heather
53f908743a
Serve Help2Travel landing and partnership API
2026-10-15 09:14:52 +00:00
0938004bfe
Add gcalcli OAuth consent pages
2026-10-05 15:41:04 +03:00
heather
9324295d49
fix(heather): break AstrNet FRR boot ordering cycle
2026-10-02 17:56:50 +00:00
db25302c85
fix(heather): restore inbound Docker access with WAN return routing
2026-09-29 01:49:11 +03:00
heather
b014c03b21
heather: SNAT Docker egress to AstrNet identity and allow replies
2026-09-27 00:17:03 +00:00
heather
8223868774
heather: fix BGP default precedence, YC fallback and WAN BGP exposure
2026-09-27 00:09:28 +00:00
heather
b0d1de279f
heather: route outbound via AstrNet with WAN failback
2026-09-26 23:57:46 +00:00
heather
5cd290eeba
heather: allow AstrNet host ingress, keep transit blocked
2026-09-26 23:36:33 +00:00
heather
f69f67d36a
heather: allow bounded AstrNet ICMP echo on own addresses
2026-09-26 23:25:31 +00:00
heather
2ad5653fda
heather: replace personal mesh with guarded AstrNet stub
2026-09-26 23:13:08 +00:00
4efbdc9bda
heather: pin Forgejo 15.0.9 and isolate Arion service updates
2026-09-26 16:56:43 +03:00
heather
4cfd8d3ac3
tuwunel v1.9.3 (DB migrated, verified); teable mem_limit 2g; nick-timer systemd service + caddy vhost; heather swap 4g, drop chromium, add diag tools; server.nix: drop pinchtab, add nodejs
2026-09-25 22:57:23 +00:00
heather
5e75ca7555
paseo: Restart always + StartLimitIntervalSec=0; pay.nix (local state)
2026-09-14 19:40:56 +00:00
heather
d7f0bf2f06
paseo: add /run/current-system/sw to PATH so spawned pi agents see full system tools (ip, ss, hostname, docker, ssh)
2026-09-14 19:40:56 +00:00
1e1416560a
heather: configure Teable Redis cache for new release
2026-09-14 22:40:43 +03:00
49cafbc50a
heather: update Teable to latest stable release
2026-09-14 22:26:01 +03:00
cf72e8521c
heather: fix Jupyter Argon2 password env and provider option
2026-09-11 13:12:26 +03:00
07bd059376
heather: use native Jupyter password login instead of Caddy basic auth
2026-09-11 13:09:53 +03:00
49c8fdee83
heather: allow Jupyter behind Caddy reverse proxy
2026-09-11 13:04:55 +03:00
947e8b956b
heather: jupyter IdentityProvider.token instead of deprecated password_required
2026-09-11 12:22:50 +03:00
e0f7d17308
heather: jupyter LD_LIBRARY_PATH for nix python + pypi wheels
2026-09-11 12:18:33 +03:00
76aaa9eb69
heather: jupyter env lives in ~/.local/share/uv/tools (venv not relocatable)
2026-09-11 03:40:44 +03:00
f4fe9c87c6
heather: jupyter.nix mkForce PATH
2026-09-11 03:30:37 +03:00
f9049a5a48
heather: fix double semicolon in caddy.nix jupyter vhost
2026-09-11 03:28:38 +03:00
d4153028d6
heather: add JupyterLab systemd service (jupyter.iscg.dev, localhost:8890, resource limits, caddy basicauth)
2026-09-11 03:12:01 +03:00
a293f1f999
remove kaneo
2026-09-10 13:59:05 +03:00
fd339edcdc
remove pi-web
2026-09-10 13:54:33 +03:00
4109a9d3ec
heather: provide sh to paseo tool runner
2026-09-09 21:44:24 +03:00
77a55756cd
heather: add procps to paseo PATH
2026-09-09 21:12:01 +03:00
381ac43f75
heather: fix paseo PATH directories
2026-09-09 21:05:46 +03:00
c4c1a485bf
heather: add git to paseo service PATH
2026-09-09 21:04:40 +03:00
656bce449c
heather: expose paseo as password-only daemon endpoint
2026-09-09 20:58:28 +03:00
heather
70e95226d4
heather: pinchtab browser control plane (chromium + user service) + pay x86_64 build
2026-09-09 17:19:03 +00:00
fc27c08fa8
heather: add paseo daemon (systemd + caddy vhost paseo.iscg.dev, dual auth)
2026-09-09 20:15:28 +03:00
252d082c37
fix(mesh): refresh egress DNS with getent and route clients
2026-08-03 08:55:11 +03:00
ab718ac336
heather: remove mistaken hemo Kaneo alias
2026-08-03 08:51:53 +03:00
56bb3d7f7c
feat(mesh): add selected Telegram and OpenRouter egress policy
2026-08-03 08:41:57 +03:00
6e88f2c833
heather: fix Kaneo dashboard icon
2026-08-03 08:38:51 +03:00
724948de7e
feat(mesh): add Sol-style lilac client pool
2026-08-03 08:30:35 +03:00
cf25eb4f35
heather: add hemo.iscg.dev alias for Kaneo
2026-08-03 00:55:36 +03:00
9abae8d2f5
fix(mesh): create heather identity interface with systemd
2026-08-03 00:36:52 +03:00
55bb222eb5
fix(mesh): rotate hyacinth peer key
2026-08-03 00:34:10 +03:00
69bdc051f6
feat(mesh): add heather WireGuard backbone peer
2026-08-03 00:17:36 +03:00
d1bfecc2e1
heather: add Kaneo with PostgreSQL
2026-08-02 22:08:50 +03:00
heather
7cfa5c31f8
robots.txt modified
2026-07-30 16:14:27 +00:00
2deae7db13
heather/caddy: rename nix.iscg.dev → files.iscg.dev
...
Опечатка. DNS и директория /var/www/nix → /var/www/pub переименованы.
2026-07-28 13:27:12 +03:00
67d6c1b6e6
heather/caddy: revert /files rewrite, add nix.iscg.dev file explorer
...
- /files/* back to plain file_server (v2RayTun.zip stays at iscg.dev/files/)
- nix.iscg.dev: file_server browse (directory listing) from /var/www/nix
- DNS nix.iscg.dev A → 51.250.45.111 added via yc dns
2026-07-28 13:20:04 +03:00
3d2f4172a5
heather/caddy: add /files/* static file_server on iscg.dev
...
Для раздачи временных файлов (например v2RayTun.zip) прямой https-ссылкой.
handle_path stripает /files/ prefix, file_server раздаёт из /var/www/files/.
Не конфликтует с matrix (использует /_matrix/*, /.well-known/matrix).
2026-07-28 13:08:14 +03:00
a30aea52bf
heather/jitsi: drop jvb 127.0.0.1:8080 publish (conflicts with cinny, not needed — colibri-ws proxied via jitsi-web nginx on alias jvb:9090)
2026-07-13 22:37:51 +03:00
5db2900db2
heather: drop 'systemd, not container' from homepage descriptions
2026-07-13 16:09:19 +03:00
