5 Commits

Include renames

Author	SHA1	Message	Date
beatzaplentyandClaude Sonnet 4.6	5beed2d75c	feat(ipa/docker): grant docker access via IPA group membership ... Create an IPA group "docker-access" (GID 50010) and pin the local "docker" group to that GID on all Docker hosts. Any IPA user in the docker-access group automatically gains docker socket access through SSSD supplementary-group resolution — no per-host docker.members entry needed. Specific changes: - variables.nix: add dockerAccessGid = 50010 - modules/docker/enable-service.nix: lib.mkForce docker GID to dockerAccessGid, removing the need to name individual IPA users - modules/build-types/docker.nix: remove direct wayne docker.members entry (access now comes from IPA group) - modules/ipa/client.nix: refactor repeated security.* / systemd.* top-level keys into merged attribute sets (fixes statix W20); add security.pam.services.lightdm.makeHomeDir so the GUI login path also creates the home dir on first login Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-07-28 15:16:05 +10:00
beatzaplenty	fc277294f3	add vars to module	2026-07-28 10:02:58 +10:00
beatzaplenty	f3e5ea67a0	add docker group to user in enable docker service module	2026-07-28 09:59:48 +10:00
beatzaplentyandClaude Sonnet 5	6f8c6c8ef1	Resolve all statix and nixpkgs-fmt warnings repo-wide ... Zero W20 (repeated attribute keys), W10 (empty { ... }: variadic pattern, use _: instead), and W04 (a = x.a instead of inherit) warnings remain anywhere in the tree, and nixpkgs-fmt --check is clean on all 46 .nix files. Repeated-key merges go as deep as statix actually flags per file (e.g. boot.loader.* nested under boot.loader = { ... } once the outer boot.* merge exposed it as its own repeat) — every merge is a pure attribute-path restructuring with no value changes, verified by comparing config.system.build.toplevel.drvPath before/after for a representative host per changed module plus a full 19-host + 4-package eval sweep. One indentation slip caught and fixed during this pass: nesting modules/installer/common.nix's environment.etc."auto-install.sh".text under an environment = { ... } block initially normalized the script's shebang/set line indentation, which actually changes the rendered file (Nix's '' string dedent treats it as real content, not cosmetic whitespace) — reproduced the original's exact indentation and reverified the rendered script is byte-identical to before. modules/services/zfs/auto-mount-volumes.nix picked up formatting too; worth noting it isn't imported by anything in this flake at all. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01La55Nsss8jZ7ZuzUV9mfot	2026-07-20 03:47:42 +10:00
beatzaplenty	9fef163850	updated module directory structure	2026-07-13 00:56:19 +10:00