60a90d5f98
Merge pull request 'fix: update compose submodule pin to include USER hermes fix' ( #77 ) from local_changes into master
...
Reviewed-on: #77
2026-07-07 19:41:59 +00:00
2338eaf74c
fix: update compose submodule to include USER hermes fix
...
The compose submodule now points to commit 54e0661 which adds the missing
USER hermes at the end of the Hermes Dockerfile. This ensures all container
processes run as uid 10000 instead of root, fixing the privilege leak where
background subprocesses escaped the gosu drop and created root-owned files
in ExoKortex that broke Syncthing sync.
2026-07-07 14:59:26 -04:00
Robert
df91a909b6
More local changes, mostly compose update and nixmate
2026-07-07 14:15:26 -04:00
Robert
2e236581f0
update lock
2026-06-15 13:20:15 -04:00
Robert
65587809aa
Added opencode api key
2026-06-15 13:17:49 -04:00
Robert
2b1df578ac
Deleted wrongly created file...
2026-06-15 13:16:58 -04:00
Robert
1c806e6390
Updated the compose pin
2026-06-15 13:15:12 -04:00
Robert
78ab440727
Split container secret in preparation to switching seperated env
2026-06-15 13:12:39 -04:00
Robert
ab7da92626
Added tmux, removed opencode, openclaw node
2026-06-11 15:27:08 -04:00
Robert
e3f7d18d8e
Added paperclip and honcho secrets
2026-06-11 15:02:16 -04:00
5aca97e057
Merge pull request 'feat: add uConsole CM5 host with Reticulum mesh network support' ( #61 ) from feat/uconsole-cm5-v3 into master
...
Reviewed-on: #61
2026-06-06 13:19:19 +00:00
a51e095717
feat: enable aarch64 cross-build on lazyworkhorse (QEMU binfmt + extra-platforms)
2026-06-06 09:16:23 -04:00
9ebbb1c0c6
fix: bump nixos-raspberrypi to v1.20260517.0 (matches nixos-uconsole tested version)
2026-06-05 23:38:21 -04:00
7f11da1878
fix: let nixos-raspberrypi manage kernel version (patches incompatible with linuxPackages_latest)
2026-06-05 23:33:10 -04:00
29cc20bb04
fix: add wants=network-online.target to rnsd and kismet services to silence eval warnings
2026-06-05 22:58:09 -04:00
1617ac9149
fix: migrate from deprecated kernelboot to kernel bootloader for nixos-raspberrypi
2026-06-05 22:57:26 -04:00
24f15c98cd
fix: add format=setuptools to all reticulum overlay python packages
2026-06-05 22:46:54 -04:00
bdd6d03739
fix: use mkForce for PermitRootLogin to override upstream module default
2026-06-05 22:45:59 -04:00
a0a6663793
fix: use mkForce for PasswordAuthentication to override upstream module default
2026-06-05 22:45:30 -04:00
b66ffadb79
fix: add missing 'keys' to uConsole module args
2026-06-05 22:43:53 -04:00
db2bd1d157
feat: add uConsole CM5 host configuration with Reticulum mesh stack
...
- New NixOS host 'uConsole' for ClockworkPi CM5 portable terminal
- flake.nix: add nixos-uconsole and nixos-raspberrypi inputs
- Imports: nixos-uconsole.nixosModules.uconsole-cm5,
nixos-raspberrypi.nixosModules.raspberry-pi-5.base
- Full package list: base tools, HAM radio, SDR/RF, mesh/LoRa,
security tools, GPS/maps
- Reticulum stack (rns 1.2.9, lxmf 0.9.8, nomadnet 1.1.1) built
from PyPI via overlays/reticulum.nix
- systemd services: rnsd (Reticulum daemon), kismet (Wi-Fi IDS)
- Kernel modules for SDR (rtl-sdr, dvb) and USB WiFi
- Follows existing host config conventions (cyt-pi as template)
2026-05-20 14:34:15 -04:00
36359de6aa
Merge pull request 'feat: add Syncthing firewall port and update compose submodule' ( #47 ) from feat/syncthing-org-sync into master
...
Reviewed-on: #47
2026-05-19 00:34:42 +00:00
Robert
10b8565fd6
Merge branch 'master' into feat/syncthing-org-sync
2026-05-18 20:33:29 -04:00
Robert
f672696b8e
Update submodule for syncthing
2026-05-18 20:31:07 -04:00
0980dca455
fix: update compose submodule to Traefik-routed Syncthing
2026-05-14 21:40:12 -04:00
96bc20ab70
feat: add Syncthing firewall port and update compose submodule
2026-05-14 21:36:26 -04:00
670ae4f002
Merge pull request 'fix: update compose submodule — use ln -sf for iptables-nft' ( #46 ) from fix/vpn-iptables-nft-v3 into master
...
Reviewed-on: #46
2026-05-13 17:00:16 +00:00
f785abfd49
fix: update compose submodule — use ln -sf for iptables-nft
2026-05-13 12:59:04 -04:00
6f44aa7f76
Merge pull request 'fix: update compose submodule — remove apk add iptables-nft' ( #45 ) from fix/vpn-iptables-nft-v2 into master
...
Reviewed-on: #45
2026-05-13 16:49:39 +00:00
8d40f1691f
fix: update compose submodule — remove apk add iptables-nft
2026-05-13 12:49:14 -04:00
Robert
2dd2e64986
Merge remote-tracking branch 'origin/master'
2026-05-13 12:42:54 -04:00
Robert
23fc5e0597
Give a little more ssh room for tramp
2026-05-13 12:41:09 -04:00
0c9c33d735
Merge pull request 'fix: update wg-easy to official ghcr image with iptables-nft' ( #44 ) from fix/vpn-iptables-nft-upstream into master
...
Reviewed-on: #44
2026-05-13 16:39:56 +00:00
0bb6890f1c
chore: merge master into branch
2026-05-13 12:39:05 -04:00
9d5434425f
fix: update compose submodule for wg-easy iptables-nft fix
...
Updates the assets/compose submodule to point to the fix/vpn-iptables-nft-upstream
branch which contains:
- Switch FROM weejewel/wg-easy:latest (Alpine 3.11, stale 4yr) to
ghcr.io/wg-easy/wg-easy:latest (actively maintained, Alpine krypton)
- Use update-alternatives instead of raw ln -sf to flip iptables
from legacy to nftables backend
- Fix compose build context: ./vpn -> . (Dockerfile is at same level)
2026-05-13 12:30:47 -04:00
1fb4320dd1
Merge pull request 'feat: update compose submodule for custom tools startup' ( #43 ) from feat/update-compose-submodule-custom-tools into master
...
Reviewed-on: #43
2026-05-13 13:58:27 +00:00
51e9f47fd4
feat: update compose submodule for custom tools startup
2026-05-13 09:56:24 -04:00
06b3eb840f
fix: update compose submodule for wg-easy iptables-nft fix
2026-05-12 16:29:51 -04:00
28ab52209c
Merge pull request 'Add restricted AI worker access with deployment capabilities' ( #1 ) from ai-worker-restricted-access into master
...
Reviewed-on: #1
2026-05-11 00:48:29 +00:00
Robert
e6f7f0c263
Merge branch 'ai-worker-restricted-access' of ssh://code.lazyworkhorse.net:2222/gortium/infra into ai-worker-restricted-access
2026-05-10 18:06:46 -04:00
Robert
5c136e0765
Merge remote-tracking branch 'origin/master' into ai-worker-restricted-access
2026-05-10 17:06:58 -04:00
Robert
f722af7803
New ollama model creator module version
2026-05-10 16:56:09 -04:00
Robert
c07debf088
Added wireguard keys
2026-05-10 16:51:32 -04:00
6806898f04
feat: update compose submodule for ollama-gfx906 (v0.23.2) + add ollama Dockerfile
2026-05-10 10:12:34 -04:00
96e77c5ef2
Revert "feat: add ai-optimizer benchmark plan and state tracking for ollama GPU benchmarking"
...
This reverts commit ff7303cf6a
2026-05-09 20:19:26 +00:00
ff7303cf6a
feat: add ai-optimizer benchmark plan and state tracking for ollama GPU benchmarking
2026-05-09 20:13:08 +00:00
9e42f5d2cc
Merge pull request 'feat(hermes): update compose submodule for Piper TTS' ( #34 ) from feat/voice-support-v2 into master
...
Reviewed-on: #34
2026-05-09 19:40:05 +00:00
614883f3c3
fix: update compose submodule - startup permission fix for data volume
2026-05-09 16:04:39 +00:00
374d022593
fix: update compose submodule - permission fix for atomic writes
2026-05-09 15:50:42 +00:00
9679846cdb
feat: update compose submodule - Ryan high voice
2026-05-09 15:21:59 +00:00
