84 Commits
Author SHA1 Message Date
poslop 1422f3ce5c Merge remote-tracking branch 'origin/dev' 2026-08-28 14:31:46 +00:00
poslop a6bea2a0e6 Merge branch 'dev' of https://git.archfox.org/poslop/rice-flakes into dev 2026-08-28 14:29:58 +00:00
poslop cce057cb6c agenix: use stdenv.hostPlatform.system, fixes eval warning 2026-08-28 14:29:46 +00:00
poslop 89b08bad3f Merge branch 'dev' of https://git.archfox.org/poslop/rice-flakes into dev 2026-08-28 09:23:09 -05:00
poslop 4f777a9b96 hermes: glm-5.3-flash delegation, drop auxiliary block; flake.lock bump (live system state) 2026-08-28 09:23:08 -05:00
poslop 041a8a36af remove write test file 2026-08-28 14:22:26 +00:00
poslop f885cd0e55 Merge branch 'dev' of https://git.archfox.org/poslop/rice-flakes into dev 2026-08-28 14:22:06 +00:00
poslop 5e0bcc53ff write test 2026-08-28 09:21:45 -05:00
poslop 3d15148c77 roles: add role-based host composition in flake
- mkHost now takes a role list, roles resolve to ./roles/<name>.nix
- roles/core.nix = shared baseline (modules/)
- roles/k3s-server.nix = core + k3s (goyplex-vm)
- roles/hermes.nix = core + hermes (hermes-vm)
- host configuration.nix trimmed to hardware + boot + stateVersion
- optional hosts/<name>/custom.nix loads last for per-host overrides
- new hosts: one flake line + hosts/<name>/ dir
2026-08-28 14:13:43 +00:00
poslop 15b0702eb4 flake update 2026-08-21 09:40:56 -05:00
poslop d54d954dff secrets: re-encrypt hermes-env.age 2026-08-19 16:59:16 -05:00
poslop 7ae32770d5 hermes: add serve and dashboard services, run as hermes user
- Add hermes-serve (port 9120) for desktop JSON-RPC backend
- Add hermes-dashboard (port 9121) for web UI
- Both docker exec with -u hermes to avoid root-owned files
- Add BW_SERVERURL env var
- Expose port 9120 in container extraOptions
2026-08-19 16:59:13 -05:00
poslop d0dc1743e1 core/network: enable netbird 2026-08-19 16:59:08 -05:00
poslop 96865caaeb hermes-vm: narrow module import to modules/core 2026-08-19 16:59:05 -05:00
poslop 590f4a70ac flake.lock: bump inputs (hyprland, flake-parts, hermes-agent) 2026-08-19 16:59:01 -05:00
poslop 434e6dfb97 k3s: allow traefik dashboard port 8969 2026-07-30 21:05:15 -05:00
poslop dac900756c k3s: bind-mount apps/ from separate poslop/k3s repo, add traefik firewall port 2026-07-30 20:09:40 -05:00
poslop 765be54fb5 Revert "netbird: fresh setup routed through built-in traefik, secrets via kubectl not git"
This reverts commit 8b65c53a11.
2026-07-30 18:29:00 -05:00
poslop 8b65c53a11 netbird: fresh setup routed through built-in traefik, secrets via kubectl not git 2026-07-30 18:27:55 -05:00
poslop eadba798ea k3s: wipe netbird/traefik manifests, back to bare k3s 2026-07-30 18:17:59 -05:00
poslop 942d9e2350 add yamlfmt to dev packages 2026-07-30 18:03:05 -05:00
poslop 10637d950f hermes-age changes 2026-07-28 21:47:06 -05:00
poslop f9289fa766 netbird: move authSecret out of git into k8s secret (netbird-relay-auth), render via init container 2026-07-23 13:45:04 -05:00
poslop 5b62e26752 rotate netbird authSecret 2026-07-23 13:33:51 -05:00
poslop 35b065ec49 Merge pull request 'Dev' (#2) from dev into master
Reviewed-on: #2
0.1
2026-07-23 12:48:53 -05:00
poslop 9698a57aa0 remove hermes permission service 2026-07-23 11:18:42 -05:00
poslop 6ab209cd5e k3s into configuration for goyplex 2026-07-23 11:15:51 -05:00
poslop 9a0e03657a netbird: pull encryptionKey from k8s secret 2026-07-21 21:25:58 -05:00
poslop fcaa023730 netbird: change STUN to port 3479, add trustedHTTPProxies 2026-07-21 21:18:20 -05:00
poslop f42fd8684e traefik: add nodes, namespaces, pods to rbac 2026-07-21 20:15:00 -05:00
poslop 2e30fec972 traefik: add endpointslices and configmaps rbac 2026-07-21 20:14:35 -05:00
poslop 7af7864701 traefik: remove TLS/redirect, caddy handles TLS 2026-07-21 20:09:28 -05:00
poslop 40a82aad64 netbird: use web entrypoint, caddy handles TLS 2026-07-21 19:28:35 -05:00
poslop d2a6887834 refactor(netbird): migrate to single netbird-server container 2026-07-21 19:06:19 -05:00
poslop 9b5af62a47 k3s init 2026-07-21 17:58:58 -05:00
poslop 106cf13597 hermes alias 2026-07-21 11:26:41 -05:00
poslop 336242e201 hermes update 2026-07-21 11:26:28 -05:00
poslop 6875e11f68 updates and hermes changes 2026-07-16 08:54:41 -05:00
poslop 3651da7577 hemres permission service 2026-07-09 11:18:29 -05:00
poslop 82dd99c699 hermes changes 2026-07-09 10:15:06 -05:00
poslop 015de3eade packages and update 2026-06-03 20:08:53 -05:00
poslop ed2b049717 mod 2026-06-02 01:01:50 -05:00
poslop b661acc7f1 hermes memory 2026-05-30 19:48:59 -05:00
poslop 5f994ccf0a hermes 2026-05-29 20:54:22 -05:00
poslop 5cd20d6a35 remove c++ tools 2026-04-24 18:56:23 -05:00
poslop bb19efac38 reorg pkgs 2026-04-24 18:51:05 -05:00
poslop 9e56c695f0 ga alias -> function 2026-04-24 18:35:15 -05:00
poslop 2a17c5ecdf lua ls 2026-04-24 18:30:14 -05:00
poslop 5a7f060075 nixd package 2026-04-24 18:18:33 -05:00
poslop 32cfdc0f3d simplify inputs 2026-04-24 18:16:07 -05:00