The jirorian upload service subscribes to kind 5392 events for its
NIP-44-gated whitelist registration flow; the relay must accept them.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Add kinds 7 (reactions), 20 (picture events), and 1111 (comments)
to the nostr-rs-relay event_kind_allowlist.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
systemd loads EnvironmentFile before ExecStartPre runs, so the env file
could never exist in time. Replace with a single ExecStart wrapper script
that reads sops secrets directly and execs jirorian.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Adds the jirorian NixOS module (systemd service, sops secrets, Caddy
fragment), wires it into the flake as a Codeberg input, fixes the Caddy
glob import path, and encrypts all five R2/Nostr secrets into bucur.yaml.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Adds a webhook-deploy service that listens for Codeberg push events and
triggers per-site nixos-rebuild runs. Skips rebuilds if the flake lock
revision is unchanged. Fixes root SSH client config so nix flake update
can reach Codeberg using the existing deploy key.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Runs the relay on localhost:8880, proxied publicly via Caddy at
wss://relay.otherwhere.app. Allows event kinds 0, 3, 37515, 37518.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
When role=bridge, the NixOS tor module already configures
ServerTransportPlugin with pkgs.obfs4 and ExtORPort=auto.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
