harivansh-afk/nix
1
1
Fork 0
mirror of https://github.com/harivansh-afk/nix.git synced 2026-04-19 00:15:26 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Merge branch 'main' into smb-hostname-truncate-hard-limit

Browse source
This commit is contained in:
Hari 2026-04-01 17:33:32 -04:00 • committed by GitHub
commit d0685737a7
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 8 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
README.md
View file

@ -27,9 +27,11 @@ Global agent skills are installed declaratively using skills.sh and only resync
Secrets live in Bitwarden and are rendered at activation time using cli Secrets live in Bitwarden and are rendered at activation time using cli
Deployment is `just switch` for the laptop and `just switch-netty` for the server. Deployment is `just switch` for the laptop and `just switch-netty` for the server.
All PRs auto-merge on creation if tests pass
The VPS has a declarative service bundle: The VPS has a declarative service bundle:
- netty exposes 3 tcp ports (22:ssh, 80:http, 443:https) - netty exposes 3 tcp ports (22:ssh, 80:http, 443:https)
- services only listen on 127.0.0.1 (runs behind nginx with ACME) - services only listen on 127.0.0.1 (runs behind nginx with ACME)
- Self hosts Forgejo mirroring to GitHub (git.harivan.sh) - Self hosts Forgejo mirroring to GitHub (git.harivan.sh)
- Self hosts VaultWarden (vault.harivan.sh) - Self hosts VaultWarden
- Runs sandbox agent behind a CORS proxy (netty.harivan.sh) - Runs sandbox agent behind a CORS proxy

5
hosts/netty/configuration.nix
View file

@ -270,7 +270,10 @@ in
HTTP_PORT = 19300; HTTP_PORT = 19300;
SSH_DOMAIN = forgejoDomain; SSH_DOMAIN = forgejoDomain;
}; };
service.DISABLE_REGISTRATION = true; service = {
DISABLE_REGISTRATION = true;
REQUIRE_SIGNIN_VIEW = true;
};
session.COOKIE_SECURE = true; session.COOKIE_SECURE = true;
mirror = { mirror = {
DEFAULT_INTERVAL = "1h"; DEFAULT_INTERVAL = "1h";