Add new server modules and configurations for various services
/ update-readme (push) Has been cancelled
/ update-readme (push) Has been cancelled
- Introduced `default-creds` module for managing default credentials with Umami integration. - Added `fail2ban` module for brute-force attack protection with configurable ban times. - Created `firewall` module to enable and configure basic firewall settings. - Implemented `gitea` module for self-hosted Git service with PostgreSQL backend. - Developed `glance` module for a customizable dashboard with various widgets and themes. - Added `iknowyou` module for a self-hosted password manager with production and demo environments. - Introduced `kernel-hardening` module for enhancing kernel security settings. - Created `mazanoke` module for a simple web application with Nginx integration. - Added `mealie` module for a self-hosted meal planning application. - Implemented `stirling-pdf` module for PDF generation service. - Developed `umami` module for self-hosted analytics with secret management. - Added `ssh` module for secure SSH configuration with user restrictions. - Introduced `nixy` theme for a customized aesthetic experience across services.
This commit is contained in:
KptltD00M
@@ -0,0 +1,16 @@
|
||||
# Contributing to Nixy
|
||||
|
||||
Everybody is invited and welcome to contribute to Nixy. There is a lot to do... Check the issues!
|
||||
|
||||
The process is straight-forward.
|
||||
|
||||
- Read [How to get faster PR reviews](https://github.com/kubernetes/community/blob/master/contributors/guide/pull-requests.md#best-practices-for-faster-reviews) by Kubernetes (but skip step 0 and 1)
|
||||
- Fork Nixy [git repository](https://github.com/anotherhadi/nixy).
|
||||
- Write your changes (new theme, bug fixes, issues fix, ...).
|
||||
- Create a Pull Request against the main branch of Nixy.
|
||||
|
||||
> [!TIP]
|
||||
> To update the README, change the `./.github/assets/README_template.md`
|
||||
|
||||
> [!IMPORTANT]
|
||||
> Don't push your host's folder
|
||||
@@ -0,0 +1,44 @@
|
||||
# Groups
|
||||
|
||||
Groups are curated sets of packages exposed as flake outputs. Each group has two forms:
|
||||
|
||||
- **`homeManagerModules.<group>`** — full home-manager module (packages + files + systemd units)
|
||||
- **`packages.<group>`** — standalone environment for `nix shell` (packages only)
|
||||
|
||||
## Available groups
|
||||
|
||||
- dev (go, bun, air, ...)
|
||||
- cybersecurity (nmap, john, dirb, ffuf, ...)
|
||||
|
||||
For the Cybersecurity group, the home-manager module also sets up:
|
||||
|
||||
- `~/Cyber/wordlists/` with SecLists, fuzz4bounty, and hashcat rules
|
||||
- `~/Cyber/tmp/` as a temporary workspace
|
||||
|
||||
## Use in another flake
|
||||
|
||||
Add this repo as an input:
|
||||
|
||||
```nix
|
||||
inputs.nixy.url = "github:anotherhadi/nixy";
|
||||
```
|
||||
|
||||
Import the home-manager module in your home configuration:
|
||||
|
||||
```nix
|
||||
{ inputs, ... }: {
|
||||
imports = [
|
||||
inputs.nixy.homeManagerModules.cybersecurity
|
||||
# inputs.nixy.homeManagerModules.dev
|
||||
];
|
||||
}
|
||||
```
|
||||
|
||||
## Quick shell without installing
|
||||
|
||||
```sh
|
||||
nix shell github:anotherhadi/nixy#cybersecurity
|
||||
nix shell github:anotherhadi/nixy#dev
|
||||
```
|
||||
|
||||
This drops you into a shell with all tools in `PATH`. No home-manager required, no wordlists or systemd units.
|
||||
@@ -0,0 +1,40 @@
|
||||
# Neovim
|
||||
|
||||
The Neovim configuration is built with [nvf](https://github.com/notashelf/nvf) and exposed as a standalone flake output.
|
||||
It can be used in three ways: run it directly, import it into another flake's home-manager setup, or use it as part of this config.
|
||||
|
||||
## Run directly
|
||||
|
||||
No installation needed:
|
||||
|
||||
```sh
|
||||
nix run github:anotherhadi/nixy#nvim
|
||||
```
|
||||
|
||||
## Use in another flake
|
||||
|
||||
Add this repo as an input:
|
||||
|
||||
```nix
|
||||
inputs.nixy.url = "github:anotherhadi/nixy";
|
||||
```
|
||||
|
||||
Then import the home-manager module in your home configuration:
|
||||
|
||||
```nix
|
||||
{ inputs, ... }: {
|
||||
imports = [ inputs.nixy.homeManagerModules.nvim ];
|
||||
}
|
||||
```
|
||||
|
||||
## What's included
|
||||
|
||||
| File | Description |
|
||||
| --------------- | ---------------------------------------------------------------------- |
|
||||
| `options.nix` | Core settings: theme (catppuccin mocha), clipboard, indentation, folds |
|
||||
| `languages.nix` | LSP, treesitter, formatters, diagnostics, and per-language config |
|
||||
| `keymaps.nix` | All key mappings (leader: `space`) |
|
||||
| `picker.nix` | Snacks picker + oil.nvim |
|
||||
| `snacks.nix` | Snacks extras: image preview, zen mode, git signs, statuscolumn |
|
||||
| `utils.nix` | Bufferline, lualine, copilot, lazygit, toggleterm, autocomplete |
|
||||
| `mini.nix` | Mini.nvim suite: pairs, comment, icons, indentscope, diff, git |
|
||||
@@ -0,0 +1,29 @@
|
||||
# SERVER
|
||||
|
||||
## Overview
|
||||
|
||||
This document describes the architecture and setup of the self-hosted **NixOS server**, which is securely accessible via **a Cloudflare Tunnel**.
|
||||
The server is designed for private, secure, and easily manageable self-hosting of various services.
|
||||
|
||||
|
||||
|
||||
## **Why This Setup?**
|
||||
|
||||
- **Private & Secure**: Services are only accessible through Cloudflare's access control, preventing exposure to the "public internet".
|
||||
- **Domain-based Access**: A custom domain maps to the server's tunnel, making service access simple and consistent.
|
||||
- **Modular & Declarative**: Everything is managed through NixOS modules (except for access control), ensuring reproducibility and easy configuration.
|
||||
|
||||
## **Self-Hosted Services**
|
||||
|
||||
The server hosts several key applications:
|
||||
|
||||
- **NGINX**: Reverse proxy for routing traffic to services via my domain name.
|
||||
- **AdGuard Home**: A self-hosted DNS ad blocker for network-wide ad and tracker filtering.
|
||||
- **Glance**: An awesome dashboard! (See the screenshot above)
|
||||
- **Arr Stack (Radarr, Sonarr, etc.)**: Automated media management tools for handling movies and TV shows. (legaly ofc)
|
||||
- **Mealie**: A self-hosted recipe manager and meal planner with a clean user interface.
|
||||
- **Stirling-PDF**: A powerful, locally hosted web application for editing, merging, and converting PDF files.
|
||||
- **CyberChef**: The "Cyber Swiss Army Knife" for data analysis, decoding, and encryption tasks.
|
||||
- **Mazanoke**: A utility service for image processing, specialized in format conversion and downgrading/optimization.
|
||||
- **SSH**: Secure remote access configuration for server management. (via browser too)
|
||||
- **Security related stuff**: Cloudflared, Fail2Ban, Firewall
|
||||
@@ -0,0 +1,17 @@
|
||||
# Themes
|
||||
|
||||
Themes are defined in `themes`. Those themes define the colors, fonts, icons, etc, used by Hyprland and the apps/programs installed.
|
||||
You can change the selected theme by changing the import statement of your host's variables.nix file.
|
||||
|
||||
## Create your theme
|
||||
|
||||
Create a copy of one of the existing themes and change the variables.
|
||||
Wallpapers are loaded from the [hadi's awesome-wallpapers](https://github.com/anotherhadi/awesome-wallpapers) repo.
|
||||
|
||||
## Gallery
|
||||
|
||||
### Rose-pine
|
||||
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user