aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Simplified themesmainKaran Jayachandra2026-08-022-132/+69
|
* Fixed the bad theming and the widthKaran Jayachandra2026-07-312-2/+17
|
* Added the custom cgit themeKaran Jayachandra2026-07-312-0/+1039
|
* Added the limitation to the logKaran Jayachandra2026-07-311-0/+8
|
* Update cgit to allow LFSKaran Jayachandra2026-07-311-0/+16
|
* Added the backups paths to the READMEKaran Jayachandra2026-07-311-0/+25
|
* Added a memos instanceKaran Jayachandra2026-07-315-2/+48
|
* Fixed the bug in the deploy script. Activate the nix packagesKaran Jayachandra2026-07-311-1/+1
|
* Hardened the server by blocking port 53 and added a deploy scriptKaran Jayachandra2026-07-316-50/+81
|
* Updated the READMEKaran Jayachandra2026-07-261-19/+19
|
* Fix deploy command flag: --use-remote-sudo is deprecatedKaran Jayachandra2026-07-192-4/+4
| | | | | | | nixos-rebuild warns that --use-remote-sudo is deprecated in favor of --elevate=sudo; update both documented deploy commands accordingly. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
* Use a static user for Actual Budget, not DynamicUserKaran Jayachandra2026-07-191-0/+20
| | | | | | | | | | | | The old Podman container ran as root, so /var/lib/actual's existing budget data (account.sqlite, budget files) is owned by root:root. The native module's default DynamicUser gets a fresh ephemeral UID on every start and can't read pre-existing root-owned files - it would silently fail to see the existing budget on switch-over. Give it a static user instead and recursively reclaim ownership of the existing data once via a tmpfiles Z rule. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
* Revert disko boot partition rename - it broke the live deployKaran Jayachandra2026-07-191-3/+11
| | | | | | | | | | | | | Renaming the Nix attribute from ESP to bootfs changed the GPT partition label disko expects fileSystems."/boot" to reference, but the physical partition on the already-installed disk still carries the original disk-main-ESP label from initial install - renaming an attribute here doesn't relabel it. On deploy this hung boot.mount/local-fs.target waiting for a device that doesn't exist, which cascaded into blocking every service queued behind sysinit.target (AdGuard, the new ACME cert, Actual) and ultimately required a restore from an older snapshot to recover. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
* Simplify config and add AdGuard DoH/DoT supportKaran Jayachandra2026-07-1811-76/+173
| | | | | | | | | | | | | | | | | | | | - Replace the hand-rolled Podman OCI container for Actual Budget with the native services.actual module (available in the pinned nixpkgs release); the container never actually had a backend enabled, so it likely never ran. - Collapse cgit's Caddy routing to a single reverse proxy - the smart-HTTP git backend was already served on the same nginx vhost/port as cgit itself, so the separate /git/* -> 8085 route was dead and pointed at a port nothing listened on. - Drop the unused kvm-intel kernel module from the guest hardware profile, and rename disko's misleadingly-named ESP partition (it's ext4, not a real EFI System Partition). - Point common.nix's disabled autoUpgrade flake URL at this repo's own cgit hosting instead of a generic GitHub placeholder. - Add AdGuard Home DNS-over-TLS (853) and DNS-over-HTTPS (8443) support, backed by an independent ACME certificate (modules/acme.nix) issued via a webroot Caddy serves on port 80. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
* Cleaned up the config and the docsKaran Jayachandra2026-07-183-230/+222
|
* Added the changes for the Adguard fixKaran Jayachandra2026-07-183-20/+45
|
* Updated the passwordKaran Jayachandra2026-07-181-3/+3
|
* Fixed port for cgitKaran Jayachandra2026-07-171-0/+5
|
* Added the miniflux againKaran Jayachandra2026-07-171-0/+2
|
* Added the minifluxKaran Jayachandra2026-07-172-1/+6
|
* Added the changes to the secretsKaran Jayachandra2026-07-172-13/+21
|
* Fixed the path of the secrets fileKaran Jayachandra2026-07-171-1/+1
|
* Added the HTTP accessKaran Jayachandra2026-07-171-1/+2
|
* Commit changesKaran Jayachandra2026-07-172-3/+71
|
* Encrypted the passwordsKaran Jayachandra2026-07-173-20/+41
|
* Changed the sopsKaran Jayachandra2026-07-171-2/+3
|
* Fixed the flake issueKaran Jayachandra2026-07-171-1/+1
|
* Added the adguard fixKaran Jayachandra2026-07-171-1/+1
|
* Added the cgit fix for scan pathKaran Jayachandra2026-07-171-2/+1
|
* Added the cgit fixKaran Jayachandra2026-07-171-3/+0
|
* Added the actual fixKaran Jayachandra2026-07-171-18/+19
|
* Fixed the issues with the buildKaran Jayachandra2026-07-171-3/+27
|
* Added the changes READMEKaran Jayachandra2026-07-171-2/+57
|
* Initial commitKaran Jayachandra2026-07-1715-0/+926
generated by cgit v1.3.1 (git 2.54.0) at 2026-09-15 05:23:42 +0000