Flake-parts: writing custom flake modules
A primer on writing flake-parts reusable flake modules.
Published on:
Tags: nix , flake-parts
Personal blog of Vladimir Timofeenko
-
-
Practical Nix flake anatomy: a guided tour of flake.nix
Overview of the
flake.nixfile, its components and what they are used for.Published on:
Tags: nix
-
My doom-emacs setup
A literate programming Doom emacs setup centered around GTD and Nix development.
Published on:
-
Wireguard namespace flake
For a while I have been playing with the idea of running services in Linux namespaces to achieve network isolation from the “host” system on Linux. This project, written in literate programming style, is an Nix-based implementation of a configurable network namespace that uses Wireguard.
Published on:
Tags: nix
-
Unlocking LUKS2 with X509 Nitrokey during boot
A continuation of previous post with the instruction to unlock encrypted root partition during boot.
Published on:
-
Unlocking LUKS2 with X509 certificate on Nitrokey Storage
This post describes the procedure to unlock LUKS2 partition using X509 certificate stored on Nitrokey Storage.
Published on:
-
Repository verification for Gentoo overlays
This post describes the steps needed to set up signature verification on a git-based non-official Gentoo ebuild repository.
Published on:
-
Migrating from no-multilib profile to multilib one
An outline of a migration of a Gentoo installation from no-multilib profile to a multilib one without a full reinstall.
Published on:
-
Mutt-wizard post-install configuration
A few configuration steps after installing mutt-wizard. Includes a couple of patches and general configuration changes.
Published on:
-
Creating nginx SSL proxies for services in docker on LAN
This article talks about how one can use nginx to create SSL proxies for docker (and, potentially, other) services running in the local (e.g. home) network. Since the network is a home one, the certificates will be signed by specially created Certificate Authority that will be marked as trusted on the client devices.
Environment #
In this scenario, we will have two machines. A client and a server. The server machine is running one or more Docker containers. These containers expose certain ports to manage or access the services running inside those containers.
Published on:
-
Firefox Browserpass with firejail and Apparmor
This is a guide describing how to set up Firefox with firejail + AppArmor with password management in pass. The passwords are filled in websites forms through Browserpass addon + Browserpass native application.
The setup password store will only contain passwords used by the websites encrypted through a separate key.
Published on:
Tags: firefox , browserpass , firejail