Commit graph

367 commits

Author SHA1 Message Date
952fd0e083
Replace Nominatim with self-hosted Photon for Dawarich geocoding
- Add Photon OCI container on nixnuc (rtuszik/photon-docker, planet
  index) storing data on the /orico ZFS mirror
- Open port 2322 in nixnuc's main firewall allowlist (LAN + Tailscale)
- Remove services.nominatim, its nginx vhost, and www-data PostgreSQL
  user from nixnuc
- Switch Dawarich on hetznix01 from NOMINATIM_API_HOST to
  PHOTON_API_HOST pointing at nixnuc.atlas-snares.ts.net:2322
- Add zfs-datasets.nix oneshot to declaratively ensure all orico
  datasets exist before services start

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-28 09:26:26 -04:00
7ab7ddce83
nixnuc: plain postfix relay to hetznix01 via Tailscale
A minimal Postfix instance on nixnuc accepts local mail submissions from
services and relays everything to hetznix01.atlas-snares.ts.net on port 25
via the Tailscale tunnel. Root and gene aliases forward to @technicalissues.us.
The simple-nixos-mailserver module (postfix + dovecot stack) is removed since
nixnuc does not receive external mail. The nginx server alias for
mail.home.technicalissues.us is dropped. The private-flake input is pinned to
the nixnuc-postfix-relay branch to pick up the matching relay trust change on
hetznix01.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-27 22:18:27 -04:00
79fd32603f
Deploy Cups Collector 2026-05-22 22:03:37 -04:00
4cb1f9b39f
Remove PDK 2026-05-22 11:49:02 -04:00
16d45f135d
Work around mas bug
https://github.com/zhaofengli/nix-homebrew/issues/131
2026-05-22 11:47:56 -04:00
c6f23c6196
Add secrets for Cups Collector 2026-05-20 14:07:31 -04:00
e3f0f310d5
ABS Update to 2.35.0 2026-05-20 13:34:53 -04:00
035960e327
fix timouts assembling large uploaded files 2026-05-11 23:51:07 -04:00
a55892fab7
Update ABS 2026-05-06 15:32:45 -04:00
7be845b78e
Fix substituters 2026-04-21 16:18:08 -04:00
2b8925829f
Update homeroutes 2026-04-21 15:31:16 -04:00
146008c1c7
Add golangci-lint 2026-04-13 08:50:37 -04:00
cf6d362d6c
Move sensitive git config to private-flake, setup authorized signers
Co-authored-by: Claude <claude@anthropic.com>
2026-04-09 23:49:39 -04:00
997543d9f9
Added & themed WezTerm, updated OMP theme's coffee cup glyph
Not using the Home Manager module to manage WezTerm due to using
Homebrew to install it on macOS.

Large parts of this came from Gemini but little bits here and there also
came from ChatGPT and Claude (aka whatever I could use at the moment).

Co-authored-by: Gemini <gemini@google.com>
Co-authored-by: ChatGPT <chatgpt@openai.com>
Co-authored-by: Claude <claude@anthropic.com>
2026-04-09 08:46:50 -04:00
0498ea3e5b
Setup remote builds and set Pi mostly readonly 2026-04-01 17:12:26 -04:00
1a5f978584
Update ABS 2026-03-30 07:20:18 -04:00
791b553522 Ensure ffmpeg supports srt on macOS 2026-03-27 10:50:40 -04:00
9f35e1462b Fix key 2026-03-26 22:34:39 -04:00
9536604e5c
Merge pull request #617 from genebean/numtide_cache
Add numtide cache entires for nixauth
2026-03-26 20:46:27 -04:00
37d747c532 Add numtide cache entires for nixauth 2026-03-26 20:44:51 -04:00
14ab2f9e1c add libbdplus 2026-03-26 20:39:55 -04:00
dc8b45cf08
Merge pull request #611 from genebean/sops-cache
sops cache
2026-03-23 16:42:41 -04:00
b452b1c2f3 Upgrade mas
mas via homebrew: 6.0.1 (Mar 10, 2026)
mas via nix: 2.2.2 (Apr 24, 2025)
🤯
2026-03-23 09:31:48 -04:00
3478083053 Add cache for sops-nix 2026-03-22 22:54:19 -04:00
77fc9d9853 Manage flatpaks in home-manager
Using this on Ubuntu 25.10. Also sorted module list.
2026-03-22 21:47:31 -04:00
a1238dc6e3
Add itermbrowserplugin 2026-03-22 19:46:15 -04:00
55102c885f
Merge pull request #608 from genebean/git_signing
Re-work ssh-based signing
2026-03-22 19:43:41 -04:00
4bb978ad7f
Fix path to secrets file 2026-03-22 19:41:06 -04:00
b33f8a929e
Fix monitoring on kiosk 2026-03-22 19:40:15 -04:00
4df74ad638
Re-work ssh-based signing 2026-03-22 19:33:46 -04:00
5dbcce7686
Add linting, formatting, and CI infrastructure
- Add deadnix, nixfmt, and statix to flake inputs
- Add formatter output to flake for nix fmt support
- Add deadnix, nixfmt, statix to Home Manager packages
- Add GitHub Actions workflow for CI validation
- Add .pre-commit-config.yaml with hooks for nixfmt, deadnix, and statix
- Support x86_64-darwin in formatter
2026-03-22 18:32:20 -04:00
582f93d9ed
Restructure modules/shared and update all imports
- Delete 2024-12-rework/ folder
- Rename modules/hosts/common to modules/shared, then split into:
  - modules/shared/home/general
  - modules/shared/home/linux
  - modules/shared/nixos
- Update all import paths throughout the codebase
- Update lib/*.nix to use new paths
- Fix hardcoded /Users/${username} to use config.home.homeDirectory
- Update README and examples/flake-structure.nix
2026-03-22 18:32:08 -04:00
5c819eca1e Enable HTTPS for genebean.me with Let's Encrypt HTTP-01 challenge
- Configure ACME with HTTP-01 challenge for Let's Encrypt cert
- Add manual proxy config for Plausible analytics (stats.technicalissues.us)
- Fix issue where recommendedProxySettings caused upstream redirect by
  explicitly setting Host header to stats.technicalissues.us instead of
  passing the genebean.me host
2026-03-11 00:47:57 -04:00
e92d1e37b7
Remove migrated configs from main flake
SSH key imports removed as they're now handled by private-flake
Email config for hetznix01 moved to private-flake
Network config for hetznix01/02 moved to private-flake
2026-03-11 00:38:33 -04:00
67458c0ae3
Add nixroutes alias for comparing network routes
Allows easy comparison of current routes with routes in new build
2026-03-11 00:38:26 -04:00
8b3f1cc190 Upgrade from nextcloud 31 --> 32 --> 33 2026-03-09 21:49:12 -04:00
54ca2e84bc
Updated to nextcloud33
Though the commit shows 31-->33, 32 was live for a moment to facilitate
the upgrade
2026-03-09 15:28:01 -04:00
651032caab
Add Canonical's multipass to my laptop 2026-03-09 14:03:18 -04:00
fecabedf16
Migrate to OpenVox agent and OpenBolt 2026-03-03 14:03:23 -05:00
0f37bbffd8
Clean up 2026-03-03 14:03:00 -05:00
eb9596945c
Update token 2026-03-03 13:30:40 -05:00
33bbf715b5
Add lsof 2026-02-07 15:30:09 -05:00
9fd1b1b24c Fix relable of instance on node_exporter 2026-01-31 23:33:30 -05:00
a2799f5e54 Build a new monitoring stack 2026-01-31 23:09:56 -05:00
65485e1c47
Add settings to Grafana after configuring Pocket ID in UI
In the UI, I setup the "OAuth" method of logging in, logged in, used my
local account to up my permissions to administrator, then added these
settings so that only my Pocket ID-based login was an option.
2026-01-26 10:36:07 -05:00
f004598a1c Setup Pocket ID bits in Dawarich 2026-01-25 23:52:58 -05:00
3ceb096c27
Setup Pocket ID 2026-01-25 23:27:15 -05:00
3d31285ab8
Setup nominatim 2026-01-25 22:21:46 -05:00
4cbbe70898
remove syncthing 2026-01-25 22:21:46 -05:00
c9c3897c8d
Fix ddclient 2026-01-25 22:21:46 -05:00