No description
Find a file
mikl 220d1f651c heather: replace k3s with docker+arion+caddy+syncthing
- remove k3s.nix (1.3GB overhead unjustified for single-node)
- add docker.nix (docker + arion CLI, mikl in docker group)
- add caddy.nix (edge proxy, TLS via ACME staging, host-based routing)
- add syncthing.nix (sync daemon + strelaysrv via systemd, /srv/syncthing)
- add arion-compose.nix (forgejo first, others stubbed as TODO)
- add arion flake input + nixos module
- default.nix: wire up arion project as systemd service (serviceName=heather)

Architecture: Caddy (host) terminates TLS, routes to host services (syncthing)
and docker containers (arion, 127.0.0.1:PORT). Named volumes everywhere except
silverbullet (bind /srv/syncthing/herbarium).
2026-07-12 12:23:05 +03:00
docs docs: update bootstrap with correct repo paths 2026-07-10 15:59:00 +03:00
home git: use canonical git-lfs filter strings to fix 3.7 warning 2026-07-12 01:28:20 +03:00
hosts heather: replace k3s with docker+arion+caddy+syncthing 2026-07-12 12:23:05 +03:00
secrets initial scaffold: multi-host flake (poppy, muscari, rosemary) 2026-06-26 23:28:31 +03:00
.gitignore initial scaffold: multi-host flake (poppy, muscari, rosemary) 2026-06-26 23:28:31 +03:00
AGENTS.md cleanup: remove k8s/sops env vars (muscari-specific), dedupe tree, update AGENTS.md 2026-07-04 00:47:38 +03:00
flake.lock heather: replace k3s with docker+arion+caddy+syncthing 2026-07-12 12:23:05 +03:00
flake.nix heather: replace k3s with docker+arion+caddy+syncthing 2026-07-12 12:23:05 +03:00
garden.md refactor: rename homebrew.nix to apps.nix (add nix GUI pkgs, cleanup=none) 2026-07-02 14:45:15 +03:00
README.md docs: add tech debt section with git config todo 2026-07-01 02:39:13 +03:00

nix-config

Nix configurations for iscg infra hosts.

hosts

  • poppy - MacBook Air M1 (nix-darwin)
  • muscari - NixOS server with k3s
  • rosemary - backup VM (planned)

See docs/ for detailed documentation.

quick rebuild

# poppy (macOS)
darwin-rebuild switch --flake .#poppy

# muscari (NixOS)
sudo nixos-rebuild switch --flake .#muscari

documentation

See also garden.md for host naming scheme. test test macchiato test macchiato