Commit graph

68 commits

Author SHA1 Message Date
cf27c28389 Add home dir to ReadWritePaths for npm cache 2026-03-17 21:08:25 +01:00
b9976c04ef Fix cp command shell syntax in OpenClaw 2026-03-17 21:07:26 +01:00
416432be17 Fix OpenClaw systemd service configuration 2026-03-17 21:06:14 +01:00
da5a408853 Set maxTokens to 128k for all z.ai models 2026-03-17 21:04:00 +01:00
a26e75b7a7 Update z.ai API URL and models
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-17 21:03:26 +01:00
1d11816a55 Remove OpenAI, use z.ai for OpenClaw
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-17 20:59:05 +01:00
1748360922 Add z.ai API key to OpenClaw secrets
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-17 20:55:40 +01:00
3a885463f0 Add OpenClaw AI Agent module
- Systemd service running OpenClaw gateway
- Configurable via sops secrets
- Runs on localhost:18789

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-17 20:55:15 +01:00
f013863986 Simplify SearXNG module to use root-based podman
Remove complex rootless container setup that was causing
dependency issues with user-runtime-dir services.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-17 20:17:20 +01:00
e44340d3eb Update nixpkgs to unstable for Go 1.25 support
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-17 20:10:18 +01:00
1e26b2a3b5 Fix sops-nix version compatibility
Remove nixpkgs follows to allow sops-nix to use its own nixpkgs
with Go 1.25 support.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-17 20:07:34 +01:00
d71426adae . 2026-03-17 18:59:15 +00:00
24d01ac630 Add modular service configuration with SearXNG and Nginx
- Create modules/ directory with reusable NixOS modules
- Add system module for main user configuration
- Add podman module for rootless container support
- Add nginx module with automatic Let's Encrypt SSL
- Add searxng module with Anubis AI firewall protection
- Configure SearXNG at search.ashisgreat.xyz
- Enable nginx reverse proxy with HTTPS

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-17 19:47:43 +01:00
5dcb85e56d Add sops-nix for secrets management
- Add flake.nix with sops-nix input
- Configure sops with age key encryption
- Add .sops.yaml template for age key configuration
- Create secrets/ directory for encrypted secrets
- Add .gitignore for age keys and nix result symlinks

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-17 19:34:10 +01:00
58905b7666 Add security hardening and basic VPS setup
- Enable firewall with only SSH port 22 open, disable ping
- Harden SSH: disable root login and password auth
- Create non-root user 'ashie' with sudo access
- Add htop and tmux to system packages
- Enable automatic NixOS updates (no auto-reboot)
- Fix hostname syntax error (missing closing quote)
- Remove duplicate nixos/ subdirectory

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-17 19:28:26 +01:00
e2277631af Merge branch 'main' of github.com:ashisgreat22/nixos-vps 2026-03-17 18:22:52 +00:00
System administrator
2e768daefa Initial commit 2026-03-17 18:20:35 +00:00
d62a6fd0dc
Initial commit 2026-03-17 19:18:13 +01:00