sam_oneal/dotfiles
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

additional work to setup hyprland

Browse Source
This commit is contained in:
Samuel ONeal
2026-08-14 21:27:58 -06:00
parent 2b7b18c66d
commit 6e1ed76eed
13 changed files with 149 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files
systemd/.config/systemd/user/cloudflared-k8s.service
+11 -4
View File
@@ -2,22 +2,29 @@
# systemctl --user daemon-reload
# systemctl --user enable --now cloudflared-k8s.service
# systemctl --user status cloudflared-k8s.service
#
# The Cloudflare Access service token for k8s-api lives in the "Homelab"
# 1Password vault (item "K8s API Service Token", section "Service Token") and
# is injected at runtime via `op run` -- the secret is never written to disk.
[Unit]
Description=Cloudflare Tunnel to K8s API
After=network-online.target graphical-session.target
BindsTo=graphical-session.target
After=network-online.target graphical-session.target op-cli-signin.service
Wants=network-online.target systemd-networkd-wait-online.service
BindsTo=graphical-session.target
StartLimitIntervalSec=500
StartLimitBurst=5
[Service]
PassEnvironment=DISPLAY WAYLAND_DISPLAY DBUS_SESSION_BUS_ADDRESS XDG_RUNTIME_DIR
ExecStart=uwsm app -- /usr/bin/cloudflared access tcp --hostname k8s.samoneal.io --url localhost:6443
Environment="OP_BIOMETRIC_UNLOCK_ENABLED=true"
Environment="CF_ACCESS_CLIENT_ID=op://Homelab/K8s API Service Token/Service Token/client-id"
Environment="CF_ACCESS_CLIENT_SECRET=op://Homelab/K8s API Service Token/Service Token/client-secret"
ExecStart=/usr/bin/op run -- /usr/bin/cloudflared access tcp --hostname k8s.samoneal.io --url localhost:6443
Restart=on-failure
RestartSec=60
[Install]
WantedBy=default.target
WantedBy=graphical-session.target
systemd/.config/systemd/user/gdrive-rclone.service
+2 -2
View File
@@ -1,8 +1,8 @@
[Unit]
Description=Connect to GDrive via RClone
After=network-online.target graphical-session.target
Wants=network-online.target
BindsTo=graphical-session.target
Wants=network-online.target graphical-session.target
[Service]
PassEnvironment=DISPLAY WAYLAND_DISPLAY DBUS_SESSION_BUS_ADDRESS XDG_RUNTIME_DIR
@@ -11,4 +11,4 @@ Restart=on-failure
RestartSec=60
[Install]
WantedBy=default.target
WantedBy=graphical-session.target
systemd/.config/systemd/user/mnt-nas-credentials.service
+7 -6
View File
@@ -1,17 +1,18 @@
[Unit]
Description=Fetch NAS credentials from 1Password
After=op-cli-signin.service
After=graphical-session.target op-cli-signin.service
BindsTo=graphical-session.target
[Service]
Type=oneshot
Environment="DISPLAY=:0"
Environment="WAYLAND_DISPLAY=wayland-0"
PassEnvironment=DISPLAY WAYLAND_DISPLAY DBUS_SESSION_BUS_ADDRESS XDG_RUNTIME_DIR
Environment="OP_BIOMETRIC_UNLOCK_ENABLED=true"
ExecStart=sudo -u sammieo -E /home/sammieo/.local/bin/fetch-nas-credentials.sh
ExecStartPost=sudo -u sammieo /usr/bin/systemctl start nas-mounts.target
Environment="SUDO_ASKPASS=/home/sammieo/.local/bin/sudo-askpass.sh"
ExecStart=sudo -A -u sammieo -E /home/sammieo/.local/bin/fetch-nas-credentials.sh
ExecStartPost=sudo -A -u sammieo /usr/bin/systemctl start nas-mounts.target
RemainAfterExit=yes
StandardOutput=journal
StandardError=journal
[Install]
WantedBy=default.target
WantedBy=graphical-session.target
systemd/.config/systemd/user/op-cli-signin.service
+8 -2
View File
@@ -1,13 +1,19 @@
[Unit]
Description=1Password CLI SignIn
After=graphical-session.target
BindsTo=graphical-session.target
StartLimitIntervalSec=300
StartLimitBurst=10
[Service]
Type=oneshot
Environment="DISPLAY=:0"
Environment="WAYLAND_DISPLAY=wayland-0"
Environment="OP_BIOMETRIC_UNLOCK_ENABLED=true"
ExecStart=/bin/sh op signin
ExecStart=/usr/bin/op signin
Restart=on-failure
RestartSec=5
[Install]
WantedBy=default.target
WantedBy=graphical-session.target