Commit graph

4 commits

Author SHA1 Message Date
8c06225004 fix(wintermute): update caddy backends for alt's new IP and add packages
Update reverse proxy backends from 192.168.80.4 to 192.168.80.9 for
services still hosted on alt (files, shiori, books, recipes, jelly).
Add avahi and bat to wintermute's packages.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-11 13:11:52 +10:00
2ede41bb36 Add server module to wintermute 2026-04-11 12:36:11 +10:00
265a299f24 fix: remove trusted-users escalation, restore comments, move man-db to core
- Remove alex from nix.settings.trusted-users in core.nix (was not in
  the original base.nix and widens attack surface by allowing arbitrary
  binary cache configuration without sudo)
- Restore useful comments in base.nix (zram explanation, earlyoom
  purpose, avahi/systemd-resolved notes)
- Move documentation.man.man-db.enable = false into core.nix so all
  hosts get it, remove redundant setting from wintermute and nightcity

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-11 11:21:56 +10:00
4c5a639720 feat: add wintermute host as dedicated reverse proxy
Minimal LXC host importing only core.nix — no build toolchains, no
Home Manager. Caddy config migrated from alt with all existing vhosts
intact. Ready to clone from bootstrap template and deploy.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-11 10:55:46 +10:00