feynman.git/modules, branch main

Simplified themes

2026-08-02T15:47:02Z

Fixed the bad theming and the width

2026-07-31T21:12:10Z

Added the custom cgit theme

2026-07-31T21:02:01Z

Added the limitation to the log

2026-07-31T20:54:41Z

Update cgit to allow LFS

2026-07-31T20:48:30Z

Added a memos instance

2026-07-31T19:27:22Z

Hardened the server by blocking port 53 and added a deploy script

2026-07-31T19:12:16Z

Use a static user for Actual Budget, not DynamicUser

2026-07-19T06:00:02Z

The old Podman container ran as root, so /var/lib/actual's existing budget data (account.sqlite, budget files) is owned by root:root. The native module's default DynamicUser gets a fresh ephemeral UID on every start and can't read pre-existing root-owned files - it would silently fail to see the existing budget on switch-over. Give it a static user instead and recursively reclaim ownership of the existing data once via a tmpfiles Z rule. Co-Authored-By: Claude Sonnet 5

Simplify config and add AdGuard DoH/DoT support

2026-07-18T21:04:53Z

- Replace the hand-rolled Podman OCI container for Actual Budget with the native services.actual module (available in the pinned nixpkgs release); the container never actually had a backend enabled, so it likely never ran. - Collapse cgit's Caddy routing to a single reverse proxy - the smart-HTTP git backend was already served on the same nginx vhost/port as cgit itself, so the separate /git/* -> 8085 route was dead and pointed at a port nothing listened on. - Drop the unused kvm-intel kernel module from the guest hardware profile, and rename disko's misleadingly-named ESP partition (it's ext4, not a real EFI System Partition). - Point common.nix's disabled autoUpgrade flake URL at this repo's own cgit hosting instead of a generic GitHub placeholder. - Add AdGuard Home DNS-over-TLS (853) and DNS-over-HTTPS (8443) support, backed by an independent ACME certificate (modules/acme.nix) issued via a webroot Caddy serves on port 80. Co-Authored-By: Claude Sonnet 5

Cleaned up the config and the docs

2026-07-18T20:32:19Z