This repository has been archived on 2026-09-17. You can view files and clone it, but you cannot make any changes to its state, such as pushing and creating new issues, pull requests or comments.
nixos-config/hosts/pinix/localServices
pijukka c8cfdcd88e host(pinix): add live intent and ereader viewer services
Both run on pinix, published only through the pinix Tailnet namespace and
Traefik's web-internal entrypoint (unbound local-data + Headscale split
DNS for intent./ereader.domain2). Live Intent reads its OpenAI key from
the new pinix-only agenix secret.

ereaderViewer is a path: flake input for now; the repo split plan moves
it into its own repository on cgit.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-09-17 12:18:55 +02:00
..
branding Backport confirmed GoToSocial color fixes: role badges, settings nav, form borders, dark-mode text contrast 2026-08-03 23:01:48 +02:00
calendar docs: prune completed Herdr task papers, retire session log 2026-09-05 16:57:19 +02:00
dns pinix: publish lldap board internally and externally 2026-09-14 17:04:14 +02:00
finance-agent docs: prune completed Herdr task papers, retire session log 2026-09-05 16:57:19 +02:00
gitserver host(pinix): show snapshot downloads and clone URL in cgit 2026-09-14 13:39:28 +02:00
phanpy Backport confirmed live edits: forgejo wiki reorder, explore centering, phanpy tagline 2026-08-03 22:11:54 +02:00
prosody feat(prosody): migrate XMPP stack from pinix to blunix 2026-09-06 16:46:26 +02:00
traefik pinix: publish lldap board internally and externally 2026-09-14 17:04:14 +02:00
acme.nix host(pinix): Wildcard-Zertifikat ausgestellt, Propagationspruefung aus 2026-09-12 19:28:28 +02:00
bind.nix host(pinix): Wildcard-Zertifikate per DNS-01 gegen das eigene BIND 2026-09-12 19:10:55 +02:00
dashboard.nix pinix: split dashboard.nix's desk service into its own desk.nix 2026-07-31 14:27:19 +02:00
default.nix host(pinix): add live intent and ereader viewer services 2026-09-17 12:18:55 +02:00
desk.nix pinix: split dashboard.nix's desk service into its own desk.nix 2026-07-31 14:27:19 +02:00
dex.nix host(pinix): commit the Dex + Headscale + LLDAP identity stack 2026-09-13 16:38:02 +02:00
ereader-viewer.nix host(pinix): add live intent and ereader viewer services 2026-09-17 12:18:55 +02:00
fileserver-internal.nix Fill in remaining palette gaps: file server links, LLDAP pagination 2026-08-03 21:38:53 +02:00
finance-agent.nix Atomare Self-Close-Sessions, Eskalationskette und Reviewer-Schwelle für Herdr-Rollen 2026-09-01 19:33:39 +02:00
forgejo.nix ssh: pin forgejo's port-2222 host key globally 2026-09-12 13:41:29 +02:00
gotosocial.nix Make GoToSocial's instance-wide branding declarative 2026-08-03 22:34:38 +02:00
headscale.nix tailnet: move main nodes to pinix user lukas 2026-09-14 16:52:53 +02:00
ipv6-test.html host(pinix): minimales Traefik als oeffentlicher Eingang, ohne TLS 2026-09-12 15:01:15 +02:00
ipv6-test.nix host(pinix): TLS ueber ACME HTTP-01, Mango-DNAT parametrisiert umgelegt 2026-09-12 15:20:27 +02:00
live-intent.nix host(pinix): add live intent and ereader viewer services 2026-09-17 12:18:55 +02:00
lldap.nix host(pinix): commit the Dex + Headscale + LLDAP identity stack 2026-09-13 16:38:02 +02:00
mazanoke.nix aq 2025-09-27 12:24:04 +02:00
packages.nix zsh: move yazi's cd-on-quit wrapper to global config, drop tnix duplicate 2026-07-31 17:36:54 +02:00
phanpy.nix Batch deploy: forgejo live-edit backport, phanpy fixes, xmpp-web login heading 2026-08-03 21:17:13 +02:00
radio.nix Add sound.0ff.space: Icecast + Liquidsoap internet radio on pinix 2026-08-04 08:42:36 +02:00
README.md host(pinix): add personal git server on pinix's own tailnet 2026-09-14 12:55:11 +02:00
restic.nix backup(pinix): include personal Git repositories in restic 2026-09-14 15:34:39 +02:00
secrets.nix tailnet: move main nodes to pinix user lukas 2026-09-14 16:52:53 +02:00
tailnet-dns.nix host(pinix): add live intent and ereader viewer services 2026-09-17 12:18:55 +02:00
tailscale.nix tailnet: move main nodes to pinix user lukas 2026-09-14 16:52:53 +02:00
traefik.nix host(pinix): add personal git server on pinix's own tailnet 2026-09-14 12:55:11 +02:00
unbound.nix pinix: publish lldap board internally and externally 2026-09-14 17:04:14 +02:00
vikunja.nix service(pinix): allow non-routable webhook targets in vikunja 2026-07-28 22:50:19 +02:00
wan-dns-update.nix host(pinix): clean up leftover Mango references after the router migration 2026-09-13 16:07:15 +02:00
webdav.nix fix(pinix): improve SMB compatibility for Apple clients 2026-07-28 18:58:49 +02:00
webhook.nix calendar: move calendar-web frontend to its own Forgejo repo 2026-07-30 09:28:41 +02:00
website.nix pinix: fix radicale/website boot race against the tailnet IP 2026-07-31 09:16:12 +02:00
xmpp-web.nix feat(prosody): migrate XMPP stack from pinix to blunix 2026-09-06 16:46:26 +02:00

pinix services

Imported from default.nix; each file/subfolder documents its own service in more depth where that's non-obvious (calendar/README.md, prosody/README.md).

File/dir Service
forgejo.nix Git hosting (git.${domain})
calendar/ Radicale (CalDAV) + read-only frontend, see its own README
phanpy.nix Mastodon web client for GoToSocial
gotosocial.nix ActivityPub/Fediverse server
prosody/ XMPP server, see its own README
xmpp-web.nix Web-based XMPP client
webdav.nix WebDAV (port 8012) + SMB (port 445, tailnet-only, for the iOS/iPadOS Files app) file share
fileserver-internal.nix Internal-only file serving
dashboard.nix Backend for the dashboard service dashboard
website.nix Static site preview server
webhook.nix Forgejo push webhook receiver (chat notifications, auto-pull for the frontend repos)
tailscale.nix, restic.nix, secrets.nix, packages.nix Host plumbing, not user-facing services
gitserver/ Personal git server: cgit (read + snapshot download) and SSH for git@, reachable only inside pinix's own tailnet; see docs/intent/gitserver-pinix.md
tailnet-dns.nix Namespace node of pinix's own tailnet: unbound-pinix, split DNS, forwarding of 443/22 to the host
dex.nix, headscale.nix Parallel pinix identity/control-plane stack under domain2; bootstrap notes in docs/pinix-identity-stack.md

vikunja.nix exists but is commented out of default.nix (disabled 29.07.2026, superseded by the agent@ XMPP inbox; data untouched on disk). mazanoke.nix also exists but was never added to default.nix at all — dead config, not currently deployed anywhere.