| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Added the limitation to the log | Karan Jayachandra | 2026-07-31 | 1 | -0/+8 |
| | | |||||
| * | Update cgit to allow LFS | Karan Jayachandra | 2026-07-31 | 1 | -0/+16 |
| | | |||||
| * | Added a memos instance | Karan Jayachandra | 2026-07-31 | 2 | -0/+31 |
| | | |||||
| * | Hardened the server by blocking port 53 and added a deploy script | Karan Jayachandra | 2026-07-31 | 2 | -15/+25 |
| | | |||||
| * | Use a static user for Actual Budget, not DynamicUser | Karan Jayachandra | 2026-07-19 | 1 | -0/+20 |
| | | | | | | | | | | | | | The old Podman container ran as root, so /var/lib/actual's existing budget data (account.sqlite, budget files) is owned by root:root. The native module's default DynamicUser gets a fresh ephemeral UID on every start and can't read pre-existing root-owned files - it would silently fail to see the existing budget on switch-over. Give it a static user instead and recursively reclaim ownership of the existing data once via a tmpfiles Z rule. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> | ||||
| * | Simplify config and add AdGuard DoH/DoT support | Karan Jayachandra | 2026-07-18 | 6 | -45/+108 |
| | | | | | | | | | | | | | | | | | | | | | - Replace the hand-rolled Podman OCI container for Actual Budget with the native services.actual module (available in the pinned nixpkgs release); the container never actually had a backend enabled, so it likely never ran. - Collapse cgit's Caddy routing to a single reverse proxy - the smart-HTTP git backend was already served on the same nginx vhost/port as cgit itself, so the separate /git/* -> 8085 route was dead and pointed at a port nothing listened on. - Drop the unused kvm-intel kernel module from the guest hardware profile, and rename disko's misleadingly-named ESP partition (it's ext4, not a real EFI System Partition). - Point common.nix's disabled autoUpgrade flake URL at this repo's own cgit hosting instead of a generic GitHub placeholder. - Add AdGuard Home DNS-over-TLS (853) and DNS-over-HTTPS (8443) support, backed by an independent ACME certificate (modules/acme.nix) issued via a webroot Caddy serves on port 80. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> | ||||
| * | Cleaned up the config and the docs | Karan Jayachandra | 2026-07-18 | 1 | -0/+3 |
| | | |||||
| * | Added the changes for the Adguard fix | Karan Jayachandra | 2026-07-18 | 2 | -17/+42 |
| | | |||||
| * | Fixed port for cgit | Karan Jayachandra | 2026-07-17 | 1 | -0/+5 |
| | | |||||
| * | Added the miniflux again | Karan Jayachandra | 2026-07-17 | 1 | -0/+2 |
| | | |||||
| * | Added the miniflux | Karan Jayachandra | 2026-07-17 | 1 | -0/+5 |
| | | |||||
| * | Fixed the path of the secrets file | Karan Jayachandra | 2026-07-17 | 1 | -1/+1 |
| | | |||||
| * | Added the HTTP access | Karan Jayachandra | 2026-07-17 | 1 | -1/+2 |
| | | |||||
| * | Added the adguard fix | Karan Jayachandra | 2026-07-17 | 1 | -1/+1 |
| | | |||||
| * | Added the cgit fix for scan path | Karan Jayachandra | 2026-07-17 | 1 | -2/+1 |
| | | |||||
| * | Added the cgit fix | Karan Jayachandra | 2026-07-17 | 1 | -3/+0 |
| | | |||||
| * | Added the actual fix | Karan Jayachandra | 2026-07-17 | 1 | -18/+19 |
| | | |||||
| * | Initial commit | Karan Jayachandra | 2026-07-17 | 7 | -0/+359 |
 |
index : feynman.git | |
| NixOS flake config for eurovm - personal Hetzner Cloud server (karanj.com) |
| aboutsummaryrefslogtreecommitdiff |