484 Commits

Include renames

Author	SHA1	Message	Date
Richie	eaa2fc2a70	removed steve	2026-09-12 11:15:37 -04:00
Richie	2fb3a0d3ba	feat(gitea): allow 12-hour runner builds	2026-09-12 09:09:30 -04:00
Richie	4154640637	feat(jeeves): move container state to dedicated ZFS dataset ... - add a performance-tuned media/containers dataset - store Docker and NixOS container state on the dataset - prepare storage directories after ZFS mounts - bind NixOS container state to its required path - configure snapshot retention for container storage	2026-09-11 14:58:41 -04:00
Richie	78641f78dd	updating snapshot config	2026-09-11 12:37:47 -04:00
Richie	0e09b1db34	feat(zfs): mount dedicated Nix build dataset ... Mount root_pool/nix_build at /nix/var/nix/builds on existing hosts and generate the same layout for new installations.	2026-09-11 12:07:24 -04:00
Richie	82a3bdf562	temp v3 suport	2026-09-11 12:00:43 -04:00
Richie	7c7740fe90	remove dov	2026-09-09 11:06:44 -04:00
Richie	a59ccd293d	feat(jeeves): enable x86-64 v2 and v3 system features	2026-09-08 19:59:14 -04:00
Richie	5514047eda	feat(jeeves): share one system closure across builders ... Reuse a single NixOS container build for all runners while preserving unique runtime hostnames and existing Gitea registrations.	2026-09-08 19:37:18 -04:00
Richie	3aa66c48af	removing zerotierone from jeeves	2026-09-08 18:12:20 -04:00
Richie	1d0ced8fd4	removed pirate-weather from home_assistant	2026-09-08 16:38:21 -04:00
Richie	bdf67e96f0	feat(monitoring): add Portal-1 and Vultr dashboards ... - scrape Portal-1 node metrics over Tailscale - add a hardened Vultr billing and bandwidth exporter - provision host health and infrastructure cost dashboards	2026-08-27 17:49:56 -04:00
Richie	d95b8b99ce	feat(jeeves): centralize firewall configuration ... - split networking into interface and firewall modules - define named service ports in one location - remove scattered service-level firewall rules	2026-08-27 16:59:44 -04:00
Richie	7e6908ef3d	feat(networking): migrate host services from ZeroTier to Tailscale ... - replace legacy IP addresses with Tailscale MagicDNS names - route Prometheus scraping and exporter firewall access through Tailscale - wait for Tailscale before starting Prometheus - restrict service UI ports to the Tailscale interface - update PostgreSQL and Transmission access rules - remove Jeeves ZeroTier configuration and Docker host overrides	2026-08-27 12:25:27 -04:00
Richie	dd51e89abf	fix(haproxy): use IPv6 wildcard for dual-stack listeners ... Bind HTTP, HTTPS, and Gitea SSH to [::] with v4v6 support.	2026-08-27 09:08:18 -04:00
Richie	677364fe74	removed zerotier.nix for common and removed zerotier from all systems except jeeves	2026-08-26 13:11:34 -04:00
Richie	f5a0038ab7	feat(portal): proxy Gitea SSH through HAProxy ... - expose Gitea SSH through Portal on port 2223 - advertise the correct Gitea SSH user and domain - add the Gitea host to Richie’s SSH config - correct the local ACME challenge backend port	2026-08-26 10:43:21 -04:00
Richie	b406b92622	fix(networking): restore Gitea HTTP port in allowedTCPPorts	2026-08-26 08:37:22 -04:00
Richie	e0c14973b0	refactor(haproxy): consolidate ACME configuration ... Merge the ACME module into the HAProxy configuration and start HAProxy only after certificates and Tailscale connectivity are available.	2026-08-26 08:28:41 -04:00
Richie	515cbae3f8	fix(audiobookshelf): updated host	2026-08-26 07:39:19 -04:00
Richie	219aea9b5f	fix(acme) used the correct ip for acme	2026-08-26 07:33:31 -04:00
Richie	df8908b708	feat(services): remove haproxy from validate_system.toml	2026-08-26 07:33:31 -04:00
Richie	cb83fc6ea5	fix 2 imports	2026-08-26 07:33:31 -04:00
Richie	7f08a6f788	feat(portal): move edge proxy services from Jeeves ... - move HAProxy and ACME certificate management to Portal - route application backends to Jeeves over Tailscale - restrict Jeeves backend ports to the Tailscale interface - expose Gems for remote proxy access	2026-08-26 07:33:31 -04:00
Richie	8245d0f82e	feat(tailscale): enable mesh networking across NixOS hosts ... - enable Tailscale on Bob, Brain, Jeeves, and Rhapsody - configure the Jeeves binary cache through Tailscale MagicDNS - trust the existing workshop cache signing key	2026-08-26 07:33:31 -04:00
Richie	1c4e0c0828	renamed portal_1 to portal-1	2026-08-26 07:33:31 -04:00
Richie	6fa93e1b96	feat(portal): add Vultr NixOS host configuration ... - use the shared global base and Tailscale module - configure Portal SSH and VM memory settings - add Richie's minimal Home Manager profile - document SOPS and nixos-anywhere deployment	2026-08-26 07:33:31 -04:00
Richie	b8b0605279	refactor(nixos): make ZFS configuration optional ... - move ZFS and snapshot manager settings out of the global base - group snapshot files under common/optional/zfs - enable the ZFS module on existing ZFS hosts - make the global tmpfs setting overridable	2026-08-26 07:33:31 -04:00
Richie	03c3b36f9c	feat(home_assistant): add energy meter sensors filter	2026-08-25 12:11:06 -04:00
Richie	507b23f6ee	feat(van-weather): port weather service to Rust ... Add a Rust implementation with privacy-masked locations, HTTP retries, and Home Assistant sensor publishing. Package it with Nix and switch the systemd service from Python to the compiled binary.	2026-08-18 22:39:52 -04:00
Richie	e5132e2a0b	fix(home_assistant): update monarch package name in extraPackages	2026-08-18 21:25:46 -04:00
Richie	107b4f24d1	fix(home_assistant): update firewall settings and remove redundant http server port	2026-08-18 21:24:18 -04:00
Richie	cb3eb83935	feat(home_assistant): remove Home Assistant configuration and references	2026-08-18 15:40:35 -04:00
Richie	ac884c069b	feat(home_assistant): add garmin_connect to customComponents	2026-08-17 09:45:27 -04:00
Richie	bd50bd8262	removing cuda workaround	2026-08-03 23:06:44 -04:00
Richie	cc166df90f	fix(open_webui): update OLLAMA_API_BASE_URL to use HTTPS	2026-07-27 21:10:48 -04:00
Richie	aff7398f8d	fix: rename 'models' to 'modelsDir' for consistency in llms.nix configurations	2026-07-27 20:15:35 -04:00
Richie	e57895cc6e	patch cuda	2026-07-25 14:21:07 -04:00
Richie	add7a6a848	feat(gems): add multiplayer gem game with custom content packs ... - implement FastAPI and HTMX lobby and game interfaces - support up to four human and AI-controlled players - add configurable rules, victory conditions, and expansion modules - support validated JSON cards, patrons, objectives, and outposts	2026-07-22 20:47:03 -04:00
Richie	247e951a27	Remove legacy HTML templates and API service configuration for contact management system ... - Deleted base template (base.html) and all related contact templates (contact_detail.html, contact_form.html, contact_list.html, graph.html, need_list.html). - Removed partial templates for managing contacts and needs (contact_table.html, manage_needs.html, manage_relationships.html, need_items.html). - Eliminated contact API service configuration (contact_api.nix) from the NixOS setup.	2026-07-15 15:28:15 -04:00
Richie	8c3de690c9	feat(ebook-search): set up uv cache management and pruning service	2026-07-12 17:26:55 -04:00
Richie	4799054601	ci(ebook-search): run tests via uv on the runner instead of docker ... The gitea runner containers have no docker access, so build the test env with uv from the existing lockfile and run pytest directly: - test_ebook_search workflow: uv sync --locked + uv run pytest, with UV_PYTHON_DOWNLOADS=never so uv uses the nix-provided python 3.14 - add uv to the runner hostPackages (needs a jeeves rebuild to apply) - ignore nested **/.venv in .dockerignore (uv sync creates one in python/ebook_search/docker) - document the uv test commands in the docker README; the docker test image remains for validating the image itself	2026-07-12 16:40:56 -04:00
Richie	4a410dbdf8	feat(postgres): add trust authentication for richie on 172.16.0.0/12	2026-07-12 13:06:44 -04:00
Richie	47f77443dd	feat(networking): configure unused network ports to prevent errors and optimize boot time	2026-07-09 10:45:08 -04:00
Richie	ddea13b93a	feat(installer): enhance NixOS installer with SSH access and encryption password input	2026-07-02 14:17:49 -04:00
Richie	b252b0bf6e	feat(installer): add one-file installer build and custom install ISO ... Replace old_installer.py with a curses TUI installer packaged as a one-file PyInstaller binary (python/installer/build.py, wrapped by python/installer/package.nix). The default .#installer is patched to run on foreign Linux live media; the new .#installer-nixos variant keeps its Nix store interpreter so it runs on NixOS. Add systems/iso, a minimal NixOS install CD with kernel 6.18 and ZFS 2.4 matching the deployed systems and the installer on PATH; build it with nix build .#iso. Shared logging and subprocess helpers move out of common.py into python/logging_config.py and python/process.py.	2026-07-02 14:17:49 -04:00
Richie	fbf288649a	feat(haproxy): simplify Gitea rate limiting and fix rule ordering ... - Drop the session-cookie rate-limit bypass: Gitea hands the cookie to anonymous visitors too, so any cookie-accepting crawler could exempt itself after one request - Loosen the general Gitea limit from 10 to 50 req/10s since logged-in users are now rate-limited as well - Serve robots.txt above the rate-limit rules so throttled crawlers can always read the Crawl-delay, and capture Host/User-Agent before the deny so 429s are logged with them - Match the compare/diff cap on every repo case-insensitively instead of only /Richie/dotfiles - Remove the Jellyfin health check; it never ran (server had no check flag) and is not wanted	2026-07-01 16:54:07 -04:00
Richie	c6645eb37c	feat(home-assistant): remove status indicator configuration and related YAML file	2026-07-01 00:21:05 -04:00
Richie	3984081753	feat(cleanup): remove leviathan and elise configurations and references	2026-06-29 16:24:21 -04:00
Richie	8804a8df83	added rate limits	2026-06-27 23:01:03 -04:00