Thierry Pouplier 4cceab05d0 Merge pull request 'security: harden lazyworkhorse with firewall, fail2ban, SSH hardening' (#28) from feature/server-hardening-clean into master ...

Reviewed-on: #28

2026-05-03 09:11:56 +00:00

.planning

Progress dump before ai agent

2026-04-04 04:57:47 -04:00

assets

chore: update compose submodule for traefik access logs

2026-05-01 03:33:34 +00:00

docker/hermes

security: harden lazyworkhorse with firewall, fail2ban, SSH hardening

2026-04-30 17:46:39 +00:00

hosts

fix: move filter into jail settings (NixOS submodule doesn't pass string filters)

2026-05-01 11:59:33 +00:00

lib

feat: isolate docker networks and add cyt-pi remote node config

2026-04-06 19:14:57 -04:00

modules/nixos

olllama template fix to remove currenttime

2026-04-30 21:54:47 -04:00

secrets

feat: isolate docker networks and add cyt-pi remote node config

2026-04-06 19:14:57 -04:00

shells

Used agenix to manage secrets, 4 services up, ssh

2025-08-08 17:00:47 -04:00

users

security: remove deployment commands from ai-worker sudo rules

2026-04-30 17:46:39 +00:00

.gitmodules

Used agenix to manage secrets, 4 services up, ssh

2025-08-08 17:00:47 -04:00

AGENTS.md

fix: move filter into jail settings (NixOS submodule doesn't pass string filters)

2026-05-01 11:59:33 +00:00

flake.lock

feat: isolate docker networks and add cyt-pi remote node config

2026-04-06 19:14:57 -04:00

flake.nix

feat: isolate docker networks and add cyt-pi remote node config

2026-04-06 19:14:57 -04:00

Description

My whole infra configuration

702 KiB

Languages

Nix 91.8%

Dockerfile 8.2%