randogoth/bucur
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
42 commits 1 branch 0 tags 115 KiB
Commit graph

42 commits

This branch
This branch
All branches
Author SHA1 Message Date
randogoth
f1cdf2f243 backup databases to borgbase 2026-06-08 16:51:53 +03:00
randogoth
e094720c68 Add private BitTorrent tracker for Jirorian-whitelisted users 
Pure Python HTTP tracker with NIP-98 passkey retrieval, HMAC passkeys,
and info_hash validation against NIP-35 kind:2003 relay events.
Relay allowlist extended with kinds 5, 2003, 2004.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-08 16:01:07 +03:00
randogoth
c71f02a7c7 Fix nip05: correct nostr-rs-relay DB schema 
author column (BLOB) and content holds full event JSON, not profile JSON.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-08 15:22:01 +03:00
randogoth
d4b9b209c7 Add NIP-05 identifier server for otherwhere.app 
Dynamic lookup from nostr-rs-relay SQLite DB; runs as nostr-rs-relay user.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-08 15:13:13 +03:00
randogoth
288ce840ad Fix jirorian service startup: use ExecStart wrapper for secrets 
systemd loads EnvironmentFile before ExecStartPre runs, so the env file
could never exist in time. Replace with a single ExecStart wrapper script
that reads sops secrets directly and execs jirorian.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-08 10:25:45 +03:00
randogoth
3a88992c96 Update jirorian flake input (fix tlv8 build) 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-08 10:21:33 +03:00
randogoth
69ba6bafab Update flake.lock with jirorian input 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-08 10:15:41 +03:00
randogoth
e8dcc49320 Add jirorian Nostr image upload service 
Adds the jirorian NixOS module (systemd service, sops secrets, Caddy
fragment), wires it into the flake as a Codeberg input, fixes the Caddy
glob import path, and encrypts all five R2/Nostr secrets into bucur.yaml.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-08 10:09:30 +03:00
randogoth
3ae266293f Add zonetoast.com Pelican site 
Wire up flake input, Pelican build, deploy service, webhook trigger, and
Caddy virtual host for zonetoast.com.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-17 12:22:54 +03:00
randogoth
09ee1932a2 Trigger deploy service after nixos-rebuild in update scripts 
nixos-rebuild switch does not re-run oneshot services automatically.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-14 13:55:21 +03:00
randogoth
bb41c4f82a Fix nix not found in systemd PATH for update services 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-14 13:46:28 +03:00
randogoth
bb419a13af Add webhook-triggered rebuilds for Pelican sites 
Adds a webhook-deploy service that listens for Codeberg push events and
triggers per-site nixos-rebuild runs. Skips rebuilds if the flake lock
revision is unchanged. Fixes root SSH client config so nix flake update
can reach Codeberg using the existing deploy key.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-14 13:36:10 +03:00
randogoth
cd4d53386c Add nostr-rs-relay service 
Runs the relay on localhost:8880, proxied publicly via Caddy at
wss://relay.otherwhere.app. Allows event kinds 0, 3, 37515, 37518.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-05 16:37:48 +03:00
randogoth
590cc1b216 Add ORPort 4431 required for bridge relay; open port in firewall 
Tor requires ORPort to be set when BridgeRelay=1.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-27 17:13:01 +03:00
randogoth
49e54f3fa9 Remove ServerTransportPlugin override; use module defaults for bridge 
When role=bridge, the NixOS tor module already configures
ServerTransportPlugin with pkgs.obfs4 and ExtORPort=auto.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-27 16:57:43 +03:00
randogoth
8f514d8d0e Remove redundant ExtORPort setting from tor-bridge module 
The NixOS tor module already sets ExtORPort=auto when role=bridge.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-27 16:55:34 +03:00
randogoth
99d9afbc36 tor bridge 2026-03-27 16:52:51 +03:00
randogoth
b860f7c33a fresh deploy 2026-03-27 16:47:27 +03:00
randogoth
1f536d2d76 Install git system-wide on bucur 2026-02-07 21:54:11 +02:00
randogoth
3cf7d09367 Update sublunar input 2026-02-07 21:46:50 +02:00
randogoth
a261baff99 Don't fail pelican builds when no drafts 2026-02-07 21:38:51 +02:00
randogoth
6a9ba0dd94 Fix nfc-web geohash_tools plugin dependency 2026-02-07 21:28:00 +02:00
randogoth
b3416915fd Use pelicanconf when present 2026-02-07 21:06:59 +02:00
randogoth
f5277d268c Update sublunar input to latest 2026-02-07 21:03:09 +02:00
randogoth
ad0377ab84 Build pelican sites without publishconf 2026-02-07 20:58:27 +02:00
randogoth
7b6329be07 Enable nix-command and flakes on bucur 2026-02-07 20:55:52 +02:00
randogoth
08d393e195 Use pelican config when building sites 2026-02-07 20:41:08 +02:00
randogoth
f526cb5595 Fix mtproto proxy port mapping to 8443:443 2026-02-07 20:19:41 +02:00
randogoth
42bdb61280 Align mtproto proxy port with external 8443 2026-02-07 20:16:45 +02:00
randogoth
e84c86a29c Remove missing bootstrap woff2 fetch 2026-02-07 20:12:12 +02:00
randogoth
aa01963b2c Restore scopesessions bower_components assets on deploy 2026-02-07 20:10:45 +02:00
randogoth
f28a000e08 Fix awk path in tailscale offload tune 2026-02-07 20:05:35 +02:00
randogoth
26d87f95e2 Harden tailscale offload tune service 2026-02-07 20:04:30 +02:00
randogoth
036b5d85b8 Tune NIC offloads for Tailscale exit node 2026-02-07 20:03:10 +02:00
randogoth
8ca0aa2901 Enable Tailscale SSH and exit node 2026-02-07 20:00:04 +02:00
randogoth
f85fc7a0be Replace firewalld with simple NixOS firewall rules 2026-02-07 19:48:12 +02:00
randogoth
0c64358f3e Set static IPv4 for ens3 2026-02-07 19:26:55 +02:00
randogoth
55c06485b8 Use SSH for Codeberg flake inputs 2026-02-07 18:59:02 +02:00
randogoth
ca98ee54f8 Include bucur hardware profile in flake 2026-02-07 18:56:56 +02:00
randogoth
421822cc34 Add bucur hardware config 2026-02-07 16:49:25 +00:00
randogoth
b419320bfc Use GRUB BIOS boot + move sops age key out of repo 2026-02-07 18:46:06 +02:00
randogoth
1862821f8f Initial clean commit 2026-02-05 17:57:02 +02:00