lyrathorpe/nixfiles
1
0
Fork 0
Code Issues 6 Pull Requests 3 Actions Packages Projects Releases Wiki Activity

chore: post-refactor cleanups (#50-#53) #54

Merged
lyrathorpe merged 5 commits from chore/post-refactor-cleanups into main 2026-06-29 14:09:38 +01:00
Conversation 0 Commits 5 Files Changed 11
+72 -47
5 Commits
Author SHA1 Message Date
Emma Thorpe 04171febf1 feat(work): load kube-tmux from a pinned flake input
CI / flake (pull_request) Successful in 3m35s
Details 
kube-tmux is not in nixpkgs, so add the upstream repo as a flake = false
input and reference ${inputs.kube-tmux}/kube.tmux directly. The script is now
always in the store, so the previous $HOME/code/kube-tmux existence guard is
removed and the tmux status line no longer depends on a manual checkout.

Refs #50
 2026-06-29 14:05:32 +01:00
Emma Thorpe 41ef023c70 chore: minor cleanups (remove unused lens, LSP doc, editorconfig, docker subnet)
CI / flake (pull_request) Successful in 3m30s
Details 
- Remove the unused Lens package entirely: drop pkgs.lens from the work host
  and its unfree entry from flake.nix. Nothing else needed it, so
  unfreePackages is now just claude-code. (pkgs.lens has pname
  "lens-desktop", which was the string the unfree predicate matched.)
- home/README.md: the Nix LSP is nil_ls, not nil.
- .editorconfig: remove the rule block that duplicated the [*] defaults.
- hosts/RPi5/docker.nix: name the trusted Docker subnet in a let binding
  rather than repeating the literal CIDR.

Deferred from the audit bundle: the .gitignore firmware entry (documented,
low value) and the per-eval nixpkgs-unstable overlay import (inherently
per-system, no clean hoist).

Closes #53
 2026-06-29 13:34:22 +01:00
Emma Thorpe e275be3660 chore: gitignore the local tf-inspect scratch project 
tf-inspect/ is a separate project living untracked in the repo root; ignore
it so it stops showing in git status and cannot be lost to git clean.

Closes #52
 2026-06-29 13:29:25 +01:00
Emma Thorpe b605515f05 fix(work): guard the kube-tmux status line on the script's presence 
The tmux status-right shelled out to $HOME/code/kube-tmux/kube.tmux by
absolute path; on a checkout without that external repo every status refresh
errored. Wrap it in a file-existence test so it degrades quietly.

Closes #50
 2026-06-29 13:29:25 +01:00
Emma Thorpe e42f368d72 refactor(ssh): consolidate sshd enable and port 22 into modules/ssh.nix 
The daemon enable and the firewall port were duplicated in each sshd host
(T400, Mac Pro, RPi5). Move both into modules/ssh.nix so importing it both
hardens and enables sshd; drop the per-host copies. No build change: the
three hosts evaluate to identical derivations.

Closes #51
 2026-06-29 13:29:24 +01:00