForce disabled; manyfold = mkForce disabled; @@ -56,8 +63,12 @@ in paperless-ai = mkForce disabled; protonmail-bridge = mkForce disabled; restic-server = mkForce disabled; + sparky-fitness-server = mkForce disabled; + sparky-fitness = mkForce disabled; + suggestarr = mkForce disabled; sunshine = mkForce disabled; tdarr = mkForce disabled; + termix = mkForce disabled; unmanic = mkForce disabled; uptime-kuma = mkForce disabled; wyoming = mkForce disabled; @@ -65,6 +76,7 @@ in }; services = { + mysql = mkForce disabled; postgresql = mkForce disabled; }; }; diff --git a/systems/x86_64-linux/jallen-nas/nas-defaults.nix b/systems/x86_64-linux/jallen-nas/nas-defaults.nix old mode 100644 new mode 100755 diff --git a/systems/x86_64-linux/jallen-nas/nas-pool.nix b/systems/x86_64-linux/jallen-nas/nas-pool.nix old mode 100644 new mode 100755 diff --git a/systems/x86_64-linux/jallen-nas/sops.nix b/systems/x86_64-linux/jallen-nas/sops.nix index b2b5430..0b39ab1 100755 --- a/systems/x86_64-linux/jallen-nas/sops.nix +++ b/systems/x86_64-linux/jallen-nas/sops.nix @@ -351,19 +351,6 @@ in ]; }; - # Grafana reads ntfy credentials via systemd EnvironmentFile so the - # $__env{} provider works in alerting provisioning YAML. The file - # provider ($__file{}) only works in grafana.ini, not in provisioning. - "grafana.env" = { - content = '' - GRAFANA_NTFY_USER=${config.sops.placeholder."jallen-nas/ntfy/user"} - GRAFANA_NTFY_PASSWORD=${config.sops.placeholder."jallen-nas/ntfy/password"} - ''; - mode = "0400"; - owner = "grafana"; - restartUnits = [ "grafana.service" ]; - }; - # CrowdSec HTTP notification plugin config with credentials baked in. # The plugin process spawned by crowdsec/cscli reads this file directly. # Credentials are embedded in the URL using HTTP basic auth so no diff --git a/systems/x86_64-linux/jallen-nas/users.nix b/systems/x86_64-linux/jallen-nas/users.nix index 734c3ca..f42e38d 100755 --- a/systems/x86_64-linux/jallen-nas/users.nix +++ b/systems/x86_64-linux/jallen-nas/users.nix @@ -53,6 +53,14 @@ in # Prometheus reads bearer_token_file for the Gitea scrape job at runtime. prometheus = { + isSystemUser = true; + group = "prometheus"; + extraGroups = [ "keys" ]; + }; + + grafana = { + isSystemUser = true; + group = "grafana"; extraGroups = [ "keys" ]; }; @@ -67,6 +75,8 @@ in groups = { nextcloud-exporter = { }; crowdsec = { }; + prometheus = { }; + grafana = { }; nut.name = "nut"; "jallen-nas".name = "jallen-nas"; }; diff --git a/systems/x86_64-linux/jallen-nas/vpn.nix b/systems/x86_64-linux/jallen-nas/vpn.nix old mode 100644 new mode 100755 diff --git a/systems/x86_64-linux/matt-nixos/default.nix b/systems/x86_64-linux/matt-nixos/default.nix old mode 100644 new mode 100755 diff --git a/systems/x86_64-linux/matt-nixos/disk.jwe b/systems/x86_64-linux/matt-nixos/disk.jwe old mode 100644 new mode 100755 diff --git a/systems/x86_64-linux/matt-nixos/services/lsfg-vk/default.nix b/systems/x86_64-linux/matt-nixos/services/lsfg-vk/default.nix old mode 100644 new mode 100755 diff --git a/systems/x86_64-linux/matt-nixos/services/ratbagd/default.nix b/systems/x86_64-linux/matt-nixos/services/ratbagd/default.nix old mode 100644 new mode 100755 diff --git a/systems/x86_64-linux/matt-nixos/services/restic/default.nix b/systems/x86_64-linux/matt-nixos/services/restic/default.nix old mode 100644 new mode 100755 diff --git a/systems/x86_64-linux/matt-nixos/wifi-fixer.nix b/systems/x86_64-linux/matt-nixos/wifi-fixer.nix old mode 100644 new mode 100755 diff --git a/systems/x86_64-linux/nuc-nixos/boot.nix b/systems/x86_64-linux/nuc-nixos/boot.nix old mode 100644 new mode 100755 diff --git a/systems/x86_64-linux/nuc-nixos/dashboard.nix b/systems/x86_64-linux/nuc-nixos/dashboard.nix old mode 100644 new mode 100755 diff --git a/systems/x86_64-linux/nuc-nixos/default.nix b/systems/x86_64-linux/nuc-nixos/default.nix old mode 100644 new mode 100755 diff --git a/treefmt.nix b/treefmt.nix old mode 100644 new mode 100755