dotfiles/provision/additional-setup.md

Additional Setup

The following documents some NixOS setup that wasn't automated.

Hyprland

Detecting monitor configs is annoying and I don't feel like it is worth the time to figure out. After doing the first chezmoi apply you will need copy monitors.conf.example in the hyprland config folder to monitors.conf and edit for correct monitor settings.

Encryption Keys

Github SSH

Keys for SSH aren't automatically placed with chezmoi secret since it complicated things to much. The key for github SSH must be transferred manually from Bitwarden or:

• /run/secrets/keys/github_personal to ~/.ssh/keys/github_personal.
• /run/secrets/radicale/users to ~/.config/radicale/users.

Sops-nix

Encrypted keys for various aspects of the config are stored in ./secrets/secrets.yaml to the required key for decryption must be placed at ~/.config/sops/age/keys.txt.

NIPR email, Teams, etc.

• Run pcscan and make sure card reader shows up.
• Run pkcs11-register to register cac.
• Download certs (i.e. unclass-certificates_pkcs7_DoD.zip) and import into Firefox.
• Use below links:

Teams Outlook OneDrive

Wireguard Client

Wireguard is nice for a home vpn. NixOS setus up all of the configurations for peers automatically on torus. Public keys, private keys, and config files are generated and stored in ~/.wireguard. Some machines like kestrel setup the vpn automatically within configuration.nix. However, others require a small amount of manual setup.

Cell phones like adjudicator are added with a generated QR code:

qrencode -t ansiutf8 < <conf file>

Computers using NetworkManager like bulwark need to have conf file imported:

nmcli connection import type wireguard file <conf file>

Mount network drives

I find fstab messing about more trobule than it is worth. Credentials need to be manually created in ~/.smb. To mount network drives when needed with the following command:

linux-mount-<network drive name>

Git-annex

I use git-annex to sync some of the large files (mostly roms) that I don't want to have fill copies on each machine. Current git-annex stores I have are:

• roms - ~/mnt/engi/media/roms from torus.

Cadquery and Simplify3d

Cadquery and Simplify3d don't play nice with non-FHS filesystems (and Simplify3d is proprietary). I run these programs within distrobox. Some notes about using distrobox for these programs.

If arch-box isn't created, create it and apply chezmoi dot files to secondary home directory:

distrobox create --image archlinux --name arch-box --home ~/box/arch
chezmoi apply -D ~/home/arch

Then enter the box and run script to install cadquery and dependencies for Simplify3d:

distrobox enter arch-box
cd && ./bin/arch-install-cad

As the script suggest then download and install Simplify3d from the script on the website.

The applications can be run within the box with the following commands:

# Simplify3d
/opt/Simplify3D-5.1.2/LaunchScript.sh
# CQ-editor
cd ~/cq-editor && ./run.sh

Chrome

The vast majority of Chrome is setup with browser.nix including installing plugins and various settings. However, setup for vimium and New Tab Redirect could not be fully automated.

• Upon launch New Tab Redirect should prompt to set the new tab page. Set to http://localhost:8080.

• Vimium config is saved in chezmoi. Open the vimium plugin page and restore config from ~/.config/vimium-options.json.

• Pin and re-arrange plugins as desired.

Steam

Some games/emulators (in my case Ares) don't fullscreen nicely in window managers. In that case add something alongs the lines of the following launch command to run them within gamescope.

gamescope -w 2560 -h 1440 -f %command%

Obsidian Vault on New machine

Clone vulcan vault from personal github.

git clone https://<user>:<token>@git.tstarr.us/tstarr/vulcan.git

Copy another .obsidian folder for the new host (i.e. .obsidian-<host>).

Open vault folder in obsidian and change the .obsidian folder in settings.

Wifi on Shivan

Connect to wifi network with: nmcli device wifi connect <SSID> password <password>.

Gnome Extensions

The following extensions don't work from nixpkgs easily. For now install manually:

• Fullscreen Avoider