| 2 Apr 2024 |
Miles Dyson | In reply to @fractivore:cyberia.club This isn't exactly the right channel for that, but may I take it you're new to git? My git knowledge is just enough. | 04:19:33 |
Miles Dyson | Can I have the config files in a non root directory? | 04:21:02 |
@fractivore:cyberia.club | In reply to @technicus:matrix.org Can I have the config files in a non root directory? You can. There's a few ways of doing it, including home-manager (which I haven't bothered to learn yet myself), using flakes and specifying a flake to build from on the command line, or perhaps just manually copying your config files from your non-root repo to their normal rootful location. I personally just have a git repo in my root /etc/nixos, which is probably not recommended, but 🤷♂️ | 04:24:05 |
@fractivore:cyberia.club | If you just want to get started with the music stuff, don't worry about getting "the right" kind of revision control setup. You could just manually upload the files to github and figure out a fancier way later if you need to. | 04:25:25 |
@fractivore:cyberia.club | When it comes to secrets files, absolutely keep those outside of your repo. Ultimately you need something other than git and NixOS to manage your secrets. You can use agenix to encrypt your secrets files or whatever, but even then you still have to manage your private key. My advice? Use a password manager for that. | 04:27:44 |
@fractivore:cyberia.club | Generate a keypair, upload the public key to github so you can push code from the command line, put the corresponding private key in your password manager, and you should be good to go. | 04:29:27 |
Miles Dyson | In reply to @fractivore:cyberia.club Generate a keypair, upload the public key to github so you can push code from the command line, put the corresponding private key in your password manager, and you should be good to go. What password manager do you recommend? | 04:36:01 |
@fractivore:cyberia.club | In reply to @technicus:matrix.org What password manager do you recommend? I use BitWarden.... I'd recommend it on account of the fact that it's free, low-friction, and has good compatibility options. You can also host your own with VaultWarden, but that's not really gonna get you added security guarantees at all unless you're a very experienced sysadmin and instead is likely to weaken your security posture. | 04:39:38 |
Toyli | In reply to @technicus:matrix.org What password manager do you recommend? Personally I use 1Password. BitWarden is also a good choice. | 06:18:35 |
| Charlotte 🦝 (it/rac/racs/racself/🦝/plush) changed their profile picture. | 06:56:13 |
| Charlotte 🦝 (it/rac/racs/racself/🦝/plush) changed their profile picture. | 07:34:37 |
Miles Dyson | Setting up Github with SSH is not working for me . . . I thought I have followed all the steps, but I am missing something. | 08:00:11 |
@bandithedoge:matrix.org | In reply to @technicus:matrix.org What password manager do you recommend? keepassxc all the way | 09:34:48 |
@bandithedoge:matrix.org | i have my keepass database synced across my devices with syncthing | 09:35:13 |
Brian Hechinger | I've been on 1Password for years (they were the best option for apple stuff way back when) but I keep thinking about switching to something else. How do keepass/bitwarden compare to 1password, specifically regarding nixos integrations? 1password mostly works out of the box on nix, but I do have complaints. :-D | 09:37:08 |
Brian Hechinger | An audio related question, when is ardour going to stop crashing when used with pipewire? 😁️ | 09:37:49 |
@bandithedoge:matrix.org | In reply to @wonko:4amlunch.net I've been on 1Password for years (they were the best option for apple stuff way back when) but I keep thinking about switching to something else. How do keepass/bitwarden compare to 1password, specifically regarding nixos integrations? 1password mostly works out of the box on nix, but I do have complaints. :-D haven't used 1password myself but there's not much to "integrate" since it just uses a single encrypted file. if you want to manage secrets in your nixos/hm config you're better off using sops-nix or agenix | 09:40:09 |
Brian Hechinger | In reply to @bandithedoge:matrix.org haven't used 1password myself but there's not much to "integrate" since it just uses a single encrypted file. if you want to manage secrets in your nixos/hm config you're better off using sops-nix or agenix Ah, ok, I guess that makes sense. I was just hoping to somehow have a unified set of secrets. | 09:41:01 |
@bandithedoge:matrix.org | In reply to @wonko:4amlunch.net An audio related question, when is ardour going to stop crashing when used with pipewire? 😁️ which backend are you using? i never had any issues with jack | 09:41:04 |
Brian Hechinger | In reply to @bandithedoge:matrix.org which backend are you using? i never had any issues with jack There is a known issue with pipewire's jack emulation and ardour. Haven't followed up with the status of it recently though. | 09:41:42 |
@bandithedoge:matrix.org | In reply to @wonko:4amlunch.net Ah, ok, I guess that makes sense. I was just hoping to somehow have a unified set of secrets. keepass is pretty good for that i guess but its main job is just your universal password manager | 09:42:59 |
@bandithedoge:matrix.org | In reply to @wonko:4amlunch.net There is a known issue with pipewire's jack emulation and ardour. Haven't followed up with the status of it recently though. never heard of it. just try out the other backends i guess, you won't get the same flexibility but maybe they'll work better for you | 09:43:46 |
Brian Hechinger | In reply to @bandithedoge:matrix.org keepass is pretty good for that i guess but its main job is just your universal password manager Yeah, it's not like agenix is that hard to use. I could also feed into it from a password manager as well as an alternative. OS secrets don't change often.
| 09:58:12 |
Brian Hechinger | In reply to @bandithedoge:matrix.org never heard of it. just try out the other backends i guess, you won't get the same flexibility but maybe they'll work better for you Sadly none of the other backends work with my setup. :( | 09:58:26 |
@bandithedoge:matrix.org | In reply to @wonko:4amlunch.net
Yeah, it's not like agenix is that hard to use. I could also feed into it from a password manager as well as an alternative. OS secrets don't change often.
i just put my age key in my keepass database, not the cleanest solution but it works | 09:59:30 |
@bandithedoge:matrix.org | In reply to @wonko:4amlunch.net Sadly none of the other backends work with my setup. :( i think you can run a normal jack server alongside pipewire if you disable its jack compatibility layer, never tried that myself tho | 10:00:23 |
tobiasbora | In reply to @wonko:4amlunch.net I've been on 1Password for years (they were the best option for apple stuff way back when) but I keep thinking about switching to something else. How do keepass/bitwarden compare to 1password, specifically regarding nixos integrations? 1password mostly works out of the box on nix, but I do have complaints. :-D I'm using keepassxc + syncthings, never had any issue in NixOs. | 10:04:10 |
tobiasbora | * I'm using keepassxc + syncthings, never had any issue in NixOs/android. | 10:04:36 |
tobiasbora | (Oh, never tried it with agenix,but both seem to support ssh keys, so might be good enough) | 10:07:58 |
Brian Hechinger | In reply to @bandithedoge:matrix.org i just put my age key in my keepass database, not the cleanest solution but it works Yeah, I do the same with 1password | 10:37:32 |