Repositories
8
 Projects Packages Public activity Starred repositories
1
mikl pushed to main at mikl/nix-config 2026-11-07 21:57:47 +00:00
2ff4caa788 matrix-rtc: separate standalone publication from room creation
mikl pushed to main at mikl/nix-config 2026-11-05 20:42:29 +00:00
56120933f3 heather: allow MatrixRTC Docker subnet to use AstrNet egress NAT
mikl pushed to main at mikl/nix-config 2026-11-05 20:02:27 +00:00
720ab819fc heather: route MatrixRTC auth and signalling through Caddy
ea620058f8 heather: update Tuwunel 1.9.4 and enable MatrixRTC calling
Compare 2 commits »
mikl pushed to main at mikl/nix-config 2026-10-25 23:01:09 +00:00
6e2ba02b9a Harden Heather: retire remote agents and proxy, disable Jupyter, sandbox Matrix admin
8c4840a0d3 Allow Sol agent subnet 10.42/16 in Minecraft API cgroup filter
3e40846b52 Add isolated mesh-only Minecraft API with typed bot controls and mod review queue
Compare 3 commits »
mikl pushed to main at mikl/nix-config 2026-10-21 14:09:43 +00:00
e8632cc9df Retire files.iscg.dev Help2Travel preview; isolate main site root
mikl pushed to main at mikl/nix-config 2026-10-15 09:16:05 +00:00
53f908743a Serve Help2Travel landing and partnership API
mikl pushed to main at mikl/nix-config 2026-10-05 12:41:17 +00:00
0938004bfe Add gcalcli OAuth consent pages
mikl pushed to main at mikl/nix-config 2026-10-02 17:56:52 +00:00
9324295d49 fix(heather): break AstrNet FRR boot ordering cycle
mikl pushed to main at mikl/nix-config 2026-09-28 23:07:17 +00:00
7345251aad fix(poppy): use terminal pinentry for personal pass store
mikl pushed to main at mikl/nix-config 2026-09-28 23:04:17 +00:00
630e726f5f fix(poppy): disable pinentry external passphrase cache
mikl pushed to main at mikl/nix-config 2026-09-28 22:49:14 +00:00
db25302c85 fix(heather): restore inbound Docker access with WAN return routing
c46e4b36f9 fix: disable gpg passphrase caching
Compare 2 commits »
mikl pushed to main at mikl/nix-config 2026-09-27 00:21:41 +00:00
b014c03b21 heather: SNAT Docker egress to AstrNet identity and allow replies
8223868774 heather: fix BGP default precedence, YC fallback and WAN BGP exposure
b0d1de279f heather: route outbound via AstrNet with WAN failback
Compare 3 commits »
mikl pushed to main at mikl/nix-config 2026-09-26 23:38:51 +00:00
5cd290eeba heather: allow AstrNet host ingress, keep transit blocked
mikl pushed to main at mikl/nix-config 2026-09-26 23:30:18 +00:00
f69f67d36a heather: allow bounded AstrNet ICMP echo on own addresses
mikl pushed to main at mikl/nix-config 2026-09-26 23:15:19 +00:00
2ad5653fda heather: replace personal mesh with guarded AstrNet stub
mikl pushed to main at mikl/nix-config 2026-09-26 13:56:46 +00:00
4efbdc9bda heather: pin Forgejo 15.0.9 and isolate Arion service updates
mikl pushed to main at mikl/nix-config 2026-09-25 22:57:35 +00:00
0e56d31d68 poppy: gcalcli; kitty opacity 0.84; gpg-agent ttl 600s; pay.nix darwin (skip autoPatchelfHook); syncthing launchd via nix-darwin; mihomo
mikl pushed to main at mikl/nix-config 2026-09-25 22:57:26 +00:00
4cfd8d3ac3 tuwunel v1.9.3 (DB migrated, verified); teable mem_limit 2g; nick-timer systemd service + caddy vhost; heather swap 4g, drop chromium, add diag tools; server.nix: drop pinchtab, add nodejs
5e75ca7555 paseo: Restart always + StartLimitIntervalSec=0; pay.nix (local state)
d7f0bf2f06 paseo: add /run/current-system/sw to PATH so spawned pi agents see full system tools (ip, ss, hostname, docker, ssh)
Compare 3 commits »
mikl pushed to main at mikl/nix-config 2026-09-14 19:40:45 +00:00
1e1416560a heather: configure Teable Redis cache for new release
mikl pushed to main at mikl/nix-config 2026-09-14 19:26:05 +00:00
49cafbc50a heather: update Teable to latest stable release