kyle
276cfc48a9
Add mcp system user for MCP agent
2026-03-26 13:01:33 -07:00
kyle and Claude Opus 4.6
1914ee39fd
Add plugdev group for FIDO2 device access.
...
The u2f udev rules set GROUP=plugdev on hidraw devices, but the
group didn't exist. Create it and add kyle to it so FIDO2 keys
are accessible without relying on logind uaccess ACLs.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-26 12:54:42 -07:00
kyle and Claude Opus 4.6
184c237335
Use libfido2 udev rules for universal FIDO2 device access.
...
Replace vendor-specific hidraw rule (3434) with libfido2 udev
package which covers all FIDO2 devices. Fixes FIDO2 key visibility
on orion.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-26 12:36:41 -07:00
kyle
28100fc74d
switch to sgard-fido2
2026-03-26 12:19:46 -07:00
kyle
1e1618e5bd
update sgard
2026-03-26 12:00:44 -07:00
kyle
44afdeedd0
update sgard
2026-03-26 11:28:15 -07:00
kyle
a977a1dd1d
update sgard
2026-03-26 11:15:49 -07:00
kyle
f9057084ff
update sgard
2026-03-26 10:16:11 -07:00
kyle and Claude Opus 4.6
170c4ab67d
orion: route mcp.metacircular.net zone to rift via resolved
...
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-26 09:04:37 -07:00
kyle
0d1fe5536f
Enable fido2 luks on orion/rift.
2026-03-26 08:56:02 -07:00
kyle
7be8a4c5e6
orion/rift -> systemd initrd
...
Allows for FIDO2 LUKS unlock.
2026-03-26 08:48:53 -07:00
kyle
45293e60ed
update mcdeploy
2026-03-26 00:58:46 -07:00
kyle and Claude Opus 4.6
fa0c7b1510
Add mcdeploy to flake inputs and system packages
...
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-26 00:33:36 -07:00
kyle
4b0067641d
iw
2026-03-25 23:27:04 -07:00
kyle
56621710dd
update rift dns resolver
2026-03-25 22:51:34 -07:00
kyle
4163d2525a
flake updates
2026-03-25 22:04:53 -07:00
kyle
693875b10e
compute
2026-03-25 21:59:30 -07:00
kyle
79c6fea4ae
update sgard
2026-03-25 21:55:20 -07:00
kyle
112036889e
nix flake update
2026-03-25 21:38:06 -07:00
kyle
796cde1d2f
don't gc if rebuild fails
2026-03-25 21:36:34 -07:00
kyle
a53eb42316
protobuffing
2026-03-25 21:32:21 -07:00
kyle
146393e881
update sgard
2026-03-25 21:30:30 -07:00
kyle
f8a53f6f63
protoc
2026-03-25 21:27:15 -07:00
kyle and Claude Opus 4.6
71702dfb06
Add metacircular control programs to rift, orion, and vade
...
Install mciasctl, mciasgrpcctl, mcrctl, and mcproxyctl via new
configs/mcpkg.nix module. Adds flake inputs for mcias, mcr, and
mc-proxy from git.wntrmute.dev.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-25 21:11:25 -07:00
kyle
9680c31a7b
adding cert flake
2026-03-25 20:22:59 -07:00
kyle
ea335dbe57
add cert
2026-03-25 20:21:24 -07:00
kyle and Claude Opus 4.6
a09dd925ac
rift: open firewall for mc-proxy (443, 8443, 9443) and exod (8080, 9090)
...
Remove implicit reliance on temp iptables rules. All externally
accessible ports are now declared in NixOS config.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-25 19:51:38 -07:00
kyle and Claude Opus 4.6
87be4e34d3
Add WNTRMUTE issuing CA to system trust store
...
All NixOS machines now trust the Metacircular platform CA. This
allows curl, browsers, and Go services to verify TLS certificates
issued by Metacrypt without --insecure or custom CA flags.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-25 19:30:24 -07:00
kyle and Claude Opus 4.6
73be02eaae
vade: route mcp.metacircular.net zone to rift via resolved
...
Link-level DNS from DHCP and Tailscale takes priority over global
nameservers in systemd-resolved. Use domain routing (~mcp.metacircular.net)
so resolved sends only internal zone queries to rift's CoreDNS.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-25 19:22:35 -07:00
kyle and Claude Opus 4.6
0268a0c721
Disable exo flake input (broken flake.nix upstream)
...
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-25 19:20:59 -07:00
kyle and Claude Opus 4.6
eecb3973b1
rift: allow port 53 for CoreDNS, vade: use rift as DNS
...
rift: sysctl to allow rootless containers to bind port 53, open
firewall for DNS queries from LAN clients.
vade: point nameservers at rift (LAN + Tailscale) for internal
service resolution via CoreDNS (MCNS precursor). Falls back to
1.1.1.1/8.8.8.8 via systemd-resolved.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-25 19:19:02 -07:00
kyle
b49b7ca2e3
let's get exo working
2026-03-25 17:07:09 -07:00
kyle
998a1d9aaf
fix stylus support
2026-03-25 16:29:04 -07:00
kyle
27ce85ebda
update lector
2026-03-25 15:44:17 -07:00
kyle
55a93d3aac
update sgard
2026-03-25 14:09:49 -07:00
kyle
8d34ac5dc3
update sgard
2026-03-25 11:30:34 -07:00
kyle
8ac8e389c0
add xclip
2026-03-25 11:07:03 -07:00
kyle
38d782cdf8
add poppler-utils
2026-03-25 10:41:44 -07:00
kyle
7684c673f2
update lector, kte
2026-03-25 10:39:48 -07:00
kyle
76f1f534d0
add poppler
2026-03-25 10:39:02 -07:00
kyle and Claude Opus 4.6
59fd091632
enable FIDO2/U2F PAM authentication
...
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-25 00:04:51 -07:00
kyle and Claude Opus 4.6
d1aee2f30e
vade: prefer FIDO2 over passphrase for LUKS unlock
...
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-24 23:56:40 -07:00
kyle
6db72017e0
kte update
2026-03-24 23:27:42 -07:00
kyle
efe0252473
flake updates and systemd initrd
2026-03-24 23:23:15 -07:00
kyle
5796f737cf
update lector, sgard
2026-03-24 16:27:35 -07:00
kyle
8d36fcc960
ghostscript
2026-03-24 12:13:01 -07:00
kyle
806c92dc78
zathura and nh clean when rebuilding.
2026-03-24 12:02:03 -07:00
kyle
86b4309360
update lector
2026-03-24 11:16:05 -07:00
kyle
fe8618e620
jpg2pdf for mini-essays
2026-03-24 11:12:11 -07:00
kyle
e6b77c5445
Add arca.
2026-03-24 09:28:42 -07:00
kyle
2c5a7510a0
arca update
2026-03-24 09:25:21 -07:00
kyle
ab5c2be404
scrub images tooling
2026-03-24 09:01:57 -07:00
kyle
cbd300d7f7
flake update
2026-03-24 08:57:27 -07:00
kyle
3a14eee43c
add arca
2026-03-24 08:13:39 -07:00
kyle
1dbcfb409e
mat2
2026-03-24 08:11:14 -07:00
kyle
ccac624f0f
add mutt and signal
2026-03-24 07:47:34 -07:00
kyle
055fd26e36
update lector, sgard
2026-03-24 07:36:55 -07:00
kyle
15a2d99993
update lector
2026-03-24 00:27:15 -07:00
kyle
d7a3ecdc8f
add sgard, update lector.
2026-03-23 22:40:48 -07:00
kyle
4aec63b408
lector v1.0.2
2026-03-23 20:29:08 -07:00
kyle
a4e8701b6e
lector updates
2026-03-23 20:00:10 -07:00
kyle
2e83f21dcf
Update flake.lock
2026-03-23 19:16:54 -07:00
kyle
024b09fea8
lector
2026-03-23 19:16:23 -07:00
kyle
784991633e
add libGL
2026-03-23 10:27:23 -07:00
kyle
7ce38a2e0f
sensors
2026-03-23 08:03:36 -07:00
kyle
34ce33ed10
i3blocks
2026-03-23 07:56:54 -07:00
kyle
d1992fd406
mesa
2026-03-22 15:01:35 -07:00
kyle
62c58ab08e
adding yk tooling
2026-03-21 11:53:45 -07:00
kyle
4b2344e9f1
typo
2026-03-21 11:52:44 -07:00
kyle
7df99a4e42
fido2 tooling
2026-03-21 11:49:41 -07:00
kyle
b3e2f25f28
adding exo packages
2026-03-21 11:27:43 -07:00
kyle
e98d46dc45
flake update
2026-03-20 10:32:44 -07:00
kyle
a5a356e20c
add heroku to vade
2026-03-19 14:42:22 -07:00
kyle and Claude Opus 4.5
fd6f699068
add power optimizations for vade laptop
...
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2026-03-17 18:12:25 -07:00
kyle and Claude Opus 4.5
155f8d4aac
add nixos-hardware module for framework 12 laptop
...
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2026-03-17 18:03:03 -07:00
kyle
43a93f75a7
add acpi
2026-03-17 17:47:01 -07:00
kyle
07f9867eba
updating packages
2026-03-17 17:35:15 -07:00
kyle
8edcc84b03
update kte
2026-03-17 17:33:37 -07:00
kyle
968ee85d1c
kge
2026-03-17 17:28:03 -07:00
kyle
17a926c326
add kte back
2026-03-17 17:25:52 -07:00
kyle
4259770fa6
update kte
2026-03-17 17:21:55 -07:00
kyle
10257d16f4
zeesh
2026-03-17 16:19:05 -07:00
kyle
dfa334971c
whoever is responsible for that boink
...
should be spartan kicked into a volcano
2026-03-17 16:12:04 -07:00
kyle
a720a22945
thumbnailer
2026-03-17 14:55:22 -07:00
kyle
7e99deac86
package updates
2026-03-17 13:44:13 -07:00
kyle and Claude Opus 4.6
2ff1332f41
switch from GDM to LightDM
...
GDM's greeter requires gnome-session-x11@gnome-login.target (from
gnome-shell), which isn't installed on i3-only setups. This caused
gnome-session to crash-loop, leaving a blank screen on boot.
LightDM works without gnome-shell and is a better fit for i3.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-03-17 13:42:51 -07:00
kyle
963b721b63
restore services.xserver.enable lost in desktop-light refactor
...
services.xserver.enable = true was dropped when desktop.nix was split
into desktop-light.nix, causing vade and orion to boot to a blank
screen with no X11/GDM session.
2026-03-17 13:29:09 -07:00
kyle
a14403ac54
stub out kte for now
2026-03-17 12:31:24 -07:00
kyle
e8c45e54d0
add vade hardware config
2026-03-17 12:23:46 -07:00
kyle
3259afc07e
update flake
2026-03-17 12:16:44 -07:00
kyle
099a6e4250
splitting things out for vade
2026-03-16 19:18:26 -07:00
kyle
d3bc36ef59
Start vade.
2026-03-16 18:32:11 -07:00
kyle
0455cbfede
flake update
2026-01-01 11:10:16 -08:00
kyle
7c379b699e
python312
2025-12-22 11:53:41 -08:00
kyle
ab9d307068
fiddling around
2025-12-16 21:23:57 -08:00
kyle
c31c3abe11
turn on gdm debuggery
2025-12-16 21:11:12 -08:00
kyle
9a10410c65
nix flake update
2025-12-16 19:45:24 -08:00
kyle
6fc8f91605
maybe superfluous enable
2025-12-16 19:44:06 -08:00
kyle
31a37bb179
proper kge-qt package name
2025-12-05 10:38:12 -08:00
kyle
3d9ae2fe17
update kge
2025-12-05 10:37:44 -08:00
kyle
