kyle/imladris
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
339 Commits 1 Branch 0 Tags
dba2fb00eb36d221d8410c550d260bc49ca20e94
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
kyle dba2fb00eb update mc packages 2026-04-02 20:43:38 -07:00
kyle 246674369d updated packages 2026-04-02 20:33:24 -07:00
kyle 63bb945506 add opencode to full desktop packages 2026-04-02 17:10:04 -07:00
kyle 9be8f2d8d1 syncthing should run as a user 2026-04-02 16:07:59 -07:00
kyle 9972422fe6 package cleanup 2026-04-02 12:53:17 -07:00
kyle 9310dc0041 add new framework config 2026-04-02 12:43:06 -07:00
kyleandClaude Opus 4.6 de5178747d add straylight emergency recovery script 
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-04-02 00:23:04 -07:00
kyleandClaude Opus 4.6 453947ac7b fix straylight /home LUKS: use initrd instead of crypttab 
Replace fragile environment.etc.crypttab.text with
boot.initrd.luks.devices for the second SSD, matching
the pattern used for the root drive.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-04-02 00:12:14 -07:00
kyle a8e43936cf pass #2 
following random blogs doesn't always work
 2026-04-01 23:53:00 -07:00
kyle 0e9f6d890e straylight hardware 2026-04-01 20:32:08 -07:00
kyle 33f364f12f update mcr 2026-04-01 19:41:41 -07:00
kyle 8ac759b1cf update mcr (for mcrctl) 2026-04-01 18:58:52 -07:00
kyle 0f1f0dcc78 Adding straylight. 2026-04-01 12:39:44 -07:00
kyle fdd7104504 update kte and lector 2026-03-31 14:22:05 -07:00
kyle 101151cdb8 exfatprogs 2026-03-30 22:12:54 -07:00
kyle 16f1d0829c add easytag 2026-03-30 20:36:18 -07:00
kyle 5a0c22f0f7 update mcp 2026-03-30 17:46:40 -07:00
kyle 2abcc39539 really undunst 2026-03-30 17:33:26 -07:00
kyle 316b00cda3 update mcp 2026-03-30 17:32:00 -07:00
kyle 194e36c5de ntfy support 2026-03-30 14:59:35 -07:00
kyle c268ff48b4 adding gvfs 2026-03-30 13:28:15 -07:00
kyle c26f5b9a87 ignore power key on vade 2026-03-30 13:04:53 -07:00
kyle ab66200fe1 update sgard 2026-03-30 09:54:22 -07:00
kyle 62e56188b2 dumbo 2026-03-30 09:19:19 -07:00
kyle e538aa083b moving deja-dup 2026-03-30 09:17:38 -07:00
kyle 7ac4f2e3f2 enable dconf 2026-03-30 09:16:49 -07:00
kyle 66900d9ce6 add deja-dup 2026-03-30 08:23:04 -07:00
kyle efeefb51b3 update mcp 2026-03-29 19:12:03 -07:00
kyle 95e6315ddf update mcp 2026-03-29 18:55:42 -07:00
kyle c2882fcd8b allow mcp to read systemd logs 2026-03-29 18:00:48 -07:00
kyle 07a9463097 update mcp 2026-03-29 17:51:19 -07:00
kyle c9e061d319 update mcp 2026-03-29 17:38:15 -07:00
kyle 5a7164bd20 update mcp 2026-03-29 17:37:45 -07:00
kyle 8f49ba4cf2 update mcp 2026-03-29 17:37:45 -07:00
kyle 4827c6aa20 update mcp 2026-03-29 17:37:45 -07:00
kyle 6238a33b60 Updating README. 2026-03-29 14:58:38 -07:00
kyle d145c69932 update mcp 2026-03-28 19:24:40 -07:00
kyle 947f895bc5 update mcp 2026-03-28 18:24:06 -07:00
kyle 495d715ed7 update mcp 2026-03-28 18:05:28 -07:00
kyle ec01be81d3 update mcp 2026-03-28 17:20:47 -07:00
kyleandClaude Opus 4.6 34b2a01f1a Use /srv/mcp/mcp-agent binary instead of Nix flake input 
The agent binary is now managed by the operator (scp + install to
/srv/mcp/mcp-agent), not by the Nix flake. This allows agent upgrades
without a full NixOS rebuild.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-03-28 16:12:51 -07:00
kyleandClaude Opus 4.6 59ac363c45 Trust WNTRMUTE CA for podman registry connections 
Podman/skopeo don't use the system CA bundle for registry TLS — they
use /etc/containers/certs.d/<host:port>/ca.crt. Add the WNTRMUTE CA
there so podman push/pull to MCR works without --tls-verify=false.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-03-28 16:01:47 -07:00
kyle 2b8d2b980c update mcp 2026-03-28 16:01:46 -07:00
kyle a4104eb602 Update MCP to v0.6.0+1 (uptime fix) 2026-03-27 22:57:05 -07:00
kyle a34b3e96f7 dos2unix 2026-03-27 22:39:27 -07:00
kyle 47f9e48346 add tools for dealing with corrupt (color) text 2026-03-27 22:26:53 -07:00
kyle d70a0d667c update mc tools 2026-03-27 21:56:33 -07:00
kyle de314be83e update mcp 2026-03-27 21:14:23 -07:00
kyle 42a503db62 add skopeo 2026-03-27 16:56:50 -07:00
kyle 30c8f5f2fb update mcp 2026-03-27 16:50:48 -07:00
kyle 6915023d4f update mcp 2026-03-27 16:16:31 -07:00
kyle 094ccfd29d update mcp 2026-03-27 15:06:10 -07:00
kyle cdbdee5b48 mcp 2026-03-27 14:37:47 -07:00
kyle 83684ddb1c bind dns tools 2026-03-27 13:59:11 -07:00
kyleandClaude Opus 4.6 74a79cd369 Rework Makefile with install/link/update targets and auto-generation 
Add gen-update-targets.sh to parse flake.nix and generate grouped
update targets (update-kyle, update-mc). Makefile now has install
(copy) and link (symlink) targets for rebuild-nixos. Also fix mc
flake input URLs to use /mc/ org path.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-03-27 01:49:58 -07:00
kyle c394eec89f adding mc tooling 2026-03-26 22:59:09 -07:00
kyleandClaude Opus 4.6 c0e0cefad3 Fix MCP flake URL: use git+https to match other inputs 
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-03-26 22:53:06 -07:00
kyle 60ee30045b Update README. 2026-03-26 22:51:49 -07:00
kyleandClaude Opus 4.6 baf09e8b1f Add MCP to Nix packages and wire agent to Nix-managed binary 
- Add mcp flake input (git+ssh://git@git.wntrmute.dev/mc/mcp.git)
- Add mcp CLI to mcpkg.nix system packages (installed on all machines)
- Update mcp.nix to use Nix-managed mcp-agent binary path instead of
  hardcoded /usr/local/bin/mcp-agent

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-03-26 22:48:40 -07:00
kyle 67ced96f4d update lector 2026-03-26 21:59:37 -07:00
kyleandClaude Opus 4.6 a1c59deb0b Disable Tailscale DNS management on vade to fix DNS timeout 
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-03-26 21:54:00 -07:00
kyle c0d16c97e0 revert dns bugs 2026-03-26 21:38:05 -07:00
kyleandClaude Opus 4.6 8c9d8f4ff5 Fix DNS: restore Tailscale catch-all removal service 
The previous commit removed the systemd service that stripped Tailscale's
~. DNS catch-all, breaking all DNS resolution — even when Tailscale is
disconnected. Restore it as fix-tailscale-dns, which restricts tailscale0
to only route ~scylla-hammerhead.ts.net queries.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-03-26 21:32:15 -07:00
kyle 0e54bd5fe7 Use /etc/hosts for internal Metacircular names (Tailscale DNS workaround) 2026-03-26 15:41:30 -07:00
kyle ad3b6b949b Fix: add pkgs to vade module arguments 2026-03-26 15:37:53 -07:00
kyle c8b271d6b9 Fix DNS routing: override Tailscale catch-all for mcp.metacircular.net 2026-03-26 15:35:47 -07:00
kyle e7d244c606 Disable ProtectHome for mcp-agent (blocks /run/user for podman) 2026-03-26 14:40:54 -07:00
kyle 7f0a978e86 Relax mcp-agent sandbox for rootless podman compatibility 2026-03-26 14:34:50 -07:00
kyle bac757c22e Allow mcp-agent access to /run/user for rootless podman 2026-03-26 14:31:33 -07:00
kyle 57cab0c88a Pin mcp UID, fix XDG_RUNTIME_DIR for podman access 2026-03-26 14:08:57 -07:00
kyle 71e6907a3c Add PATH to mcp-agent service for podman access 2026-03-26 14:04:52 -07:00
kyle f0f15fccb0 Add mcp-agent systemd service to NixOS config 2026-03-26 13:30:06 -07:00
kyle 417870a85b Add mcp.nix: MCP agent system user with rootless podman 2026-03-26 13:02:25 -07:00
kyle 276cfc48a9 Add mcp system user for MCP agent 2026-03-26 13:01:33 -07:00
kyleandClaude Opus 4.6 1914ee39fd Add plugdev group for FIDO2 device access. 
The u2f udev rules set GROUP=plugdev on hidraw devices, but the
group didn't exist. Create it and add kyle to it so FIDO2 keys
are accessible without relying on logind uaccess ACLs.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-03-26 12:54:42 -07:00
kyleandClaude Opus 4.6 184c237335 Use libfido2 udev rules for universal FIDO2 device access. 
Replace vendor-specific hidraw rule (3434) with libfido2 udev
package which covers all FIDO2 devices. Fixes FIDO2 key visibility
on orion.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-03-26 12:36:41 -07:00
kyle 28100fc74d switch to sgard-fido2 2026-03-26 12:19:46 -07:00
kyle 1e1618e5bd update sgard 2026-03-26 12:00:44 -07:00
kyle 44afdeedd0 update sgard 2026-03-26 11:28:15 -07:00
kyle a977a1dd1d update sgard 2026-03-26 11:15:49 -07:00
kyle f9057084ff update sgard 2026-03-26 10:16:11 -07:00
kyleandClaude Opus 4.6 170c4ab67d orion: route mcp.metacircular.net zone to rift via resolved 
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-03-26 09:04:37 -07:00
kyle 0d1fe5536f Enable fido2 luks on orion/rift. 2026-03-26 08:56:02 -07:00
kyle 7be8a4c5e6 orion/rift -> systemd initrd 
Allows for FIDO2 LUKS unlock.
 2026-03-26 08:48:53 -07:00
kyle 45293e60ed update mcdeploy 2026-03-26 00:58:46 -07:00
kyleandClaude Opus 4.6 fa0c7b1510 Add mcdeploy to flake inputs and system packages 
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-03-26 00:33:36 -07:00
kyle 4b0067641d iw 2026-03-25 23:27:04 -07:00
kyle 56621710dd update rift dns resolver 2026-03-25 22:51:34 -07:00
kyle 4163d2525a flake updates 2026-03-25 22:04:53 -07:00
kyle 693875b10e compute 2026-03-25 21:59:30 -07:00
kyle 79c6fea4ae update sgard 2026-03-25 21:55:20 -07:00
kyle 112036889e nix flake update 2026-03-25 21:38:06 -07:00
kyle 796cde1d2f don't gc if rebuild fails 2026-03-25 21:36:34 -07:00
kyle a53eb42316 protobuffing 2026-03-25 21:32:21 -07:00
kyle 146393e881 update sgard 2026-03-25 21:30:30 -07:00
kyle f8a53f6f63 protoc 2026-03-25 21:27:15 -07:00
kyleandClaude Opus 4.6 71702dfb06 Add metacircular control programs to rift, orion, and vade 
Install mciasctl, mciasgrpcctl, mcrctl, and mcproxyctl via new
configs/mcpkg.nix module. Adds flake inputs for mcias, mcr, and
mc-proxy from git.wntrmute.dev.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-03-25 21:11:25 -07:00
kyle 9680c31a7b adding cert flake 2026-03-25 20:22:59 -07:00
kyle ea335dbe57 add cert 2026-03-25 20:21:24 -07:00
kyleandClaude Opus 4.6 a09dd925ac rift: open firewall for mc-proxy (443, 8443, 9443) and exod (8080, 9090) 
Remove implicit reliance on temp iptables rules. All externally
accessible ports are now declared in NixOS config.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-03-25 19:51:38 -07:00