Aner Zakobar
d6aa39ff04
Added shell command for deploy, updated readme, backup script.
2026-04-29 20:23:42 +03:00
Aner Zakobar
d49f0161ca
Redid networking
2026-04-26 00:09:52 +03:00
Aner Zakobar
a7099e7d56
Should not ignore lock
2026-04-25 21:49:42 +03:00
Aner Zakobar
5e8d5f575a
Fixes and more shell
2026-04-25 21:47:42 +03:00
Aner Zakobar
5e82ca5fe0
Merge nixos-port: complete NixOS port of homey selfhosted stack
...
Replaces Helm/k8s deployment with flake-based NixOS config.
All core services working: Caddy, Authelia, OpenLDAP, phpLDAPadmin, Gitea.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-04-23 14:46:29 +03:00
Aner Zakobar
0b73d493d8
Working NixOS port: all core services operational
...
- Fix Caddy cfProxy helper for cloudflared http:// vhosts (X-Forwarded-Proto)
- Fix Authelia LDAP bind (readonly user ACL + password sync)
- Add gitea-admin-setup oneshot service to survive rebuilds
- Update Authelia forward_auth with header_up X-Forwarded-Proto https
- Update TODO.org with completed tasks and LDAP config details
- Remove old Helm/k8s artifacts (Chart.yaml, templates/, values/, scripts)
- Add result to .gitignore
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-04-23 14:46:21 +03:00
Aner Zakobar
05619d12fc
Changes to rpi setup
2026-04-20 05:40:09 +03:00
Aner Zakobar
e2ff0eb428
Update AGENTS.md for NixOS port branch
2026-04-15 17:20:35 +03:00
Aner Zakobar
2f0d0b5e4c
Port to NixOS: replace Helm chart with flake-based NixOS config
...
Replaces the Helm/k3s setup with a declarative NixOS configuration targeting
a Raspberry Pi 4. Services run as podman containers under systemd, with data
on an external HD at /mnt/data. Key components:
- flake.nix: multi-host flake with pi-main (aarch64) and a placeholder for a
second machine
- modules/common.nix: shared system config (nix, podman, sops, SSH)
- modules/storage.nix: external HD mount with per-service subdirs
- modules/caddy.nix: Caddy with cloudflare DNS-01 ACME + authelia forward_auth
- modules/cloudflared.nix: Cloudflare tunnel for remote access
- modules/backup.nix: restic daily backups with NC maintenance mode pre-hook
- modules/services/{openldap,authelia,gitea,nextcloud,phpldapadmin}.nix: core services
- modules/services/{jellyfin,transmission}.nix: media services (disabled by default)
- secrets/: sops-nix scaffold with .sops.yaml age key config
- hosts/pi-main/: hardware config + service selection for the Pi
- PORTING.md: step-by-step migration guide (SD card → data restore → verify)
2026-04-15 17:18:12 +03:00
Aner Zakobar
d1948df47e
TMP COMMIT BEFORE TRASHING
2026-04-15 16:49:18 +03:00
Aner Zakobar
138d6d8a6b
Current snapshot of state with unused garbage.
2025-03-26 12:27:47 +02:00
Aner Zakobar
9ac576c043
Unneeded values erased
2024-06-04 23:58:53 +03:00
Aner Zakobar
5264bdbf4f
Temp and works?
2024-06-03 01:15:22 +03:00
Aner Zakobar
3655bbc489
Davical and trying sogo
2023-12-10 15:30:30 +02:00
Aner Zakobar
0464092af1
Did things
2023-09-28 23:12:07 +03:00
Aner Zakobar
bde033a3b0
AUTHENTICATION BABYYYY
2023-09-24 15:30:29 +03:00
Aner Zakobar
c709cea065
Longhorndified a ton of stuff.
2023-07-07 16:15:17 +03:00
Aner Zakobar
e41a9f34e8
Got rid of drone will put back later.
2023-03-13 14:06:52 +02:00
Aner Zakobar
4f9d3fba78
Right before big longhorn diff
2023-03-13 14:02:36 +02:00
Aner Zakobar
51336c3213
Wow I am making way too many changes for my own good
2023-02-25 22:58:21 +02:00
Aner Zakobar
eac370530e
Stable before split
2023-02-12 15:40:54 +02:00
Aner Zakobar
24f9e7a507
Larger upload size for photoprism
2022-08-28 01:13:20 +03:00
Aner Zakobar
5bb28b1d5b
Changed mounting to downloads complete
2022-07-11 08:09:56 +03:00
Aner Zakobar
984d25c0c4
Modified download path
2022-05-11 08:23:46 +03:00
Aner Zakobar
cbb307b124
Fixed certs, better URLs
2022-05-10 15:48:31 +03:00
Aner Zakobar
cb8b024d40
Changed jellyfin serv name
2022-05-07 12:29:53 +03:00
Aner Zakobar
74c6ae9398
Fixed stuff, using nginx, configured, uses good cert
2022-05-07 10:36:28 +03:00
Aner Zakobar
de5d1f2541
Git secrets and redirect middleware
2022-04-17 21:30:22 +03:00
Aner Zakobar
403cf13dca
Upgrades to HTTPS and fixed bug with nefarious
2022-04-17 21:28:49 +03:00
Aner Zakobar
d2525b6ce2
Semi working!
2022-04-09 15:22:55 +03:00
Aner Zakobar
a727f0e4d3
Big changes
2022-04-08 17:19:32 +03:00
Aner Zakobar
cb600f8368
Everything changes lots works!
2021-10-06 00:51:11 +03:00
Aner Zakobar
cf778e2960
tmp
2021-09-15 15:40:57 +03:00
Aner Zakobar
0813677492
Divvied up to multiple files.
2021-09-13 11:47:36 +03:00
Aner Zakobar
7f3f081fe6
Fixed stuff, changed storage. Need to find backup solution.
2021-09-13 11:15:20 +03:00
Aner Zakobar
ca0ce8cdaa
Continue
2021-09-08 10:18:11 +03:00
Aner Zakobar
ea53f54ea6
Initial commit
2021-09-07 22:36:43 +03:00
Aner Zakobar
2e4bbdce89
Initial commit.
2021-08-17 12:07:44 +03:00