No description
- remove k3s.nix (1.3GB overhead unjustified for single-node) - add docker.nix (docker + arion CLI, mikl in docker group) - add caddy.nix (edge proxy, TLS via ACME staging, host-based routing) - add syncthing.nix (sync daemon + strelaysrv via systemd, /srv/syncthing) - add arion-compose.nix (forgejo first, others stubbed as TODO) - add arion flake input + nixos module - default.nix: wire up arion project as systemd service (serviceName=heather) Architecture: Caddy (host) terminates TLS, routes to host services (syncthing) and docker containers (arion, 127.0.0.1:PORT). Named volumes everywhere except silverbullet (bind /srv/syncthing/herbarium). |
||
|---|---|---|
| docs | ||
| home | ||
| hosts | ||
| secrets | ||
| .gitignore | ||
| AGENTS.md | ||
| flake.lock | ||
| flake.nix | ||
| garden.md | ||
| README.md | ||
nix-config
Nix configurations for iscg infra hosts.
hosts
- poppy - MacBook Air M1 (nix-darwin)
- muscari - NixOS server with k3s
- rosemary - backup VM (planned)
See docs/ for detailed documentation.
quick rebuild
# poppy (macOS)
darwin-rebuild switch --flake .#poppy
# muscari (NixOS)
sudo nixos-rebuild switch --flake .#muscari
documentation
- docs/structure.md - how the config is organized
- docs/poppy.md - MacBook specific
- docs/muscari.md - server + k3s
- docs/shell.md - zsh, prompt, aliases
- docs/terminal.md - kitty + themes
- docs/cheatsheet.md - quick commands
See also garden.md for host naming scheme. test test macchiato test macchiato