nix-config

starred/nix-config

0 Fork 0

mirror of https://github.com/ryan4yin/nix-config.git synced 2026-11-13 12:13:46 +01:00

Commit Graph

Select branches

Hide Pull Requests

i3-kickstarter

main

#1

#100

#101

#102

#103

#104

#105

#106

#107

#108

#109

#110

#112

#113

#114

#117

#118

#120

#121

#123

#124

#126

#127

#128

#129

#13

#130

#132

#133

#134

#135

#136

#137

#139

#14

#140

#141

#143

#144

#145

#146

#147

#149

#15

#150

#151

#152

#154

#155

#156

#158

#159

#16

#160

#161

#162

#163

#164

#166

#167

#168

#169

#171

#172

#174

#178

#179

#180

#181

#182

#186

#187

#188

#189

#191

#192

#193

#194

#195

#196

#197

#198

#199

#2

#20

#200

#201

#203

#205

#206

#207

#208

#209

#210

#211

#212

#213

#214

#215

#216

#217

#218

#219

#22

#220

#221

#222

#223

#224

#225

#226

#228

#230

#232

#233

#235

#236

#237

#238

#239

#240

#241

#242

#243

#245

#246

#247

#249

#250

#251

#252

#253

#255

#256

#257

#258

#259

#260

#261

#262

#263

#265

#266

#267

#268

#269

#27

#270

#271

#272

#273

#274

#277

#278

#279

#280

#281

#282

#283

#284

#285

#286

#287

#288

#289

#290

#291

#292

#293

#294

#295

#296

#297

#298

#299

#30

#300

#301

#302

#303

#304

#305

#306

#307

#308

#309

#31

#310

#311

#312

#313

#314

#315

#316

#317

#318

#319

#32

#320

#321

#322

#323

#324

#325

#326

#327

#328

#329

#33

#330

#331

#332

#333

#334

#335

#336

#337

#338

#339

#34

#340

#341

#342

#343

#344

#345

#346

#347

#348

#349

#350

#351

#352

#353

#354

#355

#356

#357

#358

#359

#36

#360

#361

#362

#363

#364

#365

#366

#367

#368

#370

#371

#372

#373

#374

#375

#376

#377

#378

#379

#380

#381

#382

#383

#384

#385

#386

#387

#388

#389

#390

#391

#392

#393

#394

#395

#396

#397

#398

#399

#40

#400

#401

#402

#403

#404

#405

#406

#407

#408

#409

#41

#410

#411

#412

#413

#414

#415

#416

#417

#418

#419

#42

#420

#421

#422

#423

#424

#425

#426

#427

#428

#429

#430

#431

#432

#433

#434

#435

#436

#437

#438

#439

#440

#441

#442

#443

#444

#445

#446

#45

#452

#453

#454

#455

#456

#457

#458

#459

#46

#460

#461

#463

#464

#465

#466

#467

#468

#469

#470

#471

#472

#473

#474

#475

#476

#477

#478

#479

#48

#480

#481

#482

#483

#484

#485

#486

#487

#488

#489

#49

#490

#491

#492

#493

#494

#495

#496

#497

#498

#499

#50

#500

#501

#502

#503

#504

#505

#506

#507

#508

#509

#510

#511

#512

#513

#514

#515

#516

#517

#518

#519

#52

#520

#521

#522

#523

#524

#525

#526

#527

#53

#56

#57

#58

#59

#60

#62

#63

#64

#65

#66

#67

#68

#71

#72

#73

#74

#75

#76

#77

#78

#79

#80

#81

#82

#84

#85

#86

#87

#88

#89

#90

#91

#92

#93

#94

#95

#96

#98

#99

v0.0.1

v0.0.2

v0.0.3

v0.0.4

v0.0.5

v0.1.0

v0.1.1

v0.10.0

v0.11.0

v0.12.0

v0.13.0

v0.14.0

v0.15.0

v0.16.0

v0.16.1

v0.17.0

v0.18.0

v0.19.0

v0.2.0

v0.2.1

v0.2.2

v0.20.0

v0.3.0

v0.4.0

v0.4.1

v0.4.2

v0.4.3

v0.4.4

v0.4.5

v0.5.0

v0.5.1

v0.5.2

v0.5.3

v0.5.4

v0.5.5

v0.6.0

v0.7.0

v0.8.0

v0.9.0

a6553b25a5 chore: drop archived terraformer and unused netbird Ryan Yin 2026-10-01 20:10:03 +08:00
ab2fd0fee9 feat: add plocate filesystem search and cap podman log size (#333) ryan4yin | 二花 2026-10-01 20:00:53 +08:00
8f9fdda2bb refactor: trim unused virtualisation config and packages (#332) ryan4yin | 二花 2026-10-01 19:42:20 +08:00
1546e54bb2 chore(noctalia): move OSD and notifications to the bottom-right Ryan Yin 2026-10-01 14:09:16 +08:00
872901007e docs(agents): use terraform plan, drop nonexistent helm diff Ryan Yin 2026-10-01 11:33:14 +08:00
ea73c716e8 flake.lock: Update Ryan Yin 2026-10-01 10:53:08 +08:00
9885283edf docs(agents): clarify local language selection and prefer Bun Ryan Yin 2026-10-01 10:23:35 +08:00
01ed0aa52f chore(agents): upgrade to opencode v2 Ryan Yin 2026-10-01 09:39:05 +08:00
7f6759219b docs(agents): align evals with external instruction boundaries Ryan Yin 2026-09-30 21:17:19 +08:00
91cc9c0cf4 docs(agents): fix authorization and skill trust wording Ryan Yin 2026-09-30 21:09:34 +08:00
111929023d docs(agents): clarify tool selection and authorization boundaries (#331) ryan4yin | 二花 2026-09-30 20:51:42 +08:00
bae98ed1c8 docs(agents): allow TypeScript for complex shell commands Ryan Yin 2026-09-30 18:06:46 +08:00
e10f0d6794 flake.lock: Update Ryan Yin 2026-09-30 16:12:45 +08:00
9ab5eca60c feat(monitoring): GPU-aware btop variants and GPU metrics (#330) ryan4yin | 二花 2026-09-30 00:16:50 +08:00
523f4940a7 Merge pull request #329 from ryan4yin/youko-shushou-ssd-swap ryan4yin | 二花 2026-09-29 22:02:11 +08:00
c7d8db2bf3 fix(k8s): rebalance k3s-test-1 VMs after the youko/shushou swap Ryan Yin 2026-09-29 21:46:09 +08:00
2e5f539a47 fix(hosts): move UPS/nut metrics to youko after the swap Ryan Yin 2026-09-29 21:36:47 +08:00
2be0337979 docs(hosts): record the youko/shushou swap and its rationale Ryan Yin 2026-09-29 21:36:47 +08:00
8ef52e2cf7 fix(youko): add ROCm OpenCL so Jellyfin can tone-map HDR (#328) ryan4yin | 二花 2026-09-29 19:52:27 +08:00
2401727315 flake.lock: Update Ryan Yin 2026-09-28 16:19:41 +08:00
098ed110d7 chore(darwin): drop redundant broken-packages overlay Ryan Yin 2026-09-28 10:55:22 +08:00
e8f8099011 chore(overlays): drop redundant openldap test override Ryan Yin 2026-09-28 10:55:20 +08:00
470006ed3a chore(rustfs): drop nixpkgs-small input, use nixpkgs rustfs 1.0.0 Ryan Yin 2026-09-28 10:42:51 +08:00
5b4127bcec flake.lock: Update Ryan Yin 2026-09-28 10:41:47 +08:00
b38d8b802e docs(agents): make apply a distinct step in impactful changes Ryan Yin 2026-09-28 10:18:52 +08:00
853747425f chore(idols-ai): drop the davfs WebDAV fileshare mount Ryan Yin 2026-09-26 23:36:37 +08:00
c1b590b31b chore(codex): use upstream 0.157.1 and drop the temporary patch (#327) ryan4yin | 二花 2026-09-26 23:24:39 +08:00
695d58de8b docs(agents): mention quoted heredoc for multi-line code Ryan Yin 2026-09-26 22:52:03 +08:00
1256570a84 feat(youko): firewall and tune transmission, stop homepage RPC probes (#326) ryan4yin | 二花 2026-09-26 22:40:02 +08:00
e5b95affa6 feat(nixos): default-deny host inbound, trust the LAN/tailnet (#325) ryan4yin | 二花 2026-09-26 14:02:03 +08:00
2314754655 fix(youko): run transmission in its own network namespace (#324) ryan4yin | 二花 2026-09-26 12:48:51 +08:00
f326dcb139 docs(agents): Simplifies global rules so agents can understand and follow it easily (#323) ryan4yin | 二花 2026-09-26 09:51:42 +08:00
27b99fa45f docs(agents): add untrusted-source safety rules Ryan Yin 2026-09-26 08:23:15 +08:00
2a2933a889 docs(youko): note the transmission inbound-port TODO Ryan Yin 2026-09-26 00:23:43 +08:00
9fe6166fd1 feat(homepage): add Jellyfin, alerting, files and k3s-test-1 services (#322) ryan4yin | 二花 2026-09-26 00:15:06 +08:00
a111676ede feat(youko): add Jellyfin media server (#321) ryan4yin | 二花 2026-09-25 23:22:04 +08:00
9187e4d920 fix(youko): pin dynamically-allocated service uid/gid (#320) ryan4yin | 二花 2026-09-25 20:55:02 +08:00
5ee8b728b5 fix(restic): use the correct systemd timer option names (#319) ryan4yin | 二花 2026-09-25 20:39:59 +08:00
4bd463a784 chore(eval): resolve catppuccin and rust-overlay deprecation warnings (#318) ryan4yin | 二花 2026-09-25 20:36:26 +08:00
793b636fa5 feat(youko): add Immich photo platform (#317) ryan4yin | 二花 2026-09-25 20:30:01 +08:00
6a6950e7eb fix(youko): don't redirect rustfs console STS/S3 calls (#316) ryan4yin | 二花 2026-09-25 16:21:12 +08:00
7d8d6ec8ad chore(youko): drop redundant loki-gateway Caddy vhost (#315) ryan4yin | 二花 2026-09-25 16:09:44 +08:00
e8e7844051 Merge pull request #314 from ryan4yin/feat/rustfs-s3 ryan4yin | 二花 2026-09-25 15:53:40 +08:00
7e0e4aa566 feat(youko): replace MinIO with RustFS S3 Ryan Yin 2026-09-25 14:21:18 +08:00
e401a75ca5 chore(agents): remove crush Ryan Yin 2026-09-25 00:29:39 +08:00
310d59b437 flake.lock: Update Ryan Yin 2026-09-24 23:41:24 +08:00
c3a8d99ceb Merge pull request #313 from ryan4yin/fix/k3s-test-1-master-config-cleanup ryan4yin | 二花 2026-09-24 14:12:04 +08:00
9a6923b4e9 fix(k3s): drop Home Manager from test masters Ryan Yin 2026-09-24 13:35:33 +08:00
f5f4531fcb Merge pull request #312 from ryan4yin/fix/k3s-test-1-guest-dns ryan4yin | 二花 2026-09-24 11:36:41 +08:00
882383f754 Merge pull request #309 from ryan4yin/fix/k3s-test-1-stable-ipv6 ryan4yin | 二花 2026-09-24 11:29:23 +08:00
069e081fec fix(k3s): bind control-plane metrics to node addresses (#311) ryan4yin | 二花 2026-09-24 11:13:59 +08:00
c752703488 docs(network): explain DHCPv6 DNS overrides Ryan Yin 2026-09-24 10:43:49 +08:00
688a244ae0 fix(k3s): ignore advertised DNS on test VMs Ryan Yin 2026-09-23 23:44:13 +08:00
f357569d32 fix(k3s): disable IPv6 privacy on guest NICs Ryan Yin 2026-09-23 23:05:53 +08:00
fa0743a28b fix(k3s): disable temporary IPv6 addresses in test VMs Ryan Yin 2026-09-23 22:28:35 +08:00
d1dd35bd7c chore(codex): bump the override to 0.156.1 Ryan Yin 2026-09-23 12:01:30 +08:00
55aa4e3e10 fix(k8s): link the CNI dirs on the k3s agent nodes Ryan Yin 2026-09-23 10:57:29 +08:00
64cad91401 fix(k8s): unblock the k3s-test-1 workers Ryan Yin 2026-09-23 10:57:25 +08:00
a3efb42202 chore(k8s): update secrets Ryan Yin 2026-09-23 10:57:22 +08:00
a2604a0c32 chore(codex): override to 0.156.0 pending llm-agents bump Ryan Yin 2026-09-23 10:37:52 +08:00
f6e331dbf7 flake.lock: Update Ryan Yin 2026-09-23 09:50:10 +08:00
3b13291216 feat(computer-use): sync the X clipboard and document the input-level design (#308) ryan4yin | 二花 2026-09-22 20:45:09 +08:00
b19818ef44 feat(k8s): add the k3s-test-1 worker nodes (#307) ryan4yin | 二花 2026-09-21 23:09:13 +08:00
ca00d26642 chore: drop the unused darwin proxy set script (#306) ryan4yin | 二花 2026-09-21 22:33:33 +08:00
242c607ce6 feat(k8s): reserve a VIP block and narrow the tailscale routes (#305) ryan4yin | 二花 2026-09-21 22:28:36 +08:00
97c2d1325d docs: refresh stale docs after the VM and backup refactors ryan4yin | 二花 2026-09-21 22:03:21 +08:00
5d0055b024 Merge pull request #277 from ryan4yin/feat/cua-headless-sway ryan4yin | 二花 2026-09-21 21:43:45 +08:00
0185fd0f85 docs(computer-use): document the headless i3 session Ryan Yin 2026-09-21 21:31:27 +08:00
00aab5f562 feat(computer-use): add a headless X11/i3 environment Ryan Yin 2026-09-21 21:31:27 +08:00
90761a6b73 feat(computer-use): package computer-use-linux and cua-driver Ryan Yin 2026-09-21 21:31:27 +08:00
ef00eb31e0 docs: warn that user-readable decrypted secrets must not be read (#303) ryan4yin | 二花 2026-09-21 21:18:06 +08:00
260da1ee20 chore: rename the nushell secret, and forbid reading decrypted secrets ryan4yin | 二花 2026-09-21 21:13:50 +08:00
bc6748d021 feat(backup): notify on failure, and 404 unconfigured hostnames (#301) ryan4yin | 二花 2026-09-21 21:01:18 +08:00
37f29154d1 docs(backup): record what the metrics actually expose Ryan Yin 2026-09-21 20:57:41 +08:00
842cd26f64 feat(monitoring): scrape the restic rest-server Ryan Yin 2026-09-21 20:56:01 +08:00
1cbb52add1 docs(secrets): desktops and recovery_key have identical access Ryan Yin 2026-09-21 20:51:13 +08:00
89e57b5b39 docs(secrets): state that every secret must be decryptable by the desktops Ryan Yin 2026-09-21 20:50:11 +08:00
a43aa02a69 docs(secrets): state the recipient invariant Ryan Yin 2026-09-21 20:45:47 +08:00
8a44c23d74 docs(backup): say 'cloud copy' rather than 'offsite' Ryan Yin 2026-09-21 20:44:56 +08:00
096607a5c5 feat(backup): notify on failure, and 404 unconfigured hostnames Ryan Yin 2026-09-21 20:41:30 +08:00
c3f0dbf8bd revert(backup): drop append-only for the desktop endpoint Ryan Yin 2026-09-21 20:29:29 +08:00
5a017666f6 refactor(backup): name the REST endpoint restic.writefor.fun Ryan Yin 2026-09-21 20:28:02 +08:00
d322f4d2b6 docs: add BACKUP.md, and stagger the restic schedule per host Ryan Yin 2026-09-21 20:25:51 +08:00
2ff93c16ce feat(restic): move idols-ai's off-host backup to the REST server Ryan Yin 2026-09-21 20:22:44 +08:00
1e2cef2550 feat(youko): serve restic backups over an append-only REST server Ryan Yin 2026-09-21 20:22:44 +08:00
12ac5f45aa feat(idols-ai): restic backup to a local repository Ryan Yin 2026-09-21 19:04:58 +08:00
e37042f61c feat(youko): restic backup of the service state to the HDD (part 1) (#299) ryan4yin | 二花 2026-09-21 19:00:35 +08:00
bb33cca83a refactor(youko): let preservation own the service state dirs (#298) ryan4yin | 二花 2026-09-21 18:06:40 +08:00
9ef7ba7112 Merge pull request #297 from ryan4yin/feat/app-data-to-ssd ryan4yin | 二花 2026-09-21 18:00:10 +08:00
a755b6fa11 feat(youko): move the service data from the HDD to the SSD Ryan Yin 2026-09-21 17:56:35 +08:00
12966d326c Merge pull request #296 from ryan4yin/fix/usb-hdd-mitigations ryan4yin | 二花 2026-09-21 17:56:08 +08:00
5bbe17ebcd fix(youko): also try disabling the WD idle3 (Intellipark) timer Ryan Yin 2026-09-21 17:43:05 +08:00
899162055a fix(youko): drop pcie_aspm=off, re-assert the hdparm settings hourly Ryan Yin 2026-09-21 17:42:21 +08:00
45a35a080d fix(youko): address the HDDs by-id, not /dev/sdX Ryan Yin 2026-09-21 17:38:54 +08:00
ce1645619f fix(youko): mitigate the flaky USB-SATA HDD bridge Ryan Yin 2026-09-21 17:37:52 +08:00
9ef2fefc25 Merge pull request #295 from ryan4yin/fix/homepage-allowed-hosts ryan4yin | 二花 2026-09-21 17:37:35 +08:00
4867e94171 Merge pull request #294 from ryan4yin/chore/drop-kubevirt-guest ryan4yin | 二花 2026-09-21 17:29:49 +08:00
8b1fa3ac87 chore(secrets): drop the unreferenced dae-subscription secret Ryan Yin 2026-09-21 17:29:36 +08:00
03619f8055 chore(utils.nu): drop the dead upload-vm helper Ryan Yin 2026-09-21 17:27:16 +08:00
dbeef8bfaa docs: drop Virtual-Machine.md Ryan Yin 2026-09-21 17:26:38 +08:00

... 3 4 5 6 7 ...