29c2aea6a1
fix: update compose submodule — remove stale COPY line
2026-07-07 22:34:01 -04:00
e5ec3cea6a
Merge pull request 'fix: update compose submodule — use native s6 multi-profile supervision' ( #80 ) from fix/hermes-entrypoint-simple into master
...
Reviewed-on: #80
2026-07-08 02:28:01 +00:00
db01cf54d6
fix: update compose submodule — use native s6 multi-profile supervision
...
Updates the compose submodule to commit 3f82c9d on branch
fix/hermes-entrypoint-simple, which drops all custom entrypoint
scripts and uses the image's native s6-overlay profile supervision.
The five profiles (ashley, claire, finn, matt, paul) auto-start
on boot via the s6 reconciler reading their gateway_state.json.
2026-07-07 22:26:18 -04:00
0399a23147
Merge pull request 'fix: update compose submodule for s6-overlay entrypoint crash fix' ( #78 ) from fix/hermes-s6-overlay-entrypoint-crash into master
...
Reviewed-on: #78
2026-07-08 02:09:38 +00:00
c59a65478e
fix: update compose submodule for s6-overlay entrypoint crash fix
...
Updates the compose submodule to commit f4dd57f on branch
fix/hermes-s6-overlay-entrypoint-crash, which:
- Removes the broken entrypoint override (bash->tini->entrypoint.sh)
- Bakes start-hermes.sh into the image as the new CMD
- Uses the image default ENTRYPOINT (s6-overlay /init)
Fixes the SIGTERM restart loop on the Hermes container.
See compose PR #56 for details.
2026-07-07 22:08:46 -04:00
e061ed28ad
Merge pull request 'fix/hermes-submodule-update' ( #79 ) from fix/hermes-submodule-update into master
...
Reviewed-on: #79
2026-07-08 02:06:42 +00:00
Robert
add14ab914
Merge branch 'fix/hermes-submodule-update' of ssh://code.lazyworkhorse.net:2222/gortium/infra into fix/hermes-submodule-update
2026-07-07 20:53:28 -04:00
256fa2fde9
chore: update compose submodule (openconcho ReactNode fix)
2026-07-07 20:52:41 -04:00
d8919970b6
chore: update compose submodule (openconcho TS fix)
2026-07-07 20:50:05 -04:00
Robert
2deebc102b
Merge branch 'fix/hermes-submodule-update' of ssh://code.lazyworkhorse.net:2222/gortium/infra into fix/hermes-submodule-update
2026-07-07 20:47:16 -04:00
898bd2097c
chore: update compose submodule - openconcho to upstream v0.16.0
2026-07-07 20:43:09 -04:00
Robert
d72b799027
Merge branch 'fix/hermes-submodule-update' of ssh://code.lazyworkhorse.net:2222/gortium/infra into fix/hermes-submodule-update
2026-07-07 20:15:36 -04:00
c1414603cd
fix: update compose submodule to fix openconcho SHA (force-pushed commit)
2026-07-07 20:10:36 -04:00
c8abad243e
fix(compose): update submodule to fix/hermes-gosu-honcho-ssh
2026-07-07 19:49:47 -04:00
60a90d5f98
Merge pull request 'fix: update compose submodule pin to include USER hermes fix' ( #77 ) from local_changes into master
...
Reviewed-on: #77
2026-07-07 19:41:59 +00:00
2338eaf74c
fix: update compose submodule to include USER hermes fix
...
The compose submodule now points to commit 54e0661 which adds the missing
USER hermes at the end of the Hermes Dockerfile. This ensures all container
processes run as uid 10000 instead of root, fixing the privilege leak where
background subprocesses escaped the gosu drop and created root-owned files
in ExoKortex that broke Syncthing sync.
2026-07-07 14:59:26 -04:00
Robert
df91a909b6
More local changes, mostly compose update and nixmate
2026-07-07 14:15:26 -04:00
Robert
2e236581f0
update lock
2026-06-15 13:20:15 -04:00
Robert
65587809aa
Added opencode api key
2026-06-15 13:17:49 -04:00
Robert
2b1df578ac
Deleted wrongly created file...
2026-06-15 13:16:58 -04:00
Robert
1c806e6390
Updated the compose pin
2026-06-15 13:15:12 -04:00
Robert
78ab440727
Split container secret in preparation to switching seperated env
2026-06-15 13:12:39 -04:00
Robert
ab7da92626
Added tmux, removed opencode, openclaw node
2026-06-11 15:27:08 -04:00
Robert
e3f7d18d8e
Added paperclip and honcho secrets
2026-06-11 15:02:16 -04:00
5aca97e057
Merge pull request 'feat: add uConsole CM5 host with Reticulum mesh network support' ( #61 ) from feat/uconsole-cm5-v3 into master
...
Reviewed-on: #61
2026-06-06 13:19:19 +00:00
a51e095717
feat: enable aarch64 cross-build on lazyworkhorse (QEMU binfmt + extra-platforms)
2026-06-06 09:16:23 -04:00
9ebbb1c0c6
fix: bump nixos-raspberrypi to v1.20260517.0 (matches nixos-uconsole tested version)
2026-06-05 23:38:21 -04:00
7f11da1878
fix: let nixos-raspberrypi manage kernel version (patches incompatible with linuxPackages_latest)
2026-06-05 23:33:10 -04:00
29cc20bb04
fix: add wants=network-online.target to rnsd and kismet services to silence eval warnings
2026-06-05 22:58:09 -04:00
1617ac9149
fix: migrate from deprecated kernelboot to kernel bootloader for nixos-raspberrypi
2026-06-05 22:57:26 -04:00
24f15c98cd
fix: add format=setuptools to all reticulum overlay python packages
2026-06-05 22:46:54 -04:00
bdd6d03739
fix: use mkForce for PermitRootLogin to override upstream module default
2026-06-05 22:45:59 -04:00
a0a6663793
fix: use mkForce for PasswordAuthentication to override upstream module default
2026-06-05 22:45:30 -04:00
b66ffadb79
fix: add missing 'keys' to uConsole module args
2026-06-05 22:43:53 -04:00
db2bd1d157
feat: add uConsole CM5 host configuration with Reticulum mesh stack
...
- New NixOS host 'uConsole' for ClockworkPi CM5 portable terminal
- flake.nix: add nixos-uconsole and nixos-raspberrypi inputs
- Imports: nixos-uconsole.nixosModules.uconsole-cm5,
nixos-raspberrypi.nixosModules.raspberry-pi-5.base
- Full package list: base tools, HAM radio, SDR/RF, mesh/LoRa,
security tools, GPS/maps
- Reticulum stack (rns 1.2.9, lxmf 0.9.8, nomadnet 1.1.1) built
from PyPI via overlays/reticulum.nix
- systemd services: rnsd (Reticulum daemon), kismet (Wi-Fi IDS)
- Kernel modules for SDR (rtl-sdr, dvb) and USB WiFi
- Follows existing host config conventions (cyt-pi as template)
2026-05-20 14:34:15 -04:00
36359de6aa
Merge pull request 'feat: add Syncthing firewall port and update compose submodule' ( #47 ) from feat/syncthing-org-sync into master
...
Reviewed-on: #47
2026-05-19 00:34:42 +00:00
Robert
10b8565fd6
Merge branch 'master' into feat/syncthing-org-sync
2026-05-18 20:33:29 -04:00
Robert
f672696b8e
Update submodule for syncthing
2026-05-18 20:31:07 -04:00
0980dca455
fix: update compose submodule to Traefik-routed Syncthing
2026-05-14 21:40:12 -04:00
96bc20ab70
feat: add Syncthing firewall port and update compose submodule
2026-05-14 21:36:26 -04:00
670ae4f002
Merge pull request 'fix: update compose submodule — use ln -sf for iptables-nft' ( #46 ) from fix/vpn-iptables-nft-v3 into master
...
Reviewed-on: #46
2026-05-13 17:00:16 +00:00
f785abfd49
fix: update compose submodule — use ln -sf for iptables-nft
2026-05-13 12:59:04 -04:00
6f44aa7f76
Merge pull request 'fix: update compose submodule — remove apk add iptables-nft' ( #45 ) from fix/vpn-iptables-nft-v2 into master
...
Reviewed-on: #45
2026-05-13 16:49:39 +00:00
8d40f1691f
fix: update compose submodule — remove apk add iptables-nft
2026-05-13 12:49:14 -04:00
Robert
2dd2e64986
Merge remote-tracking branch 'origin/master'
2026-05-13 12:42:54 -04:00
Robert
23fc5e0597
Give a little more ssh room for tramp
2026-05-13 12:41:09 -04:00
0c9c33d735
Merge pull request 'fix: update wg-easy to official ghcr image with iptables-nft' ( #44 ) from fix/vpn-iptables-nft-upstream into master
...
Reviewed-on: #44
2026-05-13 16:39:56 +00:00
0bb6890f1c
chore: merge master into branch
2026-05-13 12:39:05 -04:00
9d5434425f
fix: update compose submodule for wg-easy iptables-nft fix
...
Updates the assets/compose submodule to point to the fix/vpn-iptables-nft-upstream
branch which contains:
- Switch FROM weejewel/wg-easy:latest (Alpine 3.11, stale 4yr) to
ghcr.io/wg-easy/wg-easy:latest (actively maintained, Alpine krypton)
- Use update-alternatives instead of raw ln -sf to flip iptables
from legacy to nftables backend
- Fix compose build context: ./vpn -> . (Dockerfile is at same level)
2026-05-13 12:30:47 -04:00
1fb4320dd1
Merge pull request 'feat: update compose submodule for custom tools startup' ( #43 ) from feat/update-compose-submodule-custom-tools into master
...
Reviewed-on: #43
2026-05-13 13:58:27 +00:00
