From 2bad638b0210c3f064ec9f4b50fa4bf202f536b5 Mon Sep 17 00:00:00 2001 From: Infinidoge Date: Sun, 8 Dec 2024 01:17:54 -0500 Subject: [PATCH 1/4] add kitty terminfo --- base.nix | 1 + 1 file changed, 1 insertion(+) diff --git a/base.nix b/base.nix index 16d9cac..f84cea4 100644 --- a/base.nix +++ b/base.nix @@ -38,6 +38,7 @@ environment.systemPackages = with pkgs; [ vim git + kitty.terminfo ]; environment.defaultPackages = lib.mkForce [ ]; From 0d8e84adb9594dc6aafe2fcdf5fe9debb239c045 Mon Sep 17 00:00:00 2001 From: Infinidoge Date: Sun, 8 Dec 2024 01:18:08 -0500 Subject: [PATCH 2/4] enable nix-command and flakes --- flake.nix | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/flake.nix b/flake.nix index 4b2c1db..4b29e32 100644 --- a/flake.nix +++ b/flake.nix @@ -19,6 +19,10 @@ modules = nixpkgs.lib.flatten modules ++ [ ./base.nix ./kiosk.nix + + { + nix.settings.extra-experimental-features = [ "nix-command" "flakes" ]; + } ]; }; From 3037384c406e0806b070494bf85cd011b4ec3016 Mon Sep 17 00:00:00 2001 From: Infinidoge Date: Sun, 8 Dec 2024 01:18:50 -0500 Subject: [PATCH 3/4] clone config using http --- kiosk.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kiosk.nix b/kiosk.nix index f087edf..2322757 100644 --- a/kiosk.nix +++ b/kiosk.nix @@ -45,7 +45,7 @@ in requires = [ "network-online.target" ]; path = with pkgs; [ git git-crypt ]; script = '' - git clone ssh://git@inx.moe:245/Infinidoge/kiosk.git /etc/nixos + git clone https://git.inx.moe/Infinidoge/kiosk.git /etc/nixos cd /etc/nixos git-crypt unlock /etc/decryption.key ''; From 52a076e375baac810c5d75ede931e2cd8bad2860 Mon Sep 17 00:00:00 2001 From: Infinidoge Date: Sun, 8 Dec 2024 01:19:03 -0500 Subject: [PATCH 4/4] create ephemeral nodes --- kiosk.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kiosk.nix b/kiosk.nix index 2322757..13e6018 100644 --- a/kiosk.nix +++ b/kiosk.nix @@ -58,7 +58,7 @@ in enable = true; extraUpFlags = [ "--advertise-tags" "tag:kiosk" ]; authKeyFile = ./tailscale-client-secret.key; - authKeyParameters.ephemeral = false; + authKeyParameters.ephemeral = true; openFirewall = true; }; networking.firewall.trustedInterfaces = [ "tailscale0" ];