No description
Find a file
Christine Elisabeth Koppel dcdc5f8819
All checks were successful
Build Nix modules (dry-run) / build-modules (push) Successful in 4m5s
Intenral firewall bypass if local and docker.
2026-02-21 14:19:50 +01:00
.forgejo/workflows Whoops, I forgor zsh 2026-02-12 19:10:52 +01:00
.idea Add NixOS configuration files. This is a foundation git commit that has now been deployed and working 2026-02-06 00:00:00 +01:00
docs Add initial quick start guide for Polyteknisk Radiogruppe server architecture. 2026-02-18 18:32:53 +01:00
nix-system-configs Intenral firewall bypass if local and docker. 2026-02-21 14:19:50 +01:00
src Initialize project structure with basic configuration files and main function 2025-12-03 22:31:03 +01:00
.gitignore - Services: Added Part-DB 2026-02-07 17:31:23 +01:00
.sops.yaml Update keys, add Tailscale to the mailserver 2026-02-15 16:34:15 +01:00
Cargo.lock Initialize project structure with basic configuration files and main function 2025-12-03 22:31:03 +01:00
Cargo.toml Initialize project structure with basic configuration files and main function 2025-12-03 22:31:03 +01:00
documentation_titlepage.md Add section showing current layout with image in README, link the guide what to do if ran out of disk space. 2026-02-17 12:22:28 +01:00
dry_run.zsh Add mail server configuration with Stalwart Mail, secrets management, and Traefik integration 2026-02-15 15:47:54 +01:00
flake.lock Created preliminary foundation of testing the nix systems by Flakes. 2026-02-12 15:00:54 +01:00
flake.nix Add mail server configuration with Stalwart Mail, secrets management, and Traefik integration 2026-02-15 15:47:54 +01:00
img.png Add section showing current layout with image in README, link the guide what to do if ran out of disk space. 2026-02-17 12:22:28 +01:00
LICENSE Add AGPLv3 LICENSE and README files for project documentation 2026-02-06 00:13:49 +01:00
README.md Add section showing current layout with image in README, link the guide what to do if ran out of disk space. 2026-02-17 12:22:28 +01:00
secrets.md Details, details! 2026-02-17 10:16:24 +01:00

Title

If you want to see proper documentation, please visit the documentation page.

The following repository is also mirrored at the local PRG git or at Codeberg:

Hewo :3 - you have found the Polyteknisk Radiogruppe's NixOS configurations of our server, feel free to poke holes at it, as security through obscurity isn't really security. Like don't be a douche poking holes, but be nice, do not ruin it if you were on the other side, silliness is okay, but consent is best.

TODO HECK

  • Do a massive overhaul of the file structure, like there should be like modules where it is possible to call things to be packages. I.e. Calling the OVMF/SeaBIOS + Gnome/Plasma/Sway + Local changes, which two former would be separate .nix files. -> Probably will do a V3 or v2.1 later on when mature
  • Add the .env for the configurations so that we add the git config --global user.email "you@example.com" and git config --global user.name "Your Name" with the account custom made for this.
  • Clean up the hanging configurations -> PiHole DNS Stuff needs to be transferred over elegantly, don't want to touch it unless I am myself en-site.
  • Find a more clean way to store initial passwords (.env??) -> nix-sops
  • Create proper build automation scripts -> Needs to be properly done.
  • Attach more NixOS weblinks...
  • Update Forgejo Styling
  • Figure out what the hecc to do with SSL Certifications in the most elegant way -> Use Traefik
  • Add Git Actions to Forgejo -> It was already added, just need to setup the CI itself.
  • Setup the CI backend.
  • Create the Podman x Portainer NixOS module -> See Songsheet
  • Read up more about how to a backup machine stuff and making it Nix-y...
  • Figure out my life
  • Setup Hardware Keys
  • Setup a VPN
  • Setup Alejandra pre-commit hook

NOTES FOR FUTURE

ServiceException: 401 Anonymous caller does not have storage.objects.list access to the Google Cloud Storage bucket. Permission 'storage.objects.list' denied on resource (or it may not exist).

You need to run

sudo gcloud init
sudo gcloud auth activate-service-account --key-file /run/secrets/gcloud_bucket

Cheesus Crust, document this plz Google, whyyyyyyyyy

Current Layout as of 2026-02-17

img.png