orion: enable sift P1 (pin fac1462)

Add the sift flake input at fac1462e7b3deb2082c9f6ae8dc4676fddf8d089 (git+ssh; git+https cannot auth on orion) and enable services.sift on orion: loopback :8890, tailscale serve :8443 from the module, static home WAN /32 in denyPrefixes. Keys stay on-box.
2026-09-22 22:20:11 -07:00
parent ab3fbb094f
commit 9b745272e6
3 changed files with 33 additions and 1 deletions
@@ -23,6 +23,9 @@
    tracker.url = "git+https://git.wntrmute.dev/kyle/tracker";
    tracker.inputs.nixpkgs.follows = "nixpkgs";

+    sift.url = "git+ssh://git@git.wntrmute.dev/kyle/sift?rev=fac1462e7b3deb2082c9f6ae8dc4676fddf8d089";
+    sift.inputs.nixpkgs.follows = "nixpkgs";
+
    lector.url = "github:kisom/lector";
    lector.inputs.nixpkgs.follows = "nixpkgs";