mikl/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
No description
128 commits 1 branch 0 tags 533 KiB
Nix 100%
Find a file
mikl 8709321ca3 heather: install jitsi meet from scratch (web/prosody/jicofo/jvb) 
Fresh install per https://jitsi.github.io/handbook/docs/devops-guide/devops-guide-docker
- Images on GHCR: ghcr.io/jitsi/*:stable-11031
- Named volumes: jitsi-{web,prosody,jicofo,jvb,transcripts}
- Network meet-jitsi (bridge) with prosody alias xmpp.meet.jitsi
- Reverse proxy mode (DISABLE_HTTPS=1), Caddy terminates TLS
- Internal auth (ENABLE_AUTH=1, AUTH_TYPE=internal)
- JVB_ADVERTISE_IPS=51.250.45.111, :10000/udp public
- Secrets NEW in /var/lib/jitsi-secrets/jitsi.env (root:docker 0640):
  JICOFO_COMPONENT_SECRET, JICOFO_AUTH_PASSWORD, JVB_AUTH_PASSWORD
- Caddy vhost jitsi.iscg.dev with /xmpp-websocket + /colibri-ws upgrade routes
- Firewall: 10000/udp (jvb). Coturn not included (optional, add later for NAT)
- No jigasi/jibri/transcriber (minimal stack)
2026-07-12 22:42:36 +03:00
docs docs: update bootstrap with correct repo paths 2026-07-10 15:59:00 +03:00
home git: use canonical git-lfs filter strings to fix 3.7 warning 2026-07-12 01:28:20 +03:00
hosts heather: install jitsi meet from scratch (web/prosody/jicofo/jvb) 2026-07-12 22:42:36 +03:00
secrets initial scaffold: multi-host flake (poppy, muscari, rosemary) 2026-06-26 23:28:31 +03:00
.gitignore initial scaffold: multi-host flake (poppy, muscari, rosemary) 2026-06-26 23:28:31 +03:00
AGENTS.md cleanup: remove k8s/sops env vars (muscari-specific), dedupe tree, update AGENTS.md 2026-07-04 00:47:38 +03:00
flake.lock heather: replace k3s with docker+arion+caddy+syncthing 2026-07-12 12:23:05 +03:00
flake.nix heather: replace k3s with docker+arion+caddy+syncthing 2026-07-12 12:23:05 +03:00
garden.md refactor: rename homebrew.nix to apps.nix (add nix GUI pkgs, cleanup=none) 2026-07-02 14:45:15 +03:00
README.md docs: add tech debt section with git config todo 2026-07-01 02:39:13 +03:00

README.md

nix-config

Nix configurations for iscg infra hosts.

hosts

  • poppy - MacBook Air M1 (nix-darwin)
  • muscari - NixOS server with k3s
  • rosemary - backup VM (planned)

See docs/ for detailed documentation.

quick rebuild

# poppy (macOS)
darwin-rebuild switch --flake .#poppy

# muscari (NixOS)
sudo nixos-rebuild switch --flake .#muscari

documentation

See also garden.md for host naming scheme. test test macchiato test macchiato