updates

modules/capabilities/yookr-dev/default.nix

@@ -0,0 +1,31 @@
+{
+  flake.modules.homeManager.yookr-tools =
+    { pkgs, ... }:
+    let
+      tools = import ./_support/packages.nix { inherit pkgs; };
+    in
+    {
+      programs.zsh.initContent = "source <(gardenctl rc zsh --no-completion)";
+      home.packages = [
+        tools.gardenctl
+        tools.gardenlogin
+      ];
+    };
+
+  flake.modules.nixos.yookr-dev = {
+    security.pki.certificateFiles = [
+      ./zenith-rootCA.pem
+      ./polaris-rootCA.pem
+    ];
+
+    networking.firewall.allowedTCPPorts = [
+      5173
+      5174
+    ];
+
+    networking.extraHosts = ''
+      127.0.0.1 local.management.yookr.org
+      127.0.0.1 local.dashboard.yookr.org
+    '';
+  };
+}

modules/capabilities/yookr-dev/environment.nix

@@ -1,34 +0,0 @@
-{
-  perSystem =
-    { pkgs, ... }:
-    let
-      tools = import ./_packages.nix { inherit pkgs; };
-    in
-    {
-      # Tooling only: no credential loading, mounts, or Python dependency installs.
-      devShells.workbench = pkgs.mkShell {
-        LD_LIBRARY_PATH = pkgs.lib.makeLibraryPath [
-          pkgs.stdenv.cc.cc.lib
-          pkgs.zlib
-        ];
-        UV_PYTHON = "${pkgs.python314}/bin/python";
-        UV_PYTHON_DOWNLOADS = "never";
-        packages = [
-          tools.gardenctl
-          tools.gardenlogin
-        ]
-        ++ (with pkgs; [
-          k9s
-          kubectl
-          kubelogin-oidc
-          jq
-          just
-          python314
-          rclone
-          sops
-          util-linux
-          uv
-        ]);
-      };
-    };
-}