Timo's Dotfiles

Adding a new machine

Before deploying the new machine:

• add the machine's external %ssh-ports in tw/system.scm to auto-configure the same port on the SSH server and in clients' SSH config

After deploying the new machine and when it has an SSH host key (for secret storage):

• configure its Wireguard keys in %wireguard-peers in tw/services/wireguard.scm to add the host to the Wireguard network

  • use wgmine to find a key with a prefix similar to the hostname
  • store the private and public key using pass edit computers/wireguard/private/<new host>
  • generate preshared key pairs by updating the wg-newhost.sh script, then running it
  • add the relevant secrets to regenerate-secrets.sh and run make secrets
• add its Guix signing key from /etc/guix/signing-key.pub to %tw-signing-keys in tw/channels.scm to allow offloading and/or transferring Guix build outputs between hosts

Setting up LibreWolf

Settings should be automatically set using librewolf.overrides.cfg.

Enable Firefox Account Sync and log in using the button in the settings UI -- but make sure "Resist Fingerprinting" is enabled temporarily, else the sign-in page won't load.

LibreWolf should automatically install uBlock Origin, Dark Reader, FoxyProxy and Firefox Color. For any additional extensions, install them from addons.mozilla.org by clicking "Download file" (if "Resist Fingerprinting" is disabled). With RFP enabled, the normal install flow works.

Follow the instructions in the README to install the Catppuccin Firefox theme; see tw/theme.scm for the catppuccin-theme-variant and catppuccin-theme-accent variables.

Restore FoxyProxy settings by importing the JSON file stored at tw/services/files/foxyproxy.json. Remember to update that file if you change the settings in the UI.