Commit Graph

Select branches

Hide Pull Requests

add-backup-admin-key-script

add-claude-builder-key

feature/ha-docker-swarm

fix-duplicate-host-self-match

fix-nix-cache-probe-retry

fix-proxmox-remote-build-bootstrap

fix-stale-docs

fix-stale-wording

fix-sync-host-keys-clan-vars

fix/static-ips

main

refactor/secrets

remove-deploy-status-from-readme

server-boot-fix

worktree-baremetal-emergency-access

worktree-baremetal-esp-unmount

worktree-beszel-tailscale-router

worktree-claude-md-pve-guardrails

worktree-clone-pve1-to-pve-test

worktree-crispy-churning-kernighan

worktree-docker-gui-fix

worktree-docker-ipa-group

worktree-docs-beszel-guide

worktree-fix-container-dns-search-domain

worktree-fix-duplicate-host-check-exitcode

worktree-fix-lxc-docker-nfs-mounts

worktree-fix-nix-cache-host-key

worktree-fix-pxe-netboot-hang

worktree-fix-tailscale-host-dir

worktree-fix-zfs-install-export

worktree-fizzy-juggling-sedgewick

worktree-flake-e2e-audit

worktree-full-sweep

worktree-functional-mapping-russell

worktree-gentle-cuddling-hippo

worktree-gui-wifi-module

worktree-ha-file-server-test

worktree-ha-resize-disk

worktree-harmonic-jingling-bee

worktree-ipa-client-module

worktree-ipa-common-config

worktree-ipa-lxc-kerberos-fix

worktree-lovely-spinning-bubble

worktree-maintenance-script-changed-files-only

worktree-migrate-vm-script

worktree-nix-cache-502-fix

worktree-nix-cache-client-script

worktree-nix-cache-lxc-migration

worktree-parallel-host-eval

worktree-parsed-mapping-raven

worktree-partitioned-swimming-pizza

worktree-peaceful-stirring-noodle

worktree-phase0-provision-ordering-fix

worktree-polished-wandering-toast

worktree-proxmox-remote-build

worktree-push-host-keys

worktree-pve1-nix-cache-builder

worktree-pxe-menu-rename-and-minimal

worktree-reactive-gliding-map

worktree-refactor-scripts-shared-lib

worktree-reflective-puzzling-frog

worktree-rippling-riding-snail

worktree-rotate-admin-key-script

worktree-scripts-dedup

worktree-starry-painting-whistle

worktree-tailscale-exit-node

worktree-tailscale-subnet-router-rename

worktree-tor-relay-beszel

worktree-warm-discovering-moon

worktree-zesty-wishing-knuth

#1

#10

#100

#101

#102

#103

#104

#105

#106

#107

#108

#11

#12

#13

#14

#15

#16

#17

#18

#19

#2

#20

#21

#22

#23

#24

#25

#26

#27

#28

#29

#3

#30

#31

#32

#33

#34

#35

#36

#37

#38

#39

#4

#40

#41

#42

#43

#44

#45

#46

#47

#48

#49

#5

#50

#51

#52

#53

#54

#55

#56

#57

#58

#59

#6

#60

#61

#62

#63

#64

#65

#66

#67

#68

#69

#7

#70

#71

#72

#73

#74

#75

#76

#77

#78

#79

#8

#80

#81

#82

#83

#84

#85

#86

#87

#88

#89

#9

#90

#91

#92

#93

#94

#95

#96

#97

#98

#99

Mono Color

• 7e9c0c2a6f Rewrite codex-maintenance.sh to scope CI checks to changed files worktree-maintenance-script-changed-files-only beatzaplenty 2026-07-20 17:25:22 +00:00
• fd773b65da Fix nix-cache remote-builder trust: stale host key + wrong sshKey path worktree-fix-nix-cache-host-key beatzaplentyandClaude Sonnet 5 2026-07-20 17:21:12 +00:00
• d340aca403 Merge pull request 'Authorize this box's SSH key as a nix-cache remote-builder client' (#20) from add-claude-builder-key into main beatzaplenty 2026-07-20 16:31:25 +00:00
• bf8ee3ce48 Merge pull request 'Worktree refactor scripts shared lib' (#19) from worktree-refactor-scripts-shared-lib into main beatzaplenty 2026-07-20 16:29:42 +00:00
• 98d4545e8f Authorize this box's SSH key as a nix-cache remote-builder client add-claude-builder-key beatzaplentyandClaude Sonnet 5 2026-07-20 16:29:42 +00:00
• d8687d979c Reorganize scripts/ into secrets/, proxmox/, and lib/ subfolders worktree-refactor-scripts-shared-lib beatzaplentyandClaude Sonnet 5 2026-07-20 16:20:45 +00:00
• a2b557c034 Lift duplicated sops/age and confirm-prompt logic into scripts/lib/ beatzaplentyandClaude Sonnet 5 2026-07-20 15:38:32 +00:00
• 1d44523181 Merge pull request 'Re-encrypt secrets/nix-cache.yaml for rotated lxc-nix-cache key' (#18) from worktree-nix-cache-502-fix into main beatzaplenty 2026-07-20 15:33:31 +00:00
• 222a3ced69 Re-encrypt secrets/nix-cache.yaml for current lxc-nix-cache key worktree-nix-cache-502-fix beatzaplentyandClaude Sonnet 5 2026-07-20 15:29:34 +00:00
• 03137eef9a Merge pull request 'Add nix-cache client config script for non-NixOS Debian machines' (#17) from worktree-nix-cache-client-script into main beatzaplenty 2026-07-20 15:14:52 +00:00
• af0fe5bdfd Wire configure-nix-cache-client.sh into create-proxmox-resource.sh's tooling bootstrap worktree-nix-cache-client-script beatzaplentyandClaude Sonnet 5 2026-07-20 15:09:57 +00:00
• 23b910a011 Add script to configure nix-cache as substituter/remote builder on Debian clients beatzaplentyandClaude Sonnet 5 2026-07-20 15:07:04 +00:00
• 19f076bba1 Merge pull request 'Fix proxmox remote build bootstrap' (#16) from fix-proxmox-remote-build-bootstrap into main beatzaplenty 2026-07-20 14:43:31 +00:00
• 9a1d6842d7 Generalize the remote tooling check to a list of required commands fix-proxmox-remote-build-bootstrap beatzaplentyandClaude Sonnet 5 2026-07-20 14:42:00 +00:00
• f5ef3194d4 Fix remote-build bootstrap: retry on partial failure, fix sudo-less root Nix install beatzaplentyandClaude Sonnet 5 2026-07-20 14:39:43 +00:00
• 90e3397b42 worktree deleted beatzaplenty 2026-07-20 14:34:32 +00:00
• be5812d5bb Merge pull request 'Build Proxmox images directly on the node instead of transferring them' (#15) from worktree-proxmox-remote-build into main beatzaplenty 2026-07-20 14:17:56 +00:00
• 84f7e038cb removed old work specs beatzaplenty 2026-07-20 13:32:45 +00:00
• 91d8f8fab1 Add lxc-tor-relay build type with nyx monitoring beatzaplentyandClaude Sonnet 5 2026-07-20 12:54:45 +00:00
• 723212a81f Merge pull request 'Worktree fix lxc docker nfs mounts' (#14) from worktree-fix-lxc-docker-nfs-mounts into main beatzaplenty 2026-07-20 13:31:28 +00:00
• a5990ccf7d Build Proxmox images directly on the node instead of transferring them worktree-proxmox-remote-build beatzaplentyandClaude Sonnet 5 2026-07-20 13:29:45 +00:00
• 75d09d57e3 Fix --allow-duplicate-host creating real duplicates in create-proxmox-resource.sh worktree-fix-lxc-docker-nfs-mounts beatzaplenty 2026-07-20 13:22:08 +00:00
• 6847a7a6f4 Fix NFS shares never mounting on lxc-docker beatzaplenty 2026-07-20 12:56:42 +00:00
• 17dd00bee1 updated sops keys beatzaplenty 2026-07-20 12:27:24 +00:00
• b3c81453e4 updated sops keys beatzaplenty 2026-07-20 12:03:30 +00:00
• 656dd975f0 Merge pull request 'Add scripts/backup-admin-key.sh to back up the local sops admin key' (#13) from add-backup-admin-key-script into main beatzaplenty 2026-07-20 11:47:22 +00:00
• 2661f6d271 Add scripts/backup-admin-key.sh to back up the local sops admin key add-backup-admin-key-script rootandClaude Sonnet 5 2026-07-20 11:33:47 +00:00
• 0532c3a282 Merge pull request 'Deduplicate reusable shell code in scripts/ into scripts/lib/' (#12) from worktree-scripts-dedup into main beatzaplenty 2026-07-20 11:37:05 +00:00
• ac8c9a20e3 Merge pull request 'Fix tailscale exit-node module: enable routing, compose on enable-service' (#11) from worktree-tailscale-exit-node into main beatzaplenty 2026-07-20 11:36:18 +00:00
• 14c0ad8125 Merge remote-tracking branch for branch sync worktree-rotate-admin-key-script root 2026-07-20 11:34:21 +00:00
• a9f20e1229 Add scripts/backup-admin-key.sh to back up the local sops admin key rootandClaude Sonnet 5 2026-07-20 11:33:47 +00:00
• 0e66cdabc9 rotated sops age key root 2026-07-20 11:31:25 +00:00
• 9c892ce1c2 Merge pull request 'Add scripts/rotate-admin-key.sh to automate sops admin key rotation' (#10) from worktree-rotate-admin-key-script into main beatzaplenty 2026-07-20 11:28:28 +00:00
• bfeea90597 Merge branch 'main' into worktree-rotate-admin-key-script beatzaplenty 2026-07-20 11:27:45 +00:00
• cafeb8853b Add scripts/rotate-admin-key.sh to automate sops admin key rotation rootandClaude Sonnet 5 2026-07-20 11:23:33 +00:00
• 2c2d464503 Merge pull request 'Fix stale documentation: outdated counts, missing build type, spec status' (#9) from fix-stale-docs into main beatzaplenty 2026-07-20 11:07:43 +00:00
• 5ec7033439 Fix stale documentation: outdated counts, missing build type, spec status fix-stale-docs rootandClaude Sonnet 5 2026-07-20 11:05:46 +00:00
• 9133afd444 Merge pull request 'Fix duplicate-host check reporting false SSH failures' (#8) from worktree-fix-duplicate-host-check-exitcode into main beatzaplenty 2026-07-20 11:00:18 +00:00
• eeec9ce302 Fix duplicate-host check reporting false SSH failures worktree-fix-duplicate-host-check-exitcode rootandClaude Sonnet 5 2026-07-20 10:55:53 +00:00
• a62c4fc023 Merge pull request 'Stop tracking deployment status in the README Hosts table' (#7) from remove-deploy-status-from-readme into main beatzaplenty 2026-07-20 10:51:59 +00:00
• 7e51168d1b Deduplicate reusable shell code in scripts/ into scripts/lib/ worktree-scripts-dedup rootandClaude Sonnet 5 2026-07-20 10:35:49 +00:00
• 97ede62f6d Stop tracking deployment status in the Hosts table remove-deploy-status-from-readme rootandClaude Sonnet 5 2026-07-20 10:18:33 +00:00
• ab5206b1c7 Merge pull request 'Replace duplicate-host check with live Proxmox query; drop deployedTargets' (#6) from fix-duplicate-host-self-match into main beatzaplenty 2026-07-20 10:12:59 +00:00
• 2041557ab3 Replace the duplicate-host check with a live Proxmox query, drop deployedTargets fix-duplicate-host-self-match rootandClaude Sonnet 5 2026-07-20 10:03:00 +00:00
• 2fd483697b Don't refuse recreating the canonical already-deployed target itself rootandClaude Sonnet 5 2026-07-20 09:49:31 +00:00
• 89186b0dee Merge pull request 'Track nix-cache real deployment as lxc-nix-cache, not proxmox-nix-cache' (#5) from worktree-nix-cache-lxc-migration into main beatzaplenty 2026-07-20 09:46:41 +00:00
• 8e3606cbd3 Track nix-cache's real deployment as lxc-nix-cache, not proxmox-nix-cache worktree-nix-cache-lxc-migration rootandClaude Sonnet 5 2026-07-20 09:40:03 +00:00
• a18dfb0127 Merge pull request 'Trust nix-cache's SSH host key declaratively on remote-builder clients' (#4) from worktree-magical-cooking-book into main beatzaplenty 2026-07-20 07:26:18 +00:00
• 75f1342339 Declaratively trust nix-cache's SSH host key on remote-builder clients beatzaplentyandClaude Sonnet 5 2026-07-20 17:21:48 +10:00
• 36ba99c9a1 Merge pull request 'Add buildImage shell function for building lxc-* tarballs with host keys' (#3) from worktree-fizzy-juggling-sedgewick into main beatzaplenty 2026-07-20 07:13:54 +00:00
• 0cd8f15b48 Add buildImage shell function for building lxc-* tarballs with host keys worktree-fizzy-juggling-sedgewick beatzaplentyandClaude Sonnet 5 2026-07-20 17:12:16 +10:00
• 8613b93fa8 Merge pull request 'Fix nix_extra_opts falsely reporting nix-cache's SSH remote builder down' (#2) from fix-nix-cache-probe-retry into main beatzaplenty 2026-07-20 07:02:14 +00:00
• 20f9475a7d Fix nix_extra_opts falsely reporting nix-cache's SSH remote builder down fix-nix-cache-probe-retry beatzaplentyandClaude Sonnet 5 2026-07-20 16:57:43 +10:00
• 6babb3eec5 Merge pull request 'Fix create-proxmox-resource.sh --dry-run hiding nix-cache probe results' (#1) from worktree-starry-painting-whistle into main beatzaplenty 2026-07-20 06:50:40 +00:00
• 33730e6ccf Fix create-proxmox-resource.sh --dry-run hiding nix-cache probe results worktree-starry-painting-whistle beatzaplentyandClaude Sonnet 5 2026-07-20 16:36:14 +10:00
• 65f89806cb Fix beszel-agent losing its hub-pairing fingerprint on every restart beatzaplentyandClaude Sonnet 5 2026-07-20 15:59:24 +10:00
• c3007097a6 Fix create-proxmox-resource.sh defaulting hostname to the flake target beatzaplentyandClaude Sonnet 5 2026-07-20 15:19:35 +10:00
• 9724babcea Add tailscale-exit-node build type across all three platforms beatzaplentyandClaude Sonnet 5 2026-07-20 13:38:39 +10:00
• 7055bcdb97 Fix lxc-* hosts never completing first-boot user/secrets activation beatzaplentyandClaude Sonnet 5 2026-07-20 13:38:21 +10:00
• d973da487c Fix lxc-* hosts having no host-key pre-seeding mechanism at all beatzaplentyandClaude Sonnet 5 2026-07-20 12:29:01 +10:00
• c939454983 Fix tailscale exit-node module: enable routing, compose on enable-service worktree-tailscale-exit-node beatzaplentyandClaude Sonnet 5 2026-07-20 12:24:18 +10:00
• 274d54a774 Fix LXC container creation: unprivileged, nesting/keyctl, swap sizing beatzaplentyandClaude Sonnet 5 2026-07-20 11:33:53 +10:00
• ad274d99fb Fix nix-cache retry storms and lxc creation in create-proxmox-resource.sh beatzaplentyandClaude Sonnet 5 2026-07-20 11:05:26 +10:00
• bd8d93d890 Add sync-host-keys.sh and create-proxmox-resource.sh beatzaplentyandClaude Sonnet 5 2026-07-20 10:31:06 +10:00
• 53b9a64826 Move nix-cache's binary cache signing key into sops beatzaplentyandClaude Sonnet 5 2026-07-20 09:49:30 +10:00
• 0ba837817e Expand variables.nix: NFS shares, ports, image size, GC/rotation, Pi host beatzaplentyandClaude Sonnet 5 2026-07-20 08:27:37 +10:00
• 80f86b086b Add scripts/bump-nixpkgs-release.sh beatzaplentyandClaude Sonnet 5 2026-07-20 08:04:44 +10:00
• a351cbcf80 Give linode-* hosts a real Disko config, simplify auto-install.sh beatzaplentyandClaude Sonnet 5 2026-07-20 08:04:34 +10:00
• 2aa625d566 Remove packages.all bundle and the installer's own proxmox-lxc target beatzaplentyandClaude Sonnet 5 2026-07-20 08:04:08 +10:00
• 288835db29 Consolidate CI on codex-maintenance.sh; clean up dead scripts and docs beatzaplentyandClaude Sonnet 5 2026-07-20 07:02:23 +10:00
• 559c538a3d Register sops age key for proxmox-minimal beatzaplentyandClaude Sonnet 5 2026-07-20 07:01:56 +10:00
• feee2f1679 Add Proxmox VM disk-image building; fix disko confirmation bypass beatzaplentyandClaude Sonnet 5 2026-07-20 07:01:33 +10:00
• 120240f14a Fix LXC deployment path and clean up remaining eval warnings beatzaplentyandClaude Sonnet 5 2026-07-20 05:58:56 +10:00
• b0ccbb1162 Migrate host-key tooling from nix-auto-installer, bake keys into images beatzaplentyandClaude Sonnet 5 2026-07-20 04:41:34 +10:00
• 95d4db5609 Authorize the WSL workstation as a nix-cache remote-builder client beatzaplentyandClaude Sonnet 5 2026-07-20 04:08:19 +10:00
• 6f8c6c8ef1 Resolve all statix and nixpkgs-fmt warnings repo-wide beatzaplentyandClaude Sonnet 5 2026-07-20 03:47:42 +10:00
• 627aad8c29 Migrate nix-auto-installer into this flake beatzaplentyandClaude Sonnet 5 2026-07-20 03:47:19 +10:00
• 745f4d6fb4 Refresh stale architecture docs beatzaplentyandClaude Sonnet 5 2026-07-20 02:58:25 +10:00
• c5f8bb4d1d Reorganize loose modules into themed directories beatzaplentyandClaude Sonnet 5 2026-07-20 02:58:09 +10:00
• e337063a95 Add parameterized beszel host-token helper module beatzaplentyandClaude Sonnet 5 2026-07-20 02:57:55 +10:00
• d8d14db505 Extract ports, docker host, and remote-builder keys into variables.nix beatzaplentyandClaude Sonnet 5 2026-07-20 02:57:38 +10:00
• be05c63a67 Switch LXC targets from NetworkManager to systemd-networkd beatzaplentyandClaude Sonnet 5 2026-07-20 01:16:29 +10:00
• ff695c1917 added lxc-nix-cache key beatzaplenty 2026-07-19 17:22:20 +10:00
• fa2a9a595e updated sops keys beatzaplenty 2026-07-19 16:59:44 +10:00
• a90c4909d5 Consolidate minimal-buildtype hosts onto a single nix-minimal identity beatzaplentyandClaude Sonnet 5 2026-07-19 16:30:02 +10:00
• 649be34dcf Enable boot.loader.initScript for LXC targets beatzaplentyandClaude Sonnet 5 2026-07-19 16:11:17 +10:00
• 3c3c5ae821 updated sops keys beatzaplenty 2026-07-19 15:06:59 +10:00
• eadb1e35ce Centralize shared values into variables.nix beatzaplentyandClaude Sonnet 5 2026-07-19 14:51:37 +10:00
• 71d052e737 Migrate live secrets to sops-nix (Milestone 2) refactor/secrets beatzaplentyandClaude Sonnet 5 2026-07-19 12:46:39 +10:00
• e76486efbe Refactor flake targets into platform x build-type matrix beatzaplentyandClaude Sonnet 5 2026-07-19 12:03:33 +10:00
• 302c3b671f Sync host lists with flake.nix and add CLAUDE.md beatzaplentyandClaude Sonnet 5 2026-07-19 09:48:05 +10:00
• 0900ff25ae updated to efi boot and resolved module paths beatzaplenty 2026-07-19 06:27:22 +10:00
• 79d2ed0314 remove swap label beatzaplenty 2026-07-18 08:14:39 +10:00
• 8932e52d72 updated to efi boot beatzaplenty 2026-07-18 07:52:30 +10:00
• 4822f0b290 updated proxmox disko configuration beatzaplenty 2026-07-18 05:54:32 +10:00
• f8de4c8abc removed fileSystems definition for disko config beatzaplenty 2026-07-17 11:42:29 +10:00
• ca18a9d29d update configuration beatzaplenty 2026-07-17 09:18:24 +10:00
• 7d113e302f update grub config beatzaplenty 2026-07-15 13:23:09 +10:00
• bc68d8cf17 disabled disko module beatzaplenty 2026-07-15 13:10:09 +10:00
• 4728982c05 updated mounts beatzaplenty 2026-07-15 12:59:08 +10:00