4 Commits

Include renames

Author	SHA1	Message	Date
beatzaplenty	de508141a8	removed tailscale from docker updated secrets	2026-07-26 11:12:46 +10:00
beatzaplentyandClaude Sonnet 5	0ba837817e	Expand variables.nix: NFS shares, ports, image size, GC/rotation, Pi host ... Adds nested vars.nfsShares (subpath + mountpoint per dataset, previously duplicated independently across server.nix's NFS exports, mount-data.nix's client mounts, docker.nix's tmpfiles rules, traefik's log rotation path, and hosts/server/host.nix's beszel config), vars.ports (every literal port in modules/ and hosts/, kept as separate entries per service even where numbers coincide so changing one can't silently change another), plus vars.proxmoxImageSize, vars.nixCacheGcMaxAge, vars.traefikLogRotate, and raspberryPiHost/raspiNfsPath/raspiMountpoint for the Pi's own NFS export. Also fixes docker.nix/minimal.nix/gui.nix hardcoding the literal "nixos" username instead of the existing vars.primaryUser, found during the sweep. system.stateVersion is deliberately left untouched everywhere -- per NixOS's own docs that value must stay fixed from first install, not follow any shared variable. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01La55Nsss8jZ7ZuzUV9mfot	2026-07-20 08:27:37 +10:00
beatzaplentyandClaude Sonnet 5	c5f8bb4d1d	Reorganize loose modules into themed directories ... Several single-purpose modules sat at modules/ root or in the services/ catch-all despite the repo's established pattern of one directory per concern (tailscale/, beszel/, docker/, nix-cache/): - remote-builder-client.nix -> nix-cache/ (always co-included with nix-cache/client.nix in flake.nix's mkTarget, same buildType guard) - set-locale.nix -> common/ (unconditionally imported by common/configuration.nix already) - enable-ip-forwarding.nix -> networking/ - rotate-traefik-logs.nix -> traefik/rotate-logs.nix - services/docker-health-to-gotify.nix and services/nextcloud-cron-job.nix -> docker/ (both only ever imported by the docker build type, same as the rest of modules/docker/*) Pure path moves plus import-path updates in flake.nix, common/configuration.nix, and build-types/docker.nix — verified eval-equivalent (drvPath-identical) across representative hosts. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01La55Nsss8jZ7ZuzUV9mfot	2026-07-20 02:58:09 +10:00
beatzaplentyandClaude Sonnet 5	e76486efbe	Refactor flake targets into platform x build-type matrix ... Generates all nixosConfigurations from mkTarget(platform, buildType, hostPath) instead of hand-written per-host blocks, so adding a new platform or build type is a one-line addition. Per-machine identity (hostname, hostId, secrets, stateVersion) moves into hosts/<name>/host.nix; platform-specific config (hardware, boot, networking) into modules/platforms/*.nix; build-type config (minimal/server/docker/gui/ nix-cache/pxe-boot) into modules/build-types/*.nix. Old flat targets (nixos, docker, server, nix-cache, nix-minimal, pxe-boot) are replaced by the 17-target <platform>-<buildtype> matrix; each new target was verified to evaluate before its old counterpart was removed. CI workflows and docs/aliases now discover hosts dynamically via nixosConfigurations attrNames and /etc/flake-target instead of hardcoded lists, so they can't drift from flake.nix again. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-07-19 12:03:33 +10:00