mikl/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Commit graph

  • 2ff4caa788 matrix-rtc: separate standalone publication from room creation main heather 2026-11-07 21:55:21 +00:00
  • 56120933f3 heather: allow MatrixRTC Docker subnet to use AstrNet egress NAT heather 2026-11-05 20:42:25 +00:00
  • 720ab819fc heather: route MatrixRTC auth and signalling through Caddy heather 2026-11-05 20:02:25 +00:00
  • ea620058f8 heather: update Tuwunel 1.9.4 and enable MatrixRTC calling heather 2026-11-05 20:01:24 +00:00
  • 6e2ba02b9a Harden Heather: retire remote agents and proxy, disable Jupyter, sandbox Matrix admin heather 2026-10-25 22:56:01 +00:00
  • 8c4840a0d3 Allow Sol agent subnet 10.42/16 in Minecraft API cgroup filter heather 2026-10-25 16:35:56 +00:00
  • 3e40846b52 Add isolated mesh-only Minecraft API with typed bot controls and mod review queue heather 2026-10-25 16:26:45 +00:00
  • e8632cc9df Retire files.iscg.dev Help2Travel preview; isolate main site root heather 2026-10-21 14:09:40 +00:00
  • 53f908743a Serve Help2Travel landing and partnership API heather 2026-10-15 09:14:52 +00:00
  • 0938004bfe Add gcalcli OAuth consent pages mikl 2026-10-05 15:40:30 +03:00
  • 9324295d49 fix(heather): break AstrNet FRR boot ordering cycle heather 2026-10-02 17:49:37 +00:00
  • 7345251aad fix(poppy): use terminal pinentry for personal pass store mikl 2026-09-29 02:07:15 +03:00
  • 630e726f5f fix(poppy): disable pinentry external passphrase cache mikl 2026-09-29 02:04:16 +03:00
  • db25302c85 fix(heather): restore inbound Docker access with WAN return routing mikl 2026-09-29 01:49:11 +03:00
  • c46e4b36f9 fix: disable gpg passphrase caching mikl 2026-09-29 01:36:06 +03:00
  • b014c03b21 heather: SNAT Docker egress to AstrNet identity and allow replies heather 2026-09-27 00:17:03 +00:00
  • 8223868774 heather: fix BGP default precedence, YC fallback and WAN BGP exposure heather 2026-09-27 00:09:28 +00:00
  • b0d1de279f heather: route outbound via AstrNet with WAN failback heather 2026-09-26 23:57:46 +00:00
  • 5cd290eeba heather: allow AstrNet host ingress, keep transit blocked heather 2026-09-26 23:36:33 +00:00
  • f69f67d36a heather: allow bounded AstrNet ICMP echo on own addresses heather 2026-09-26 23:25:31 +00:00
  • 2ad5653fda heather: replace personal mesh with guarded AstrNet stub heather 2026-09-26 23:13:08 +00:00
  • 4efbdc9bda heather: pin Forgejo 15.0.9 and isolate Arion service updates mikl 2026-09-26 16:56:43 +03:00
  • 0e56d31d68 poppy: gcalcli; kitty opacity 0.84; gpg-agent ttl 600s; pay.nix darwin (skip autoPatchelfHook); syncthing launchd via nix-darwin; mihomo mikl 2026-09-26 01:57:33 +03:00
  • 4cfd8d3ac3 tuwunel v1.9.3 (DB migrated, verified); teable mem_limit 2g; nick-timer systemd service + caddy vhost; heather swap 4g, drop chromium, add diag tools; server.nix: drop pinchtab, add nodejs heather 2026-09-25 22:57:23 +00:00
  • 5e75ca7555 paseo: Restart always + StartLimitIntervalSec=0; pay.nix (local state) heather 2026-09-11 09:18:54 +00:00
  • d7f0bf2f06 paseo: add /run/current-system/sw to PATH so spawned pi agents see full system tools (ip, ss, hostname, docker, ssh) heather 2026-09-10 22:53:45 +00:00
  • 1e1416560a heather: configure Teable Redis cache for new release mikl 2026-09-14 22:40:43 +03:00
  • 49cafbc50a heather: update Teable to latest stable release mikl 2026-09-14 22:26:01 +03:00
  • cf72e8521c heather: fix Jupyter Argon2 password env and provider option mikl 2026-09-11 13:12:26 +03:00
  • 07bd059376 heather: use native Jupyter password login instead of Caddy basic auth mikl 2026-09-11 13:09:53 +03:00
  • 49c8fdee83 heather: allow Jupyter behind Caddy reverse proxy mikl 2026-09-11 13:04:55 +03:00
  • 947e8b956b heather: jupyter IdentityProvider.token instead of deprecated password_required mikl 2026-09-11 12:22:50 +03:00
  • e0f7d17308 heather: jupyter LD_LIBRARY_PATH for nix python + pypi wheels mikl 2026-09-11 12:18:33 +03:00
  • 76aaa9eb69 heather: jupyter env lives in ~/.local/share/uv/tools (venv not relocatable) mikl 2026-09-11 03:40:44 +03:00
  • f4fe9c87c6 heather: jupyter.nix mkForce PATH mikl 2026-09-11 03:30:37 +03:00
  • f9049a5a48 heather: fix double semicolon in caddy.nix jupyter vhost mikl 2026-09-11 03:28:38 +03:00
  • d4153028d6 heather: add JupyterLab systemd service (jupyter.iscg.dev, localhost:8890, resource limits, caddy basicauth) mikl 2026-09-11 03:12:01 +03:00
  • a293f1f999 remove kaneo mikl 2026-09-10 13:59:05 +03:00
  • fd339edcdc remove pi-web mikl 2026-09-10 13:54:33 +03:00
  • 4109a9d3ec heather: provide sh to paseo tool runner mikl 2026-09-09 21:44:24 +03:00
  • 77a55756cd heather: add procps to paseo PATH mikl 2026-09-09 21:12:01 +03:00
  • 381ac43f75 heather: fix paseo PATH directories mikl 2026-09-09 21:05:46 +03:00
  • c4c1a485bf heather: add git to paseo service PATH mikl 2026-09-09 21:04:40 +03:00
  • 656bce449c heather: expose paseo as password-only daemon endpoint mikl 2026-09-09 20:58:28 +03:00
  • 70e95226d4 heather: pinchtab browser control plane (chromium + user service) + pay x86_64 build heather 2026-09-09 17:18:40 +00:00
  • fc27c08fa8 heather: add paseo daemon (systemd + caddy vhost paseo.iscg.dev, dual auth) mikl 2026-09-09 20:15:28 +03:00
  • d015be0c4f heather: expose only pi in user PATH mikl 2026-08-03 09:09:29 +03:00
  • 917b28ec4b heather: add npm global bin to user PATH mikl 2026-08-03 09:08:18 +03:00
  • 252d082c37 fix(mesh): refresh egress DNS with getent and route clients mikl 2026-08-03 08:55:11 +03:00
  • ab718ac336 heather: remove mistaken hemo Kaneo alias mikl 2026-08-03 08:51:53 +03:00
  • 56bb3d7f7c feat(mesh): add selected Telegram and OpenRouter egress policy mikl 2026-08-03 08:41:57 +03:00
  • 6e88f2c833 heather: fix Kaneo dashboard icon mikl 2026-08-03 08:38:51 +03:00
  • 724948de7e feat(mesh): add Sol-style lilac client pool mikl 2026-08-03 08:30:35 +03:00
  • cf25eb4f35 heather: add hemo.iscg.dev alias for Kaneo mikl 2026-08-03 00:55:36 +03:00
  • 9abae8d2f5 fix(mesh): create heather identity interface with systemd mikl 2026-08-03 00:36:52 +03:00
  • 55bb222eb5 fix(mesh): rotate hyacinth peer key mikl 2026-08-03 00:34:10 +03:00
  • 69bdc051f6 feat(mesh): add heather WireGuard backbone peer mikl 2026-08-03 00:17:36 +03:00
  • d1bfecc2e1 heather: add Kaneo with PostgreSQL mikl 2026-08-02 22:08:50 +03:00
  • 7cfa5c31f8 robots.txt modified heather 2026-07-30 16:14:27 +00:00
  • 2deae7db13 heather/caddy: rename nix.iscg.dev → files.iscg.dev mikl 2026-07-28 13:27:12 +03:00
  • 67d6c1b6e6 heather/caddy: revert /files rewrite, add nix.iscg.dev file explorer mikl 2026-07-28 13:20:04 +03:00
  • 3d2f4172a5 heather/caddy: add /files/* static file_server on iscg.dev mikl 2026-07-28 13:08:14 +03:00
  • c8f6ee04e8 poppy/cli: add matrix-commander-rs (Matrix CLI client for agent) mikl 2026-07-26 21:20:33 +03:00
  • ebfdb3e186 poppy: add android-tools (adb for Pixel) mikl 2026-07-25 14:41:49 +03:00
  • 0fe7665072 poppy: add weekly nix GC launchd agent (delete-older-than 14d) mikl 2026-07-16 13:16:50 +03:00
  • fcb6f67cab feat(home): add lem CLI via flake input (ssh-fetched private repo) mikl 2026-07-16 02:15:02 +03:00
  • 37b1ac80db feat(home): add lem CLI via flake input mikl 2026-07-16 02:13:40 +03:00
  • 64b4274d9b poppy: add python313 and uv to home/cli.nix mikl 2026-07-15 21:35:38 +03:00
  • 2aac5b7731 poppy/cli: add transmission_4, yt-dlp, himalaya, pay CLI tools mikl 2026-07-15 14:15:39 +03:00
  • a30aea52bf heather/jitsi: drop jvb 127.0.0.1:8080 publish (conflicts with cinny, not needed — colibri-ws proxied via jitsi-web nginx on alias jvb:9090) mikl 2026-07-13 22:37:51 +03:00
  • 5db2900db2 heather: drop 'systemd, not container' from homepage descriptions mikl 2026-07-13 16:09:19 +03:00
  • 06e1232185 heather: add pi-web to homepage dashboard mikl 2026-07-13 16:03:18 +03:00
  • 355f5eb9f1
         poppy: add pi -> 127.0.0.1 alias for local pi-web mikl 2026-07-13 15:40:07 +03:00
  • 9d1f451d5f heather/server: git credential.helper=store for https forgejo auth mikl 2026-07-13 15:18:38 +03:00
  • 87faa84104 heather: add pi-web service + Caddy vhost pi.iscg.dev with basicauth mikl 2026-07-13 13:21:34 +03:00
  • 78c39d6f5d heather: homepage teable icon -> local /images/teable.png (420px GH avatar) mikl 2026-07-13 03:44:26 +03:00
  • fca00e1368 heather: homepage live container status via docker-socket-proxy mikl 2026-07-13 03:34:58 +03:00
  • c070b2a972 heather: homepage fixes - bookmark href format, jitsi-meet icon, teable favicon mikl 2026-07-13 03:32:32 +03:00
  • 1ccc59dd8d heather: homepage background image + frosted cardBlur mikl 2026-07-13 03:20:29 +03:00
  • 190c93156e heather: xray - override command to -config (image default is -confdir) mikl 2026-07-13 03:15:26 +03:00
  • d3d132e225 heather: set HOMEPAGE_ALLOWED_HOSTS for host validation mikl 2026-07-13 03:09:18 +03:00
  • 6e84e26d2d heather: xray VLESS+Reality proxy on :8443 mikl 2026-07-13 03:05:48 +03:00
  • fe5c01062e heather: add homepage dashboard (home.iscg.dev) mikl 2026-07-13 03:04:42 +03:00
  • 4830425107 heather: revert tuwunel-admin to manual binary (outside nix-store) mikl 2026-07-13 02:52:19 +03:00
  • 6c4f7daf42 heather: tuwunel-admin via nix derivation (fetchurl prebuilt binary) mikl 2026-07-13 02:49:00 +03:00
  • 741a404ba8 heather: matrix tuwunel (homeserver) + cinny + tuwunel-admin mikl 2026-07-13 02:01:59 +03:00
  • 61e71b3ee4 heather: enable jitsi guest access (lobby) + patch prosody guest websocket mikl 2026-07-13 01:37:20 +03:00
  • 3d2f432619 heather: add coturn TURN relay for jitsi (clients behind symmetric NAT) mikl 2026-07-13 01:19:55 +03:00
  • 897ea4bed2 heather: jitsi-jvb add network alias 'jvb' (nginx colibri-ws proxy needs it) mikl 2026-07-13 01:12:30 +03:00
  • 6c536852ad heather: jitsi drop read_only/tmpfs (arion schema doesn't support them) mikl 2026-07-13 00:57:36 +03:00
  • cd018a24c2 heather: install jitsi from scratch per official docs (minimal) mikl 2026-07-13 00:56:13 +03:00
  • 55cd7158a5 heather: fully remove jitsi (clean slate for fresh install) mikl 2026-07-13 00:28:59 +03:00
  • 3b354c9ccc heather: jitsi-web drop crontabs volume mount (perms conflict with /config) mikl 2026-07-12 23:15:08 +03:00
  • 37654cc825 heather: jitsi images via docker hub (ghcr.io/jitsi/* not found, private) mikl 2026-07-12 22:45:58 +03:00
  • 8709321ca3 heather: install jitsi meet from scratch (web/prosody/jicofo/jvb) mikl 2026-07-12 22:42:36 +03:00
  • fd605c51ce heather: remove jitsi stack (web/prosody/jicofo/jvb/coturn) mikl 2026-07-12 22:35:03 +03:00
  • 57f2fe314b heather: jitsi — fix networks to top-level + meet-jitsi (no dots) mikl 2026-07-12 22:12:33 +03:00
  • 2d37b744e6 heather: jitsi — networks is top-level option (not docker-compose.networks) mikl 2026-07-12 22:08:34 +03:00
  • b697744a46 heather: jitsi — add meet.jitsi network with prosody alias xmpp.meet.jitsi mikl 2026-07-12 22:01:19 +03:00
  • ee8ce3f99f heather: enable jitsi meet stack (jitsi.iscg.dev) mikl 2026-07-12 21:56:37 +03:00