straylight: expose llama-server on the tailnet
Bind 0.0.0.0 and open 11434 on tailscale0 only, so localhost and other tailnet machines can reach the OpenAI-compatible API. LAN stays closed. rebuild-nixos deploys committed master, not the working tree.
This commit is contained in:
@@ -8,8 +8,9 @@ A flake-based NixOS configuration managing 8 hosts (all x86_64-linux). Pinned to
|
||||
|
||||
## Common Commands
|
||||
|
||||
- **Build/deploy locally**: `rebuild-nixos` (installed to `~/.local/bin` via `make`)
|
||||
- This runs on the target machine: pulls from local git remote, then `doas nixos-rebuild switch --flake .`
|
||||
- **Build/deploy locally**: commit the working tree, then `rebuild-nixos` (installed to `~/.local/bin` via `make`)
|
||||
- `rebuild-nixos` pulls committed `master` from the local git remote into `/etc/nixos`, then `doas nixos-rebuild switch --flake .`
|
||||
- Uncommitted changes are not deployed. Do not `nixos-rebuild switch` against the working tree.
|
||||
- **Build a specific host** (dry run): `nixos-rebuild build --flake .#<hostname>`
|
||||
- **Flash a remote machine**: `./script/flash.sh <config-name> <ssh-address>` (uses nixos-anywhere)
|
||||
- **Check if reboot needed**: `./script/check-restart.sh`
|
||||
|
||||
Reference in New Issue
Block a user