See HYPRLAND_SHORTCUTS.md for a full list of keybindings.
dotfiles.bootloader = "grub";
dotfiles.grubDevice = "/dev/nvme0n1";Put wireguard conf into /etc/wireguard/home.conf and /etc/wireguard/proton.conf
From project root:
sudo nixos-rebuild switch --flake .#simonFrom project root:
home-manager switch --flake .#simon/etc/nixos/smb-p, /etc/nixos/smb-s and /etc/nixos/smb-scan
username=username
password=password
/home/simon/.config/sops/age/keys.txt
SECRET-KEY
Ollama runs on 127.0.0.1:11435 internally. nginx proxies port 11434 externally and requires an OpenAI-style Bearer token.
Create /etc/nixos/secrets/ollama-nginx-auth.conf with your API key:
sudo mkdir -p /etc/nixos/secrets
sudo nano /etc/nixos/secrets/ollama-nginx-auth.confmap $http_authorization $ollama_auth_ok {
"Bearer YOUR_API_KEY_HERE" 1;
default 0;
}sudo chmod 600 /etc/nixos/secrets/ollama-nginx-auth.confTest:
curl http://localhost:11434/api/tags -H "Authorization: Bearer YOUR_API_KEY_HERE"Create /etc/nixos/secrets/pangolin.env:
sudo mkdir -p /etc/nixos/secrets
sudo bash -c 'echo "SERVER_SECRET=$(openssl rand -hex 32)" > /etc/nixos/secrets/pangolin.env'
sudo chmod 600 /etc/nixos/secrets/pangolin.env