rope/nixos
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
1855 commits 1 branch 2 tags 140 MiB
Commit graph

320 commits

Author SHA1 Message Date
rope
584e40d466 pelican: mount resolved CA bundle file for wings 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-09 12:56:01 +01:00
rope
ff5a825a22 pelican: rename wings vhost to games.nordhammer.it 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-09 12:53:26 +01:00
rope
a031586c32 pelican: pin DB_CONNECTION=sqlite, note CLI install path 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-09 12:32:59 +01:00
rope
82c02cab03 pelican: fix panel startup — BEHIND_PROXY, www-data dir ownership 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-09 12:05:53 +01:00
rope
475d394810 pelican: gate panel behind Authelia, bypass /api/remote/ for wings 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-09 12:00:43 +01:00
rope
00ec9a9759 pelican: game server panel + wings containers 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-09 11:57:15 +01:00
rope
55dc95dd2b prebuild: add gaming closure, stagger timers 2026-08-09 11:28:39 +01:00
rope
b55d6de636 prebuild: nightly macbook closure build on mediaserver 2026-08-09 11:26:09 +01:00
rope
3654bc6ca7 mce-monitor: split MCE/QPI vs disk I/O error tracking + separate alerts 
A disk SATA glitch was miscounted as new MCEs and paged as 'QPI returned'.
Now counts bank=0x (MCE) and I/O-error (disk) rows independently, each with
its own threshold alert. Old 2-field state auto-re-baselines.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-08-08 22:37:29 +01:00
rope
a1a25a8b75 wan-watchdog: log actions to journal + kick dyndns on WAN IP change 
Shrinks external-access blip after ISP re-IP (was waiting up to 5min for
the dyndns timer). Adds journal logging so WAN events are auditable.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-08-01 08:16:43 +01:00
rope
3fbc9f884b wan-watchdog: self-heal router WAN on ISP lease flap / IP change 
Flushes stale NAT conntrack on WAN IP change; renews lease then restarts
networkd if internet stays down. ntfy on action. Fixes needing a manual
reboot after the ISP re-IP'd us.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-07-31 13:58:07 +01:00
rope
c2f5b70989 router: drop imgur WireGuard tunnel 2026-07-30 21:33:34 +01:00
rope
bfdd0ebc44 router: route imgur via WireGuard tunnel 2026-07-30 19:24:56 +01:00
rope
3b0133ff3c arr-interconnect: set jellyfin external url for seerr play links 
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-28 11:57:57 +01:00
rope
81d1b80a53 arr-interconnect: declarative root folders for radarr/sonarr 
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-28 11:42:04 +01:00
rope
384c6918ff arr-interconnect: wire seerr to jellyfin/radarr/sonarr + auto-approve 
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-28 09:15:44 +01:00
rope
528a2e3e82 seerr: request manager for jellyfin + nginx vhost 
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-28 07:44:03 +01:00
rope
0e2a40f508 hardware-health: ntfy alert on new MCE/QPI errors, geometric thresholds 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-07-22 10:45:09 +01:00
rope
e295d84b11 nginx: fix gixy add_header warning on homepage-updates.local 2026-07-21 12:48:19 +01:00
rope
bad68a51f8 nginx: add security headers (HSTS, CSP, X-Frame-Options, etc.) to all vhosts 2026-07-21 12:45:33 +01:00
rope
88e1b03f16 shelfarr: mount SABnzbd's real complete_dir so post-processing can find files 2026-07-21 10:42:05 +01:00
rope
e37d73fd65 shelfarr: move Puma off port 3000, clashes with AdGuard on host network 2026-07-21 10:33:06 +01:00
rope
29d05123c6 shelfarr: switch to host networking so it can reach Prowlarr/SABnzbd 2026-07-21 10:28:59 +01:00
rope
964be8696b arr-interconnect: wire Shelfarr to Prowlarr + SABnzbd via rails runner 2026-07-21 10:21:35 +01:00
rope
daafc3a0f2 shelfarr: audiobook search/acquire, Sonarr/Radarr-style 2026-07-21 09:50:24 +01:00
rope
40ef4444fa sabnzbd: point complete_dir at group-writable pool path + permissions=0775 
Fixes Sonarr/Radarr import fail-loop (can't delete sources → mergerfs thrash).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-07-21 09:42:10 +01:00
rope
3a09fbc29d crowdsec: PR 446307 closed, superseded by 535319 
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-16 21:38:29 +01:00
rope
f3aded5bd2 Remove orphaned neko.nix 
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-14 10:17:00 +01:00
rope
d7657e191d acme: use public DNS resolver for lego zone detection 2026-07-13 22:37:55 +01:00
rope
55bec881c3 Comment out 7DTD servers, not in use 
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-10 23:14:49 +01:00
rope
e64daedef6 Remove selkies 
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-02 18:09:48 +01:00
rope
6cc3fb6419 hardware-health: drop fwupd; no P700 BIOS published on LVFS 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-30 10:42:08 +01:00
rope
34d44a619e hardware-health: enable fwupd to check LVFS for P700 BIOS update 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-30 10:37:07 +01:00
rope
d69c9f624f hardware-health: rasdaemon MCE attribution + watchdog auto-reboot on mediaserver 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-25 19:37:35 +01:00
rope
707f78c9d1 selkies: GPU-accelerate 32-bit GW via mounted 32-bit nvidia GL + vglrun launcher 
Mount config.hardware.nvidia.package.lib32 into the container (CDI only carries
64-bit driver libs) and add a `gw` launcher that runs Guild Wars through
VirtualGL on the M2000. Drops GW from ~18 software-rendered CPU cores to <1.
Also bump stream to 60fps.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-25 13:37:17 +01:00
rope
21b0fa15ae selkies: enable internal TURN relay (LAN) so WebRTC media works behind nginx 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-25 11:52:28 +01:00
rope
d31a4501f1 selkies: browser game streaming for GW (pointer-lock relative mouse), retire neko 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-25 11:42:45 +01:00
rope
38901eee27 neko: add Mesa GL (i386) so Wine/Guild Wars gets an OpenGL context (llvmpipe) 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-25 10:56:33 +01:00
rope
c0ed58bcc2 neko: own /var/lib/neko/home as uid 1000 so the container desktop can start 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-25 10:42:13 +01:00
rope
b00dee9dc6 neko: drop winetricks (not in Debian trixie main; GW needs only bare wine) 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-25 10:39:20 +01:00
rope
e5589907a3 neko: use real xfce image (software render), drop nonexistent nvidia-xfce + GPU 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-25 10:35:51 +01:00
rope
e199933dce neko: build image from stdin Dockerfile (fix symlinked-context build failure) 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-25 10:31:31 +01:00
rope
fe0cb4663e neko: add Authelia access rule for neko.nordhammer.it 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-25 10:27:49 +01:00
rope
448e44753f neko: Guild Wars in a browser (Xfce+Wine+NVIDIA), Authelia-gated 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-25 10:07:36 +01:00
rope
5e870d0e8b arr-interconnect: auto-add Jellyfin library-refresh notification to Sonarr/Radarr 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-24 21:35:41 +01:00
rope
0f92b3fbf5 Disable frigate for now 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-18 21:11:06 +01:00
rope
ddbc8929e4 alerting: silence per-ban crowdsec pushes; ntfy alert on service down/recovery 
- crowdsec.nix: drop the ntfy notifications (one push per ban was constant
  noise on the WAN-exposed box); bans still happen silently
- service-health.nix: OnFailure=notify-failure@%n on 16 core units sends an
  ntfy 'down' push when a unit truly fails (after exhausting Restart=), then
  a 'recovered' push when it comes back. Shares /var/secrets/ntfy-url.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-06-13 17:54:37 +01:00
rope
8dd70a2d9d mediaserver: drop no-op firewall rules, close unused DR forwards 
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-06-11 10:00:49 +01:00
rope
f65675bd80 authelia: drop docker migration, tighten secret perms 
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-06-11 10:00:49 +01:00
rope
93e79509c4 crowdsec: inject ntfy url at runtime, drop obsolete hub prune 
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-06-11 10:00:49 +01:00