randogoth
69ba6bafab
Update flake.lock with jirorian input
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-08 10:15:41 +03:00
randogoth
e8dcc49320
Add jirorian Nostr image upload service
...
Adds the jirorian NixOS module (systemd service, sops secrets, Caddy
fragment), wires it into the flake as a Codeberg input, fixes the Caddy
glob import path, and encrypts all five R2/Nostr secrets into bucur.yaml.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-08 10:09:30 +03:00
randogoth
3ae266293f
Add zonetoast.com Pelican site
...
Wire up flake input, Pelican build, deploy service, webhook trigger, and
Caddy virtual host for zonetoast.com.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-17 12:22:54 +03:00
randogoth
09ee1932a2
Trigger deploy service after nixos-rebuild in update scripts
...
nixos-rebuild switch does not re-run oneshot services automatically.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-14 13:55:21 +03:00
randogoth
bb41c4f82a
Fix nix not found in systemd PATH for update services
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-14 13:46:28 +03:00
randogoth
bb419a13af
Add webhook-triggered rebuilds for Pelican sites
...
Adds a webhook-deploy service that listens for Codeberg push events and
triggers per-site nixos-rebuild runs. Skips rebuilds if the flake lock
revision is unchanged. Fixes root SSH client config so nix flake update
can reach Codeberg using the existing deploy key.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-14 13:36:10 +03:00
randogoth
cd4d53386c
Add nostr-rs-relay service
...
Runs the relay on localhost:8880, proxied publicly via Caddy at
wss://relay.otherwhere.app. Allows event kinds 0, 3, 37515, 37518.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-05 16:37:48 +03:00
randogoth
590cc1b216
Add ORPort 4431 required for bridge relay; open port in firewall
...
Tor requires ORPort to be set when BridgeRelay=1.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-27 17:13:01 +03:00
randogoth
49e54f3fa9
Remove ServerTransportPlugin override; use module defaults for bridge
...
When role=bridge, the NixOS tor module already configures
ServerTransportPlugin with pkgs.obfs4 and ExtORPort=auto.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-27 16:57:43 +03:00
randogoth
8f514d8d0e
Remove redundant ExtORPort setting from tor-bridge module
...
The NixOS tor module already sets ExtORPort=auto when role=bridge.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-27 16:55:34 +03:00
randogoth
99d9afbc36
tor bridge
2026-03-27 16:52:51 +03:00
randogoth
b860f7c33a
fresh deploy
2026-03-27 16:47:27 +03:00
randogoth
1f536d2d76
Install git system-wide on bucur
2026-02-07 21:54:11 +02:00
randogoth
3cf7d09367
Update sublunar input
2026-02-07 21:46:50 +02:00
randogoth
a261baff99
Don't fail pelican builds when no drafts
2026-02-07 21:38:51 +02:00
randogoth
6a9ba0dd94
Fix nfc-web geohash_tools plugin dependency
2026-02-07 21:28:00 +02:00
randogoth
b3416915fd
Use pelicanconf when present
2026-02-07 21:06:59 +02:00
randogoth
f5277d268c
Update sublunar input to latest
2026-02-07 21:03:09 +02:00
randogoth
ad0377ab84
Build pelican sites without publishconf
2026-02-07 20:58:27 +02:00
randogoth
7b6329be07
Enable nix-command and flakes on bucur
2026-02-07 20:55:52 +02:00
randogoth
08d393e195
Use pelican config when building sites
2026-02-07 20:41:08 +02:00
randogoth
f526cb5595
Fix mtproto proxy port mapping to 8443:443
2026-02-07 20:19:41 +02:00
randogoth
42bdb61280
Align mtproto proxy port with external 8443
2026-02-07 20:16:45 +02:00
randogoth
e84c86a29c
Remove missing bootstrap woff2 fetch
2026-02-07 20:12:12 +02:00
randogoth
aa01963b2c
Restore scopesessions bower_components assets on deploy
2026-02-07 20:10:45 +02:00
randogoth
f28a000e08
Fix awk path in tailscale offload tune
2026-02-07 20:05:35 +02:00
randogoth
26d87f95e2
Harden tailscale offload tune service
2026-02-07 20:04:30 +02:00
randogoth
036b5d85b8
Tune NIC offloads for Tailscale exit node
2026-02-07 20:03:10 +02:00
randogoth
8ca0aa2901
Enable Tailscale SSH and exit node
2026-02-07 20:00:04 +02:00
randogoth
f85fc7a0be
Replace firewalld with simple NixOS firewall rules
2026-02-07 19:48:12 +02:00
randogoth
0c64358f3e
Set static IPv4 for ens3
2026-02-07 19:26:55 +02:00
randogoth
55c06485b8
Use SSH for Codeberg flake inputs
2026-02-07 18:59:02 +02:00
randogoth
ca98ee54f8
Include bucur hardware profile in flake
2026-02-07 18:56:56 +02:00
randogoth
421822cc34
Add bucur hardware config
2026-02-07 16:49:25 +00:00
randogoth
b419320bfc
Use GRUB BIOS boot + move sops age key out of repo
2026-02-07 18:46:06 +02:00
randogoth
1862821f8f
Initial clean commit
2026-02-05 17:57:02 +02:00
