feat: add Hyperspace Pods NixOS module #56
Open
Hermes
wants to merge 1 commits from
feat/hyperspace-pods-module into master
pull from: feat/hyperspace-pods-module
merge into: gortium:master
gortium:master
gortium:feat/worldmonitor
gortium:feat/ups-config
gortium:feat/rollback-sentinel-on-fresh-branch
gortium:fix/honcho-vector-dim-empty
gortium:fix/backup-submodule-update
gortium:feat/restrict-docker-blacklist
gortium:feat/restrict-docker-commands-for-ai-worker
gortium:fix/hermes-matrix-deps-venv-persist
gortium:feat/uconsole-cm5-v3
gortium:fix/update-compose-submodule-matrix-bridge
gortium:feat/nix-deployment-v2
gortium:kvm-pr
gortium:feat/nixos-ci-workflow
gortium:kvm-pr-consolidate
gortium:feat/hermes-workspace-combined
gortium:feat/hermes-workspace
gortium:feat/hermes-workers
gortium:feat/add-paperclip-agent-orchestrator
gortium:feat/syncthing-org-sync
gortium:fix/vpn-iptables-nft-v3
gortium:fix/vpn-iptables-nft-v2
gortium:fix/vpn-iptables-nft-upstream
gortium:feat/nixos-ci
gortium:feat/update-compose-submodule-custom-tools
gortium:feat/kvm-libvirt
gortium:fix/wg-easy-iptables-nft
gortium:feat/compose-submodule-v2
gortium:feat/hermes-fork-dockerfile
gortium:ai-worker-restricted-access
gortium:feat/wireguard-vpn
gortium:feat/k3s-pod-cluster
gortium:feature/server-hardening-clean
gortium:docs/merge-priority-order
gortium:feat/hermes-voice-gpu-support
gortium:feat/uconsole-cm5-v2
gortium:fix/matrix-bridge-v2
gortium:fix/backup-network-v2
gortium:feat/docker-add-qemu-cross-compilation
gortium:feat/docker-add-latex-stack
gortium:feat/docker-add-chromium-browser-deps
gortium:feat/docker-add-curl-poppler-imagemagick
gortium:feat/add-uconsole-host
gortium:home_manager
1 Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
| 09c8211e58 |
feat: add Hyperspace Pods NixOS module
Create modules/nixos/services/hyperspace.nix for Hyperspace Pods P2P AI cluster agent. Registered in flake.nix under lazyworkhorse modules list. - Fetches CLI binary v5.45.30 via fetchurl with SRI hash verification - Systemd system service: auto profile, api port 8080, ai-worker user - GPU device access via DeviceAllow (kfd+dri) and video+render groups - Service hardening: NoNewPrivileges, ProtectHome, ProtectSystem, PrivateTmp - Firewall: TCP 4001 (libp2p), 30301 (chain), 8080 (API); UDP 4001 (libp2p) - AMD MI50 ROCm compatibility via HSA_OVERRIDE_GFX_VERSION=9.0.6 |