No description
Find a file
mikl 6c4f7daf42 heather: tuwunel-admin via nix derivation (fetchurl prebuilt binary)
Replace manually-copied /var/lib/tuwunel-admin/tuwunel-admin binary with a
nix derivation: fetchurl of GitHub release v0.1.0 x86_64-musl static binary
(sha256 verified against checksums.txt). Binary now lives in nix-store,
survives VM recreation. Config stays at /var/lib/tuwunel-admin/config.toml
(outside git, root:root 0644).
2026-07-13 02:49:00 +03:00
docs docs: update bootstrap with correct repo paths 2026-07-10 15:59:00 +03:00
home git: use canonical git-lfs filter strings to fix 3.7 warning 2026-07-12 01:28:20 +03:00
hosts heather: tuwunel-admin via nix derivation (fetchurl prebuilt binary) 2026-07-13 02:49:00 +03:00
secrets initial scaffold: multi-host flake (poppy, muscari, rosemary) 2026-06-26 23:28:31 +03:00
.gitignore initial scaffold: multi-host flake (poppy, muscari, rosemary) 2026-06-26 23:28:31 +03:00
AGENTS.md cleanup: remove k8s/sops env vars (muscari-specific), dedupe tree, update AGENTS.md 2026-07-04 00:47:38 +03:00
flake.lock heather: replace k3s with docker+arion+caddy+syncthing 2026-07-12 12:23:05 +03:00
flake.nix heather: replace k3s with docker+arion+caddy+syncthing 2026-07-12 12:23:05 +03:00
garden.md refactor: rename homebrew.nix to apps.nix (add nix GUI pkgs, cleanup=none) 2026-07-02 14:45:15 +03:00
README.md docs: add tech debt section with git config todo 2026-07-01 02:39:13 +03:00

nix-config

Nix configurations for iscg infra hosts.

hosts

  • poppy - MacBook Air M1 (nix-darwin)
  • muscari - NixOS server with k3s
  • rosemary - backup VM (planned)

See docs/ for detailed documentation.

quick rebuild

# poppy (macOS)
darwin-rebuild switch --flake .#poppy

# muscari (NixOS)
sudo nixos-rebuild switch --flake .#muscari

documentation

See also garden.md for host naming scheme. test test macchiato test macchiato