Feature/building portal vm on vultr #59

Merged

Richie merged 16 commits from feature/building-portal-VM-on-vultr into main 2026-08-26 12:45:07 -04:00

Conversation 0 Commits 16 Files Changed 34

+514 -190

Richie commented 2026-08-25 22:20:13 -04:00

Owner

Copy Link

Copy Source

No description provided.

Richie added 13 commits 2026-08-26 07:40:01 -04:00

feat(flake): add disko to flake.nix for nixos-anywhere f24a14920e

feat(global): refactor configuration by moving settings to minimal.nix a23c91c4ac

feat(tailscale): add Tailscale service configuration and update secrets 03537310cb

refactor(nixos): make ZFS configuration optional ... b8b0605279

- move ZFS and snapshot manager settings out of the global base
- group snapshot files under common/optional/zfs
- enable the ZFS module on existing ZFS hosts
- make the global tmpfs setting overridable

feat(portal): add Vultr NixOS host configuration ... 6fa93e1b96

- use the shared global base and Tailscale module
- configure Portal SSH and VM memory settings
- add Richie's minimal Home Manager profile
- document SOPS and nixos-anywhere deployment

feat(home): expand Richie’s minimal profile for Portal ... 5bc9ee5de9

- move essential CLI tools into the minimal package set
- remove duplicated packages from the full programs profile
- add the portal-1 SSH host on port 278

renamed portal_1 to portal-1 1c4e0c0828

feat(tailscale): enable mesh networking across NixOS hosts ... 8245d0f82e

- enable Tailscale on Bob, Brain, Jeeves, and Rhapsody
- configure the Jeeves binary cache through Tailscale MagicDNS
- trust the existing workshop cache signing key

feat(portal): move edge proxy services from Jeeves ... 7f08a6f788

- move HAProxy and ACME certificate management to Portal
- route application backends to Jeeves over Tailscale
- restrict Jeeves backend ports to the Tailscale interface
- expose Gems for remote proxy access

fix 2 imports cb83fc6ea5

feat(services): remove haproxy from validate_system.toml df8908b708

fix(acme) used the correct ip for acme 219aea9b5f

fix(audiobookshelf): updated host 515cbae3f8

Richie force-pushed feature/building-portal-VM-on-vultr from e4378e42a7 to 515cbae3f8 2026-08-26 07:40:01 -04:00 Compare

Richie added 1 commit 2026-08-26 08:28:58 -04:00

refactor(haproxy): consolidate ACME configuration ... e0c14973b0

Merge the ACME module into the HAProxy configuration and start HAProxy only after certificates and Tailscale connectivity are available.

Richie added 1 commit 2026-08-26 08:57:48 -04:00

fix(networking): restore Gitea HTTP port in allowedTCPPorts b406b92622

Richie added 1 commit 2026-08-26 10:43:31 -04:00

feat(portal): proxy Gitea SSH through HAProxy ... f5a0038ab7

- expose Gitea SSH through Portal on port 2223
- advertise the correct Gitea SSH user and domain
- add the Gitea host to Richie’s SSH config
- correct the local ACME challenge backend port

Richie merged commit f5a0038ab7 into main 2026-08-26 12:45:07 -04:00

Richie deleted branch feature/building-portal-VM-on-vultr 2026-08-26 12:45:07 -04:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

automated

bug

Something is not working

dependencies

duplicate

This issue or pull request already exists

enhancement

New feature

flake_lock_update

help wanted

Need some help

invalid

Something is wrong

question

More information is needed

wontfix

This won't be fixed

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

jeeves-bot Richie

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: Richie/dotfiles#59