mikl/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
No description
132 commits 1 branch 0 tags 533 KiB
Nix 100%
Find a file
mikl cd018a24c2 heather: install jitsi from scratch per official docs (minimal) 
Per https://jitsi.github.io/handbook/docs/devops-guide/devops-guide-docker
and official docker-compose.yml. Minimal config, no copying from old install.

- 4 services: web/prosody/jicofo/jvb (stable-11031, docker hub)
- read_only + tmpfs per official compose
- Named volumes: jitsi-{web,prosody,prosody-data,jicofo,jvb,transcripts}
- Network meet-jitsi, prosody alias xmpp.meet.jitsi
- Reverse proxy: DISABLE_HTTPS=1, Caddy v2 auto-WebSocket (no manual header_up)
- JVB_ADVERTISE_IPS=51.250.45.111, :10000/udp public
- Auth: internal (ENABLE_AUTH=1, AUTH_TYPE=internal). NO GUESTS — template bug
  in prosody: guest domain lacks websocket module → disconnect loop
- Secrets NEW in /var/lib/jitsi-secrets/jitsi.env (root:docker 0640):
  JICOFO_COMPONENT_SECRET, JICOFO_AUTH_PASSWORD, JVB_AUTH_PASSWORD
- Firewall: 10000/udp (NixOS + YC SG)
2026-07-13 00:56:13 +03:00
docs docs: update bootstrap with correct repo paths 2026-07-10 15:59:00 +03:00
home git: use canonical git-lfs filter strings to fix 3.7 warning 2026-07-12 01:28:20 +03:00
hosts heather: install jitsi from scratch per official docs (minimal) 2026-07-13 00:56:13 +03:00
secrets initial scaffold: multi-host flake (poppy, muscari, rosemary) 2026-06-26 23:28:31 +03:00
.gitignore initial scaffold: multi-host flake (poppy, muscari, rosemary) 2026-06-26 23:28:31 +03:00
AGENTS.md cleanup: remove k8s/sops env vars (muscari-specific), dedupe tree, update AGENTS.md 2026-07-04 00:47:38 +03:00
flake.lock heather: replace k3s with docker+arion+caddy+syncthing 2026-07-12 12:23:05 +03:00
flake.nix heather: replace k3s with docker+arion+caddy+syncthing 2026-07-12 12:23:05 +03:00
garden.md refactor: rename homebrew.nix to apps.nix (add nix GUI pkgs, cleanup=none) 2026-07-02 14:45:15 +03:00
README.md docs: add tech debt section with git config todo 2026-07-01 02:39:13 +03:00

README.md

nix-config

Nix configurations for iscg infra hosts.

hosts

  • poppy - MacBook Air M1 (nix-darwin)
  • muscari - NixOS server with k3s
  • rosemary - backup VM (planned)

See docs/ for detailed documentation.

quick rebuild

# poppy (macOS)
darwin-rebuild switch --flake .#poppy

# muscari (NixOS)
sudo nixos-rebuild switch --flake .#muscari

documentation

See also garden.md for host naming scheme. test test macchiato test macchiato