kyle/imladris
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

straylight: restore llama HTTPS every 5s after serve reset

Browse Source 
The OpenCode TLS session keeps running , which
drops https://straylight.scylla-hammerhead.ts.net. Loop the serve
config so the API comes back in seconds.
This commit is contained in:
kyle
2026-09-16 13:22:37 -07:00
parent 62e57955eb
commit 0fdc3c47a8
1 changed files with 14 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
hw/straylight/default.nix
+14 -15
View File
@@ -202,25 +202,24 @@ in
# TLS for the llama.cpp API over the tailnet. Clients using
# https://straylight.scylla-hammerhead.ts.net/v1 hit Tailscale Serve on
# :443, which proxies to llama-server on localhost:11434. A boot oneshot
# is not enough: `tailscale serve reset` clears the config without
# stopping this unit, so a timer re-applies it.
# :443, which proxies to llama-server on localhost:11434. Re-apply every
# 5s so `tailscale serve reset` cannot leave the API dark.
systemd.services.tailscale-serve-llama = {
description = "Tailscale HTTPS proxy for llama-server";
description = "Keep Tailscale HTTPS proxy for llama-server";
after = [ "tailscaled.service" "llama-server.service" ];
wants = [ "tailscaled.service" ];
wantedBy = [ "multi-user.target" ];
serviceConfig = {
Type = "oneshot";
ExecStart = "${pkgs.tailscale}/bin/tailscale serve --bg --https=443 http://127.0.0.1:11434";
};
};
systemd.timers.tailscale-serve-llama = {
description = "Re-apply Tailscale HTTPS proxy for llama-server";
wantedBy = [ "timers.target" ];
timerConfig = {
OnBootSec = "15s";
OnUnitActiveSec = "1min";
Unit = "tailscale-serve-llama.service";
Type = "simple";
Restart = "always";
RestartSec = "5s";
ExecStart = pkgs.writeShellScript "tailscale-serve-llama" ''
set -eu
while true; do
${pkgs.tailscale}/bin/tailscale serve --bg --https=443 http://127.0.0.1:11434 >/dev/null || true
sleep 5
done
'';
};
};