forked from lukas/nixos-config
2e8ee3758f
- hosts/pinix/localServices/prosody/modules/mod_turntaking.lua (new): enforces one-message-then-wait-for-reply on agent@bot.0ff.space per sender JID, bouncing extra messages with a policy-violation error. Wired via plugin_paths + modules_enabled on the bot.0ff.space vhost. - Replace the pinix agent-xmpp-listener.service with an agent-codex setup on blunix (hosts/blunix/localServices/agent-codex.nix + listener.py/worker.py/tests, agents/platform/AGENTS.md): XMPP messages to agent@ now feed a job queue processed by a worker instead of only being archived to journalctl. - secrets: agentXmpp now used by blunix (hosts/blunix/localServices/ secrets.nix) instead of only pinix; secretFiles.nix trimmed accordingly. - calendar: lukas's personal Radicale collection exposed read-only via a second ICS feed (radicale.nix rights rule + web.nix nginx location + calendar-web eventSources), matching the earlier cal.0ff.space/ calendar.0ff.space split. - docs/roadmap.md, prosody/README.md, secrets/README.md updated to match.
43 lines
711 B
Nix
43 lines
711 B
Nix
{
|
|
imports = [
|
|
#dns
|
|
./adguard.nix
|
|
./tailscale.nix
|
|
|
|
./lldap.nix
|
|
|
|
#i changed services.dex
|
|
./dex.nix
|
|
|
|
./service-dex.nix
|
|
|
|
./upload-prosody.nix
|
|
# ./emptyCerts.nix
|
|
|
|
./website.nix
|
|
./fileserver-external.nix
|
|
./wordpress.nix
|
|
./launcher.nix
|
|
./webhook.nix
|
|
./agent-codex.nix
|
|
#./forgejo.nix
|
|
|
|
./headscale.nix
|
|
./oauth2-proxy.nix
|
|
./secrets.nix
|
|
./packages.nix
|
|
./packages-stable.nix
|
|
./nixbuild.nix
|
|
./restic.nix
|
|
./fail2ban.nix
|
|
|
|
#traefik
|
|
./traefik.nix
|
|
./traefik-routes-external.nix
|
|
./traefik-routes-internal.nix
|
|
./traefik-forgejo.nix
|
|
./traefik-dex.nix
|
|
./traefik-xmpp-web.nix
|
|
./traefik-cal.nix
|
|
];
|
|
}
|