Skip to content

ToDo.md

Latest commit

 

History

History
212 lines (112 loc) · 8.81 KB

ToDo.md

File metadata and controls

212 lines (112 loc) · 8.81 KB
Raw

ToDo

  1. https://2026.nixcon.org ?

  2. Impermanence with preservation, see vimjoyer

  3. disko for NUC & Ixo, inspired by how _learn-zfs.nix was, but with /home on an encrypted ZFS partition - figure out how to pass? But consider putting /home/vorburger/git on ext4 - for speed. Or maybe do this only after Impermanence?

  4. Make the /home on titan a ZFS dataset, for backup and snapshotting

  5. LUKS with TPM https://nixos.org/manual/nixos/stable/#sec-luks-file-systems

    boot.initrd.systemd.enable = true; # Required for modern systemd-cryptsetup
security.tpm2.enable = true;

$ sudo systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=0+7 /dev/nvme0n1p2

  6. ZFS? "data partitions that are mounted noexec / nosuid / nodev which provides an additional level of safety against sophisticated attacks." (https://www.rsync.net/resources/faq.html)

  7. ZFS zpool set autotrim=on hddpool, for L2ARC ssd?

  8. Enable smartd in services/smart.nix with https://github.com/AnalogJ/scrutiny see https://search.nixos.org/options?channel=unstable&query=services.scrutiny.#show=option%253Aservices.scrutiny.collector.enable

  9. Enabled Email Sending, for zfs-extra.nix

  10. ToDo alert-me either wall or notify-send.. test over SSH with tmux.

  11. Backup /nas ZFS to Google Drive

  12. NUC should not have the workstation profile, but a (new) "headless" one, e.g. without Sound and most (or any at all?) things from workstation.nix; see also https://nixos.org/manual/nixos/stable/#sec-profile-headless

  13. Wireguard into NUC

  14. Samba on NixOS (e.g. for for /nas/public)

  15. Backup Antigravity Config and Conversations; share between Workstation & Latpop

  16. replace Antigravity with https://github.com/BohdanTkachenko/nix-home/blob/main/flake.nix#L26-L40

  17. Backup $HOME to ZFS, as discussed with Gemini with syncoid

  18. https://wiki.nixos.org/wiki/Secret_Service, consider https://dewaldv.com/posts/2026-03-24-proton-pass-secret-service/ ?

  19. Read https://clan.lol/docs/25.11/guides/vars/vars-overview, and transition from my pass to passage; THEN use sopsnix or agenix for secrets management; best together with https://github.com/Foxboron/age-plugin-tpm ?

  20. Remove ModemManager systemctl status ModemManager .. what pulls it along? GNOME?

  21. https://syncthing.net server, for client on Android for Photos

  22. Replace ssh-tpm-agent, incl. its complex customization, with YK nano (after all); see also https://gemini.google.com/app/93e7b72c119c82e6

  23. ssh-tpm-agent with PIN; see https://github.com/Foxboron/ssh-tpm-agent/pull/129/changes

  24. Secure Boot!!

    • Not possible to still dual boot Fedora?
    • Does ssh-tpm-agent still work?!

  25. ZFS send/receive from NUC + Laptop to NAS /zfs/michi/backup/vinea? But then NUC + Laptop need to have HOME on ZFS..

  26. https://nixos.org/manual/nixos/stable/#sec-upgrading-automatic ? No need, as I have Dependabot - right?

  27. Single Boot Password/Passphrase, which unlocks encrypted boot disk, and /nas ZFS, and auto logs in, but also unlocks Seahorse, and unlocks the YK

  28. nix-ipfs-cdns

Monitoring

  1. Ask others about their monitoring setup; but probably just use prometheus and grafana for now, and maybe node-exporter and/or telegraf for collecting metrics on the hosts?

  2. https://nixos.org/manual/nixos/stable/#module-services-prometheus-exporters

  3. services.prometheus.exporters.smartctl.devices for SMART monitoring

  4. Monitor temperature of CPU and disks, and fan speed, on all hosts; alert if above certain threshold; log to Grafana

  5. https://github.com/pdf/zfs_exporter

Workstations & Laptops

  1. Console & Graphical

  2. Ixo solve <> key map problem (how?)

  3. Configure GNOME Keyboard to "German (Switzerland)" instead of ch+de; this should also fix why locale-ch keyboard layout does not work in GNOME VM ... the Settings Keyboard does show ch-de, but the keys aren't mapped correctly. Perhaps this is more of a QEMU than a GNOME thing?

  4. Configure GNOME Power Setttings to Preserve Battery Health

  5. Disable the default folders created in home directories. And their bookmark shortcuts in the file chooser. What creates them? GNOME? I don't want a ~/Desktop/ nor a ~/Documents/ nor ~/Music/ nor ~/Pictures/ nor ~/Projects/ nor ~/Templates/ nor ~/Videos/. But ~/Downloads/ and ~/Public/ should be kept. If there is no config knob for this, perhaps just a session start script in dotfiles which rm them IFF they are empty?

  6. Ctrl-R is broken on Console, but works in Kitty on GNOME

  7. Login and go straight into TMUX

  8. https://github.com/vorburger/password-store/pulls for pass

  9. Ctrl-Backspace in Fish on Console (only; works over SSH)

  10. Alt Left/Right in nano

  11. Shift Up/Down, Alt Up/Down, Ctrl PgUp/PgDown https://gemini.google.com/app/394387d4e13b598c

  12. True Colors!! Both on Console, and when logged in remotely over ssh in tmux

  13. Try services.howdy.enable = true; security.pam.services.sudo.howdyAuth = true;

  14. Home Manager services.syshud (new, 2026-04-12; update) A simple system status indicator for Wayland compositors.

Nix Common #later

  1. Nix lang tutorial

  2. Check systemctl status and show failures

  3. tmux should remember open tabs over restart

  4. Compare pstree on Nix Console and Fedora in GNOME

  5. Cache on CI

  6. WiFi setup baked in into installer, as it now is for ixo

  7. Try Foxboron/ssh-tpm-agent#109

  8. Try https://yazi-rs.github.io

  9. Try https://github.com/microvm-nix/microvm.nix? See https://michael.stapelberg.ch/posts/2026-02-01-coding-agent-microvm-nix/.

  10. nix-store --optimise how much does it save? How long does it run? Create a systemd timer...

  11. https://wiki.archlinux.org/title/Intel_NUC#LEDs for activity?

Upstream

  1. Upstream configurations of any services et al. which ideally shouldn't be here at all

  2. ssh-tpm-agent: keyutils

  3. How to isolate? Merely building ssh-tpm-agent locally from nixpkgs (but probably even standalone) breaks ssh on OS.

  4. Add a system service for ssh-tpm-agent

  5. Split personal nixfiles hosts from re-usable nix modules into a separate repo; use Modular Services

Machines

  1. nixos-rebuild ... --specialisation XYZ for different use cases?

  2. Clan!

  3. Replace hostfwd=tcp::2222-:22 with proper bridged networking to get real IP address?

  4. Replace StrictHostKeyChecking=no with fixed hostkey from secret vault

  5. Try https://nixcademy.com/posts/auto-growing-nixos-appliance-images-with-systemd-repart/

Tools

  1. Run nix flake check in pre-commit hook

  2. Replace devshells with devShells (Nix), after all?

  3. https://github.com/vic/flake-aspects ?

Clean Up

  1. Consolidate LearningLinux 🐧 repo and dotfiles/NixOS here.

Docs

  1. Blog about my NixOS experience (similar to this)

  2. Move https://github.com/vorburger/LearningLinux/tree/develop/nix/docs here

  3. Move https://github.com/vorburger/LearningLinux/blob/develop/nix/bookmarks.md here

  4. Pre-process MD to automagically insert links on anything that looks like a local file path

  5. Have an attribute/option in the modules/**/*.nix to link to the relevant docs/*.md

  6. Extract commands from modules/demo/hello.nix into docs/hello.md etc.

  7. Run https://docs.enola.dev/use/execmd

  8. Automagically extract TODO list to MD

Low Priority / Nice to Have

  1. Cloud VMs? imports = [ "${modulesPath}/virtualisation/amazon-image.nix" ] ? See e.g. this announcement.

  2. ZFS UIs? docs/docs/reference/zfs.md#ui

  3. https://snowfall.org ?

  4. nixos-rebuild alternatives?

  5. Suppress (quiet) devshell menu

  6. Show Git rev (SHA) in bootloader menu

Future

  1. Enola.dev AI for https://github.com/NixOS/nixpkgs/pulls ?

  2. NixOS/AI Manager: "Because NixOS is cool - but Nix is too hard..."