dotfiles, branch masterSystem and user profile configuration using Guix
http://git.twilken.net/dotfiles/atom?h=master2026-05-13T12:44:51ZUpdate grafana container to 13.0.1+security-012026-05-13T12:44:51ZTimo Wilken2026-05-13T12:43:30Zurn:sha1:d058fd7b8a2db6f75e2ad65fc0446fa8dc988d1cRotate expired traewel token2026-05-06T16:35:07ZTimo Wilken2026-05-06T16:35:07Zurn:sha1:d00d6615aac20f5bf66f3cdce67bd4ec2cffe796Install simple-scan for document scanning2026-05-05T17:04:21ZTimo Wilken2026-05-05T17:04:21Zurn:sha1:20f63731db507633e02682261daaa2f2fb509856Update scraper IP blacklist2026-05-05T13:52:40ZTimo Wilken2026-05-05T13:52:40Zurn:sha1:da2ca25d61f15bb0cd38646dc6db6b4a43b685c1Fix usage of XDG cache dir2026-05-05T13:51:46ZTimo Wilken2026-05-05T13:51:46Zurn:sha1:4784cd74bfe8c8c4d9fc870f1d1c340161e72df7Use Guix' updated xdg-desktop-portal-wlr2026-04-29T18:21:18ZTimo Wilken2026-04-29T18:20:49Zurn:sha1:2f8a32bea29d65f6adb90dffdc70a44127927f25
Upstream now has 0.8.2, so use that instead of my custom packaged version.
Update simutrans to 124.4.12026-04-29T17:58:32ZTimo Wilken2026-04-29T17:58:32Zurn:sha1:930420f0be50d7d7e23c8833336c57bfb79d143aUpdate hashicorp-packer to 1.15.32026-04-29T17:55:04ZTimo Wilken2026-04-29T17:55:04Zurn:sha1:f5de9c4d4dc25bf248e274d5d4afc207329e5523Update paperless container to 2.20.152026-04-29T17:53:31ZTimo Wilken2026-04-29T17:53:31Zurn:sha1:019d69623fb870990ef97792181599115eec7d3aConfigure SSH user for home router2026-04-20T20:35:33ZTimo Wilken2026-04-20T20:35:33Zurn:sha1:f3c4ea5008c4450a7d9040865c9e60eecced5d38Track beets config in desktop service2026-04-17T16:12:29ZTimo Wilken2026-04-17T16:11:19Zurn:sha1:1a63cebd50717d351aab046cdd3475d007a5fbfcUpdate grafana container to 13.0.12026-04-17T09:09:05ZTimo Wilken2026-04-17T09:09:05Zurn:sha1:fe5e5570cbbe5c02e57e217e2a2857325a69af61Update grafana container to 13.0.02026-04-15T17:42:16ZTimo Wilken2026-04-15T17:42:16Zurn:sha1:6f35fad2d72673a43885c8ce9596d1db9709b6c5
Grafana 13 enables gzip compression by default, so no need to manually enable
it anymore.
Update paperless container to 2.20.142026-04-15T17:42:07ZTimo Wilken2026-04-15T17:42:07Zurn:sha1:d4a0380e142ef5cd04b20c38f8c55fa541ea559fDisable unsupported curve2026-04-13T22:14:38ZTimo Wilken2026-04-13T22:14:38Zurn:sha1:a7e50021bf2126c97686f56bdbe925065d741887Apply Mozilla-recommended SSL configuration2026-04-13T12:48:28ZTimo Wilken2026-04-13T12:47:34Zurn:sha1:2691e2724f5b1e0b892009b2f126a9e38ae899deUpdate blocked IP list2026-04-13T12:47:31ZTimo Wilken2026-04-13T12:47:31Zurn:sha1:46db24ec2371b38a9498a690975240a4793e8147Update and consolidate IP blocklist2026-04-09T09:00:43ZTimo Wilken2026-04-09T09:00:43Zurn:sha1:add2f6bb45c2cf6d41c90c98882e8d73846ac16dMerge blocked IP ranges for efficiency2026-04-09T09:00:17ZTimo Wilken2026-04-09T08:53:28Zurn:sha1:d435bd5db60d5dc44c958daf588428ee13742097
This lets me reliably remove duplicates, and makes the map file size much
smaller.
Update scraper blocking rules2026-04-07T21:55:14ZTimo Wilken2026-04-07T21:55:14Zurn:sha1:9c1c18654ea20df8ae47fc49d5599bc877cb0689Force nginx to use `index.html.gz` for directories2026-04-07T16:32:15ZTimo Wilken2026-04-07T16:31:03Zurn:sha1:7a1ca1ef1bf256ae36ef7f2f4918dc8037288b53
...even if no corresponding `index.html` is present. It's still uncompressed
automatically by `gunzip on;` if needed.
Add alias to access work password store2026-04-07T09:00:09ZTimo Wilken2026-04-07T08:59:56Zurn:sha1:bd7e544da0329cd7e1ba98c5b45da51fa86c9d7eDon't backup nonexistent directory2026-04-05T18:57:56ZTimo Wilken2026-04-05T18:57:56Zurn:sha1:d7831c620b6a619632bcc7854652195aa2324206Fetch Nebula watch history before video download2026-04-05T18:17:37ZTimo Wilken2026-04-05T18:17:37Zurn:sha1:db02980a17e0478bafcd2a2224d347e3de73f777Install large games as part of home profile2026-04-05T17:33:33ZTimo Wilken2026-04-05T17:33:33Zurn:sha1:eb0628f21c7504313ea2f210e3f21111ffb66237Follow upstream move of `steam-nvidia` package2026-04-05T17:33:10ZTimo Wilken2026-04-05T17:33:10Zurn:sha1:666c7f75f0226b43e9c10db642dadea313791bbbUpdate simutrans to 124.4 and pak128 to 2.10.12026-04-04T15:41:40ZTimo Wilken2026-04-04T15:41:40Zurn:sha1:865a276c78977646a3bc66f87dda3ffffcc3c70aRelocate existing backup repos to lud2026-04-04T13:59:12ZTimo Wilken2026-04-04T13:59:12Zurn:sha1:9f9ab3cc0793e81f55567e4ce4f1c8e6a2f7b3f4Scrape restic server metrics2026-04-04T13:48:41ZTimo Wilken2026-04-04T13:48:41Zurn:sha1:505b3801af7166601f506edf90eef1c1f3edf255Run restic backup server on lud2026-04-04T13:43:28ZTimo Wilken2026-04-04T13:43:28Zurn:sha1:fb8518d1fca204a37e9b9318981cd7310d477b37Follow upstream restic changes for `--keep-*` options2026-04-04T12:02:04ZTimo Wilken2026-04-04T12:01:18Zurn:sha1:6e6885bb72e7d7240a5d9517612a3fc92a5922c7
Restic changed `--keep-*=-1` to `--keep-*=unlimited`, so use this new value.
Configure SSH user for family laptop2026-04-04T12:01:03ZTimo Wilken2026-04-04T12:01:03Zurn:sha1:67f07e0a63dd50e51d6233e7b627925648af6e3aProxy requests to atlasgw through lxtunnel first2026-04-02T16:57:53ZTimo Wilken2026-04-02T16:57:53Zurn:sha1:90c3bd8531a9c103d0f3a2fe84b05eaafcbd516e
This allows access even from outside CERN.
Deploy server home for my user together with system2026-03-31T19:54:36ZTimo Wilken2026-03-31T19:52:04Zurn:sha1:bcf1d4121bf1fda5f24e9b47d84997b1c55a2ffa
See "Guix Home Service" in info '(guix)Guix Services'. This means that the
effects of manual "guix home reconfigure" invocations are lost on "guix system
reconfigure".
Block cgit scrapers from Tencent/Wechat/QQ2026-03-31T18:59:25ZTimo Wilken2026-03-31T18:59:25Zurn:sha1:e0379063dab9b33aa8426fa8e1309f59a6a5aac5Update hashicorp-packer to 1.15.12026-03-31T18:22:12ZTimo Wilken2026-03-31T18:22:12Zurn:sha1:8291e3638eec2ac1582c4293c04c91957a306e6fUpdate grafana container to 12.4.22026-03-31T18:21:19ZTimo Wilken2026-03-31T18:21:19Zurn:sha1:7b333c6b308b34c209dea1254c333e9d863d0b99Configure prometheus-nginx-exporter through YAML2026-03-31T18:03:59ZTimo Wilken2026-03-31T17:37:57Zurn:sha1:d248e2b21653459c76e8bd571484e81ed799a8ef
This lets me configure it through Scheme and serialize it to YAML.
Retain Prometheus metrics for 10 years2026-03-31T17:22:55ZTimo Wilken2026-03-31T17:22:55Zurn:sha1:99d808b64986345f6e9226c9344033881c22863aUpdate alertmanager to 0.31.12026-03-31T17:08:48ZTimo Wilken2026-03-31T17:08:39Zurn:sha1:a6f1097ee470b1199ac6f0ff0ed468151e2b2bdcUpdate prometheus to 3.10.02026-03-31T17:08:48ZTimo Wilken2026-03-31T17:08:28Zurn:sha1:ba7881c09de210eeb7edb6c07d2379f02cec15f2Proxy Sim@P1 Grafana requests2026-03-31T15:11:19ZTimo Wilken2026-03-31T15:11:19Zurn:sha1:403dc19bbfa1d7676402c2fcfe0307b9d40b2aecRun prometheus-nginxlog-exporter for web server metrics2026-03-30T21:49:06ZTimo Wilken2026-03-30T21:38:44Zurn:sha1:6cb63dc74b9d7dbdb40a942587cd0eb7cb95d4b5Package prometheus-nginxlog-exporter2026-03-30T21:37:41ZTimo Wilken2026-03-30T21:37:41Zurn:sha1:fe65bebafa2b2cd92fb8c79cc5e4a2fe870338edFix indentation2026-03-30T20:05:27ZTimo Wilken2026-03-30T20:05:27Zurn:sha1:1e12eebae6387a20172566cd8aab45b024815b6bDisable on-the-fly gzip/gunzip for personal website2026-03-30T20:00:23ZTimo Wilken2026-03-30T19:59:30Zurn:sha1:034efa7b16b3bd46491e1d60a15d563d6ce56008
The website deployment script creates an uncompressed and a compressed version
of every file on disk, so gzip_static is all we need.
Roll abusive IP detection into bot detection2026-03-30T19:56:18ZTimo Wilken2026-03-30T15:21:21Zurn:sha1:7e7ec076d4b5627d0dc2aedfd9edcef4cb3ab901Delete old versions of Signal backups in Nextcloud2026-03-30T19:56:18ZTimo Wilken2026-03-30T15:21:57Zurn:sha1:32290442e585d25efa8de845910725da2b221006Ban abusive Meta scraper from cgit2026-03-28T21:14:55ZTimo Wilken2026-03-28T21:14:55Zurn:sha1:2f4b02df2d2e66769fe1aae0dfff17fbfffd9448Reverse proxy setup for NextPush2026-03-26T17:46:41ZTimo Wilken2026-03-26T17:11:07Zurn:sha1:4d5a433a0cd780e5425a450766c23bf5cbab5eb0Update blocklist of abusive ASs2026-03-25T08:52:25ZTimo Wilken2026-03-25T08:52:25Zurn:sha1:0d2f121f25979f1d3a35890c74d8a52182fc0a64Use X-Clacks-Overhead on personal site2026-03-24T22:14:31ZTimo Wilken2026-03-24T22:09:00Zurn:sha1:1f20f1815930a6f2c60e75a82d5b9cb3602cd44dUse fixed yt-dlp for nightly downloads2026-03-24T22:14:31ZTimo Wilken2026-03-24T21:58:19Zurn:sha1:2cdcb00f6d2ce8f4598e03fe766633e54d660c0fPackage yt-dlp with fixes for Nebula download2026-03-24T22:14:31ZTimo Wilken2026-03-24T20:34:02Zurn:sha1:286f01ee6c528cbcc8469bb968c7773153af9998Set proxy headers for Grafana2026-03-24T18:44:35ZTimo Wilken2026-03-24T18:44:35Zurn:sha1:b4c8f26c2ab537f2ed4966e0bcba51f2e21cf1e5Update ledgerplot to 1.6.02026-03-22T22:36:46ZTimo Wilken2026-03-22T22:16:44Zurn:sha1:440ec7ad3f98ecd8f3d6f1ad96c43f341e8a6b84Update paperless container to 2.20.132026-03-22T14:18:30ZTimo Wilken2026-03-22T14:18:30Zurn:sha1:77383c9b3d445a1f26fd452f08cc63a40cf4ce12Update paperless container to 2.20.122026-03-21T13:14:49ZTimo Wilken2026-03-21T13:14:49Zurn:sha1:b48e166bbf1a8f32ead75cc16097803b5246a6edTrack CO2 intensity of electricity along with consumption2026-03-21T13:10:18ZTimo Wilken2026-03-21T12:01:26Zurn:sha1:4cb4c266703a7678d21c3b0c7881c6ff44fd6701Update paperless container to 2.20.112026-03-20T23:50:53ZTimo Wilken2026-03-20T23:50:53Zurn:sha1:5e4c7606737d8fa950b7dd9d4a06e136d1b14b1cInstall Make system-wide2026-03-20T23:48:56ZTimo Wilken2026-03-20T23:48:54Zurn:sha1:7209b5ea5fb1c3ba1841673a0c47c5f2b9b20aef
This also makes it usable in git hooks.
De-emphasise user support mails2026-03-20T15:49:37ZTimo Wilken2026-03-20T15:49:37Zurn:sha1:2544c44fa5e5501a4d57179a56ec7d87f8717688Remember safety office monitor2026-03-19T09:52:24ZTimo Wilken2026-03-19T09:52:24Zurn:sha1:e9866745945ef443b2eb2caddbc943708fbeb1d3Position third CERN library monitor above laptop screen2026-03-17T09:35:52ZTimo Wilken2026-03-17T09:35:52Zurn:sha1:c26dae39cea79d3c2f2a1649be0bb736e86308b7Use fixed fork of catppuccin-foot theme2026-03-16T15:35:01ZTimo Wilken2026-03-16T15:35:01Zurn:sha1:a1367e1cf08b5887f63e5f5d95a81ed132c9c1c6
With the update of foot to 1.26.0, the config format changed slightly.
https://github.com/catppuccin/foot/pull/24 fixes the foot theme to match, but
the pull request is not merged yet.
Position second CERN library monitor above laptop screen2026-03-16T10:01:28ZTimo Wilken2026-03-16T10:01:28Zurn:sha1:98baa4b2d80b77dfa065bb4c66e4db39a500d4dcDocument setting up a new machine2026-03-12T15:30:13ZTimo Wilken2026-03-12T15:30:13Zurn:sha1:8f0afb5d9977e42bf54c72194e5b8fadb11088f1Remove Guix signing keys for old machines2026-03-12T15:29:57ZTimo Wilken2026-03-12T15:29:55Zurn:sha1:20eac144593f6510e4909ae2aea9a58e4c779251Periodically clean up old Signal backups from Nextcloud2026-03-10T22:03:04ZTimo Wilken2026-03-10T21:51:41Zurn:sha1:26d57d72fb7c6ea8b28368df2c11909c3cbaa142Use configuration variables for NextCloud webroot and data path2026-03-10T22:03:04ZTimo Wilken2026-02-24T20:26:58Zurn:sha1:99794260492cd7e30d5474d9be4dea732a1d3c4cUse new SSH key for password store app2026-03-10T20:08:46ZTimo Wilken2026-03-10T20:08:46Zurn:sha1:43225543c2f941c88da860f19fb92ccdf9548228Update grafana container to 12.4.12026-03-10T19:47:46ZTimo Wilken2026-03-10T19:47:46Zurn:sha1:0deb7de31c22502ed4c8d5dc3b4d630e748f3542Update paperless container to 2.20.102026-03-05T13:59:42ZTimo Wilken2026-03-05T13:59:42Zurn:sha1:edb776d523b33ecf04eb135a77e1761e27013d89
Remove deprecated PAPERLESS_ENABLE_UPDATE_CHECK option.
Set intl.accept_languages using pref()2026-03-04T09:52:51ZTimo Wilken2026-03-04T09:52:51Zurn:sha1:f9e91f521b0c8b4c898341c0c4757d3940cd2e80Position CERN library monitor above laptop screen2026-03-04T09:27:30ZTimo Wilken2026-03-04T09:27:30Zurn:sha1:dc4de0633872cb88f5e03b0aed019c0d7b9716c6Update grafana container to 12.4.02026-02-25T21:45:50ZTimo Wilken2026-02-25T21:45:50Zurn:sha1:4eb90fe37489d56ee64ef7bd3914ae65354c2fe5Update ledgerplot to 1.5.02026-02-23T20:19:49ZTimo Wilken2026-02-23T20:19:49Zurn:sha1:5adf2e801d2581f5f75bb2dad0f5da26e314c067Allow root to log into Postgres as anyone2026-02-23T19:48:26ZTimo Wilken2026-02-23T19:48:26Zurn:sha1:9747adf0713c384b16a4b0661d087b875990d420Fix "expires" setting for mc.twilken.net homepage2026-02-23T18:59:35ZTimo Wilken2026-02-23T18:59:35Zurn:sha1:f0f93f7c0312dd71e920d1de41a7f95d4e274d3cSet Cache-Control header for robots.txt to 1 day2026-02-23T15:57:30ZTimo Wilken2026-02-23T15:57:30Zurn:sha1:7af5350656cebf71bb255e09db769e0340afa857Configure default workspace-output mapping on work laptop2026-02-23T14:38:23ZTimo Wilken2026-02-23T14:38:23Zurn:sha1:43e7c85274b2473ab1aa10c26c109420d32f1083Update paperless container to 2.20.82026-02-23T13:01:38ZTimo Wilken2026-02-23T13:01:38Zurn:sha1:389e7129785c3eec8e0aff8ce54fb0a0eac4cc5aUpdate paperless container to 2.20.72026-02-20T12:47:03ZTimo Wilken2026-02-20T12:47:03Zurn:sha1:d7161bf66f0ac0e61ddd4da47dc4b08cddec63a0Update grafana container to 12.3.32026-02-20T12:46:57ZTimo Wilken2026-02-20T12:46:57Zurn:sha1:93541df160e61b4db2a5e0d7c772468ccd988adePHP 8.5 bundles opcache in core2026-02-19T16:11:55ZTimo Wilken2026-02-19T16:11:55Zurn:sha1:8fe809d5426d51e682b2506c02bf52e79a682c2dWait longer for the network to come online2026-02-19T15:59:31ZTimo Wilken2026-02-19T15:59:31Zurn:sha1:ed10d3db0b994175887c75d324a96dd15b237a46Handle multiple tries for network connectivity correctly2026-02-19T15:48:00ZTimo Wilken2026-02-19T15:40:47Zurn:sha1:e1dac3b551a0e32de6c3525bc06b5ba3e92e37daTweak network-online service in line with upstream docs2026-02-19T15:20:30ZTimo Wilken2026-02-19T15:17:05Zurn:sha1:d25f293a3bbf1ad9cc3f178b67d5dc1c7a301eb4
Also use Cloudflare as the ping target due to its lower latency compared to
gnu.org (which seems to be hosted in the US).
Let nginx bind to WireGuard address on boot2026-02-19T15:09:38ZTimo Wilken2026-02-19T15:09:38Zurn:sha1:9c224d0d0d8de6f9bd4ae850338979ee4bfbf2feServe videos on dedicated site2026-02-19T14:55:08ZTimo Wilken2026-02-15T15:13:08Zurn:sha1:b7a342c877f4b27d022256779923a6fb523dfc03Replace syncthing-exporter with Syncthing's built-in metrics2026-02-19T14:55:08ZTimo Wilken2026-02-19T12:46:29Zurn:sha1:861622e70a350d8c941eba756d0fe7c59bc69187
Syncthing has now grown support for native Prometheus metrics, and the
syncthing-exporter project has been archived upstream.
Update Nextcloud nginx config2026-02-19T14:55:08ZTimo Wilken2026-02-19T12:32:30Zurn:sha1:b893c1987688ae3a411fa8d3c6fb467e47aa53d5
In line with what the upstream docs recommend for v33:
https://docs.nextcloud.com/server/stable/admin_manual/installation/nginx.html
Fix build for go-github-com-syncthing-syncthing2026-02-19T14:55:08ZTimo Wilken2026-02-18T22:39:24Zurn:sha1:2c4d40ec4be9353e8e544390c725e1383b75e187
After upstream update of syncthing package.
Force suspend-to-idle on work laptop2026-02-19T14:55:07ZTimo Wilken2026-02-18T15:26:43Zurn:sha1:4ebe5bc11e8940d576a153954e3cd452894b924d
The default suspend-to-memory sleep state is broken on this device.
Don't expose RESTIC_ env vars to non-restic commands2026-02-19T14:55:07ZTimo Wilken2026-02-17T20:39:29Zurn:sha1:c8a878d841bf64af9eb383f4e00a4d6ec99b8a38Improve error message from electricity consumption fetcher2026-02-19T14:55:07ZTimo Wilken2026-02-17T20:38:47Zurn:sha1:050b0b645e3abbf24bc67e905e672bbb2f6cf14aRemove deprecated picom options2026-02-19T14:55:07ZTimo Wilken2026-02-15T10:29:28Zurn:sha1:f349485d0dcd64adb3d698af72af10c5ace8abf7Export IPMI and DCMI metrics to Prometheus2026-02-19T14:55:06ZTimo Wilken2026-02-14T11:28:18Zurn:sha1:c9bbb7ad0ec76b29dac0d809ec4fb16615a45bdaUpdate abusive cloud blocklist2026-02-14T11:29:04ZTimo Wilken2026-02-13T08:51:46Zurn:sha1:f0ebdd5104798261b6941bbd45c119086df85049Serve robots.txt in reverse-proxy-service-type2026-02-14T11:29:04ZTimo Wilken2026-02-12T16:06:10Zurn:sha1:675f6fb138b2a2c7b782f5e55b6c76b863603baa