Compare commits

...
2 Commits
Author SHA1 Message Date
kiri ae4a4f0824 terminfo fix 2026-10-10 16:19:08 +02:00
kiri 8d4aa87dd0 update gitea 2026-10-10 16:10:15 +02:00
4 changed files with 8 additions and 3 deletions

No files matched your search

+4
View File
@@ -36,6 +36,10 @@ The unedited `~/sync/notes/setup-todo.md` remains an idea inbox, not authorizati
- Focused source/configuration review only. No tests, host evaluation/build, - Focused source/configuration review only. No tests, host evaluation/build,
`just validate`, activation or remote changes. No existing secrets were decrypted `just validate`, activation or remote changes. No existing secrets were decrypted
or read for discovery. or read for discovery.
- A user-run Orion build failed compiling Contour's SIMD code, pulled in by
`enableAllTerminfo`. Orion now selects Kitty terminfo for workstation SSH clients
instead of the complete terminal set. The pinned NixOS module was inspected;
formatting and focused diff review only. No rebuild was run after this fix.
## Implemented, reviewed and validated; awaiting user checkpoint ## Implemented, reviewed and validated; awaiting user checkpoint
+1
View File
@@ -22,6 +22,7 @@ a provisional ownership boundary, not a different workstation variant. Steam and
LAN SSH on Polaris, and laptop power/firmware management on Zenith, are deliberate. LAN SSH on Polaris, and laptop power/firmware management on Zenith, are deliberate.
Orion owns shared services. Tailnet administration supplements existing access; Orion owns shared services. Tailnet administration supplements existing access;
public Orion SSH closes only after private access is verified. Web services stay public. public Orion SSH closes only after private access is verified. Web services stay public.
Orion installs Kitty terminfo for SSH sessions from the workstations.
Wardrowbe uses a password gateway for trusted household access, followed by profile Wardrowbe uses a password gateway for trusted household access, followed by profile
selection inside the app; verified individual identity is deferred. Its internal AI selection inside the app; verified individual identity is deferred. Its internal AI
-1
View File
@@ -15,7 +15,6 @@ in
settings = { settings = {
server = { server = {
DOMAIN = service.domain;
ROOT_URL = "${service.origin}/"; ROOT_URL = "${service.origin}/";
HTTP_PORT = 3001; HTTP_PORT = 3001;
HTTP_ADDR = "127.0.0.1"; HTTP_ADDR = "127.0.0.1";
+3 -2
View File
@@ -10,7 +10,7 @@ in
stateVersion = "24.05"; stateVersion = "24.05";
}; };
flake.modules.nixos.orion = { flake.modules.nixos.orion = { pkgs, ... }: {
imports = [ imports = [
nixosModules.host-base nixosModules.host-base
@@ -29,7 +29,8 @@ in
./_disk.nix ./_disk.nix
]; ];
environment.enableAllTerminfo = true; # SSH clients on both workstations use Kitty.
environment.systemPackages = [ pkgs.kitty.terminfo ];
users.users.${config.facts.account.name}.linger = true; users.users.${config.facts.account.name}.linger = true;
}; };