Tailnet name (atlas-snares.ts.net) is now sourced from
config.private-flake.tailnetDomain, defined in private-flake's
shared/tailnet.nix and imported by the hetznix01 and nixnuc modules.
WiFi SSIDs for kiosk-* hosts are now set by private-flake's
shared/kiosk.nix via nixosModules.private.kiosk; the hardcoded network
blocks are removed from the kiosk dots configs.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- Add Photon OCI container on nixnuc (rtuszik/photon-docker, planet
index) storing data on the /orico ZFS mirror
- Open port 2322 in nixnuc's main firewall allowlist (LAN + Tailscale)
- Remove services.nominatim, its nginx vhost, and www-data PostgreSQL
user from nixnuc
- Switch Dawarich on hetznix01 from NOMINATIM_API_HOST to
PHOTON_API_HOST pointing at nixnuc.atlas-snares.ts.net:2322
- Add zfs-datasets.nix oneshot to declaratively ensure all orico
datasets exist before services start
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
A minimal Postfix instance on nixnuc accepts local mail submissions from
services and relays everything to hetznix01.atlas-snares.ts.net on port 25
via the Tailscale tunnel. Root and gene aliases forward to @technicalissues.us.
The simple-nixos-mailserver module (postfix + dovecot stack) is removed since
nixnuc does not receive external mail. The nginx server alias for
mail.home.technicalissues.us is dropped. The private-flake input is pinned to
the nixnuc-postfix-relay branch to pick up the matching relay trust change on
hetznix01.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This has been a tiny annoyance on macOS but a real problem on Plasma 6
as the bottom of the terminal was being hidden behind the panel at the
bottom of the screen.