7ea906162e 
							
						 
					 
					
						
						
							
							writeTextFile -> builtins.writeTextFile  
						
						 
						
						
						
						
					 
					
						2021-10-15 15:18:50 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							3bf763c124 
							
						 
					 
					
						
						
							
							This shit is so weird  
						
						 
						
						
						
						
					 
					
						2021-10-15 15:17:45 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							a0fd17c9ca 
							
						 
					 
					
						
						
							
							Fuckin FORCE it  
						
						 
						
						
						
						
					 
					
						2021-10-15 14:29:02 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							c4fa73c8e7 
							
						 
					 
					
						
						
							
							Force empty secrets  
						
						 
						
						
						
						
					 
					
						2021-10-15 14:27:33 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							23d2a4de70 
							
						 
					 
					
						
						
							
							Just fuckin remove the whole thing  
						
						 
						
						... 
						
						
						
						bet this doesn't work 
						
						
					 
					
						2021-10-15 14:25:22 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							437203721b 
							
						 
					 
					
						
						
							
							Ugh, extra n  
						
						 
						
						
						
						
					 
					
						2021-10-15 14:21:30 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							8a78f2d830 
							
						 
					 
					
						
						
							
							Ugh, (submodule ...)  
						
						 
						
						
						
						
					 
					
						2021-10-15 14:20:04 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							0c3fd5b522 
							
						 
					 
					
						
						
							
							Okay, let's make sure private-key-file is a string  
						
						 
						
						
						
						
					 
					
						2021-10-15 14:14:38 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							bab995346e 
							
						 
					 
					
						
						
							
							Make sure it's really a list of lists  
						
						 
						
						
						
						
					 
					
						2021-10-15 14:00:44 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							174abdf990 
							
						 
					 
					
						
						
							
							Corrected sshfp records.  
						
						 
						
						... 
						
						
						
						Also, though, is nixops not picking this up? 
						
						
					 
					
						2021-10-15 13:49:11 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							51546ec7fd 
							
						 
					 
					
						
						
							
							Fiiiine, I'll just use a local fuckin file.  
						
						 
						
						
						
						
					 
					
						2021-10-15 12:57:48 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							0330f6ae78 
							
						 
					 
					
						
						
							
							Ahh fuck this wtf  
						
						 
						
						
						
						
					 
					
						2021-10-15 10:58:47 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							095876e12d 
							
						 
					 
					
						
						
							
							Try again  
						
						 
						
						
						
						
					 
					
						2021-10-15 10:57:04 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							c3fc069f34 
							
						 
					 
					
						
						
							
							Let's just verify...  
						
						 
						
						
						
						
					 
					
						2021-10-15 10:54:09 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							ea8d7c9007 
							
						 
					 
					
						
						
							
							What if I hardcode the path?  
						
						 
						
						
						
						
					 
					
						2021-10-15 10:49:01 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							9b3333616d 
							
						 
					 
					
						
						
							
							Was that just totally irrelevant?  
						
						 
						
						
						
						
					 
					
						2021-10-15 10:42:32 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							b3258ad8a2 
							
						 
					 
					
						
						
							
							Try dumping the path...why is it refering to store  
						
						 
						
						
						
						
					 
					
						2021-10-15 10:40:10 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							e6252d551a 
							
						 
					 
					
						
						
							
							Fuck a secret then  
						
						 
						
						
						
						
					 
					
						2021-10-15 10:38:07 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							054ff9758c 
							
						 
					 
					
						
						
							
							Sigh...try a fixed path again.  
						
						 
						
						
						
						
					 
					
						2021-10-15 10:36:16 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							870c90b679 
							
						 
					 
					
						
						
							
							These initrd secrets are annoying...  
						
						 
						
						... 
						
						
						
						Betting this won't work. 
						
						
					 
					
						2021-10-15 10:30:43 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							4e62739086 
							
						 
					 
					
						
						
							
							Oops, didn't escape the attr name.  
						
						 
						
						
						
						
					 
					
						2021-10-15 10:11:26 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							11f1560410 
							
						 
					 
					
						
						
							
							Ugh...it was a function.  
						
						 
						
						
						
						
					 
					
						2021-10-15 10:03:14 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							b22b7083e7 
							
						 
					 
					
						
						
							
							Correct typo?  
						
						 
						
						... 
						
						
						
						Getting "A definition for option `fudo.secrets.host-secrets' is not of
type `attribute set of attribute set of submoduless'." But it is, I
don't get it. Maybe it's due to the typo?
Also, switch back to using secrets. 
						
						
					 
					
						2021-10-15 09:33:25 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							7264d98dd8 
							
						 
					 
					
						
						
							
							Move initrd host ssh key to host.  
						
						 
						
						... 
						
						
						
						Apparently the initrd is built on the host. That's perfect! 
						
						
					 
					
						2021-10-15 08:52:44 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							22999a8fa4 
							
						 
					 
					
						
						
							
							Maybe this will work?  
						
						 
						
						
						
						
					 
					
						2021-10-14 18:13:40 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							f3bc3c2013 
							
						 
					 
					
						
						
							
							Let's try this again just to verify  
						
						 
						
						
						
						
					 
					
						2021-10-14 16:48:35 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							8a928d9e25 
							
						 
					 
					
						
						
							
							Move secrets to the right place  
						
						 
						
						
						
						
					 
					
						2021-10-14 16:39:43 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							e4d4f6d7af 
							
						 
					 
					
						
						
							
							toPath -> builtins.toPath  
						
						 
						
						
						
						
					 
					
						2021-10-14 16:37:45 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							2f42079265 
							
						 
					 
					
						
						
							
							Try again at using secrets  
						
						 
						
						
						
						
					 
					
						2021-10-14 16:36:30 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							36413c80cd 
							
						 
					 
					
						
						
							
							Ugh, apparently not allowed...  
						
						 
						
						
						
						
					 
					
						2021-10-13 23:04:21 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							08bb0e339a 
							
						 
					 
					
						
						
							
							Ehh, fuckin key is hard  
						
						 
						
						... 
						
						
						
						Might have to do something fancy 
						
						
					 
					
						2021-10-13 22:58:35 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							5f79252dd6 
							
						 
					 
					
						
						
							
							Secrets don't seem to work?  
						
						 
						
						
						
						
					 
					
						2021-10-13 22:04:49 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							eb3ff0bfe0 
							
						 
					 
					
						
						
							
							Fixed variable name  
						
						 
						
						
						
						
					 
					
						2021-10-13 21:05:52 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							6a9ce2e118 
							
						 
					 
					
						
						
							
							Forgot semicolon  
						
						 
						
						
						
						
					 
					
						2021-10-13 21:03:43 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							24dc18ee81 
							
						 
					 
					
						
						
							
							Make all hosts' initrd network-accessible  
						
						 
						
						... 
						
						
						
						First attempt 
						
						
					 
					
						2021-10-13 17:23:47 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							c310aeb414 
							
						 
					 
					
						
						
							
							Got a rogue interface on zbox, disable DHCP  
						
						 
						
						
						
						
					 
					
						2021-10-13 11:08:44 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							793c3c1363 
							
						 
					 
					
						
						
							
							Try removing 'noexec' flag on socrates fs.  
						
						 
						
						... 
						
						
						
						Maybe that's what is causing fonts to fail to build? 
						
						
					 
					
						2021-10-13 10:28:38 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							6ada43a205 
							
						 
					 
					
						
						
							
							Frick...flatMap -> concatMap  
						
						 
						
						
						
						
					 
					
						2021-10-13 10:02:21 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							eae9e15c15 
							
						 
					 
					
						
						
							
							Oops, made the wrong map a concatMap.  
						
						 
						
						
						
						
					 
					
						2021-10-13 10:01:14 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							46469b739f 
							
						 
					 
					
						
						
							
							File contains multi sshfp, not one.  
						
						 
						
						
						
						
					 
					
						2021-10-13 09:58:17 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							674c91354b 
							
						 
					 
					
						
						
							
							Well that didn't work.  
						
						 
						
						... 
						
						
						
						Frickin docker, man. 
						
						
					 
					
						2021-10-13 09:16:52 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							d27bb84cf0 
							
						 
					 
					
						
						
							
							Try using host dns from docker.  
						
						 
						
						... 
						
						
						
						I want the pihole image to access the parent host's dns-over-https
proxy, but ideally that proxy should only be exposed on 127.0.0.1.
According to
https://www.cloudsavvyit.com/14114/how-to-connect-to-localhost-within-a-docker-container/ 
I can alias the host in docker. Let's give it a shot. 
						
						
					 
					
						2021-10-13 09:05:14 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							35d172b279 
							
						 
					 
					
						
						
							
							Oops, missing semicolon  
						
						 
						
						
						
						
					 
					
						2021-10-13 08:41:46 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							248df221d8 
							
						 
					 
					
						
						
							
							No reason to put the HTTPS proxy on a public port  
						
						 
						
						
						
						
					 
					
						2021-10-13 08:34:48 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							76c0d49053 
							
						 
					 
					
						
						
							
							/nix must NOT be noexec  
						
						 
						
						
						
						
					 
					
						2021-10-13 00:23:14 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							72665ef874 
							
						 
					 
					
						
						
							
							limina-root -> limina-data  
						
						 
						
						
						
						
					 
					
						2021-10-13 00:06:54 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							283afec419 
							
						 
					 
					
						
						
							
							Changes for the new limina  
						
						 
						
						
						
						
					 
					
						2021-10-12 23:54:43 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							9c024fd9ee 
							
						 
					 
					
						
						
							
							Need to specify a secret group and user  
						
						 
						
						
						
						
					 
					
						2021-10-12 17:34:23 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							7c08e0173e 
							
						 
					 
					
						
						
							
							Need to use nixopsUnstable for flakes  
						
						 
						
						
						
						
					 
					
						2021-10-12 16:50:54 -07:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
						
						
							
						
						
							00ac387dfb 
							
						 
					 
					
						
						
							
							Don't set the backplane passwd in limina.nix.  
						
						 
						
						... 
						
						
						
						It's done elsewhere. 
						
						
					 
					
						2021-10-12 14:43:14 -07:00