Ryan Yin 5088535ac3 fix(ai): bind the nvidia GPU exporter to the static LAN IPv4 ...

The 2026-10-22 audit found the live socket on *:9835: #373 bound
node/smartctl in monitoring.nix, but the nvidia exporter enabled in
hardware-nvidia.nix kept the nixpkgs default, so the socket-level
defence-in-depth layer never existed for 9835.

Extend the security-exporters eval check to every enabled exporter's
listenAddress so a future exporter without a bind fails the test.

Assisted-by: DeepSeek Harness (gpt-6-astra)

2026-10-24 14:16:14 +08:00

..

nixos-tests

chore(docs): prune stale TODOs (#370)

2026-10-03 17:50:28 +08:00

src

feat(aquamarine): revive aquamarine as a two-GPU inference host

2026-10-14 20:15:01 +08:00

tests

fix(ai): bind the nvidia GPU exporter to the static LAN IPv4

2026-10-24 14:16:14 +08:00

default.nix

fix(colmena): deploy the systems nixosConfigurations evaluates

2026-10-21 20:59:07 +08:00