2023-11-20 16:17:35 +01:00
# TODOs
2024-10-07 20:10:15 +02:00
This document contains ideas about possible extensions or improvements of my NixOS configuration. Many more TODOs can be found as comments inside other files of this repository.
2023-11-20 16:17:35 +01:00
2024-02-02 11:16:13 +01:00
* Monthly BTRFS scrub
* Drives @yodaNas , @yodaHedgehog reach about 45°C
* Control case fan speed by drive temp
2024-01-08 22:06:33 +01:00
* Script to update, reboot and unlock FDE headless servers.
* `niv` -> `colmena apply --on ... --reboot boot` -> `ssh unlock...` -> Fill in FDE password with `expect`
2023-11-20 16:17:35 +01:00
* Nitrokey LUKS unlock
* Yubikey LUKS: https://nixos.wiki/wiki/Yubikey_based_Full_Disk_Encryption_(FDE)_on_NixOS
* Yubikey LUKS: https://github.com/georgewhewell/nixos-host/blob/master/profiles/luks-yubi.nix
* Old wiki entry, initramfs smartcard LUKS unlock: https://wiki.ubuntu.com/SmartCardLUKSDiskEncryption#SmartCard_Setup
* Nitrokey PAM log-in
* https://docs.nitrokey.com/pro/linux/login-with-pam
* You have two options: `pam_p11` or `PAM Poldi` .
* The solution with pam_p11 is more difficult to achieve and is based on S/MIME certificates.
* I could not find pam-poldi for NixOS :/
* Impermanence, opt-in to persistence:
https://github.com/Misterio77/nix-starter-configs/tree/main#try-opt-in-persistance
* nix-shell / lorri
* https://ghedam.at/15978/an-introduction-to-nix-shell
* docker-compose.yml for services and nix-shell to run the code
