| Commit message (Collapse) | Author | Age | Files | Lines |
|---|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
|
|
|
|
|
| |
nixos-rebuild warns that --use-remote-sudo is deprecated in favor of
--elevate=sudo; update both documented deploy commands accordingly.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
|
| |
|
|
|
|
|
|
|
|
|
|
| |
The old Podman container ran as root, so /var/lib/actual's existing
budget data (account.sqlite, budget files) is owned by root:root. The
native module's default DynamicUser gets a fresh ephemeral UID on every
start and can't read pre-existing root-owned files - it would silently
fail to see the existing budget on switch-over. Give it a static user
instead and recursively reclaim ownership of the existing data once via
a tmpfiles Z rule.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
Renaming the Nix attribute from ESP to bootfs changed the GPT partition
label disko expects fileSystems."/boot" to reference, but the physical
partition on the already-installed disk still carries the original
disk-main-ESP label from initial install - renaming an attribute here
doesn't relabel it. On deploy this hung boot.mount/local-fs.target waiting
for a device that doesn't exist, which cascaded into blocking every
service queued behind sysinit.target (AdGuard, the new ACME cert, Actual)
and ultimately required a restore from an older snapshot to recover.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- Replace the hand-rolled Podman OCI container for Actual Budget with the
native services.actual module (available in the pinned nixpkgs release);
the container never actually had a backend enabled, so it likely never ran.
- Collapse cgit's Caddy routing to a single reverse proxy - the smart-HTTP
git backend was already served on the same nginx vhost/port as cgit
itself, so the separate /git/* -> 8085 route was dead and pointed at a
port nothing listened on.
- Drop the unused kvm-intel kernel module from the guest hardware profile,
and rename disko's misleadingly-named ESP partition (it's ext4, not a
real EFI System Partition).
- Point common.nix's disabled autoUpgrade flake URL at this repo's own
cgit hosting instead of a generic GitHub placeholder.
- Add AdGuard Home DNS-over-TLS (853) and DNS-over-HTTPS (8443) support,
backed by an independent ACME certificate (modules/acme.nix) issued via
a webroot Caddy serves on port 80.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
|
