jamesog

theme = "Tomorrow Night Blue"
copy-on-select = true
macos-non-native-fullscreen = true
macos-titlebar-style = "tabs"
macos-option-as-alt = true

jamesog

alias: Agile price charge
description: >-
  Set the inverter to force charge when we're in the time window and the
  Octoppus Agile price is at or below the threshold.
trigger:
  - platform: state
    entity_id:
      - binary_sensor.charge_window
    from: "off"
    to: "on"

jamesog

{
  networking.hostId = "..."; # Use head -c8 /etc/machine-id to get this
  
  services.zfs.autoScrub.enable = true;
}

jamesog

. {
  forward . tls://2a07:a8c0::ae:9cfd tls://2a07:a8c1::ae:9cfd tls://45.90.28.178 tls://45.90.30.178 8.8.8.8 8.8.4.4 {
    tls_servername dns01-ae9cfd.dns.nextdns.io
    policy sequential
  }
  cache {
    success 12800 86400 300
    denial 12800
    prefetch 25
    serve_stale 24h

jamesog

{ config, pkgs, ... }:

{
  environment.etc = {
    "ssh/ca.pub".text = ''
      ssh-rsa ...
    '';
  };
  
  services.openssh.extraConfig =

jamesog

Edit 2023-03-03: This is now written in long-form at https://jamesog.net/2023/03/03/yubikey-as-an-ssh-certificate-authority/

The original version is retained below.

---

Prerequisites

• ykman from the yubikey-manager package
• libykcs11 from the yubico-piv-tool package

jamesog

Better config management

Syntax

Use HCL, not YAML.

# Ensure blocks group actions
ensure "Foo service" {
    package "foo" {

jamesog

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
	<dict>
		<key>Label</key>
		<string>net.jamesog.takeabreak</string>
		<key>Program</key>
		<string>/usr/bin/say</string>
		<key>ProgramArgs</key>
		<array>

jamesog

#!/bin/sh
#
# PROVIDE: tailscaled tailscale
# REQUIRE: NETWORKING

. /etc/rc.subr

name="tailscaled"
rcvar="${name}_enable"

jamesog

Yubikey as an SSH key

All other guides I've seen (https://github.com/drduh/YubiKey-Guide being the most prolific) tell you to use the Yubikey's smartcard (PKCS#11) features with GnuPG via gpg-agent.

STOP THE MADNESS!

OpenSSH has supported OpenSC since version 5.4. This means that all you need to do is install the OpenSC library and tell SSH to use that library as your identity.

Prequisites