heather
5cd290eeba
heather: allow AstrNet host ingress, keep transit blocked
2026-09-26 23:36:33 +00:00
heather
f69f67d36a
heather: allow bounded AstrNet ICMP echo on own addresses
2026-09-26 23:25:31 +00:00
heather
2ad5653fda
heather: replace personal mesh with guarded AstrNet stub
2026-09-26 23:13:08 +00:00
4efbdc9bda
heather: pin Forgejo 15.0.9 and isolate Arion service updates
2026-09-26 16:56:43 +03:00
0e56d31d68
poppy: gcalcli; kitty opacity 0.84; gpg-agent ttl 600s; pay.nix darwin (skip autoPatchelfHook); syncthing launchd via nix-darwin; mihomo
2026-09-26 01:57:33 +03:00
heather
4cfd8d3ac3
tuwunel v1.9.3 (DB migrated, verified); teable mem_limit 2g; nick-timer systemd service + caddy vhost; heather swap 4g, drop chromium, add diag tools; server.nix: drop pinchtab, add nodejs
2026-09-25 22:57:23 +00:00
heather
5e75ca7555
paseo: Restart always + StartLimitIntervalSec=0; pay.nix (local state)
2026-09-14 19:40:56 +00:00
heather
d7f0bf2f06
paseo: add /run/current-system/sw to PATH so spawned pi agents see full system tools (ip, ss, hostname, docker, ssh)
2026-09-14 19:40:56 +00:00
1e1416560a
heather: configure Teable Redis cache for new release
2026-09-14 22:40:43 +03:00
49cafbc50a
heather: update Teable to latest stable release
2026-09-14 22:26:01 +03:00
cf72e8521c
heather: fix Jupyter Argon2 password env and provider option
2026-09-11 13:12:26 +03:00
07bd059376
heather: use native Jupyter password login instead of Caddy basic auth
2026-09-11 13:09:53 +03:00
49c8fdee83
heather: allow Jupyter behind Caddy reverse proxy
2026-09-11 13:04:55 +03:00
947e8b956b
heather: jupyter IdentityProvider.token instead of deprecated password_required
2026-09-11 12:22:50 +03:00
e0f7d17308
heather: jupyter LD_LIBRARY_PATH for nix python + pypi wheels
2026-09-11 12:18:33 +03:00
76aaa9eb69
heather: jupyter env lives in ~/.local/share/uv/tools (venv not relocatable)
2026-09-11 03:40:44 +03:00
f4fe9c87c6
heather: jupyter.nix mkForce PATH
2026-09-11 03:30:37 +03:00
f9049a5a48
heather: fix double semicolon in caddy.nix jupyter vhost
2026-09-11 03:28:38 +03:00
d4153028d6
heather: add JupyterLab systemd service (jupyter.iscg.dev, localhost:8890, resource limits, caddy basicauth)
2026-09-11 03:12:01 +03:00
a293f1f999
remove kaneo
2026-09-10 13:59:05 +03:00
fd339edcdc
remove pi-web
2026-09-10 13:54:33 +03:00
4109a9d3ec
heather: provide sh to paseo tool runner
2026-09-09 21:44:24 +03:00
77a55756cd
heather: add procps to paseo PATH
2026-09-09 21:12:01 +03:00
381ac43f75
heather: fix paseo PATH directories
2026-09-09 21:05:46 +03:00
c4c1a485bf
heather: add git to paseo service PATH
2026-09-09 21:04:40 +03:00
656bce449c
heather: expose paseo as password-only daemon endpoint
2026-09-09 20:58:28 +03:00
heather
70e95226d4
heather: pinchtab browser control plane (chromium + user service) + pay x86_64 build
2026-09-09 17:19:03 +00:00
fc27c08fa8
heather: add paseo daemon (systemd + caddy vhost paseo.iscg.dev, dual auth)
2026-09-09 20:15:28 +03:00
d015be0c4f
heather: expose only pi in user PATH
2026-08-03 09:09:29 +03:00
917b28ec4b
heather: add npm global bin to user PATH
2026-08-03 09:08:18 +03:00
252d082c37
fix(mesh): refresh egress DNS with getent and route clients
2026-08-03 08:55:11 +03:00
ab718ac336
heather: remove mistaken hemo Kaneo alias
2026-08-03 08:51:53 +03:00
56bb3d7f7c
feat(mesh): add selected Telegram and OpenRouter egress policy
2026-08-03 08:41:57 +03:00
6e88f2c833
heather: fix Kaneo dashboard icon
2026-08-03 08:38:51 +03:00
724948de7e
feat(mesh): add Sol-style lilac client pool
2026-08-03 08:30:35 +03:00
cf25eb4f35
heather: add hemo.iscg.dev alias for Kaneo
2026-08-03 00:55:36 +03:00
9abae8d2f5
fix(mesh): create heather identity interface with systemd
2026-08-03 00:36:52 +03:00
55bb222eb5
fix(mesh): rotate hyacinth peer key
2026-08-03 00:34:10 +03:00
69bdc051f6
feat(mesh): add heather WireGuard backbone peer
2026-08-03 00:17:36 +03:00
d1bfecc2e1
heather: add Kaneo with PostgreSQL
2026-08-02 22:08:50 +03:00
heather
7cfa5c31f8
robots.txt modified
2026-07-30 16:14:27 +00:00
2deae7db13
heather/caddy: rename nix.iscg.dev → files.iscg.dev
...
Опечатка. DNS и директория /var/www/nix → /var/www/pub переименованы.
2026-07-28 13:27:12 +03:00
67d6c1b6e6
heather/caddy: revert /files rewrite, add nix.iscg.dev file explorer
...
- /files/* back to plain file_server (v2RayTun.zip stays at iscg.dev/files/)
- nix.iscg.dev: file_server browse (directory listing) from /var/www/nix
- DNS nix.iscg.dev A → 51.250.45.111 added via yc dns
2026-07-28 13:20:04 +03:00
3d2f4172a5
heather/caddy: add /files/* static file_server on iscg.dev
...
Для раздачи временных файлов (например v2RayTun.zip) прямой https-ссылкой.
handle_path stripает /files/ prefix, file_server раздаёт из /var/www/files/.
Не конфликтует с matrix (использует /_matrix/*, /.well-known/matrix).
2026-07-28 13:08:14 +03:00
c8f6ee04e8
poppy/cli: add matrix-commander-rs (Matrix CLI client for agent)
2026-07-26 21:20:33 +03:00
ebfdb3e186
poppy: add android-tools (adb for Pixel)
2026-07-25 14:41:49 +03:00
0fe7665072
poppy: add weekly nix GC launchd agent (delete-older-than 14d)
...
nix.gc.automatic requires nix.enable=true, but poppy uses the
Determinate nix installer (nix.enable=false). Define a launchd
user agent directly that runs nix-collect-garbage --delete-older-than 14d
weekly at Sun 03:00.
2026-07-16 13:16:50 +03:00
fcb6f67cab
feat(home): add lem CLI via flake input (ssh-fetched private repo)
2026-07-16 02:15:02 +03:00
37b1ac80db
feat(home): add lem CLI via flake input
2026-07-16 02:13:40 +03:00
64b4274d9b
poppy: add python313 and uv to home/cli.nix
...
System python is 3.9 (macOS), too old for telegram-mcp (needs >=3.10).
Added python313 and uv via home-manager. Also staged home/pay.nix
which was untracked and blocked nix builds.
2026-07-15 21:35:38 +03:00
