No description

Find a file

mikl 741a404ba8 heather: matrix tuwunel (homeserver) + cinny + tuwunel-admin - tuwunel arion container: ghcr.io/matrix-construct/tuwunel:v1.7.1, server_name=iscg.dev, allow_federation, registration via token. Media on Yandex Object Storage (S3) bucket iscg-tuwunel-media. Config (tuwunel.toml w/ s3 secret + reg token) bind-mounted from /var/lib/tuwunel-secrets/ (outside git, root:docker 0640). - cinny arion container: ajbura/cinny:latest, config from /var/lib/tuwunel-secrets/cinny-config.json, default homeserver iscg.dev. - tuwunel-admin systemd service: static x86_64 binary (no public docker image) at /var/lib/tuwunel-admin/tuwunel-admin, binds 127.0.0.1:8009. Caddy admin.iscg.dev terminates TLS. Fresh install — no users/media migrated from old jul11.		2026-07-13 02:01:59 +03:00
docs	docs: update bootstrap with correct repo paths	2026-07-10 15:59:00 +03:00
home	git: use canonical git-lfs filter strings to fix 3.7 warning	2026-07-12 01:28:20 +03:00
hosts	heather: matrix tuwunel (homeserver) + cinny + tuwunel-admin	2026-07-13 02:01:59 +03:00
secrets	initial scaffold: multi-host flake (poppy, muscari, rosemary)	2026-06-26 23:28:31 +03:00
.gitignore	initial scaffold: multi-host flake (poppy, muscari, rosemary)	2026-06-26 23:28:31 +03:00
AGENTS.md	cleanup: remove k8s/sops env vars (muscari-specific), dedupe tree, update AGENTS.md	2026-07-04 00:47:38 +03:00
flake.lock	heather: replace k3s with docker+arion+caddy+syncthing	2026-07-12 12:23:05 +03:00
flake.nix	heather: replace k3s with docker+arion+caddy+syncthing	2026-07-12 12:23:05 +03:00
garden.md	refactor: rename homebrew.nix to apps.nix (add nix GUI pkgs, cleanup=none)	2026-07-02 14:45:15 +03:00
README.md	docs: add tech debt section with git config todo	2026-07-01 02:39:13 +03:00

README.md

nix-config

Nix configurations for iscg infra hosts.

hosts

poppy - MacBook Air M1 (nix-darwin)
muscari - NixOS server with k3s
rosemary - backup VM (planned)

See docs/ for detailed documentation.

quick rebuild

# poppy (macOS)
darwin-rebuild switch --flake .#poppy

# muscari (NixOS)
sudo nixos-rebuild switch --flake .#muscari

documentation

docs/structure.md - how the config is organized
docs/poppy.md - MacBook specific
docs/muscari.md - server + k3s
docs/shell.md - zsh, prompt, aliases
docs/terminal.md - kitty + themes
docs/cheatsheet.md - quick commands

See also garden.md for host naming scheme. test test macchiato test macchiato