No description
Find a file
mikl 6e84e26d2d heather: xray VLESS+Reality proxy on :8443
Add xray-core container (ghcr.io/xtls/xray-core) to arion compose.
VLESS + Reality + xtls-rprx-vision, masquerades as www.microsoft.com.
Config (UUID + Reality privateKey) at /var/lib/xray-secrets/config.json
(outside git, root:docker 0640). Public port 8443, not behind Caddy.
Secrets in pass iscg.dev/xray/. Client: v2RayTun / v2rayN.
2026-07-13 03:05:48 +03:00
docs docs: update bootstrap with correct repo paths 2026-07-10 15:59:00 +03:00
home git: use canonical git-lfs filter strings to fix 3.7 warning 2026-07-12 01:28:20 +03:00
hosts heather: xray VLESS+Reality proxy on :8443 2026-07-13 03:05:48 +03:00
secrets initial scaffold: multi-host flake (poppy, muscari, rosemary) 2026-06-26 23:28:31 +03:00
.gitignore initial scaffold: multi-host flake (poppy, muscari, rosemary) 2026-06-26 23:28:31 +03:00
AGENTS.md cleanup: remove k8s/sops env vars (muscari-specific), dedupe tree, update AGENTS.md 2026-07-04 00:47:38 +03:00
flake.lock heather: replace k3s with docker+arion+caddy+syncthing 2026-07-12 12:23:05 +03:00
flake.nix heather: replace k3s with docker+arion+caddy+syncthing 2026-07-12 12:23:05 +03:00
garden.md refactor: rename homebrew.nix to apps.nix (add nix GUI pkgs, cleanup=none) 2026-07-02 14:45:15 +03:00
README.md docs: add tech debt section with git config todo 2026-07-01 02:39:13 +03:00

nix-config

Nix configurations for iscg infra hosts.

hosts

  • poppy - MacBook Air M1 (nix-darwin)
  • muscari - NixOS server with k3s
  • rosemary - backup VM (planned)

See docs/ for detailed documentation.

quick rebuild

# poppy (macOS)
darwin-rebuild switch --flake .#poppy

# muscari (NixOS)
sudo nixos-rebuild switch --flake .#muscari

documentation

See also garden.md for host naming scheme. test test macchiato test macchiato