randogoth/bucur
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
63 commits 1 branch 0 tags 115 KiB
Commit graph

63 commits

This branch
This branch
All branches
Author SHA1 Message Date
randogoth
9fe68211f6 git user fix 2026-07-23 12:53:09 +02:00
randogoth
4e48084aae git ssh user 2026-07-23 12:50:27 +02:00
randogoth
8135490639 added ssh to forgejo 2026-07-23 12:42:12 +02:00
randogoth
71f9f585de added forgejo to backup 2026-07-23 12:26:49 +02:00
randogoth
37f98eee1b added forgejo to code.randogoth.com 2026-07-23 11:39:18 +02:00
randogoth
0818303bc6 oberon: read entitlements from Adapty (ADAPTY_SECRET_KEY secret) 2026-07-11 13:29:40 +03:00
randogoth
5ec03967ab enabled pdf faxing 2026-07-11 11:35:48 +03:00
randogoth
44380f92c3 added oberon db to borg backup 2026-07-04 21:05:41 +03:00
randogoth
67b9e3d08e bump oberon to binding-shape fix 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-07-04 19:07:43 +03:00
randogoth
5c1a24de0c set oberon Sinch fax service id 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-07-04 18:38:09 +03:00
randogoth
608c6aceb0 lock oberon flake input (ref=main) 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-07-04 18:29:48 +03:00
randogoth
1d1bd9731a added oberon/sinch secrets 2026-07-04 17:55:07 +03:00
randogoth
144d4faea5 added oberon nostr keypairs 2026-07-04 17:47:44 +03:00
randogoth
2c35fc5be7 added xfay.app 2026-07-04 17:41:23 +03:00
randogoth
347f102b39 added oberon 2026-07-04 17:39:55 +03:00
randogoth
4662c7d02a Allow reporting, labeling, and follow list event kinds on relay; set relay pubkey 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-27 19:53:23 +03:00
randogoth
fe9fde3db3 Allow kind 1059 2026-06-25 17:50:56 +03:00
randogoth
81a9675234 Allow kind 5392 (jirorian registration) on relay 
The jirorian upload service subscribes to kind 5392 events for its
NIP-44-gated whitelist registration flow; the relay must accept them.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-23 15:45:12 +03:00
randogoth
8d78148815 Allow reaction, picture, and comment event kinds on relay 
Add kinds 7 (reactions), 20 (picture events), and 1111 (comments)
to the nostr-rs-relay event_kind_allowlist.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-23 15:40:04 +03:00
randogoth
7972fad90b backup: add tor identity and tailscale state; fix dump dir 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-08 17:05:24 +03:00
randogoth
75bbdb3dab folder fix 2026-06-08 17:02:24 +03:00
randogoth
f1cdf2f243 backup databases to borgbase 2026-06-08 16:51:53 +03:00
randogoth
e094720c68 Add private BitTorrent tracker for Jirorian-whitelisted users 
Pure Python HTTP tracker with NIP-98 passkey retrieval, HMAC passkeys,
and info_hash validation against NIP-35 kind:2003 relay events.
Relay allowlist extended with kinds 5, 2003, 2004.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-08 16:01:07 +03:00
randogoth
c71f02a7c7 Fix nip05: correct nostr-rs-relay DB schema 
author column (BLOB) and content holds full event JSON, not profile JSON.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-08 15:22:01 +03:00
randogoth
d4b9b209c7 Add NIP-05 identifier server for otherwhere.app 
Dynamic lookup from nostr-rs-relay SQLite DB; runs as nostr-rs-relay user.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-08 15:13:13 +03:00
randogoth
288ce840ad Fix jirorian service startup: use ExecStart wrapper for secrets 
systemd loads EnvironmentFile before ExecStartPre runs, so the env file
could never exist in time. Replace with a single ExecStart wrapper script
that reads sops secrets directly and execs jirorian.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-08 10:25:45 +03:00
randogoth
3a88992c96 Update jirorian flake input (fix tlv8 build) 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-08 10:21:33 +03:00
randogoth
69ba6bafab Update flake.lock with jirorian input 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-08 10:15:41 +03:00
randogoth
e8dcc49320 Add jirorian Nostr image upload service 
Adds the jirorian NixOS module (systemd service, sops secrets, Caddy
fragment), wires it into the flake as a Codeberg input, fixes the Caddy
glob import path, and encrypts all five R2/Nostr secrets into bucur.yaml.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-08 10:09:30 +03:00
randogoth
3ae266293f Add zonetoast.com Pelican site 
Wire up flake input, Pelican build, deploy service, webhook trigger, and
Caddy virtual host for zonetoast.com.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-17 12:22:54 +03:00
randogoth
09ee1932a2 Trigger deploy service after nixos-rebuild in update scripts 
nixos-rebuild switch does not re-run oneshot services automatically.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-14 13:55:21 +03:00
randogoth
bb41c4f82a Fix nix not found in systemd PATH for update services 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-14 13:46:28 +03:00
randogoth
bb419a13af Add webhook-triggered rebuilds for Pelican sites 
Adds a webhook-deploy service that listens for Codeberg push events and
triggers per-site nixos-rebuild runs. Skips rebuilds if the flake lock
revision is unchanged. Fixes root SSH client config so nix flake update
can reach Codeberg using the existing deploy key.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-14 13:36:10 +03:00
randogoth
cd4d53386c Add nostr-rs-relay service 
Runs the relay on localhost:8880, proxied publicly via Caddy at
wss://relay.otherwhere.app. Allows event kinds 0, 3, 37515, 37518.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-05 16:37:48 +03:00
randogoth
590cc1b216 Add ORPort 4431 required for bridge relay; open port in firewall 
Tor requires ORPort to be set when BridgeRelay=1.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-27 17:13:01 +03:00
randogoth
49e54f3fa9 Remove ServerTransportPlugin override; use module defaults for bridge 
When role=bridge, the NixOS tor module already configures
ServerTransportPlugin with pkgs.obfs4 and ExtORPort=auto.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-27 16:57:43 +03:00
randogoth
8f514d8d0e Remove redundant ExtORPort setting from tor-bridge module 
The NixOS tor module already sets ExtORPort=auto when role=bridge.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-27 16:55:34 +03:00
randogoth
99d9afbc36 tor bridge 2026-03-27 16:52:51 +03:00
randogoth
b860f7c33a fresh deploy 2026-03-27 16:47:27 +03:00
randogoth
1f536d2d76 Install git system-wide on bucur 2026-02-07 21:54:11 +02:00
randogoth
3cf7d09367 Update sublunar input 2026-02-07 21:46:50 +02:00
randogoth
a261baff99 Don't fail pelican builds when no drafts 2026-02-07 21:38:51 +02:00
randogoth
6a9ba0dd94 Fix nfc-web geohash_tools plugin dependency 2026-02-07 21:28:00 +02:00
randogoth
b3416915fd Use pelicanconf when present 2026-02-07 21:06:59 +02:00
randogoth
f5277d268c Update sublunar input to latest 2026-02-07 21:03:09 +02:00
randogoth
ad0377ab84 Build pelican sites without publishconf 2026-02-07 20:58:27 +02:00
randogoth
7b6329be07 Enable nix-command and flakes on bucur 2026-02-07 20:55:52 +02:00
randogoth
08d393e195 Use pelican config when building sites 2026-02-07 20:41:08 +02:00
randogoth
f526cb5595 Fix mtproto proxy port mapping to 8443:443 2026-02-07 20:19:41 +02:00
randogoth
42bdb61280 Align mtproto proxy port with external 8443 2026-02-07 20:16:45 +02:00