heather
|
720ab819fc
|
heather: route MatrixRTC auth and signalling through Caddy
|
2026-11-05 20:02:25 +00:00 |
|
heather
|
ea620058f8
|
heather: update Tuwunel 1.9.4 and enable MatrixRTC calling
|
2026-11-05 20:01:24 +00:00 |
|
heather
|
6e2ba02b9a
|
Harden Heather: retire remote agents and proxy, disable Jupyter, sandbox Matrix admin
|
2026-10-25 22:56:01 +00:00 |
|
heather
|
8c4840a0d3
|
Allow Sol agent subnet 10.42/16 in Minecraft API cgroup filter
|
2026-10-25 16:35:56 +00:00 |
|
heather
|
3e40846b52
|
Add isolated mesh-only Minecraft API with typed bot controls and mod review queue
|
2026-10-25 16:26:45 +00:00 |
|
heather
|
e8632cc9df
|
Retire files.iscg.dev Help2Travel preview; isolate main site root
|
2026-10-21 14:09:40 +00:00 |
|
heather
|
53f908743a
|
Serve Help2Travel landing and partnership API
|
2026-10-15 09:14:52 +00:00 |
|
|
|
0938004bfe
|
Add gcalcli OAuth consent pages
|
2026-10-05 15:41:04 +03:00 |
|
heather
|
9324295d49
|
fix(heather): break AstrNet FRR boot ordering cycle
|
2026-10-02 17:56:50 +00:00 |
|
|
|
db25302c85
|
fix(heather): restore inbound Docker access with WAN return routing
|
2026-09-29 01:49:11 +03:00 |
|
heather
|
b014c03b21
|
heather: SNAT Docker egress to AstrNet identity and allow replies
|
2026-09-27 00:17:03 +00:00 |
|
heather
|
8223868774
|
heather: fix BGP default precedence, YC fallback and WAN BGP exposure
|
2026-09-27 00:09:28 +00:00 |
|
heather
|
b0d1de279f
|
heather: route outbound via AstrNet with WAN failback
|
2026-09-26 23:57:46 +00:00 |
|
heather
|
5cd290eeba
|
heather: allow AstrNet host ingress, keep transit blocked
|
2026-09-26 23:36:33 +00:00 |
|
heather
|
f69f67d36a
|
heather: allow bounded AstrNet ICMP echo on own addresses
|
2026-09-26 23:25:31 +00:00 |
|
heather
|
2ad5653fda
|
heather: replace personal mesh with guarded AstrNet stub
|
2026-09-26 23:13:08 +00:00 |
|
|
|
4efbdc9bda
|
heather: pin Forgejo 15.0.9 and isolate Arion service updates
|
2026-09-26 16:56:43 +03:00 |
|
|
|
0e56d31d68
|
poppy: gcalcli; kitty opacity 0.84; gpg-agent ttl 600s; pay.nix darwin (skip autoPatchelfHook); syncthing launchd via nix-darwin; mihomo
|
2026-09-26 01:57:33 +03:00 |
|
heather
|
4cfd8d3ac3
|
tuwunel v1.9.3 (DB migrated, verified); teable mem_limit 2g; nick-timer systemd service + caddy vhost; heather swap 4g, drop chromium, add diag tools; server.nix: drop pinchtab, add nodejs
|
2026-09-25 22:57:23 +00:00 |
|
heather
|
5e75ca7555
|
paseo: Restart always + StartLimitIntervalSec=0; pay.nix (local state)
|
2026-09-14 19:40:56 +00:00 |
|
heather
|
d7f0bf2f06
|
paseo: add /run/current-system/sw to PATH so spawned pi agents see full system tools (ip, ss, hostname, docker, ssh)
|
2026-09-14 19:40:56 +00:00 |
|
|
|
1e1416560a
|
heather: configure Teable Redis cache for new release
|
2026-09-14 22:40:43 +03:00 |
|
|
|
49cafbc50a
|
heather: update Teable to latest stable release
|
2026-09-14 22:26:01 +03:00 |
|
|
|
cf72e8521c
|
heather: fix Jupyter Argon2 password env and provider option
|
2026-09-11 13:12:26 +03:00 |
|
|
|
07bd059376
|
heather: use native Jupyter password login instead of Caddy basic auth
|
2026-09-11 13:09:53 +03:00 |
|
|
|
49c8fdee83
|
heather: allow Jupyter behind Caddy reverse proxy
|
2026-09-11 13:04:55 +03:00 |
|
|
|
947e8b956b
|
heather: jupyter IdentityProvider.token instead of deprecated password_required
|
2026-09-11 12:22:50 +03:00 |
|
|
|
e0f7d17308
|
heather: jupyter LD_LIBRARY_PATH for nix python + pypi wheels
|
2026-09-11 12:18:33 +03:00 |
|
|
|
76aaa9eb69
|
heather: jupyter env lives in ~/.local/share/uv/tools (venv not relocatable)
|
2026-09-11 03:40:44 +03:00 |
|
|
|
f4fe9c87c6
|
heather: jupyter.nix mkForce PATH
|
2026-09-11 03:30:37 +03:00 |
|
|
|
f9049a5a48
|
heather: fix double semicolon in caddy.nix jupyter vhost
|
2026-09-11 03:28:38 +03:00 |
|
|
|
d4153028d6
|
heather: add JupyterLab systemd service (jupyter.iscg.dev, localhost:8890, resource limits, caddy basicauth)
|
2026-09-11 03:12:01 +03:00 |
|
|
|
a293f1f999
|
remove kaneo
|
2026-09-10 13:59:05 +03:00 |
|
|
|
fd339edcdc
|
remove pi-web
|
2026-09-10 13:54:33 +03:00 |
|
|
|
4109a9d3ec
|
heather: provide sh to paseo tool runner
|
2026-09-09 21:44:24 +03:00 |
|
|
|
77a55756cd
|
heather: add procps to paseo PATH
|
2026-09-09 21:12:01 +03:00 |
|
|
|
381ac43f75
|
heather: fix paseo PATH directories
|
2026-09-09 21:05:46 +03:00 |
|
|
|
c4c1a485bf
|
heather: add git to paseo service PATH
|
2026-09-09 21:04:40 +03:00 |
|
|
|
656bce449c
|
heather: expose paseo as password-only daemon endpoint
|
2026-09-09 20:58:28 +03:00 |
|
heather
|
70e95226d4
|
heather: pinchtab browser control plane (chromium + user service) + pay x86_64 build
|
2026-09-09 17:19:03 +00:00 |
|
|
|
fc27c08fa8
|
heather: add paseo daemon (systemd + caddy vhost paseo.iscg.dev, dual auth)
|
2026-09-09 20:15:28 +03:00 |
|
|
|
252d082c37
|
fix(mesh): refresh egress DNS with getent and route clients
|
2026-08-03 08:55:11 +03:00 |
|
|
|
ab718ac336
|
heather: remove mistaken hemo Kaneo alias
|
2026-08-03 08:51:53 +03:00 |
|
|
|
56bb3d7f7c
|
feat(mesh): add selected Telegram and OpenRouter egress policy
|
2026-08-03 08:41:57 +03:00 |
|
|
|
6e88f2c833
|
heather: fix Kaneo dashboard icon
|
2026-08-03 08:38:51 +03:00 |
|
|
|
724948de7e
|
feat(mesh): add Sol-style lilac client pool
|
2026-08-03 08:30:35 +03:00 |
|
|
|
cf25eb4f35
|
heather: add hemo.iscg.dev alias for Kaneo
|
2026-08-03 00:55:36 +03:00 |
|
|
|
9abae8d2f5
|
fix(mesh): create heather identity interface with systemd
|
2026-08-03 00:36:52 +03:00 |
|
|
|
55bb222eb5
|
fix(mesh): rotate hyacinth peer key
|
2026-08-03 00:34:10 +03:00 |
|
|
|
69bdc051f6
|
feat(mesh): add heather WireGuard backbone peer
|
2026-08-03 00:17:36 +03:00 |
|
