Skip to content

Latest commit

 

History

History
95 lines (62 loc) · 3.01 KB

additional-setup.md

File metadata and controls

95 lines (62 loc) · 3.01 KB

Additional Setup

The following documents some NixOS setup that wasn't automated.

Encryption Keys

Github SSH

Keys for SSH aren't automatically placed with chezmoi secret since it complicated things to much. The key for github SSH must be transferred manually from Bitwarden or:

  • /run/secrets/keys/github_personal to ~/.ssh/keys/github_personal.
  • /run/secrets/radicale/users to ~/.config/radicale/users.

NIPR email, Teams, etc.

  • Run pcscan and make sure card reader shows up.
  • Run pkcs11-register to register cac.
  • Download certs (i.e. unclass-certificates_pkcs7_DoD.zip) and import into Firefox.
  • Use below links:

Teams Outlook OneDrive

Wireguard Client

Wireguard is nice for a home vpn. NixOS setus up all of the configurations for peers automatically on torus. Public keys, private keys, and config files are generated and stored in ~/.wireguard. Some machines like kestrel setup the vpn automatically within configuration.nix. However, others require a small amount of manual setup.

Cell phones like adjudicator are added with a generated QR code:

qrencode -t ansiutf8 < <conf file>

Computers using NetworkManager like bulwark need to have conf file imported:

nmcli connection import type wireguard file <conf file>

Mount network drives

I find fstab messing about more trobule than it is worth. Credentials need to be manually created in ~/.smb. To mount network drives when needed with the following command:

linux-mount-<network drive name>

Git-annex

I use git-annex to sync some of the large files (mostly roms) that I don't want to have fill copies on each machine. Current git-annex stores I have are:

  • roms - ~/mnt/engi/media/roms from torus.

Chrome

The vast majority of Chrome is setup with browser.nix including installing plugins and various settings. However, setup for vimium and New Tab Redirect could not be fully automated.

  • Upon launch New Tab Redirect should prompt to set the new tab page. Set to http://localhost:8080.

  • Vimium config is saved in chezmoi. Open the vimium plugin page and restore config from ~/.config/vimium-options.json.

  • Pin and re-arrange plugins as desired.

Obsidian Vault on New machine

Clone vulcan vault from personal github.

git clone https://<user>:<token>@git.tstarr.us/tstarr/vulcan.git

Copy another .obsidian folder for the new host (i.e. .obsidian-<host>).

Open vault folder in obsidian and change the .obsidian folder in settings.

Wifi on Shivan

Connect to wifi network with: nmcli device wifi connect <SSID> password <password>.