harivansh-afk/nix
1
1
Fork 0
mirror of https://github.com/harivansh-afk/nix.git synced 2026-04-15 05:02:10 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Merge branch 'main' into smb-hostname-truncate-hard-limit

Browse source
This commit is contained in:
Hari 2026-04-01 17:33:32 -04:00 • committed by GitHub
commit d0685737a7
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 8 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
README.md
View file

@ -27,9 +27,11 @@ Global agent skills are installed declaratively using skills.sh and only resync
Secrets live in Bitwarden and are rendered at activation time using cli
Deployment is `just switch` for the laptop and `just switch-netty` for the server.
All PRs auto-merge on creation if tests pass
The VPS has a declarative service bundle:
- netty exposes 3 tcp ports (22:ssh, 80:http, 443:https)
- services only listen on 127.0.0.1 (runs behind nginx with ACME)
- Self hosts Forgejo mirroring to GitHub (git.harivan.sh)
- Self hosts VaultWarden (vault.harivan.sh)
- Runs sandbox agent behind a CORS proxy (netty.harivan.sh)
- Self hosts VaultWarden
- Runs sandbox agent behind a CORS proxy

5
hosts/netty/configuration.nix
View file

@ -270,7 +270,10 @@ in
HTTP_PORT = 19300;
SSH_DOMAIN = forgejoDomain;
};
service.DISABLE_REGISTRATION = true;
service = {
DISABLE_REGISTRATION = true;
REQUIRE_SIGNIN_VIEW = true;
};
session.COOKIE_SECURE = true;
mirror = {
DEFAULT_INTERVAL = "1h";