-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
20 changed files
with
1,214 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,33 @@ | ||
# Infrastructure config by ASCIIMoth | ||
# | ||
# To the extent possible under law, the person who associated CC0 with | ||
# this work has waived all copyright and related or neighboring rights | ||
# to it. | ||
# | ||
# You should have received a copy of the CC0 legalcode along with this | ||
# work. If not, see <http://creativecommons.org/publicdomain/zero/1.0/>. | ||
{ | ||
config, | ||
pkgs, | ||
lib, | ||
inputs, | ||
... | ||
}: let | ||
chownd = pkgs.writeShellScriptBin "chownd" (builtins.readFile ./chownd.sh); | ||
chownd_caller = pkgs.writeShellScriptBin "chownd" '' | ||
sudo systemctl start chownd | ||
''; | ||
in { | ||
environment.systemPackages = [chownd_caller]; | ||
systemd.services.chownd = { | ||
path = with pkgs; [coreutils gawk]; | ||
wantedBy = ["multi-user.target"]; | ||
after = ["multi-user.target"]; | ||
description = "Change owner"; | ||
serviceConfig = { | ||
Type = "oneshot"; | ||
User = "root"; | ||
ExecStart = "${chownd}/bin/chownd"; | ||
}; | ||
}; | ||
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,14 @@ | ||
for FILE in /etc/chownd/*; do | ||
# Check if file owned by root and only root cat modify it | ||
LSL=$(ls -l $FILE) | ||
UNAME=$(echo "$LSL" | awk '{print $3}') | ||
WRITABLE=${LSL:5:1}${LSL:5:1} | ||
if [ "root" == "$UNAME" ]; then | ||
if [ "--" == "$WRITABLE" ]; then | ||
PTH=$(cat $FILE) | ||
CMD="chown -R $PTH" | ||
#echo "$CMD" > /etc/chownd.log | ||
$CMD | ||
fi | ||
fi | ||
done |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,112 @@ | ||
# Edit this configuration file to define what should be installed on | ||
# your system. Help is available in the configuration.nix(5) man page | ||
# and in the NixOS manual (accessible by running ‘nixos-help’). | ||
{ | ||
config, | ||
pkgs, | ||
stateVersion, | ||
... | ||
}: { | ||
imports = [ | ||
# Include the results of the hardware scan. | ||
./hardware-configuration.nix | ||
]; | ||
|
||
# Use the GRUB 2 boot loader. | ||
boot.loader.grub.enable = true; | ||
#boot.loader.grub.version = 2; | ||
# boot.loader.grub.efiSupport = true; | ||
# boot.loader.grub.efiInstallAsRemovable = true; | ||
# boot.loader.efi.efiSysMountPoint = "/boot/efi"; | ||
# Define on which hard drive you want to install Grub. | ||
boot.loader.grub.device = "/dev/sda"; # or "nodev" for efi only | ||
|
||
# networking.hostName = "nixos"; # Define your hostname. | ||
# Pick only one of the below networking options. | ||
# networking.wireless.enable = true; # Enables wireless support via wpa_supplicant. | ||
# networking.networkmanager.enable = true; # Easiest to use and most distros use this by default. | ||
|
||
# Set your time zone. | ||
# time.timeZone = "Europe/Amsterdam"; | ||
|
||
# Configure network proxy if necessary | ||
# networking.proxy.default = "http://user:password@proxy:port/"; | ||
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain"; | ||
|
||
# Select internationalisation properties. | ||
# i18n.defaultLocale = "en_US.UTF-8"; | ||
# console = { | ||
# font = "Lat2-Terminus16"; | ||
# keyMap = "us"; | ||
# useXkbConfig = true; # use xkbOptions in tty. | ||
# }; | ||
|
||
# Enable the X11 windowing system. | ||
# services.xserver.enable = true; | ||
|
||
# Configure keymap in X11 | ||
# services.xserver.layout = "us"; | ||
# services.xserver.xkbOptions = { | ||
# "eurosign:e"; | ||
# "caps:escape" # map caps to escape. | ||
# }; | ||
|
||
# Enable CUPS to print documents. | ||
# services.printing.enable = true; | ||
|
||
# Enable sound. | ||
# sound.enable = true; | ||
# hardware.pulseaudio.enable = true; | ||
|
||
# Enable touchpad support (enabled default in most desktopManager). | ||
# services.xserver.libinput.enable = true; | ||
|
||
# Define a user account. Don't forget to set a password with ‘passwd’. | ||
# users.users.alice = { | ||
# isNormalUser = true; | ||
# extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user. | ||
# packages = with pkgs; [ | ||
# firefox | ||
# thunderbird | ||
# ]; | ||
# }; | ||
|
||
# List packages installed in system profile. To search, run: | ||
# $ nix search wget | ||
# environment.systemPackages = with pkgs; [ | ||
# vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default. | ||
# wget | ||
# ]; | ||
|
||
# Some programs need SUID wrappers, can be configured further or are | ||
# started in user sessions. | ||
# programs.mtr.enable = true; | ||
# programs.gnupg.agent = { | ||
# enable = true; | ||
# enableSSHSupport = true; | ||
# }; | ||
|
||
# List services that you want to enable: | ||
|
||
# Enable the OpenSSH daemon. | ||
# services.openssh.enable = true; | ||
|
||
# Open ports in the firewall. | ||
# networking.firewall.allowedTCPPorts = [ ... ]; | ||
# networking.firewall.allowedUDPPorts = [ ... ]; | ||
# Or disable the firewall altogether. | ||
# networking.firewall.enable = false; | ||
|
||
# Copy the NixOS configuration file and link it from the resulting system | ||
# (/run/current-system/configuration.nix). This is useful in case you | ||
# accidentally delete configuration.nix. | ||
# system.copySystemConfiguration = true; | ||
|
||
# This value determines the NixOS release from which the default | ||
# settings for stateful data, like file locations and database versions | ||
# on your system were taken. It‘s perfectly fine and recommended to leave | ||
# this value at the release version of the first install of this system. | ||
# Before changing this value read the documentation for this option | ||
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html). | ||
system.stateVersion = stateVersion; # Did you read the comment? | ||
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,29 @@ | ||
# Infrastructure config by ASCIIMoth | ||
# | ||
# To the extent possible under law, the person who associated CC0 with | ||
# this work has waived all copyright and related or neighboring rights | ||
# to it. | ||
# | ||
# You should have received a copy of the CC0 legalcode along with this | ||
# work. If not, see <http://creativecommons.org/publicdomain/zero/1.0/>. | ||
{ | ||
ConfigRoot = "/etc/infrastructure"; | ||
MainUser = "admin"; | ||
Editor = "vim"; | ||
Email = "[email protected]"; | ||
Nicknames = { | ||
Full = "John Doe"; | ||
Lower = "johndoe"; | ||
Git = "JohnDoe"; | ||
}; | ||
theme = "equilibrium-gray-dark"; | ||
# catppuccin-mocha atelier-cave ashes apathy 3024 isotope gruvbox-material-dark-hard | ||
# atelier-dune atelier-estuary atelier-seaside | ||
# brewer | ||
# chalk | ||
# circus | ||
# classic-dark | ||
# eighties | ||
# equilibrium-dark | ||
# equilibrium-gray-dark | ||
} |
Oops, something went wrong.