nix-config

mikl/nix-config

Fork 0

Commit graph

Author	SHA1	Message	Date
mikl	6324d3b676	heather: make strelaysrv private (pools="") Relay больше не регистрируется в public pool relays.syncthing.net. Чужие syncthing-устройства не подключаются, трафик не возим. Свои устройства могут использовать relay://heather:22067 если прописан в config.	2026-07-12 17:55:52 +03:00
mikl	ebf74814bf	heather: fix arion volumes declaration + syncthing configDir perms - arion-compose: project.name (required) + docker-compose.volumes (correct option, was docker-compose.raw.volumes which didn't exist) - syncthing: tmpfiles for /var/lib/syncthing (configDir) owned by mikl, fixes 'mkdir /var/lib/syncthing: permission denied' when running as non-default user	2026-07-12 12:39:26 +03:00
mikl	220d1f651c	heather: replace k3s with docker+arion+caddy+syncthing - remove k3s.nix (1.3GB overhead unjustified for single-node) - add docker.nix (docker + arion CLI, mikl in docker group) - add caddy.nix (edge proxy, TLS via ACME staging, host-based routing) - add syncthing.nix (sync daemon + strelaysrv via systemd, /srv/syncthing) - add arion-compose.nix (forgejo first, others stubbed as TODO) - add arion flake input + nixos module - default.nix: wire up arion project as systemd service (serviceName=heather) Architecture: Caddy (host) terminates TLS, routes to host services (syncthing) and docker containers (arion, 127.0.0.1:PORT). Named volumes everywhere except silverbullet (bind /srv/syncthing/herbarium).	2026-07-12 12:23:05 +03:00

Author

SHA1

Message

Date

mikl

6324d3b676

heather: make strelaysrv private (pools="")

Relay больше не регистрируется в public pool relays.syncthing.net.
Чужие syncthing-устройства не подключаются, трафик не возим.
Свои устройства могут использовать relay://heather:22067 если прописан в config.

2026-07-12 17:55:52 +03:00

mikl

ebf74814bf

heather: fix arion volumes declaration + syncthing configDir perms

- arion-compose: project.name (required) + docker-compose.volumes (correct
  option, was docker-compose.raw.volumes which didn't exist)
- syncthing: tmpfiles for /var/lib/syncthing (configDir) owned by mikl,
  fixes 'mkdir /var/lib/syncthing: permission denied' when running as non-default user

2026-07-12 12:39:26 +03:00

mikl

220d1f651c

heather: replace k3s with docker+arion+caddy+syncthing

- remove k3s.nix (1.3GB overhead unjustified for single-node)
- add docker.nix (docker + arion CLI, mikl in docker group)
- add caddy.nix (edge proxy, TLS via ACME staging, host-based routing)
- add syncthing.nix (sync daemon + strelaysrv via systemd, /srv/syncthing)
- add arion-compose.nix (forgejo first, others stubbed as TODO)
- add arion flake input + nixos module
- default.nix: wire up arion project as systemd service (serviceName=heather)

Architecture: Caddy (host) terminates TLS, routes to host services (syncthing)
and docker containers (arion, 127.0.0.1:PORT). Named volumes everywhere except
silverbullet (bind /srv/syncthing/herbarium).

2026-07-12 12:23:05 +03:00

3 commits