infra

Go to file

Hermes Agent 48245518a1 fix: load iptables kernel modules for WireGuard NAT

wg-easy needs iptable_nat and iptable_filter to set up
masquerading for VPN traffic. These modules must be loaded
at boot for the container to access iptables.

2026-05-05 01:17:14 +00:00

.planning

Progress dump before ai agent

2026-04-04 04:57:47 -04:00

assets

feat: add WireGuard VPN stack

2026-05-04 22:49:06 +00:00

docker/hermes

security: harden lazyworkhorse with firewall, fail2ban, SSH hardening

2026-04-30 17:46:39 +00:00

hosts

fix: load iptables kernel modules for WireGuard NAT

2026-05-05 01:17:14 +00:00

lib

feat: isolate docker networks and add cyt-pi remote node config

2026-04-06 19:14:57 -04:00

modules/nixos

olllama template fix to remove currenttime

2026-04-30 21:54:47 -04:00

secrets

feat: isolate docker networks and add cyt-pi remote node config

2026-04-06 19:14:57 -04:00

shells

Used agenix to manage secrets, 4 services up, ssh

2025-08-08 17:00:47 -04:00

users

security: remove deployment commands from ai-worker sudo rules

2026-04-30 17:46:39 +00:00

.gitmodules

Used agenix to manage secrets, 4 services up, ssh

2025-08-08 17:00:47 -04:00

AGENTS.md

fix: move filter into jail settings (NixOS submodule doesn't pass string filters)

2026-05-01 11:59:33 +00:00

flake.lock

feat: isolate docker networks and add cyt-pi remote node config

2026-04-06 19:14:57 -04:00

flake.nix

feat: isolate docker networks and add cyt-pi remote node config

2026-04-06 19:14:57 -04:00