Commit Graph

Select branches

Hide Pull Requests

ai-worker-restricted-access

archive/uconsole-cm5-v3

docs/merge-priority-order

feat/add-paperclip-agent-orchestrator

feat/add-uconsole-host

feat/compose-submodule-v2

feat/docker-add-chromium-browser-deps

feat/docker-add-curl-poppler-imagemagick

feat/docker-add-latex-stack

feat/docker-add-qemu-cross-compilation

feat/fork-nixos-uconsole-cm5-fix

feat/hermes-fork-dockerfile

feat/hermes-voice-gpu-support

feat/hermes-workers

feat/hermes-workspace

feat/hermes-workspace-combined

feat/hermes43-llamacpp

feat/home-manager

feat/hyperspace-pods-module

feat/k3s-pod-cluster

feat/kvm-libvirt

feat/nix-deployment-v2

feat/nixos-ci

feat/nixos-ci-workflow

feat/remote-builders

feat/restrict-docker-blacklist

feat/restrict-docker-commands-for-ai-worker

feat/rollback-sentinel-on-fresh-branch

feat/syncthing-org-sync

feat/temp-16tb-btrbk

feat/uconsole-cm5-v2

feat/uconsole-cm5-v3

feat/update-compose-submodule-custom-tools

feat/ups-config

feat/wireguard-vpn

feat/worldmonitor

feature/server-hardening-clean

fix/backup-compose-os-upgrade

fix/backup-network-v2

fix/backup-submodule-update

fix/hermes-entrypoint-simple

fix/hermes-matrix-deps-venv-persist

fix/hermes-s6-overlay-entrypoint-crash

fix/hermes-submodule-update

fix/hoardingcow-nfs-mount-options

fix/honcho-vector-dim-empty

fix/matrix-bridge-v2

fix/remove-stale-copy

fix/uconsole-cm5-panel-timing

fix/update-compose-submodule-matrix-bridge

fix/vpn-iptables-nft-upstream

fix/vpn-iptables-nft-v2

fix/vpn-iptables-nft-v3

fix/wg-easy-iptables-nft

hermes-backup-feat-uconsole

hermes-backup-infra-test-sentinel-master

hermes-backup-master

hermes-save-infra

hermes-save-infra-test-sentinel-2026-07-01

home_manager

kvm-pr

kvm-pr-consolidate

local_changes

master

uconsole-cm5-incremental

#1

#10

#11

#12

#13

#17

#18

#19

#2

#20

#21

#22

#23

#24

#25

#27

#28

#29

#3

#30

#31

#33

#34

#35

#36

#37

#38

#39

#40

#41

#42

#43

#44

#45

#46

#47

#48

#5

#51

#52

#53

#54

#56

#57

#59

#6

#61

#63

#64

#65

#67

#68

#69

#7

#70

#71

#72

#73

#74

#75

#76

#77

#78

#79

#8

#80

#81

#9

Mono Color

• ec3da64594 feat: add CI workflow and integration test stub Hermes 2026-05-16 12:04:25 -04:00
• f1b1e5dc4c cleanup-remove-stray-plan-file Hermes 2026-05-15 21:14:28 -04:00
• 9158a0f93b staging-vm-full-module Hermes 2026-05-15 21:12:53 -04:00
• 0980dca455 fix: update compose submodule to Traefik-routed Syncthing Hermes 2026-05-14 21:40:12 -04:00
• 96bc20ab70 feat: add Syncthing firewall port and update compose submodule Hermes 2026-05-14 21:36:26 -04:00
• 670ae4f002 Merge pull request 'fix: update compose submodule — use ln -sf for iptables-nft' (#46) from fix/vpn-iptables-nft-v3 into master Thierry Pouplier 2026-05-13 17:00:16 +00:00
• f785abfd49 fix: update compose submodule — use ln -sf for iptables-nft fix/vpn-iptables-nft-v3 Hermes 2026-05-13 12:59:04 -04:00
• 1fc444540f fix: update compose submodule — use ln -sf for iptables-nft fix/vpn-iptables-nft-v2 Hermes 2026-05-13 12:57:19 -04:00
• 6f44aa7f76 Merge pull request 'fix: update compose submodule — remove apk add iptables-nft' (#45) from fix/vpn-iptables-nft-v2 into master Thierry Pouplier 2026-05-13 16:49:39 +00:00
• 8d40f1691f fix: update compose submodule — remove apk add iptables-nft Hermes 2026-05-13 12:49:14 -04:00
• 19fc2a2404 fix: update compose submodule — remove apk add iptables-nft fix/vpn-iptables-nft-upstream Hermes 2026-05-13 12:47:39 -04:00
• 2dd2e64986 Merge remote-tracking branch 'origin/master' Robert 2026-05-13 12:42:54 -04:00
• 23fc5e0597 Give a little more ssh room for tramp Robert 2026-05-13 12:41:09 -04:00
• 0c9c33d735 Merge pull request 'fix: update wg-easy to official ghcr image with iptables-nft' (#44) from fix/vpn-iptables-nft-upstream into master Thierry Pouplier 2026-05-13 16:39:56 +00:00
• 0bb6890f1c chore: merge master into branch Hermes 2026-05-13 12:39:05 -04:00
• 9d5434425f fix: update compose submodule for wg-easy iptables-nft fix Hermes 2026-05-13 12:30:47 -04:00
• ef7f06166b Removed double file feat/nixos-ci Robert 2026-05-13 10:04:57 -04:00
• e70516e78b Added access to the secret to version control Robert 2026-05-13 10:03:14 -04:00
• ce3a327ff7 The key changed apparently? it works with that one anyway Robert 2026-05-13 10:01:58 -04:00
• 1fb4320dd1 Merge pull request 'feat: update compose submodule for custom tools startup' (#43) from feat/update-compose-submodule-custom-tools into master Thierry Pouplier 2026-05-13 13:58:27 +00:00
• 51e9f47fd4 feat: update compose submodule for custom tools startup feat/update-compose-submodule-custom-tools Hermes 2026-05-13 09:56:24 -04:00
• 37d690e4de feat: add KVM/libvirt support for staging VM feat/kvm-libvirt Hermes 2026-05-12 19:15:03 -04:00
• 06b3eb840f fix: update compose submodule for wg-easy iptables-nft fix fix/wg-easy-iptables-nft Hermes 2026-05-12 16:29:51 -04:00
• af38655170 Adding the runner key Robert 2026-05-10 22:23:29 -04:00
• dcf5ac6b5e fix: use nixos-builder label for NixOS CI Hermes 2026-05-10 22:15:53 -04:00
• d78de94f94 feat: add NixOS build CI for infra PRs Hermes 2026-05-10 22:15:02 -04:00
• 262d329988 feat: update compose submodule to feat/ollama-gfx906 with hermes/ollama split feat/compose-submodule-v2 Hermes 2026-05-10 20:33:35 -04:00
• 25281cc5b7 feat: update compose submodule for Hermes fork Dockerfile Hermes 2026-05-10 17:56:28 -04:00
• 28ab52209c Merge pull request 'Add restricted AI worker access with deployment capabilities' (#1) from ai-worker-restricted-access into master Thierry Pouplier 2026-05-11 00:48:29 +00:00
• e6f7f0c263 Merge branch 'ai-worker-restricted-access' of ssh://code.lazyworkhorse.net:2222/gortium/infra into ai-worker-restricted-access Robert 2026-05-10 18:06:46 -04:00
• 4b4f0ef09e feat: update compose submodule for Hermes fork Dockerfile feat/hermes-fork-dockerfile Hermes 2026-05-10 17:56:28 -04:00
• 5c136e0765 Merge remote-tracking branch 'origin/master' into ai-worker-restricted-access Robert 2026-05-10 17:06:58 -04:00
• f722af7803 New ollama model creator module version Robert 2026-05-10 16:56:09 -04:00
• c07debf088 Added wireguard keys Robert 2026-05-10 16:51:32 -04:00
• 6806898f04 feat: update compose submodule for ollama-gfx906 (v0.23.2) + add ollama Dockerfile Hermes 2026-05-10 10:12:34 -04:00
• 6b2e7a626f feat: update compose submodule for ollama-gfx906 (v0.23.2) + add Dockerfile ai-worker-restricted-access Hermes 2026-05-10 10:09:06 -04:00
• 96e77c5ef2 Revert "feat: add ai-optimizer benchmark plan and state tracking for ollama GPU benchmarking" Hermes 2026-05-09 20:19:26 +00:00
• ff7303cf6a feat: add ai-optimizer benchmark plan and state tracking for ollama GPU benchmarking Hermes 2026-05-09 20:13:08 +00:00
• 9e42f5d2cc Merge pull request 'feat(hermes): update compose submodule for Piper TTS' (#34) from feat/voice-support-v2 into master Thierry Pouplier 2026-05-09 19:40:05 +00:00
• 878cfc1d99 Merge remote-tracking branch 'origin/master' into ai-worker-restricted-access Hermes Agent 2026-05-09 16:11:32 +00:00
• ceb58bcf76 chore: update flake.lock and fix merge conflict Hermes Agent 2026-05-09 16:10:30 +00:00
• 614883f3c3 fix: update compose submodule - startup permission fix for data volume Hermes Agent 2026-05-09 16:04:39 +00:00
• 374d022593 fix: update compose submodule - permission fix for atomic writes Hermes Agent 2026-05-09 15:50:42 +00:00
• 9679846cdb feat: update compose submodule - Ryan high voice Hermes Agent 2026-05-09 15:21:59 +00:00
• 4056f91ec6 fix: update compose submodule - remove patch step Hermes Agent 2026-05-09 14:28:44 +00:00
• 1ba7d31d2f fix: update compose submodule - patch path fix Hermes Agent 2026-05-09 14:27:16 +00:00
• c7e9f8a1e0 feat: update compose submodule for Norman voice Hermes Agent 2026-05-09 14:20:55 +00:00
• bbe1a4a850 fix: update compose submodule - ca-certificates Hermes Agent 2026-05-09 14:15:01 +00:00
• 2b8316060c fix: update compose submodule - COPY path fix Hermes Agent 2026-05-09 14:12:15 +00:00
• cc2c62faf7 fix: update compose submodule - Dockerfile heredoc fix Hermes Agent 2026-05-09 14:09:59 +00:00
• 47f1ba6cf2 fix: update compose submodule - clean patch script Hermes Agent 2026-05-09 13:59:17 +00:00
• db89881d75 fix: update compose submodule for full OPENROUTER_API_KEY Hermes Agent 2026-05-09 13:55:47 +00:00
• 0bb0a270e6 fix: update compose submodule for clean Piper Dockerfile Hermes Agent 2026-05-09 13:42:02 +00:00
• 41256ccbde fix: update compose submodule for Piper TTS (replaces Coqui/ROCm) Hermes Agent 2026-05-09 13:24:17 +00:00
• e551f0e5c5 feat: update compose submodule for ROCm + Coqui TTS Dockerfile Hermes Agent 2026-05-09 04:10:05 +00:00
• b11d599f37 fix: update compose submodule for simplified Dockerfile Hermes Agent 2026-05-09 02:38:41 +00:00
• 782f2fa9ed feat(hermes): update compose submodule for ROCm GPU voice STT support Hermes Agent 2026-05-09 00:22:08 +00:00
• 2e14069584 Merge pull request 'feat: add WireGuard VPN stack' (#33) from feat/wireguard-vpn into master Thierry Pouplier 2026-05-09 00:13:36 +00:00
• c53460c400 fix: remove dns option from wireguard config (not a valid nixos option) feat/wireguard-vpn Hermes Agent 2026-05-05 03:26:17 +00:00
• ee96593e3d Merge branch 'feat/wireguard-vpn' of ssh://code.lazyworkhorse.net:2222/gortium/infra into feat/wireguard-vpn Robert 2026-05-04 23:22:35 -04:00
• 030125ab01 Added wireguard pass Robert 2026-05-04 23:21:36 -04:00
• 5935747902 Security fixes Robert 2026-05-04 23:20:57 -04:00
• 9ae0f6ad62 Submodule update Robert 2026-05-04 23:20:03 -04:00
• 5c481d664a fix: split tunnel on host VPN - only route 10.8.0.0/24 Hermes Agent 2026-05-05 02:41:29 +00:00
• 94a7c7195a fix: remove exposed keys from comments Hermes Agent 2026-05-05 02:12:55 +00:00
• cf279c4fb0 feat: add host-level WireGuard client via networking.wireguard Hermes Agent 2026-05-05 02:11:41 +00:00
• b9289a149d chore: update compose submodule for Hermes NET_ADMIN + WireGuard Dockerfile Hermes Agent 2026-05-05 01:48:24 +00:00
• e0068260cb chore: move Hermes Dockerfile to compose repo, add WireGuard tools Hermes Agent 2026-05-05 01:43:42 +00:00
• a42b2ff65d chore: update compose submodule to wireguard-vpn (fix ref) Hermes Agent 2026-05-05 01:21:34 +00:00
• 92bcf1cc04 chore: update compose submodule to wireguard-vpn Hermes Agent 2026-05-05 01:21:19 +00:00
• 7d0b72a513 chore: update compose submodule to linuxserver/wireguard Hermes Agent 2026-05-05 01:18:13 +00:00
• 48245518a1 fix: load iptables kernel modules for WireGuard NAT Hermes Agent 2026-05-05 01:17:14 +00:00
• 1673a56439 feat: add WireGuard VPN stack Hermes Agent 2026-05-04 22:49:06 +00:00
• 7d3d072961 Merge branch 'master' into ai-worker-restricted-access Robert 2026-05-03 05:28:39 -04:00
• 4cceab05d0 Merge pull request 'security: harden lazyworkhorse with firewall, fail2ban, SSH hardening' (#28) from feature/server-hardening-clean into master Thierry Pouplier 2026-05-03 09:11:56 +00:00
• f4b666284a feat: add Hyperspace Pods NixOS module and enable on lazyworkhorse feat/k3s-pod-cluster Hermes Agent 2026-05-02 15:36:15 +00:00
• 815ca3afa6 chore: update compose submodule to traefik logging branch Hermes Agent 2026-05-01 03:08:21 +00:00
• e983775c04 docs: add merge priority order with security hardening as #1 priority Hermes Agent 2026-04-30 18:37:04 +00:00
• bcebf18676 fix: move filter into jail settings (NixOS submodule doesn't pass string filters) feature/server-hardening-clean Hermes Agent 2026-05-01 11:59:33 +00:00
• 0370d784a0 fix: http-botsearch logpath must be string, not list Hermes Agent 2026-05-01 04:02:06 +00:00
• 260b2d2756 fix: restructure fail2ban jails per NixOS module - recidive in jails, settings attr, str bantime Hermes Agent 2026-05-01 03:59:32 +00:00
• 2477acdfc7 fix: services.fail2ban top-level options - no findtime, maxretry lowercase Hermes Agent 2026-05-01 03:57:21 +00:00
• 81c25d3f20 fix: use security.auditd instead of services.auditd Hermes Agent 2026-05-01 03:55:09 +00:00
• 9b1f467db9 fix: remove invalid networking.firewall.defaultAllow option Hermes Agent 2026-05-01 03:52:57 +00:00
• 65fa778b2b fix: add custom traefik fail2ban filters for http-auth and http-botsearch jails Hermes Agent 2026-05-01 03:03:08 +00:00
• 5d3bbe99f3 chore: update compose submodule for traefik access logs Hermes Agent 2026-05-01 03:33:34 +00:00
• bcf5cadaa0 olllama template fix to remove currenttime Robert 2026-04-30 21:54:47 -04:00
• 25404466bb docs: add merge priority order with security hardening as #1 priority docs/merge-priority-order Hermes Agent 2026-04-30 18:37:04 +00:00
• 3e04ccc1e8 security: remove deployment commands from ai-worker sudo rules Hermes Agent 2026-04-30 17:36:13 +00:00
• 21bd4bb283 security: add restricted sudo for ai-worker with security audit commands Hermes Agent 2026-04-30 17:33:05 +00:00
• 7994aad8d8 security: harden lazyworkhorse with firewall, fail2ban, SSH hardening Hermes Agent 2026-04-30 17:07:10 +00:00
• bb64234223 fix: keep root user in Dockerfile (match upstream image) feat/hermes-voice-gpu-support Hermes Agent 2026-04-30 15:14:35 +00:00
• 9fbfc1dc51 feat(hermes): add Dockerfile for voice support with GPU STT Hermes Agent 2026-04-30 15:12:03 +00:00
• 7e3afe6630 feat(hermes): add voice support with GPU-accelerated STT Hermes Agent 2026-04-30 15:10:10 +00:00
• 568e0006de fix: correct sha256 hashes for Reticulum packages feat/uconsole-cm5-v2 Hermes Agent 2026-04-29 20:42:05 +00:00
• 8325cf27b6 feat(uconsole): add Reticulum network stack packages Hermes Agent 2026-04-29 20:22:50 +00:00
• f54a922b8b feat: add uConsole CM5 host configuration Hermes Agent 2026-04-29 17:26:33 +00:00
• 8b004c47b9 feat: add NixOS deployment infrastructure Hermes Agent 2026-04-29 18:56:36 +00:00
• 61a93a2464 update compose submodule to fix/matrix-bridge-dependencies (mautrix fix) fix/matrix-bridge-v2 Hermes Agent 2026-04-29 03:35:12 +00:00
• 3bcf286476 fix: Update compose submodule for Matrix bridge dependencies Hermes Agent 2026-04-29 02:24:47 +00:00