nix-config

mikl/nix-config

Fork 0

Commit graph

d015be0c4f heather: expose only pi in user PATH main mikl 2026-08-03 09:09:29 +0300
917b28ec4b heather: add npm global bin to user PATH mikl 2026-08-03 09:08:18 +0300
252d082c37 fix(mesh): refresh egress DNS with getent and route clients mikl 2026-08-03 08:55:11 +0300
ab718ac336 heather: remove mistaken hemo Kaneo alias mikl 2026-08-03 08:51:53 +0300
56bb3d7f7c feat(mesh): add selected Telegram and OpenRouter egress policy mikl 2026-08-03 08:41:57 +0300
6e88f2c833 heather: fix Kaneo dashboard icon mikl 2026-08-03 08:38:51 +0300
724948de7e feat(mesh): add Sol-style lilac client pool mikl 2026-08-03 08:30:35 +0300
cf25eb4f35 heather: add hemo.iscg.dev alias for Kaneo mikl 2026-08-03 00:55:36 +0300
9abae8d2f5 fix(mesh): create heather identity interface with systemd mikl 2026-08-03 00:36:52 +0300
55bb222eb5 fix(mesh): rotate hyacinth peer key mikl 2026-08-03 00:34:10 +0300
69bdc051f6 feat(mesh): add heather WireGuard backbone peer mikl 2026-08-03 00:17:36 +0300
d1bfecc2e1 heather: add Kaneo with PostgreSQL mikl 2026-08-02 22:08:50 +0300
7cfa5c31f8 robots.txt modified heather 2026-07-30 16:14:27 +0000
2deae7db13 heather/caddy: rename nix.iscg.dev → files.iscg.dev mikl 2026-07-28 13:27:12 +0300
67d6c1b6e6 heather/caddy: revert /files rewrite, add nix.iscg.dev file explorer mikl 2026-07-28 13:20:04 +0300
3d2f4172a5 heather/caddy: add /files/* static file_server on iscg.dev mikl 2026-07-28 13:08:14 +0300
c8f6ee04e8 poppy/cli: add matrix-commander-rs (Matrix CLI client for agent) mikl 2026-07-26 21:20:33 +0300
ebfdb3e186 poppy: add android-tools (adb for Pixel) mikl 2026-07-25 14:41:49 +0300
0fe7665072 poppy: add weekly nix GC launchd agent (delete-older-than 14d) mikl 2026-07-16 13:16:50 +0300
fcb6f67cab feat(home): add lem CLI via flake input (ssh-fetched private repo) mikl 2026-07-16 02:15:02 +0300
37b1ac80db feat(home): add lem CLI via flake input mikl 2026-07-16 02:13:40 +0300
64b4274d9b poppy: add python313 and uv to home/cli.nix mikl 2026-07-15 21:35:38 +0300
2aac5b7731 poppy/cli: add transmission_4, yt-dlp, himalaya, pay CLI tools mikl 2026-07-15 14:15:39 +0300
a30aea52bf heather/jitsi: drop jvb 127.0.0.1:8080 publish (conflicts with cinny, not needed — colibri-ws proxied via jitsi-web nginx on alias jvb:9090) mikl 2026-07-13 22:37:51 +0300
5db2900db2 heather: drop 'systemd, not container' from homepage descriptions mikl 2026-07-13 16:09:19 +0300
06e1232185 heather: add pi-web to homepage dashboard mikl 2026-07-13 16:03:18 +0300
355f5eb9f1

poppy: add pi -> 127.0.0.1 alias for local pi-web mikl 2026-07-13 15:40:07 +0300
9d1f451d5f heather/server: git credential.helper=store for https forgejo auth mikl 2026-07-13 15:18:38 +0300
87faa84104 heather: add pi-web service + Caddy vhost pi.iscg.dev with basicauth mikl 2026-07-13 13:21:34 +0300
78c39d6f5d heather: homepage teable icon -> local /images/teable.png (420px GH avatar) mikl 2026-07-13 03:44:26 +0300
fca00e1368 heather: homepage live container status via docker-socket-proxy mikl 2026-07-13 03:34:58 +0300
c070b2a972 heather: homepage fixes - bookmark href format, jitsi-meet icon, teable favicon mikl 2026-07-13 03:32:32 +0300
1ccc59dd8d heather: homepage background image + frosted cardBlur mikl 2026-07-13 03:20:29 +0300
190c93156e heather: xray - override command to -config (image default is -confdir) mikl 2026-07-13 03:15:26 +0300
d3d132e225 heather: set HOMEPAGE_ALLOWED_HOSTS for host validation mikl 2026-07-13 03:09:18 +0300
6e84e26d2d heather: xray VLESS+Reality proxy on :8443 mikl 2026-07-13 03:05:48 +0300
fe5c01062e heather: add homepage dashboard (home.iscg.dev) mikl 2026-07-13 03:04:42 +0300
4830425107 heather: revert tuwunel-admin to manual binary (outside nix-store) mikl 2026-07-13 02:52:19 +0300
6c4f7daf42 heather: tuwunel-admin via nix derivation (fetchurl prebuilt binary) mikl 2026-07-13 02:49:00 +0300
741a404ba8 heather: matrix tuwunel (homeserver) + cinny + tuwunel-admin mikl 2026-07-13 02:01:59 +0300
61e71b3ee4 heather: enable jitsi guest access (lobby) + patch prosody guest websocket mikl 2026-07-13 01:37:20 +0300
3d2f432619 heather: add coturn TURN relay for jitsi (clients behind symmetric NAT) mikl 2026-07-13 01:19:55 +0300
897ea4bed2 heather: jitsi-jvb add network alias 'jvb' (nginx colibri-ws proxy needs it) mikl 2026-07-13 01:12:30 +0300
6c536852ad heather: jitsi drop read_only/tmpfs (arion schema doesn't support them) mikl 2026-07-13 00:57:36 +0300
cd018a24c2 heather: install jitsi from scratch per official docs (minimal) mikl 2026-07-13 00:56:13 +0300
55cd7158a5 heather: fully remove jitsi (clean slate for fresh install) mikl 2026-07-13 00:28:59 +0300
3b354c9ccc heather: jitsi-web drop crontabs volume mount (perms conflict with /config) mikl 2026-07-12 23:15:08 +0300
37654cc825 heather: jitsi images via docker hub (ghcr.io/jitsi/* not found, private) mikl 2026-07-12 22:45:58 +0300
8709321ca3 heather: install jitsi meet from scratch (web/prosody/jicofo/jvb) mikl 2026-07-12 22:42:36 +0300
fd605c51ce heather: remove jitsi stack (web/prosody/jicofo/jvb/coturn) mikl 2026-07-12 22:35:03 +0300
57f2fe314b heather: jitsi — fix networks to top-level + meet-jitsi (no dots) mikl 2026-07-12 22:12:33 +0300
2d37b744e6 heather: jitsi — networks is top-level option (not docker-compose.networks) mikl 2026-07-12 22:08:34 +0300
b697744a46 heather: jitsi — add meet.jitsi network with prosody alias xmpp.meet.jitsi mikl 2026-07-12 22:01:19 +0300
ee8ce3f99f heather: enable jitsi meet stack (jitsi.iscg.dev) mikl 2026-07-12 21:56:37 +0300
cc6ef61d0a heather: pin teable to working image digest, revert port to 3000 mikl 2026-07-12 20:46:53 +0300
c079adba66 heather: teable listens on 3002, fix port mapping mikl 2026-07-12 20:16:22 +0300
3e3241683f heather: enable teable stack (teable.iscg.dev) mikl 2026-07-12 20:09:15 +0300
260a6c64bf heather: enable silverbullet (note.iscg.dev) mikl 2026-07-12 18:51:11 +0300
e99b6e1c28 heather: fix syncthing host-check error behind Caddy reverse proxy mikl 2026-07-12 18:19:22 +0300
483454bf17 heather: rotate sync.iscg.dev basicauth password mikl 2026-07-12 18:05:22 +0300
6324d3b676 heather: make strelaysrv private (pools="") mikl 2026-07-12 17:55:52 +0300
4eb5a1e61c heather: switch caddy to production ACME (DNS moved to heather) mikl 2026-07-12 13:21:25 +0300
ebf74814bf heather: fix arion volumes declaration + syncthing configDir perms mikl 2026-07-12 12:39:26 +0300
220d1f651c heather: replace k3s with docker+arion+caddy+syncthing mikl 2026-07-12 12:23:05 +0300
c8b87ffcf1 git: use canonical git-lfs filter strings to fix 3.7 warning mikl 2026-07-12 01:28:20 +0300
2cbca9a665 heather: add root rescue ssh key (mikl.keys) to avoid lockout mikl 2026-07-11 22:57:29 +0300
411a8ba689 heather/common: passwordless sudo for mikl + fix deprecated options mikl 2026-07-11 22:55:00 +0300
79260cec6f heather: switch to make-disk-image (qcow2 for YC), drop disko mikl 2026-07-11 21:13:38 +0300
c21268fb9b fix: use homebrew node instead of nix read-only nodejs mikl 2026-07-10 23:20:02 +0300
5ac51e1f7f feat: add nodejs for pi-coding-agent runtime mikl 2026-07-10 23:12:52 +0300
e2e05923e0 feat(poppy): add tea (Forgejo/Gitea CLI) to brews mikl 2026-07-10 23:11:09 +0300
723b0112a3 refactor: use home.sessionPath instead of hardcoded PATH mikl 2026-07-10 16:28:07 +0300
03f3a2c156 fix: add /nix/var/nix/profiles/default/bin to PATH for nix command mikl 2026-07-10 16:22:41 +0300
ee93330eea fix: remove duplicate PATH export from zsh, use sessionVariables only mikl 2026-07-10 16:17:40 +0300
9c299b26ca chore: disable zsh history file, use atuin exclusively mikl 2026-07-10 16:05:25 +0300
5e1a7a173b docs: update bootstrap with correct repo paths mikl 2026-07-10 15:59:00 +0300
1b1069996f fix: add system paths to PATH for mv, nix, darwin-rebuild etc. mikl 2026-07-10 15:54:21 +0300
e6ed1d8c3b feat: add atuin for encrypted shell history mikl 2026-07-10 15:49:47 +0300
dee3e58978 fix: correct pass git repository path mikl 2026-07-10 15:43:24 +0300
a269b2856f dock: add Activity Monitor after kitty mikl 2026-07-04 01:11:39 +0300
3e57916a3f system: disable system sound effects (screenshots, volume feedback) mikl 2026-07-04 01:03:53 +0300
2b5dce5727 kitty: copy app to ~/Applications/ for Spotlight indexing; update Dock path mikl 2026-07-04 00:54:10 +0300
a689d23a8e ssh: use single 'poppy' key for all hosts (others don't exist yet) mikl 2026-07-04 00:51:00 +0300
ab376d21aa cleanup: remove k8s/sops env vars (muscari-specific), dedupe tree, update AGENTS.md mikl 2026-07-04 00:47:38 +0300
f4a516aa5c feat(poppy): add automatic Rosetta 2 installation for Intel apps mikl 2026-07-04 00:25:13 +0300
a465daa9c7 refactor: migrate user from michaotic to mikl mikl 2026-07-03 21:41:42 +0300
514090fced docs: add AGENTS.md for AI agents mikl 2026-07-02 21:48:36 +0300
475a103fad feat: replace markedit with mark-text; clean up temp.txt mikl 2026-07-02 15:31:48 +0300
02bfb2735b feat: add apps.md, comment out aseprite (compile on first build) mikl 2026-07-02 14:54:19 +0300
5d1f0f59cb fix: remove pureref (not available on aarch64-darwin) mikl 2026-07-02 14:45:54 +0300
2a74d64f74 fix: use environment.systemPackages (not home.packages) in nix-darwin mikl 2026-07-02 14:45:34 +0300
ec0e60a835 refactor: rename homebrew.nix to apps.nix (add nix GUI pkgs, cleanup=none) mikl 2026-07-02 14:45:15 +0300
fdabb69c73 docs: add anki sync server to muscari TODO mikl 2026-07-02 13:29:15 +0300
87cdc4ea21 fix: syncthing 2.x uses 'serve' subcommand instead of -no-browser mikl 2026-07-02 13:09:40 +0300
5cdc1d9ad6 fix: import syncthing.nix in default.nix mikl 2026-07-02 13:06:57 +0300
7479bb07a1 feat: add syncthing via nix (with existing config) mikl 2026-07-02 13:06:05 +0300
754024d915 docs: add ssh.md (keys, FIDO2, recovery) mikl 2026-07-02 02:02:05 +0300
77cc3cfba1 refactor: remove duplicate gpg-agent config (keep only in pass.nix) mikl 2026-07-02 01:18:32 +0300
2a395c6814 refactor: separate ssh-agent from gpg-agent mikl 2026-07-02 01:11:51 +0300
2164f618f4 feat: add gita (multi-repo git manager) + aliases mikl 2026-07-01 23:49:38 +0300