bert/configuration.nix

@@ -6,7 +6,6 @@
       ./hardware-configuration.nix
       ./services/factorio.nix
       ./services/http/index.nix
-      ./services/immich.nix
       ./services/minecraft.nix
       ./services/monitoring.nix
       ./services/forgejo.nix
@@ -42,11 +41,7 @@
   fileSystems."/mnt/bigbird_public" = {
     device = "//bigbird/public";
     fsType = "cifs";
-    options = [
-      "x-systemd.automount"
-      "x-systemd.requires=network-online.target"
-      "guest"
-    ];
+    options = [ "guest" ];
   };
 
   time.timeZone = "America/Chicago";

bert/services/forgejo.nix

@@ -1,7 +1,6 @@
 {
   services.forgejo = {
     enable = true;
-    stateDir = "/srv/forgejo";
     settings = {
       DEFAULT = {
         APP_NAME = "Forgejo: Beyond coding. We Forge."; # TODO

bert/services/http/home.chandlerswift.com.nix

@@ -7,24 +7,6 @@
     reverse_proxy /grafana/* localhost:3000
     # hide .git # ???
 
-    respond /robots.txt 200 {
-      body <<EOF
-    User-agent: *
-    Disallow: /sheets/
-    Disallow: /newspapers/
-    EOF
-    }
-
-    file_server /newspapers/* {
-      browse ${./caddy-browse-template.html}
-
-      # TOOD: is there a better way to strip the prefix here? This shouldn't be
-      # vulnerable to a directory traversal attack (and it doesn't really
-      # matter anyway; everything in there is public somewhere or another!) but
-      # it sorta feels wrong to do this without a `/sheets` suffix.
-      root /mnt/bigbird_public
-    }
-
     file_server /sheets/* {
       browse ${./caddy-browse-template.html}
 
@@ -32,7 +14,7 @@
       # vulnerable to a directory traversal attack (and it doesn't really
       # matter anyway; everything in there is public somewhere or another!) but
       # it sorta feels wrong to do this without a `/sheets` suffix.
-      root /mnt/bigbird_public
+      root /mnt/bigbird-public
     }
 
     handle_errors {

bert/services/http/index.nix

@@ -13,7 +13,6 @@
     ./maps.chandlerswift.com.nix
     ./music.chandlerswift.com.nix
     ./nau-sidewalks.chandlerswift.com.nix
-    ./photos.chandlerswift.com.nix
     ./preview.chandlerswift.com.nix
     ./sharontrahan.com.nix
     ./social.chandlerswift.com.nix

bert/services/http/photos.chandlerswift.com.nix

@@ -1,8 +0,0 @@
-{config, ...}: {
-  services.immich.enable = true;
-  services.immich.mediaLocation = "/srv/immich";
-
-  services.caddy.virtualHosts."photos.chandlerswift.com".extraConfig = ''
-    reverse_proxy localhost:${toString config.services.immich.port}
-  '';
-}

oscar/configuration.nix

@@ -34,7 +34,11 @@
   boot.plymouth.theme = "breeze";
 
   boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
-  boot.binfmt.preferStaticEmulators = true;
+  boot.binfmt.registrations.aarch64-linux = {
+    interpreter = "${pkgs.pkgsStatic.qemu-user.override { hostCpuTargets = ["aarch64-linux-user"]; }}/bin/qemu-aarch64";
+    wrapInterpreterInShell = false;
+    fixBinary = true;
+  };
 
   boot.initrd.luks.devices."luks-ca2fdf0b-d385-498c-9f7d-f58368a65fd4".device = "/dev/disk/by-uuid/ca2fdf0b-d385-498c-9f7d-f58368a65fd4";
   networking.hostName = "oscar"; # Define your hostname.
@@ -97,15 +101,12 @@
     jack.enable = true;
   };
 
-  environment.sessionVariables = {
-    NIXOS_OZONE_WL = "1";
-    BUILDKIT_PROGRESS = "plain";
-  };
+  environment.sessionVariables.NIXOS_OZONE_WL = "1";
 
   # Define a user account. Don't forget to set a password with ‘passwd’.
   users.users.chandler.isNormalUser = true;
   users.users.chandler.description = "Chandler Swift";
-  users.users.chandler.extraGroups = [ "networkmanager" "wheel" "dialout" "cdrom" "plugdev" "adbusers" "libvirtd" "docker" ];
+  users.users.chandler.extraGroups = [ "networkmanager" "wheel" "dialout" "cdrom" "plugdev" "adbusers" "docker" ];
   home-manager.backupFileExtension = "backup";
   home-manager.users.chandler = { pkgs, ... }: {
 
@@ -151,7 +152,6 @@
       ffmpeg
       git-absorb
       imagemagick
-      jujutsu
       killall
       pv
       scrcpy