André-Patrick Bubel Moredread

Nix Flake MVP

Goals

To provide Nix repositories with an easy and standard way to reference other Nix repositories.
To allow such references to be queried and updated automatically.
To provide a replacement for nix-channel, NIX_PATH and Hydra

MOVED

Install

curl -O https://gist.githubusercontent.com/corona6/509264be060015d293c8d292e4637a72/raw/joplin_clean_up.sh
chmod +x joplin_clean_up.sh

I found a post about suspending and then going into hibernate that included a really clever script. Turns out that with NixOS this is even esaier to coordinate as you have systemd so can have a before and after service. I just include this in my /etc/nixos/configuration.nix file and nixos-rebuild; then a systemctl suspend or a close of the lid will cause the hibernate timer to be set.

	#include <stdio.h>
	#include <stdint.h>
	// Philips Sonicare NFC Head Password calculation by @atc1441 Video manual: https://www.youtube.com/watch?v=EPytrn8i8sc
	uint16_t CRC16(uint16_t crc, uint8_t *buffer, int len) // Default CRC16 Algo
	{
	while(len--)
	{
	crc ^= *buffer++ << 8;
	int bits = 0;
	do

	$WMI = @{
	Query = "SELECT * FROM __InstanceModificationEvent WITHIN 5 WHERE TargetInstance ISA 'MSFT_MpPreference' AND TargetInstance.DisableRealtimeMonitoring=True"
	Action = {
	#$Global:Data = $Event
	Write-Host "Defender Configuration change - DisableRealtimeMonitoring:"$Event.SourceEventArgs.NewEvent.TargetInstance.DisableRealtimeMonitoring"(Old Value:"$Event.SourceEventArgs.NewEvent.PreviousInstance.DisableRealtimeMonitoring")"
	}
	Namespace = 'root\microsoft\windows\defender'
	SourceIdentifier = "Defender.DisableRealtimeMonitoring"
	}
	$Null = Register-WMIEvent @WMI

	#!/usr/bin/env nix-shell
	#!nix-shell -i bash -p bind.dnsutils -p traceroute -p curl
	# impure: needs ping
	#source: https://s3.amazonaws.com/aws-cloudfront-testing/CustomerTesting.html
	function _e {
	echo "> $@"
	eval "$@" 2>&1 \| sed -e "s/^/ /"
	printf "Exit: %s\n\n\n" "$?"
	}

	# Configure autofs for mounting sshfs mounts as a specific user.
	#
	# Heavily inspired by https://github.com/hellekin/autosshfs
	{ config, pkgs, lib, ...}: with lib;

	let
	cfg = config.pjones.services.autosshfs;
	mkdir = "${pkgs.coreutils}/bin/mkdir";

	##############################################################################

	{ pkgs, lib, config, ... }:
	{
	networking = {
	firewall.allowedTCPPorts = [
	3000 # grafana
	9090 # prometheus
	9093 # alertmanager
	];
	useDHCP = true;
	};

	url - https://aws.amazon.com/blogs/security/a-safer-way-to-distribute-aws-credentials-to-ec2/

	Finding hard-coded credentials in your code
	Hopefully you’re excited about deploying credentials to EC2 that are automatically rotated. Now that you’re using Roles, a good security practice would be to go through your code and remove any references to AKID/Secret. We suggest running the following regular expressions against your code base:

	Search for access key IDs: (?<![A-Z0-9])[A-Z0-9]{20}(?![A-Z0-9]). In English, this regular expression says: Find me 20-character, uppercase, alphanumeric strings that don’t have any uppercase, alphanumeric characters immediately before or after.
	Search for secret access keys: (?<![A-Za-z0-9/+=])[A-Za-z0-9/+=]{40}(?![A-Za-z0-9/+=]). In English, this regular expression says: Find me 40-character, base-64 strings that don’t have any base 64 characters immediately before or after.
	If grep is your preferred tool, run a recursive, Perl-compatible search using the following commands