randogoth
3ae266293f
Add zonetoast.com Pelican site
...
Wire up flake input, Pelican build, deploy service, webhook trigger, and
Caddy virtual host for zonetoast.com.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-17 12:22:54 +03:00
randogoth
09ee1932a2
Trigger deploy service after nixos-rebuild in update scripts
...
nixos-rebuild switch does not re-run oneshot services automatically.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-14 13:55:21 +03:00
randogoth
bb41c4f82a
Fix nix not found in systemd PATH for update services
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-14 13:46:28 +03:00
randogoth
bb419a13af
Add webhook-triggered rebuilds for Pelican sites
...
Adds a webhook-deploy service that listens for Codeberg push events and
triggers per-site nixos-rebuild runs. Skips rebuilds if the flake lock
revision is unchanged. Fixes root SSH client config so nix flake update
can reach Codeberg using the existing deploy key.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-14 13:36:10 +03:00
randogoth
cd4d53386c
Add nostr-rs-relay service
...
Runs the relay on localhost:8880, proxied publicly via Caddy at
wss://relay.otherwhere.app. Allows event kinds 0, 3, 37515, 37518.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-05 16:37:48 +03:00
randogoth
590cc1b216
Add ORPort 4431 required for bridge relay; open port in firewall
...
Tor requires ORPort to be set when BridgeRelay=1.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-27 17:13:01 +03:00
randogoth
49e54f3fa9
Remove ServerTransportPlugin override; use module defaults for bridge
...
When role=bridge, the NixOS tor module already configures
ServerTransportPlugin with pkgs.obfs4 and ExtORPort=auto.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-27 16:57:43 +03:00
randogoth
8f514d8d0e
Remove redundant ExtORPort setting from tor-bridge module
...
The NixOS tor module already sets ExtORPort=auto when role=bridge.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-27 16:55:34 +03:00
randogoth
99d9afbc36
tor bridge
2026-03-27 16:52:51 +03:00
randogoth
a261baff99
Don't fail pelican builds when no drafts
2026-02-07 21:38:51 +02:00
randogoth
6a9ba0dd94
Fix nfc-web geohash_tools plugin dependency
2026-02-07 21:28:00 +02:00
randogoth
b3416915fd
Use pelicanconf when present
2026-02-07 21:06:59 +02:00
randogoth
ad0377ab84
Build pelican sites without publishconf
2026-02-07 20:58:27 +02:00
randogoth
08d393e195
Use pelican config when building sites
2026-02-07 20:41:08 +02:00
randogoth
f526cb5595
Fix mtproto proxy port mapping to 8443:443
2026-02-07 20:19:41 +02:00
randogoth
42bdb61280
Align mtproto proxy port with external 8443
2026-02-07 20:16:45 +02:00
randogoth
e84c86a29c
Remove missing bootstrap woff2 fetch
2026-02-07 20:12:12 +02:00
randogoth
aa01963b2c
Restore scopesessions bower_components assets on deploy
2026-02-07 20:10:45 +02:00
randogoth
f28a000e08
Fix awk path in tailscale offload tune
2026-02-07 20:05:35 +02:00
randogoth
26d87f95e2
Harden tailscale offload tune service
2026-02-07 20:04:30 +02:00
randogoth
036b5d85b8
Tune NIC offloads for Tailscale exit node
2026-02-07 20:03:10 +02:00
randogoth
8ca0aa2901
Enable Tailscale SSH and exit node
2026-02-07 20:00:04 +02:00
randogoth
f85fc7a0be
Replace firewalld with simple NixOS firewall rules
2026-02-07 19:48:12 +02:00
randogoth
b419320bfc
Use GRUB BIOS boot + move sops age key out of repo
2026-02-07 18:46:06 +02:00
randogoth
1862821f8f
Initial clean commit
2026-02-05 17:57:02 +02:00
