This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
{ config, ... }: | |
let | |
immichHost = "immich.example.com"; # TODO: put your immich domain name here | |
immichRoot = "/tank/immich"; # TODO: Tweak these to your desired storage locations | |
immichPhotos = "${immichRoot}/photos"; | |
immichAppdataRoot = "${immichRoot}/appdata"; | |
immichVersion = "release"; | |
immichExternalVolume1 = "/tank/BackupData/Google Photos/[email protected]"; # TODO: if external volumes are desired |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/usr/bin/python | |
import re | |
import subprocess | |
hsr_process = subprocess.run( | |
'ps aux | grep "StarRail.exe"', | |
shell=True, | |
stdout=subprocess.PIPE | |
).stdout.decode().split('\n')[0] |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Unfortunately I have some bad news for downgrading. | |
Before I explain the bad news at the end of this post, I first need to introduce a background of iOS devices. | |
In iOS 16, Apple introduced a new firmware component known as Cryptex1. Technically, this is a "virtual" co-processor. | |
It's purpose is to allow Apple to push RSRs (Rapid Security Responses) which are separate from traditional iOS updates and can be installed much faster. | |
Like other firmwares, it also has a signing ticket locked to a cryptographic nonce (number-used-once). | |
We commonly refer to the Apple signing tickets as SHSH blobs. | |
Meaning the firmware can't be installed without a valid signing ticket as well as a matching nonce. | |
The "big two" components we deal with signing/nonces are AP and SEP. AP is basically the main device chip (Application Processor). | |
SEP is the security chip (Secure Enclave Processor). | |
With regards to APNonce, Apple conveniently gave us the com.apple.System.boot-nonce NVRAM property which we use to set the APNonce generator. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
================================== | |
INSTALLING NIXOS WITH OPT-IN STATE | |
Based mostly on: | |
grahamc.com/blog/erase-your-darlings | |
gist.github.com/mx00s/ea2462a3fe6fdaa65692fe7ee824de3e | |
nixos.org/manual/nixos/stable/ |
- Create the GPT partition table
$ parted /dev/sdX mklabel gpt
- Create the UEFI FAT32 partition (which will be
/dev/sdXY
)$ parted /dev/sdX mkpart esp fat32 1MiB 512MiB
$ parted /dev/sdX set 1 esp on
$ parted /dev/sdX set 1 boot on
$ mkfs.fat -F 32 -n UEFI /dev/sdXY
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
{ | |
description = "C/C++ environment"; | |
inputs = { | |
nixpkgs.url = "github:NixOS/nixpkgs/nixpkgs-unstable"; | |
utils.url = "github:numtide/flake-utils"; | |
}; | |
outputs = { self, nixpkgs, utils, ... }@inputs: | |
utils.lib.eachDefaultSystem ( |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
pm disable-user --user 0 com.caf.fmradio | |
pm disable-user --user 0 com.coloros.activation | |
pm disable-user --user 0 com.coloros.activation.overlay.common | |
pm disable-user --user 0 com.coloros.alarmclock | |
pm disable-user --user 0 com.coloros.appmanager | |
pm disable-user --user 0 com.coloros.assistantscreen | |
pm disable-user --user 0 com.coloros.athena | |
pm disable-user --user 0 com.coloros.avastofferwall | |
pm disable-user --user 0 com.coloros.backuprestore | |
pm disable-user --user 0 com.coloros.backuprestore.remoteservice |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
;;; Startup | |
;;; PACKAGE LIST | |
(setq package-archives | |
'(("melpa" . "https://melpa.org/packages/") | |
("elpa" . "https://elpa.gnu.org/packages/"))) | |
;;; BOOTSTRAP USE-PACKAGE | |
(package-initialize) | |
(setq use-package-always-ensure t) | |
(unless (package-installed-p 'use-package) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# Just some notes on enabling smart http with nginx as well as authentication on push for repos | |
# install git, cgit and apache2-utils (for authentication) | |
apt install git cgit apache2-utils fcgiwrap | |
# create a git user | |
adduser git | |
su git | |
cd | |
mkdir .ssh && chmod 700 .ssh | |
touch .ssh/authorized_keys && chmod 600 .ssh/authorized_keys |
NewerOlder