My personal NixOS configuration
Find a file
Evie Litherland-Smith 640341cc76 flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/6e99f2a27d600612004fbd2c3282d614bfee6421?narHash=sha256-eV%2B63gK0Mp7ygCR0Oy4yIYSNcum2VQwnZamHxYTNi%2BM%3D' (2024-08-30)
  → 'github:nixos/nixpkgs/6f6c45b5134a8ee2e465164811e451dcb5ad86e3?narHash=sha256-tiN5Rlg/jiY0tyky%2BsoJZoRzLKbPyIdlQ77xVgREDNM%3D' (2024-09-03)
• Updated input 'plasma-manager':
    'github:nix-community/plasma-manager/5c97fe8af2a2e561f14195ed357d8c451fdbff4c?narHash=sha256-gPR3sxkKxISUvydnqoj54znpUkK8av/HVFuFJuYUw3w%3D' (2024-08-25)
  → 'github:nix-community/plasma-manager/b82b9ba85c156a5e7f865cc94ed2a4df20cbbf39?narHash=sha256-1e9zB0dMRwdAbhxVATlL25rExMDh4gZ/3AXdkpU8408%3D' (2024-09-05)
• Updated input 'tt-schemes':
    'github:tinted-theming/schemes/43294f13504020b879723fa7a00a0abd39b18cc3?narHash=sha256-spz4qmUaejGLB6k/RKc7k%2BunbNogedwdQv5yBoL3ThA%3D' (2024-08-28)
  → 'github:tinted-theming/schemes/992b6c372a00e284a7dc26b19a0d11b7afcba1f1?narHash=sha256-XOxESrzdIpcYMLS%2Bs4D16M4c8gAk3sLyAQUvsb%2BlQLk%3D' (2024-09-02)
2024-09-06 08:23:38 +01:00
pfp Update pfps for badger, new micro versions 2024-07-26 20:23:33 +01:00
system Set Ferdium to start in background again 2024-09-02 08:33:16 +01:00
.gitignore Update Makefile 2024-06-22 09:41:24 +01:00
.pre-commit-config.yaml Add pre-commit hook to run gitleaks 2024-06-24 07:31:02 +01:00
flake.lock flake.lock: Update 2024-09-06 08:23:38 +01:00
flake.nix Login shell updates 2024-09-01 12:58:42 +01:00
Makefile Add flathub setup to Makefile 2024-08-23 07:07:25 +01:00
README.org Use libsecret for mbsync and git-credential-helper 2024-07-08 08:58:32 +01:00

README

My personal NixOS + home-manager configuration files.

To set up without cloning the repository (assuming an already running NixOS system), run:

  sudo nixos-rebuild switch --flake "git+https://git.xenia.me.uk/pixelifytica/nixos.git?ref=main"\#$(hostname)

Password store setup

Transfer GPG key(s)

  # Export keys on existing machine
  gpg -a --export > publickeys.asc
  gpg -a --export-secret-keys > privatekeys.asc
  # Import key on new machine
  gpg --import privatekeys.asc; gpg --import publickeys.asc
  # Edit (for each key) to set trust
  gpg --edit-key evie@xenia.me.uk

Clone password-store repository

  git clone https://git.xenia.me.uk/pixelifytica/pass $PASSWORD_STORE_DIR

Email setup

Passwords for mbsync

Run

mbsync-ensure-pass
to check for passwords required by mbsync, and query for missing passwords.

Static app-specific passwords are stored in password-store, fetch from there to add to secret service.

Proton

Bridge

Start Proton Mail Bridge application, if needed configure to store using SecretService and log in. Application will auto-start with desktop session.

Use password from Bridge for mbsync.

Outlook

Davmail

Run

davmail-setup
to automate this process.

On first run (or if token expires), stop systemd service and run manually to complete manual auth. Token will stay valid for a little while (no idea how long specifically).

  # Restart service to ensure ~/.davmail.properties exists
  systemctl --user restart davmail.service
  # Run to use manual authentication
  systemctl --user stop davmail.service && davmail -notray ~/.davmail.properties
  # Restart again so that service picks up available ports
  systemctl --user restart davmail.service

Flathub setup

  flatpak remote-add --if-not-exists flathub https://dl.flathub.org/repo/flathub.flatpakrepo

Further reading: