kyle e6938ef782 orion: drop MCP, add SearXNG on loopback + Tailscale Serve ...

SearXNG binds 127.0.0.1:8888 (json+html, limiter off). Secret is
/var/lib/searx/secret.env, generated on-box. TLS via `tailscale serve`.
MCP agent, packages, extra firewall ports, and MCP DNS removed from this
host only.

2026-09-22 18:01:23 -07:00

..

default.nix

orion: drop MCP, add SearXNG on loopback + Tailscale Serve

2026-09-22 18:01:23 -07:00

hardware-configuration.nix

Enable fido2 luks on orion/rift.

2026-03-26 08:56:02 -07:00