nix-config

mikl/nix-config

Fork 0

Commit graph

Author	SHA1	Message	Date
mikl	6c4f7daf42	heather: tuwunel-admin via nix derivation (fetchurl prebuilt binary) Replace manually-copied /var/lib/tuwunel-admin/tuwunel-admin binary with a nix derivation: fetchurl of GitHub release v0.1.0 x86_64-musl static binary (sha256 verified against checksums.txt). Binary now lives in nix-store, survives VM recreation. Config stays at /var/lib/tuwunel-admin/config.toml (outside git, root:root 0644).	2026-07-13 02:49:00 +03:00
mikl	741a404ba8	heather: matrix tuwunel (homeserver) + cinny + tuwunel-admin - tuwunel arion container: ghcr.io/matrix-construct/tuwunel:v1.7.1, server_name=iscg.dev, allow_federation, registration via token. Media on Yandex Object Storage (S3) bucket iscg-tuwunel-media. Config (tuwunel.toml w/ s3 secret + reg token) bind-mounted from /var/lib/tuwunel-secrets/ (outside git, root:docker 0640). - cinny arion container: ajbura/cinny:latest, config from /var/lib/tuwunel-secrets/cinny-config.json, default homeserver iscg.dev. - tuwunel-admin systemd service: static x86_64 binary (no public docker image) at /var/lib/tuwunel-admin/tuwunel-admin, binds 127.0.0.1:8009. Caddy admin.iscg.dev terminates TLS. Fresh install — no users/media migrated from old jul11.	2026-07-13 02:01:59 +03:00

Author

SHA1

Message

Date

mikl

6c4f7daf42

heather: tuwunel-admin via nix derivation (fetchurl prebuilt binary)

Replace manually-copied /var/lib/tuwunel-admin/tuwunel-admin binary with a
nix derivation: fetchurl of GitHub release v0.1.0 x86_64-musl static binary
(sha256 verified against checksums.txt). Binary now lives in nix-store,
survives VM recreation. Config stays at /var/lib/tuwunel-admin/config.toml
(outside git, root:root 0644).

2026-07-13 02:49:00 +03:00

mikl

741a404ba8

heather: matrix tuwunel (homeserver) + cinny + tuwunel-admin

- tuwunel arion container: ghcr.io/matrix-construct/tuwunel:v1.7.1,
  server_name=iscg.dev, allow_federation, registration via token.
  Media on Yandex Object Storage (S3) bucket iscg-tuwunel-media.
  Config (tuwunel.toml w/ s3 secret + reg token) bind-mounted from
  /var/lib/tuwunel-secrets/ (outside git, root:docker 0640).
- cinny arion container: ajbura/cinny:latest, config from
  /var/lib/tuwunel-secrets/cinny-config.json, default homeserver iscg.dev.
- tuwunel-admin systemd service: static x86_64 binary (no public docker
  image) at /var/lib/tuwunel-admin/tuwunel-admin, binds 127.0.0.1:8009.
  Caddy admin.iscg.dev terminates TLS.

Fresh install — no users/media migrated from old jul11.

2026-07-13 02:01:59 +03:00

2 commits