heather
2ad5653fda
heather: replace personal mesh with guarded AstrNet stub
2026-09-26 23:13:08 +00:00
4efbdc9bda
heather: pin Forgejo 15.0.9 and isolate Arion service updates
2026-09-26 16:56:43 +03:00
heather
4cfd8d3ac3
tuwunel v1.9.3 (DB migrated, verified); teable mem_limit 2g; nick-timer systemd service + caddy vhost; heather swap 4g, drop chromium, add diag tools; server.nix: drop pinchtab, add nodejs
2026-09-25 22:57:23 +00:00
heather
5e75ca7555
paseo: Restart always + StartLimitIntervalSec=0; pay.nix (local state)
2026-09-14 19:40:56 +00:00
heather
d7f0bf2f06
paseo: add /run/current-system/sw to PATH so spawned pi agents see full system tools (ip, ss, hostname, docker, ssh)
2026-09-14 19:40:56 +00:00
1e1416560a
heather: configure Teable Redis cache for new release
2026-09-14 22:40:43 +03:00
49cafbc50a
heather: update Teable to latest stable release
2026-09-14 22:26:01 +03:00
cf72e8521c
heather: fix Jupyter Argon2 password env and provider option
2026-09-11 13:12:26 +03:00
07bd059376
heather: use native Jupyter password login instead of Caddy basic auth
2026-09-11 13:09:53 +03:00
49c8fdee83
heather: allow Jupyter behind Caddy reverse proxy
2026-09-11 13:04:55 +03:00
947e8b956b
heather: jupyter IdentityProvider.token instead of deprecated password_required
2026-09-11 12:22:50 +03:00
e0f7d17308
heather: jupyter LD_LIBRARY_PATH for nix python + pypi wheels
2026-09-11 12:18:33 +03:00
76aaa9eb69
heather: jupyter env lives in ~/.local/share/uv/tools (venv not relocatable)
2026-09-11 03:40:44 +03:00
f4fe9c87c6
heather: jupyter.nix mkForce PATH
2026-09-11 03:30:37 +03:00
f9049a5a48
heather: fix double semicolon in caddy.nix jupyter vhost
2026-09-11 03:28:38 +03:00
d4153028d6
heather: add JupyterLab systemd service (jupyter.iscg.dev, localhost:8890, resource limits, caddy basicauth)
2026-09-11 03:12:01 +03:00
a293f1f999
remove kaneo
2026-09-10 13:59:05 +03:00
fd339edcdc
remove pi-web
2026-09-10 13:54:33 +03:00
4109a9d3ec
heather: provide sh to paseo tool runner
2026-09-09 21:44:24 +03:00
77a55756cd
heather: add procps to paseo PATH
2026-09-09 21:12:01 +03:00
381ac43f75
heather: fix paseo PATH directories
2026-09-09 21:05:46 +03:00
c4c1a485bf
heather: add git to paseo service PATH
2026-09-09 21:04:40 +03:00
656bce449c
heather: expose paseo as password-only daemon endpoint
2026-09-09 20:58:28 +03:00
heather
70e95226d4
heather: pinchtab browser control plane (chromium + user service) + pay x86_64 build
2026-09-09 17:19:03 +00:00
fc27c08fa8
heather: add paseo daemon (systemd + caddy vhost paseo.iscg.dev, dual auth)
2026-09-09 20:15:28 +03:00
252d082c37
fix(mesh): refresh egress DNS with getent and route clients
2026-08-03 08:55:11 +03:00
ab718ac336
heather: remove mistaken hemo Kaneo alias
2026-08-03 08:51:53 +03:00
56bb3d7f7c
feat(mesh): add selected Telegram and OpenRouter egress policy
2026-08-03 08:41:57 +03:00
6e88f2c833
heather: fix Kaneo dashboard icon
2026-08-03 08:38:51 +03:00
724948de7e
feat(mesh): add Sol-style lilac client pool
2026-08-03 08:30:35 +03:00
cf25eb4f35
heather: add hemo.iscg.dev alias for Kaneo
2026-08-03 00:55:36 +03:00
9abae8d2f5
fix(mesh): create heather identity interface with systemd
2026-08-03 00:36:52 +03:00
55bb222eb5
fix(mesh): rotate hyacinth peer key
2026-08-03 00:34:10 +03:00
69bdc051f6
feat(mesh): add heather WireGuard backbone peer
2026-08-03 00:17:36 +03:00
d1bfecc2e1
heather: add Kaneo with PostgreSQL
2026-08-02 22:08:50 +03:00
heather
7cfa5c31f8
robots.txt modified
2026-07-30 16:14:27 +00:00
2deae7db13
heather/caddy: rename nix.iscg.dev → files.iscg.dev
...
Опечатка. DNS и директория /var/www/nix → /var/www/pub переименованы.
2026-07-28 13:27:12 +03:00
67d6c1b6e6
heather/caddy: revert /files rewrite, add nix.iscg.dev file explorer
...
- /files/* back to plain file_server (v2RayTun.zip stays at iscg.dev/files/)
- nix.iscg.dev: file_server browse (directory listing) from /var/www/nix
- DNS nix.iscg.dev A → 51.250.45.111 added via yc dns
2026-07-28 13:20:04 +03:00
3d2f4172a5
heather/caddy: add /files/* static file_server on iscg.dev
...
Для раздачи временных файлов (например v2RayTun.zip) прямой https-ссылкой.
handle_path stripает /files/ prefix, file_server раздаёт из /var/www/files/.
Не конфликтует с matrix (использует /_matrix/*, /.well-known/matrix).
2026-07-28 13:08:14 +03:00
a30aea52bf
heather/jitsi: drop jvb 127.0.0.1:8080 publish (conflicts with cinny, not needed — colibri-ws proxied via jitsi-web nginx on alias jvb:9090)
2026-07-13 22:37:51 +03:00
5db2900db2
heather: drop 'systemd, not container' from homepage descriptions
2026-07-13 16:09:19 +03:00
06e1232185
heather: add pi-web to homepage dashboard
2026-07-13 16:03:18 +03:00
87faa84104
heather: add pi-web service + Caddy vhost pi.iscg.dev with basicauth
...
pi-web (agegr/pi-web, npm @agegr/pi-web) — web UI для pi coding agent.
systemd service на 127.0.0.1:30141, Caddy pi.iscg.dev терминирует TLS +
basicauth (bcrypt, пароль в pass iscg.dev/pi-web/auth).
nodejs в systemPackages; pi и pi-web ставятся в ~/.npm-global вручную.
2026-07-13 13:21:34 +03:00
78c39d6f5d
heather: homepage teable icon -> local /images/teable.png (420px GH avatar)
...
teable has no dashboard-icons entry and favicon is 16x16 .ico. Use the
teableio GitHub avatar (420x420 png) placed in /var/lib/homepage-images/.
Next.js caches static file list at container start, so adding images
requires docker restart homepage.
2026-07-13 03:44:26 +03:00
fca00e1368
heather: homepage live container status via docker-socket-proxy
...
tecnativa/docker-socket-proxy (read-only, CONTAINERS=1, POST=0) exposes
docker API to homepage over compose network. Per-service server/container
in services.yaml → green dot status. statusStyle: dot. Syncthing and
tuwunel-admin are systemd, no container status.
2026-07-13 03:34:58 +03:00
c070b2a972
heather: homepage fixes - bookmark href format, jitsi-meet icon, teable favicon
...
bookmarks.yaml needs href: key (was bare URL → new URL() crash).
jitsi.png -> jitsi-meet.png (proper brand icon in dashboard-icons).
teable has no dashboard-icons entry -> use teable.iscg.dev/favicon.ico.
2026-07-13 03:32:32 +03:00
1ccc59dd8d
heather: homepage background image + frosted cardBlur
...
Background photo (mounted ro from /var/lib/homepage-images into
/app/public/images). cardBlur: md for matte semi-transparent service
cards. opacity 70 to soften the photo.
2026-07-13 03:20:29 +03:00
190c93156e
heather: xray - override command to -config (image default is -confdir)
2026-07-13 03:15:26 +03:00
d3d132e225
heather: set HOMEPAGE_ALLOWED_HOSTS for host validation
2026-07-13 03:09:18 +03:00
6e84e26d2d
heather: xray VLESS+Reality proxy on :8443
...
Add xray-core container (ghcr.io/xtls/xray-core) to arion compose.
VLESS + Reality + xtls-rprx-vision, masquerades as www.microsoft.com.
Config (UUID + Reality privateKey) at /var/lib/xray-secrets/config.json
(outside git, root:docker 0640). Public port 8443, not behind Caddy.
Secrets in pass iscg.dev/xray/. Client: v2RayTun / v2rayN.
2026-07-13 03:05:48 +03:00
