Commit Graph

41 Commits

Author SHA1 Message Date
Aner Zakobar 09052e8aec Better montiring, bug fixes. 2026-05-10 13:44:27 +03:00
Aner Zakobar af744e819c Monitoring primarily 2026-05-10 11:30:43 +03:00
Aner Zakobar 0e54760e34 Better limiting on nextcloud, crossed things off todo. 2026-05-03 11:30:46 +03:00
Aner Zakobar d6aa39ff04 Added shell command for deploy, updated readme, backup script. 2026-04-29 20:23:42 +03:00
Aner Zakobar d49f0161ca Redid networking 2026-04-26 00:09:52 +03:00
Aner Zakobar a7099e7d56 Should not ignore lock 2026-04-25 21:49:42 +03:00
Aner Zakobar 5e8d5f575a Fixes and more shell 2026-04-25 21:47:42 +03:00
Aner Zakobar 5e82ca5fe0 Merge nixos-port: complete NixOS port of homey selfhosted stack
Replaces Helm/k8s deployment with flake-based NixOS config.
All core services working: Caddy, Authelia, OpenLDAP, phpLDAPadmin, Gitea.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-23 14:46:29 +03:00
Aner Zakobar 0b73d493d8 Working NixOS port: all core services operational
- Fix Caddy cfProxy helper for cloudflared http:// vhosts (X-Forwarded-Proto)
- Fix Authelia LDAP bind (readonly user ACL + password sync)
- Add gitea-admin-setup oneshot service to survive rebuilds
- Update Authelia forward_auth with header_up X-Forwarded-Proto https
- Update TODO.org with completed tasks and LDAP config details
- Remove old Helm/k8s artifacts (Chart.yaml, templates/, values/, scripts)
- Add result to .gitignore

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-23 14:46:21 +03:00
Aner Zakobar 05619d12fc Changes to rpi setup 2026-04-20 05:40:09 +03:00
Aner Zakobar e2ff0eb428 Update AGENTS.md for NixOS port branch 2026-04-15 17:20:35 +03:00
Aner Zakobar 2f0d0b5e4c Port to NixOS: replace Helm chart with flake-based NixOS config
Replaces the Helm/k3s setup with a declarative NixOS configuration targeting
a Raspberry Pi 4. Services run as podman containers under systemd, with data
on an external HD at /mnt/data. Key components:

- flake.nix: multi-host flake with pi-main (aarch64) and a placeholder for a
  second machine
- modules/common.nix: shared system config (nix, podman, sops, SSH)
- modules/storage.nix: external HD mount with per-service subdirs
- modules/caddy.nix: Caddy with cloudflare DNS-01 ACME + authelia forward_auth
- modules/cloudflared.nix: Cloudflare tunnel for remote access
- modules/backup.nix: restic daily backups with NC maintenance mode pre-hook
- modules/services/{openldap,authelia,gitea,nextcloud,phpldapadmin}.nix: core services
- modules/services/{jellyfin,transmission}.nix: media services (disabled by default)
- secrets/: sops-nix scaffold with .sops.yaml age key config
- hosts/pi-main/: hardware config + service selection for the Pi
- PORTING.md: step-by-step migration guide (SD card → data restore → verify)
2026-04-15 17:18:12 +03:00
Aner Zakobar d1948df47e TMP COMMIT BEFORE TRASHING 2026-04-15 16:49:18 +03:00
Aner Zakobar 138d6d8a6b Current snapshot of state with unused garbage. 2025-03-26 12:27:47 +02:00
Aner Zakobar 9ac576c043 Unneeded values erased 2024-06-04 23:58:53 +03:00
Aner Zakobar 5264bdbf4f Temp and works? 2024-06-03 01:15:22 +03:00
Aner Zakobar 3655bbc489 Davical and trying sogo 2023-12-10 15:30:30 +02:00
Aner Zakobar 0464092af1 Did things 2023-09-28 23:12:07 +03:00
Aner Zakobar bde033a3b0 AUTHENTICATION BABYYYY 2023-09-24 15:30:29 +03:00
Aner Zakobar c709cea065 Longhorndified a ton of stuff. 2023-07-07 16:15:17 +03:00
Aner Zakobar e41a9f34e8 Got rid of drone will put back later. 2023-03-13 14:06:52 +02:00
Aner Zakobar 4f9d3fba78 Right before big longhorn diff 2023-03-13 14:02:36 +02:00
Aner Zakobar 51336c3213 Wow I am making way too many changes for my own good 2023-02-25 22:58:21 +02:00
Aner Zakobar eac370530e Stable before split 2023-02-12 15:40:54 +02:00
Aner Zakobar 24f9e7a507 Larger upload size for photoprism 2022-08-28 01:13:20 +03:00
Aner Zakobar 5bb28b1d5b Changed mounting to downloads complete 2022-07-11 08:09:56 +03:00
Aner Zakobar 984d25c0c4 Modified download path 2022-05-11 08:23:46 +03:00
Aner Zakobar cbb307b124 Fixed certs, better URLs 2022-05-10 15:48:31 +03:00
Aner Zakobar cb8b024d40 Changed jellyfin serv name 2022-05-07 12:29:53 +03:00
Aner Zakobar 74c6ae9398 Fixed stuff, using nginx, configured, uses good cert 2022-05-07 10:36:28 +03:00
Aner Zakobar de5d1f2541 Git secrets and redirect middleware 2022-04-17 21:30:22 +03:00
Aner Zakobar 403cf13dca Upgrades to HTTPS and fixed bug with nefarious 2022-04-17 21:28:49 +03:00
Aner Zakobar d2525b6ce2 Semi working! 2022-04-09 15:22:55 +03:00
Aner Zakobar a727f0e4d3 Big changes 2022-04-08 17:19:32 +03:00
Aner Zakobar cb600f8368 Everything changes lots works! 2021-10-06 00:51:11 +03:00
Aner Zakobar cf778e2960 tmp 2021-09-15 15:40:57 +03:00
Aner Zakobar 0813677492 Divvied up to multiple files. 2021-09-13 11:47:36 +03:00
Aner Zakobar 7f3f081fe6 Fixed stuff, changed storage. Need to find backup solution. 2021-09-13 11:15:20 +03:00
Aner Zakobar ca0ce8cdaa Continue 2021-09-08 10:18:11 +03:00
Aner Zakobar ea53f54ea6 Initial commit 2021-09-07 22:36:43 +03:00
Aner Zakobar 2e4bbdce89 Initial commit. 2021-08-17 12:07:44 +03:00