e03f09c247
Merge feat/remote-builders into uconsole-cm5-incremental
...
Bidirectional remote building + rename uconsole-cm5 -> uConsole:
- Rename all uconsole-cm5 refs to uConsole (nixosSystem key, paths, module)
- Replace single-machine remote-builder module with multi-machine config
- Enable remote builder on lazyworkhorse -> uConsole (aarch64)
- Enable remote builder on uConsole -> lazyworkhorse (x86_64)
- Add builder system user + SSH key via agenix-rekey (secrets/builder_key.age)
- Add builder_key + gortium_password age secrets to all hosts
- Fix pre-existing bugs: missing modules in lazyworkhorse/cyt-pi,
SSH config structure (hostKeys outside settings), cyt-pi inline user
- Remove obsolete openclaw-node service + module + age secrets
2026-06-21 23:14:14 -04:00
e991359584
add gortium password age secret
2026-06-14 21:34:42 -04:00
9004163891
feat: add agenix secret for gortium password on uConsole
...
- Add gortium_password.age entry in secrets.nix
- Add age.secrets.gortium_password in uConsole config
- Add hashedPasswordFile to existing gortium user
- Add ai-worker user for Hermes SSH access
2026-06-14 19:53:40 -04:00
efc50d23c4
Added home wifi infos
2026-06-12 16:19:57 -04:00
a527b65eae
fix(uconsole): rename secret to home_wifi (shared across hosts, not uconsole-specific)
2026-06-12 16:17:48 -04:00
698d3f91eb
feat(uconsole): add agenix secret for WiFi credentials
...
- age.secrets.uconsole-wifi (SSID+password in encrypted file)
- systemd service ensure-wifi reads decrypted secret and configures NM
- agenix.nixosModules.default imported for uconsole-cm5
- uconsole-wifi.age declared in secrets/secrets.nix
2026-06-12 16:15:37 -04:00
Robert
5c136e0765
Merge remote-tracking branch 'origin/master' into ai-worker-restricted-access
2026-05-10 17:06:58 -04:00
Robert
c07debf088
Added wireguard keys
2026-05-10 16:51:32 -04:00
Robert
030125ab01
Added wireguard pass
2026-05-04 23:21:36 -04:00
Robert
bc875ef9fb
feat: isolate docker networks and add cyt-pi remote node config
...
- Refactor all 12 compose stacks to use isolated networks with Traefik as the hub
- Add openclaw-ssh sidecar to ai stack for reverse tunneling (port 2425)
- Add sshnode entrypoint to Traefik configuration
- Add cyt-pi host configuration for Pi Zero 2 W (headless)
- Include kismet and target_detector_cli services for remote Wi-Fi monitoring
- Add reverse SSH tunnel service via autossh
2026-04-06 19:14:57 -04:00
Robert
ce20fad4d3
fix: enable flake-self-attrs for lix compatibility
2026-04-04 16:54:10 -04:00
Robert
401b23ce46
feat: add openclaw node service and migrate to lix
...
- Add headless openclaw node systemd service for host execution
- Migrate from nix to lix package manager
- Permit openclaw-2026.3.12 (insecure package warning)
- Use ai-worker user for node service
2026-04-04 16:26:33 -04:00
13dbf18f67
Progress dump before ai agent
2026-04-04 04:57:47 -04:00
056c39aa71
chore: update flake imports and infrastructure secrets
2026-01-01 02:25:40 -05:00
71dfd04108
chore: add n8n-worker user and update authentication configuration
2026-01-01 02:25:34 -05:00
b54760f62b
docs: initialize NixOS infrastructure with AI assistant
...
Creates PROJECT.md with vision and requirements.
Creates config.json with interactive workflow mode.
2026-01-01 01:36:58 -05:00
a4c5a10c4f
Forgot these..
2025-08-31 16:52:04 -04:00
40a48eb605
Rekey the secret
2025-08-31 16:30:07 -04:00
266f563c2f
Fixed host ssh key
2025-08-31 16:19:39 -04:00
a8851c19e4
Working bootstrap key
2025-08-24 19:02:42 -04:00
3497d93dcb
Added a bootstrap key
2025-08-19 18:00:09 -04:00
955c3255a0
WIP on host ssh key. broken.
2025-08-17 17:26:59 -04:00
911f3589a2
Used agenix to manage secrets, 4 services up, ssh
2025-08-08 17:00:47 -04:00
