26 Commits

Author	SHA1	Message	Date
Simon Gardling	2ab1c855ec	Revert "muffin: test, move to 7.0" ... This reverts commit f67ec5bde6.	2026-04-25 10:50:00 -04:00
Simon Gardling	f67ec5bde6	muffin: test, move to 7.0	2026-04-25 02:12:21 -04:00
Simon Gardling	86cf624027	Revert "muffin: test, move to 6.18" ... This reverts commit 1df3a303f5.	2026-04-24 14:21:40 -04:00
Simon Gardling	1df3a303f5	muffin: test, move to 6.18	2026-04-24 14:08:26 -04:00
Simon Gardling	07a5276e40	patiodeck: fix disko partition order (fixed-size before 100%)	2026-04-24 01:47:25 -04:00
Simon Gardling	f3d21f16fb	desktop-jovian: unify steam/jovian config across yarn + patiodeck ... - modules/desktop-jovian.nix: shared Jovian deck-mode config (unfree predicate, jovian.steam, sddm, gamescope override, imports desktop-steam-update.nix) - home/progs/steam-shortcuts.nix: declarative non-Steam shortcuts (Prism Launcher); add new entries here for all Jovian hosts - hosts/yarn/default.nix: reduced to host-specific config only - hosts/patiodeck/default.nix: same	2026-04-23 22:42:25 -04:00
Simon Gardling	5b2a1a652a	patiodeck: add prism launcher to steam shortcuts	2026-04-23 22:34:58 -04:00
Simon Gardling	665793668d	patiodeck: add steam deck LCD host	2026-04-23 22:34:47 -04:00
Simon Gardling	5ccd84c77e	yarn: fix steamos-update exit code — 7 means no update, not 0 ... Steam interprets exit 0 from 'steamos-update check' as 'update applied successfully' and shows a persistent 'update available' notification. The SteamOS convention is exit 7 = no update available.	2026-04-23 20:47:33 -04:00
Simon Gardling	b41a547589	yarn: persist root fish history	2026-04-23 20:17:02 -04:00
Simon Gardling	e019f2d4fb	secrets overhaul: use tpm for laptop (need to migrate desktop later)	2026-04-23 14:22:37 -04:00
Simon Gardling	22282691e7	grafana: add minecraft server stats	2026-04-23 01:17:10 -04:00
Simon Gardling	0901f5edf0	deploy: potentially fix self-deploy issue?	2026-04-22 23:02:38 -04:00
Simon Gardling	d00ff42e8e	site-config: dedupe cross-host values, fix stale dark-reader urls, drop desktop 1g hugepages ... new site-config.nix holds values previously duplicated across hosts: domain, old_domain, contact_email, timezone, binary_cache (url + pubkey), dns_servers, lan (cidr + gateway), hosts.{muffin,yarn} (ip/alias/ssh_host_key), ssh_keys.{laptop,desktop,ci_deploy}. threaded through specialArgs on all three hosts + home-manager extraSpecialArgs + homeConfigurations.primary + serverLib. service-configs.nix now takes { site_config } as a function arg and drops its https namespace; per-service domains (gitea/matrix/ntfy/mollysocket/livekit/firefox-sync/grafana) are derived from site_config.domain. ~15 service files and 6 vm tests migrated. breakage fixes rolled in: - home/progs/zen/dark-reader.nix: 5 stale *.gardling.com entries in disabledFor rewritten to *.sigkill.computer (caddy 301s the old names so these never fired and the new sigkill urls were getting dark-reader applied) - modules/desktop-common.nix: drop unused hugepagesz=1G/hugepages=3 kernelParams (no consumer on mreow or yarn; xmrig on muffin still reserves its own via services/monero/xmrig.nix) verification: muffin toplevel is bit-identical to pre-refactor baseline. mreow/yarn toplevels differ only in boot.json kernelParams + darkreader storage.js (nix-diff verified). deployGuardTest and fail2banVaultwardenTest (latter exercises site_config.domain via bitwarden.nix) pass.	2026-04-22 20:48:29 -04:00
Simon Gardling	8cdb9c4381	yarn: improve pull-update-apply script	2026-04-22 20:11:22 -04:00
Simon Gardling	3902ad5de3	yarn: fix jovian-stubs	2026-04-22 19:54:00 -04:00
Simon Gardling	0538907674	yarn: simplify stubs	2026-04-22 19:44:53 -04:00
Simon Gardling	90ce41cd9e	gitea: move gitea-runner user declaration to actions-runner.nix	2026-04-22 19:24:18 -04:00
Simon Gardling	1be21b6c52	split off terminal utilities	2026-04-22 18:45:00 -04:00
Simon Gardling	c3cc94a305	merge common-*.nix files	2026-04-22 18:02:05 -04:00
Simon Gardling	0c8b8232c2	yarn: disable steamos-mandatory-update	2026-04-22 11:46:37 -04:00
Simon Gardling	aef99e7365	deploy-guard: block activation while users are online ... - modules/server-deploy-guard.nix: extendable aggregator registered via services.deployGuard.checks.<name>.{description,command}. Installs deploy-guard-check with per-check timeout, pass/block reporting, JSON output, DEPLOY_GUARD_BYPASS / /run/deploy-guard-bypass (single-shot). - services/jellyfin/jellyfin-deploy-guard.nix: curl+jq on /Sessions, blocks when any session carries NowPlayingItem; soft-fails when unreachable. - services/minecraft-deploy-guard.nix: mcstatus SLP query on 25565, blocks when players.online > 0; soft-fails when unreachable. - flake.nix: wrap deploy.nodes.muffin activation with activate.custom so deploy-guard-check runs before switch-to-configuration. Auto-rollback catches the failure. dryActivate/boot branches preserved. - deploy.sh: SSH preflight for ./deploy.sh muffin with --force / DEPLOY_GUARD_FORCE=1 (touches remote bypass marker). Connectivity failure is soft; activation still enforces. - tests/deploy-guard.nix: aggregator contract, bypass mechanics, timeout, JSON output.	2026-04-22 00:36:21 -04:00
Simon Gardling	adbb019977	gitea: move runner and main module to services/gitea	2026-04-20 15:18:37 -04:00
primary	56bcaf0580	nix fmt: wrap long expression in yarn home	2026-04-18 01:05:29 -04:00
primary	1719d54ee0	phase 3: new flake.nix + extract common-{nix,doas,shell-fish}; rewire imports ... - New unified flake with two nixpkgs channels (unstable for desktops, 25.11 for muffin) - modules/common-{doas,shell-fish,nix}.nix extracted from duplicated blocks - modules/desktop-common.nix: renamed from system/common.nix; secret paths point to secrets/desktop/ - hosts/{mreow,yarn}/default.nix import desktop-common; yarn imports modules/no-rgb.nix - hosts/muffin/default.nix imports common-* + server-prefixed modules + services/; duplicate doas/fish/nix blocks removed; gc retention preserved as mkForce override - modules/age-secrets.nix: file paths → ../secrets/server/*.age - services/{minecraft,matrix/livekit}: secret paths → ../secrets/server/ - home/profiles/*.nix: ./progs/ → ../progs/ - hosts/{mreow,yarn}/home.nix: imports rewired to ../../home/profiles/ and ../../home/progs/ - home/progs/pi.nix and hosts/yarn/home.nix: secret reads → ../../secrets/home/ - tests/*.nix: ../modules/security.nix → ../modules/server-security.nix; ../modules/overlays.nix → ../lib/overlays.nix - lib/default.nix: takes explicit lib param (defaults to nixpkgs-stable.lib)	2026-04-18 00:58:55 -04:00
primary	99e98e39b7	phase 2: move host files to hosts/{mreow,yarn,muffin}/	2026-04-18 00:47:25 -04:00