ca4a0b23ab
- caddy: security headers (X-Content-Type-Options/X-XSS-Protection/ X-Frame-Options) on all vhosts + baseline CSP; strip SnappyMail upstream copies via header_down on mail.severijnse.eu - tlsa-updater: compute TLSA 3 1 1 from cert SPKI (SHA-256), sync _25/_465/_993, fail-safe placeholders; coredns zone updated - pre-commit: wire cachix/git-hooks.nix (alejandra, statix, actionlint, ...); CI pre-commit job over x86_64 + aarch64 matrix - gitea: enable Gitea Actions + self-hosted runner (native:host, aarch64 via binfmt); add .gitea/workflows/ci.yml and local hook - fix statix warnings (merge repeated systemd/database/configFile keys, inherit, bool-compare guards); add missing trailing newlines
186 lines
5.8 KiB
Markdown
186 lines
5.8 KiB
Markdown
<p align="center"><img src="https://i.imgur.com/X5zKxvp.png" width=300px></p>
|
|
|
|
<p align="center">
|
|
<a href="https://hyprland.org/">
|
|
<img src="https://img.shields.io/static/v1?label=NIRI&message=latest&style=flat&logo=hyprland&colorA=24273A&colorB=8AADF4&logoColor=CAD3F5"/>
|
|
</a>
|
|
<a href="https://github.com/zemmsoares/awesome-rices">
|
|
<img src="https://raw.githubusercontent.com/zemmsoares/awesome-rices/main/assets/awesome-rice-badge.svg" alt="awesome-rice-badge">
|
|
</a>
|
|
<a href="https://nixos.wiki/wiki/Flakes">
|
|
<img src="https://img.shields.io/static/v1?label=Nix-Flake&message=check&style=flat&logo=nixos&colorA=24273A&colorB=9173ff&logoColor=CAD3F5">
|
|
</a>
|
|
<a href="https://nixos.org/">
|
|
<img src="https://img.shields.io/badge/NixOS-unstable-informational.svg?style=flat&logo=nixos&logoColor=CAD3F5&colorA=24273A&colorB=8AADF4">
|
|
</a>
|
|
</p>
|
|
|
|
<h1 align="center">芯 (Shin)</h1>
|
|
|
|
### ⚠ <sup><sub><samp>PLEASE RESPECT THE CREDITS IF YOU USE SOMETHING FROM MY DESKTOP/SETUP.</samp></sub></sup>
|
|
|
|
> **Note:** Built with [flake-parts](https://flake.parts/). The client
|
|
> configurations (`desktop`, `laptop`, `tty`) use Home Manager, while the
|
|
> Hetzner server is isolated on `nixos-24.05`. The flake builds for both
|
|
> **x86_64-linux** and **aarch64-linux**.
|
|
|
|
---
|
|
|
|
<pre align="center"><p align="center"><a href="#seedling--setup">SETUP</a> • <a href="#herb--guides">GUIDES</a> • <a href="#four_leaf_clover--key-bindings">KEYBINDS</a> • <a href="https://linu.dev/kaku">GALLERY</a></p></pre>
|
|
|
|
---
|
|
|
|
<a href="#octocat--hi-there-thanks-for-dropping-by">
|
|
<picture>
|
|
<img alt="" align="right" width="400px" src="/assets/6.png"/>
|
|
</picture>
|
|
</a>
|
|
|
|
- **Window Manager** • [Niri](https://github.com/YaLTeR/niri/)🎨 Scrolleable WM!
|
|
- **Shell** • [Fish](https://fishshell.com/) 🐟 with
|
|
[starship](https://github.com/starship/starship) Cross Shell Platform!
|
|
- **Terminal** • [Ghostty](https://ghostty.org/) 💻 Powerful Hyped term
|
|
- **Panel** • [Noctalia!](https://noctalia.dev/) 🍧 Beautiful and minimalist desktop shell
|
|
- **File Manager** • [Yazi](https://github.com/sxyazi/yazi) 🔖 Rustacean File
|
|
Manager!
|
|
- **GUI Basic-IDE** • [Helix](https://docs.helix-editor.com/) ✴️ Rustacean vim
|
|
version!
|
|
- **GTK Theme** • [GTK](https://github.com/someone/Colloid-gtk-theme) 🐾 My
|
|
Fork of colloid
|
|
|
|
## 🌼 <samp>INSTALLATION (NixOS)</samp>
|
|
|
|
> Request:
|
|
> [NixOS](https://channels.nixos.org/nixos-24.05/latest-nixos-minimal-x86_64-linux.iso)
|
|
|
|
This flake targets **both** `x86_64-linux` and `aarch64-linux`, so grab the
|
|
minimal ISO for your architecture:
|
|
|
|
```bash
|
|
# x86_64
|
|
wget -O nixos-minimal.iso https://channels.nixos.org/nixos-24.05/latest-nixos-minimal-x86_64-linux.iso
|
|
|
|
# aarch64 (e.g. Raspberry Pi / ARM boxes)
|
|
wget -O nixos-minimal-aarch64.iso https://channels.nixos.org/nixos-24.05/latest-nixos-minimal-aarch64-linux.iso
|
|
```
|
|
|
|
- Boot Into the Installer.
|
|
|
|
- Switch to Root: `sudo -i`
|
|
|
|
- Partitions:
|
|
|
|
_I prefer to use 1GB on the EFI partition. Specifically because the
|
|
'generations' list may become very long, and to avoid overloading the
|
|
partition._
|
|
|
|
```bash
|
|
# Replace nvme with your disk partition
|
|
gdisk /dev/nvme0n1
|
|
```
|
|
|
|
- `o` (create new partition table)
|
|
- `n` (add partition, 512M, type ef00 EFI)
|
|
- `n` (add partition, remaining space, type 8300 Linux)
|
|
`w` (write partition table and exit)
|
|
|
|
- Format Partitions:
|
|
|
|
```bash
|
|
mkfs.fat -F 32 -n EFI /dev/nvme0n1p1
|
|
mkfs.xfs -L NIXOS /dev/nvme0n1p2
|
|
```
|
|
|
|
- Mount Partitions:
|
|
|
|
```bash
|
|
mount /dev/disk/by-label/NIXOS /mnt
|
|
mkdir -p /mnt/boot
|
|
mount /dev/disk/by-label/EFI /mnt/boot
|
|
```
|
|
|
|
- Enable nixFlakes
|
|
|
|
```bash
|
|
nix-shell -p nixVersions.stable git
|
|
```
|
|
|
|
- Clone my Dotfiles
|
|
|
|
```bash
|
|
git clone --depth 1 https://github.com/someone/shin /mnt/etc/nixos
|
|
```
|
|
|
|
- Generate your Own Nix Hardware Settings:
|
|
|
|
### ⚠ <sup><sub><samp>DON'T FORGET IT</samp></sub></sup>
|
|
|
|
```bash
|
|
sudo nixos-generate-config --dir /mnt/etc/nixos/hosts/aesthetic
|
|
|
|
# Remove configuration.nix
|
|
rm -rf /mnt/etc/nixos/hosts/aesthetic/configuration.nix
|
|
```
|
|
|
|
- Install Dotfiles Using Flake
|
|
|
|
```bash
|
|
# Move to folder
|
|
cd /mnt/etc/nixos
|
|
|
|
# Install (desktop for a graphical machine, or #laptop)
|
|
nixos-install --flake .#desktop
|
|
```
|
|
|
|
- Reboot
|
|
|
|
### 🐙 <sup><sub><samp>Remember <strong>Default</strong> User & password are: nixos</samp></sub></sup>
|
|
|
|
- Change Default password for User.
|
|
|
|
```bash
|
|
passwd YourUser
|
|
```
|
|
|
|
### 🌻 <samp>TODO LIST</samp>
|
|
|
|
### 🧩 <samp>ADDITIONAL TIPS</samp>
|
|
|
|
If you're using this NixOS configuration flake locally, you can simplify the process of switching and managing your system using [`nh`](https://github.com/viperML/nh), a CLI helper for Nix Flakes.
|
|
|
|
To switch your system configuration with `nh`, use:
|
|
|
|
```bash
|
|
NH_FLAKE=/etc/nixos nh os switch
|
|
```
|
|
|
|
This avoids needing to type out the full `nixos-rebuild` command manually and provides a cleaner workflow when iterating on your setup.
|
|
|
|
> 💡 Make sure `nh` is installed in your system environment or user profile.
|
|
|
|
## 🍀 <samp>KEY BINDINGS</samp>
|
|
|
|
## 💐 <samp>ACKNOWLEDGEMENTS</samp>
|
|
|
|
| | | Inspiration and Resources | | |
|
|
| :-: | :-: | :------------------------------------------ | :-- | :-: |
|
|
| | 1 | [owl4ce](https://github.com/owl4ce) | | |
|
|
| | 2 | [Ilham25](https://github.com/ilham25) | | |
|
|
| | 3 | [Siduck](https://github.com/siduck) | | |
|
|
| | 4 | [NvChad](https://github.com/NvChad) | | |
|
|
| | 5 | [Rxyhn](https://github.com/rxyhn) | | |
|
|
| | 6 | [HeinzDev](https://github.com/HeinzDev) | | |
|
|
| | 7 | [fufexan](https://github.com/fufexan) | | |
|
|
| | 8 | [AmitGolden](https://github.com/AmitGolden) | | |
|
|
| | | | | |
|
|
|
|
## 🌳 <samp>CONTRIBUTING</samp>
|
|
|
|
WIP
|
|
|
|
## 🎃 <samp>SECURITY POLICY</samp>
|
|
|
|
<pre align="center">
|
|
<a href="#readme">BACK TO TOP</a>
|
|
</pre>
|