Tailnet name (atlas-snares.ts.net) is now sourced from
config.private-flake.tailnetDomain, defined in private-flake's
shared/tailnet.nix and imported by the hetznix01 and nixnuc modules.
WiFi SSIDs for kiosk-* hosts are now set by private-flake's
shared/kiosk.nix via nixosModules.private.kiosk; the hardcoded network
blocks are removed from the kiosk dots configs.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
A minimal Postfix instance on nixnuc accepts local mail submissions from
services and relays everything to hetznix01.atlas-snares.ts.net on port 25
via the Tailscale tunnel. Root and gene aliases forward to @technicalissues.us.
The simple-nixos-mailserver module (postfix + dovecot stack) is removed since
nixnuc does not receive external mail. The nginx server alias for
mail.home.technicalissues.us is dropped. The private-flake input is pinned to
the nixnuc-postfix-relay branch to pick up the matching relay trust change on
hetznix01.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Not using the Home Manager module to manage WezTerm due to using
Homebrew to install it on macOS.
Large parts of this came from Gemini but little bits here and there also
came from ChatGPT and Claude (aka whatever I could use at the moment).
Co-authored-by: Gemini <gemini@google.com>
Co-authored-by: ChatGPT <chatgpt@openai.com>
Co-authored-by: Claude <claude@anthropic.com>
- Add deadnix, nixfmt, and statix to flake inputs
- Add formatter output to flake for nix fmt support
- Add deadnix, nixfmt, statix to Home Manager packages
- Add GitHub Actions workflow for CI validation
- Add .pre-commit-config.yaml with hooks for nixfmt, deadnix, and statix
- Support x86_64-darwin in formatter