1626 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Greg Hellings	70934153ac	chore: update lock and links	2026-04-16 13:00:36 -05:00
Greg Hellings	db475b232f	Merge branch 'main' of srcpub:greg/nixos	2026-04-15 13:56:51 -05:00
Greg Hellings	32a75d84cc	chore: update locks and add pulumi plugins	2026-04-15 08:53:28 -05:00
Greg Hellings	640552e260	Revert "chore: update flake pins" ... This reverts commit 6d1490bd28.	2026-04-13 17:35:21 -05:00
Greg Hellings	b37f597eaa	chore: fix pathing	2026-04-13 17:35:01 -05:00
Greg Hellings	f8954fd200	fix: correct workflow runner	2026-04-13 16:08:44 -05:00
Greg Hellings	6d1490bd28	chore: update flake pins	2026-04-13 16:07:23 -05:00
Greg Hellings	234f000756	feat: claude code support	2026-04-13 16:00:26 -05:00
Greg Hellings	14c7f34108	chore: lithic stuff	2026-04-08 08:00:35 -05:00
Greg Hellings	f354c3f353	chore: add mcp servers and claude code	2026-04-07 08:43:30 -05:00
Greg Hellings	c0a0c64425	feat: add ~/.local/bin/ to nushell PATH	2026-04-06 16:50:06 -05:00
Greg Hellings	05f3f118ac	fix: simplify inject-darwin	2026-04-06 16:24:53 -05:00
Greg Hellings	21dbcb3113	feat: aws-cli and cargo on lithic	2026-04-06 16:23:03 -05:00
Greg Hellings	6b7f54d0a2	feat: pull dynamic names for Darwin/Home	2026-04-06 16:21:02 -05:00
Greg Hellings	0d70a9e018	feat: add li host	2026-04-06 08:43:41 -05:00
Greg Hellings	aee34e5b86	feat: more bookmarks	2026-04-05 20:03:51 -05:00
Greg Hellings	0460014b75	feat: Add minio-client and Discord to Exodus	2026-04-05 19:45:36 -05:00
Greg Hellings	84d050fb0c	fix: remove files before re-upload in Immich backup	2026-04-05 16:52:04 -05:00
Greg Hellings	3847c7d92d	fix: streamline Gitea runners	2026-04-05 16:51:31 -05:00
klaatu	81936ac524	feat: Gitea Actions shell runners + flake-lock workflow ... - Add modules/nixos/gitea-runner.nix: NixOS module for act_runner in shell mode, with options for enable, instanceURL, name, labels, and tokenFile (agenix secret path). - Deploy gitea-runner to jeremiah, isaiah, zeke, and linode with appropriate labels. Agenix secret placeholders left with TODOs. - Add .gitea/workflows/update-flake-lock.yaml: weekly workflow (Sunday midnight) that runs nix flake update and opens a PR if flake.lock changed, using GITEA_TOKEN secret for authentication. Closes part of #15 (NixOS shell runners + flake-lock workflow).	2026-04-05 04:58:27 -05:00
Greg Hellings	45d8154a04	Merge remote-tracking branch 'origin/feat/gitea-actions'	2026-04-04 14:18:22 -05:00
Greg Hellings	03400f1c93	fix: pull correct secrets	2026-04-04 14:14:23 -05:00
greg	603598a3f9	Merge branch 'main' into feat/gitea-actions	2026-04-04 19:13:31 +00:00
klaatu	757b07c22f	fix: replace placeholder Secret with ExternalSecret via bitwarden-login	2026-04-04 19:05:17 +00:00
klaatu	b7fba0e151	fix: chart name act_runner -> actions, version 0.2.5 -> 0.0.4	2026-04-04 19:05:06 +00:00
greg	75278cdb6a	Merge pull request 'fix: set MC_CONFIG_DIR to /tmp/.mc so mc can write config as non-root' (#20) from klaatu/nixos:fix/mc-config-dir into main ... Reviewed-on: https://src.thehellings.com/greg/nixos/pulls/20 Reviewed-by: greg <gitea@local.domain>	2026-04-04 18:23:42 +00:00
klaatu	67f12856e1	fix: set MC_CONFIG_DIR to /tmp/.mc so mc can write config as non-root	2026-04-04 18:18:43 +00:00
Greg Hellings	475c0eda64	fix: minio secrets exposed	2026-04-04 13:11:31 -05:00
greg	828d61d818	Merge pull request 'feat: backup improvements — AlbyHub Restic, Gitea dump CronJob, Immich → MinIO' (#17) from klaatu/nixos:feature/backup-improvements into main ... Reviewed-on: https://src.thehellings.com/greg/nixos/pulls/17 Reviewed-by: greg <gitea@local.domain>	2026-04-04 18:00:16 +00:00
klaatu	0218447008	fix: address review feedback on backup improvements ... - manifests/gitea/dump-cronjob.yaml: Remove --skip-log, --skip-custom-dir, --skip-db flags to make backup complete - manifests/gitea/dump-cronjob.yaml: Replace NFS volume + cleanup container with S3 upload to backup-gitea bucket using MinIO client (mc). 30-day lifecycle set via mc ilm. Uses minio_key/minio_secret from existing gitea-config secret. - hosts/unstable/hosea/default.nix: Replace raw services.restic.backups.albyhub block with greg.backup.jobs.albyhub using the greg.backup module. Remove manual age.secrets.restic-env and age.secrets.restic-pw entries since the greg.backup module declares them.	2026-04-04 02:05:03 -05:00
klaatu	2741be72c7	feat: add update-manifests workflow	2026-04-04 06:18:14 +00:00
klaatu	e8beb7f2a9	feat: add update-flake-lock workflow	2026-04-04 06:18:12 +00:00
klaatu	b2728bf1de	feat: add gitea-runner NixOS module	2026-04-04 06:18:10 +00:00
klaatu	d65dcb51a3	feat: add gitea-runner secret placeholder	2026-04-04 06:18:07 +00:00
klaatu	87bc9a21d9	feat: add gitea-runner kustomization	2026-04-04 06:18:04 +00:00
klaatu	ca25dde780	feat: add gitea-runner FluxCD HelmRelease	2026-04-04 06:18:01 +00:00
klaatu	c61900f9e6	feat: add gitea-runner namespace manifest	2026-04-04 06:17:59 +00:00
klaatu	1077d357ca	feat(immich): switch backup to rclone sync → MinIO immich bucket on nas1	2026-04-04 06:13:43 +00:00
klaatu	6b84824a53	feat(gitea): add dump-cronjob to kustomization	2026-04-04 06:13:00 +00:00
klaatu	c74d647ec3	feat(gitea): add daily dump CronJob writing to NAS1 NFS	2026-04-04 06:12:56 +00:00
klaatu	58a5c95c32	feat(hosea): add Restic backup for AlbyHub /chain/alby	2026-04-04 06:12:31 +00:00
Greg Hellings	9a26c75884	chore: allow outgoing webhooks	2026-04-03 23:49:27 -05:00
Greg Hellings	276b939252	fix: expose buildbot	2026-04-03 23:49:12 -05:00
greg	3eb44f2958	Merge pull request 'feat: expose Buildbot via nginx proxy on LAN' (#13) from klaatu/nixos:feat/buildbot-proxy into main ... Reviewed-on: https://src.thehellings.com/greg/nixos/pulls/13	2026-04-04 03:45:51 +00:00
klaatu	9bbdb74f85	fix: merge conflict — keep both nebula.enable and buildbot proxies	2026-04-03 22:18:17 -05:00
greg	35b6058c09	Merge pull request 'feat: Nebula mesh network overlay' (#12) from klaatu/nixos:feat/nebula-mesh into main ... Reviewed-on: https://src.thehellings.com/greg/nixos/pulls/12	2026-04-04 03:03:53 +00:00
Greg Hellings	88d9234332	fix: no default routes	2026-04-02 08:11:32 -05:00
root	eabead05ab	feat: expose Buildbot via nginx proxy on LAN ... Add greg.proxies entries on jeremiah for buildbot.home and buildbot.thehellings.lan, both proxying to http://localhost:8010/. Nginx handles auth passthrough - Buildbot's own Gitea OAuth applies. Add DNS aliases in genesis hosts file: - buildbot.thehellings.lan → 10.42.1.8 (LAN) - buildbot.home → 100.102.186.39 (Tailscale)	2026-04-01 17:31:38 -05:00
Greg Hellings	a1bef073cf	fix: generate linode certs	2026-04-01 17:20:46 -05:00
root	f35e8c755c	fix: only set listen.port on lighthouse/relay nodes (regular nodes use OS-assigned port 0)	2026-04-01 17:14:12 -05:00