Compare commits
2
Commits
71aad7fc55
...
main
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
ae4a4f0824 | ||
|
|
8d4aa87dd0 |
No files matched your search
@@ -36,6 +36,10 @@ The unedited `~/sync/notes/setup-todo.md` remains an idea inbox, not authorizati
|
|||||||
- Focused source/configuration review only. No tests, host evaluation/build,
|
- Focused source/configuration review only. No tests, host evaluation/build,
|
||||||
`just validate`, activation or remote changes. No existing secrets were decrypted
|
`just validate`, activation or remote changes. No existing secrets were decrypted
|
||||||
or read for discovery.
|
or read for discovery.
|
||||||
|
- A user-run Orion build failed compiling Contour's SIMD code, pulled in by
|
||||||
|
`enableAllTerminfo`. Orion now selects Kitty terminfo for workstation SSH clients
|
||||||
|
instead of the complete terminal set. The pinned NixOS module was inspected;
|
||||||
|
formatting and focused diff review only. No rebuild was run after this fix.
|
||||||
|
|
||||||
## Implemented, reviewed and validated; awaiting user checkpoint
|
## Implemented, reviewed and validated; awaiting user checkpoint
|
||||||
|
|
||||||
|
|||||||
@@ -22,6 +22,7 @@ a provisional ownership boundary, not a different workstation variant. Steam and
|
|||||||
LAN SSH on Polaris, and laptop power/firmware management on Zenith, are deliberate.
|
LAN SSH on Polaris, and laptop power/firmware management on Zenith, are deliberate.
|
||||||
Orion owns shared services. Tailnet administration supplements existing access;
|
Orion owns shared services. Tailnet administration supplements existing access;
|
||||||
public Orion SSH closes only after private access is verified. Web services stay public.
|
public Orion SSH closes only after private access is verified. Web services stay public.
|
||||||
|
Orion installs Kitty terminfo for SSH sessions from the workstations.
|
||||||
|
|
||||||
Wardrowbe uses a password gateway for trusted household access, followed by profile
|
Wardrowbe uses a password gateway for trusted household access, followed by profile
|
||||||
selection inside the app; verified individual identity is deferred. Its internal AI
|
selection inside the app; verified individual identity is deferred. Its internal AI
|
||||||
|
|||||||
@@ -15,7 +15,6 @@ in
|
|||||||
|
|
||||||
settings = {
|
settings = {
|
||||||
server = {
|
server = {
|
||||||
DOMAIN = service.domain;
|
|
||||||
ROOT_URL = "${service.origin}/";
|
ROOT_URL = "${service.origin}/";
|
||||||
HTTP_PORT = 3001;
|
HTTP_PORT = 3001;
|
||||||
HTTP_ADDR = "127.0.0.1";
|
HTTP_ADDR = "127.0.0.1";
|
||||||
|
|||||||
@@ -10,7 +10,7 @@ in
|
|||||||
stateVersion = "24.05";
|
stateVersion = "24.05";
|
||||||
};
|
};
|
||||||
|
|
||||||
flake.modules.nixos.orion = {
|
flake.modules.nixos.orion = { pkgs, ... }: {
|
||||||
imports = [
|
imports = [
|
||||||
nixosModules.host-base
|
nixosModules.host-base
|
||||||
|
|
||||||
@@ -29,7 +29,8 @@ in
|
|||||||
./_disk.nix
|
./_disk.nix
|
||||||
];
|
];
|
||||||
|
|
||||||
environment.enableAllTerminfo = true;
|
# SSH clients on both workstations use Kitty.
|
||||||
|
environment.systemPackages = [ pkgs.kitty.terminfo ];
|
||||||
|
|
||||||
users.users.${config.facts.account.name}.linger = true;
|
users.users.${config.facts.account.name}.linger = true;
|
||||||
};
|
};
|
||||||
|
|||||||
Reference in new issue
Block a user