Hermes 09c8211e58 feat: add Hyperspace Pods NixOS module ...

Create modules/nixos/services/hyperspace.nix for Hyperspace Pods P2P AI cluster agent. Registered in flake.nix under lazyworkhorse modules list.

- Fetches CLI binary v5.45.30 via fetchurl with SRI hash verification
- Systemd system service: auto profile, api port 8080, ai-worker user
- GPU device access via DeviceAllow (kfd+dri) and video+render groups
- Service hardening: NoNewPrivileges, ProtectHome, ProtectSystem, PrivateTmp
- Firewall: TCP 4001 (libp2p), 30301 (chain), 8080 (API); UDP 4001 (libp2p)
- AMD MI50 ROCm compatibility via HSA_OVERRIDE_GFX_VERSION=9.0.6

2026-05-20 14:06:10 -04:00

.planning

Progress dump before ai agent

2026-04-04 04:57:47 -04:00

assets

Update submodule for syncthing

2026-05-18 20:31:07 -04:00

hosts

feat: add Syncthing firewall port and update compose submodule

2026-05-14 21:36:26 -04:00

lib

feat: isolate docker networks and add cyt-pi remote node config

2026-04-06 19:14:57 -04:00

modules/nixos

feat: add Hyperspace Pods NixOS module

2026-05-20 14:06:10 -04:00

secrets

Merge remote-tracking branch 'origin/master' into ai-worker-restricted-access

2026-05-10 17:06:58 -04:00

shells

Used agenix to manage secrets, 4 services up, ssh

2025-08-08 17:00:47 -04:00

users

Merge branch 'master' into ai-worker-restricted-access

2026-05-03 05:28:39 -04:00

.gitmodules

Used agenix to manage secrets, 4 services up, ssh

2025-08-08 17:00:47 -04:00

AGENTS.md

fix: move filter into jail settings (NixOS submodule doesn't pass string filters)

2026-05-01 11:59:33 +00:00

flake.lock

feat: isolate docker networks and add cyt-pi remote node config

2026-04-06 19:14:57 -04:00

flake.nix

feat: add Hyperspace Pods NixOS module

2026-05-20 14:06:10 -04:00

Description

My whole infra configuration

702 KiB

Languages

Nix 91.8%

Dockerfile 8.2%