6a2db08a58
feat: add Hermes worker provisioning for Paperclip employees
...
- Update compose submodule to feat/hermes-workers branch
- Adds x-hermes-worker anchor template for isolated CPU-only
Hermes containers
- Adds scripts/provision-hermes-worker.sh for automated worker
creation with unique port, API key, and volume setup
- Workers connect via Discord only, use OpenCode Go provider
2026-05-19 14:13:13 -04:00
670ae4f002
Merge pull request 'fix: update compose submodule — use ln -sf for iptables-nft' ( #46 ) from fix/vpn-iptables-nft-v3 into master
...
Reviewed-on: #46
2026-05-13 17:00:16 +00:00
f785abfd49
fix: update compose submodule — use ln -sf for iptables-nft
2026-05-13 12:59:04 -04:00
6f44aa7f76
Merge pull request 'fix: update compose submodule — remove apk add iptables-nft' ( #45 ) from fix/vpn-iptables-nft-v2 into master
...
Reviewed-on: #45
2026-05-13 16:49:39 +00:00
8d40f1691f
fix: update compose submodule — remove apk add iptables-nft
2026-05-13 12:49:14 -04:00
Robert
2dd2e64986
Merge remote-tracking branch 'origin/master'
2026-05-13 12:42:54 -04:00
Robert
23fc5e0597
Give a little more ssh room for tramp
2026-05-13 12:41:09 -04:00
0c9c33d735
Merge pull request 'fix: update wg-easy to official ghcr image with iptables-nft' ( #44 ) from fix/vpn-iptables-nft-upstream into master
...
Reviewed-on: #44
2026-05-13 16:39:56 +00:00
0bb6890f1c
chore: merge master into branch
2026-05-13 12:39:05 -04:00
9d5434425f
fix: update compose submodule for wg-easy iptables-nft fix
...
Updates the assets/compose submodule to point to the fix/vpn-iptables-nft-upstream
branch which contains:
- Switch FROM weejewel/wg-easy:latest (Alpine 3.11, stale 4yr) to
ghcr.io/wg-easy/wg-easy:latest (actively maintained, Alpine krypton)
- Use update-alternatives instead of raw ln -sf to flip iptables
from legacy to nftables backend
- Fix compose build context: ./vpn -> . (Dockerfile is at same level)
2026-05-13 12:30:47 -04:00
1fb4320dd1
Merge pull request 'feat: update compose submodule for custom tools startup' ( #43 ) from feat/update-compose-submodule-custom-tools into master
...
Reviewed-on: #43
2026-05-13 13:58:27 +00:00
51e9f47fd4
feat: update compose submodule for custom tools startup
2026-05-13 09:56:24 -04:00
06b3eb840f
fix: update compose submodule for wg-easy iptables-nft fix
2026-05-12 16:29:51 -04:00
28ab52209c
Merge pull request 'Add restricted AI worker access with deployment capabilities' ( #1 ) from ai-worker-restricted-access into master
...
Reviewed-on: #1
2026-05-11 00:48:29 +00:00
Robert
e6f7f0c263
Merge branch 'ai-worker-restricted-access' of ssh://code.lazyworkhorse.net:2222/gortium/infra into ai-worker-restricted-access
2026-05-10 18:06:46 -04:00
Robert
5c136e0765
Merge remote-tracking branch 'origin/master' into ai-worker-restricted-access
2026-05-10 17:06:58 -04:00
Robert
f722af7803
New ollama model creator module version
2026-05-10 16:56:09 -04:00
Robert
c07debf088
Added wireguard keys
2026-05-10 16:51:32 -04:00
6806898f04
feat: update compose submodule for ollama-gfx906 (v0.23.2) + add ollama Dockerfile
2026-05-10 10:12:34 -04:00
96e77c5ef2
Revert "feat: add ai-optimizer benchmark plan and state tracking for ollama GPU benchmarking"
...
This reverts commit ff7303cf6a
2026-05-09 20:19:26 +00:00
ff7303cf6a
feat: add ai-optimizer benchmark plan and state tracking for ollama GPU benchmarking
2026-05-09 20:13:08 +00:00
9e42f5d2cc
Merge pull request 'feat(hermes): update compose submodule for Piper TTS' ( #34 ) from feat/voice-support-v2 into master
...
Reviewed-on: #34
2026-05-09 19:40:05 +00:00
614883f3c3
fix: update compose submodule - startup permission fix for data volume
2026-05-09 16:04:39 +00:00
374d022593
fix: update compose submodule - permission fix for atomic writes
2026-05-09 15:50:42 +00:00
9679846cdb
feat: update compose submodule - Ryan high voice
2026-05-09 15:21:59 +00:00
4056f91ec6
fix: update compose submodule - remove patch step
2026-05-09 14:28:44 +00:00
1ba7d31d2f
fix: update compose submodule - patch path fix
2026-05-09 14:27:16 +00:00
c7e9f8a1e0
feat: update compose submodule for Norman voice
2026-05-09 14:20:55 +00:00
bbe1a4a850
fix: update compose submodule - ca-certificates
2026-05-09 14:15:01 +00:00
2b8316060c
fix: update compose submodule - COPY path fix
2026-05-09 14:12:15 +00:00
cc2c62faf7
fix: update compose submodule - Dockerfile heredoc fix
2026-05-09 14:09:59 +00:00
47f1ba6cf2
fix: update compose submodule - clean patch script
2026-05-09 13:59:17 +00:00
db89881d75
fix: update compose submodule for full OPENROUTER_API_KEY
2026-05-09 13:55:47 +00:00
0bb0a270e6
fix: update compose submodule for clean Piper Dockerfile
2026-05-09 13:42:02 +00:00
41256ccbde
fix: update compose submodule for Piper TTS (replaces Coqui/ROCm)
2026-05-09 13:24:17 +00:00
e551f0e5c5
feat: update compose submodule for ROCm + Coqui TTS Dockerfile
2026-05-09 04:10:05 +00:00
b11d599f37
fix: update compose submodule for simplified Dockerfile
2026-05-09 02:38:41 +00:00
782f2fa9ed
feat(hermes): update compose submodule for ROCm GPU voice STT support
2026-05-09 00:22:08 +00:00
2e14069584
Merge pull request 'feat: add WireGuard VPN stack' ( #33 ) from feat/wireguard-vpn into master
...
Reviewed-on: #33
2026-05-09 00:13:36 +00:00
c53460c400
fix: remove dns option from wireguard config (not a valid nixos option)
2026-05-05 03:26:44 +00:00
Robert
ee96593e3d
Merge branch 'feat/wireguard-vpn' of ssh://code.lazyworkhorse.net:2222/gortium/infra into feat/wireguard-vpn
2026-05-04 23:22:35 -04:00
Robert
030125ab01
Added wireguard pass
2026-05-04 23:21:36 -04:00
Robert
5935747902
Security fixes
2026-05-04 23:20:57 -04:00
Robert
9ae0f6ad62
Submodule update
2026-05-04 23:20:03 -04:00
5c481d664a
fix: split tunnel on host VPN - only route 10.8.0.0/24
2026-05-05 02:41:29 +00:00
94a7c7195a
fix: remove exposed keys from comments
2026-05-05 02:12:55 +00:00
cf279c4fb0
feat: add host-level WireGuard client via networking.wireguard
...
- Add wg0 interface config with agenix-managed secrets
- Revert compose submodule to remove NET_ADMIN from Hermes
- WireGuard runs at host level, all containers inherit the tunnel
2026-05-05 02:11:41 +00:00
b9289a149d
chore: update compose submodule for Hermes NET_ADMIN + WireGuard Dockerfile
2026-05-05 01:48:24 +00:00
e0068260cb
chore: move Hermes Dockerfile to compose repo, add WireGuard tools
...
- Move Dockerfile.full from infra/docker/hermes to compose/ai/Dockerfile
- Add wireguard-tools and openresolv to Hermes image
- Remove stray docker/hermes directory from infra
2026-05-05 01:43:42 +00:00
a42b2ff65d
chore: update compose submodule to wireguard-vpn (fix ref)
2026-05-05 01:21:34 +00:00
