Commit graph

Select branches

Hide pull requests

feat/openwebui

feature/websurfx

main

#1

#2

#3

#4

#5

#7

#8

Mono Color

• 9221207690 feat(kafka): update to newest commit 994d27f main ashisgreat22 2026-03-22 15:20:33 +00:00
• 718564a896 revert(kafka): pin to working revision 90810cb ashisgreat22 2026-03-22 02:02:50 +00:00
• 61b4ce1e3a flake.lock: Update kafka input ashisgreat22 2026-03-22 02:00:33 +00:00
• 546569caf7 feat(kafka): complete kafka integration - service deployed and verified ashisgreat22 2026-03-22 01:25:00 +00:00
• 3858202855 feat(kafka): add systemd hardening for kafka service ashisgreat22 2026-03-22 00:22:56 +00:00
• 6d97173bd1 feat(kafka): add Valkey host port forward for local access ashisgreat22 2026-03-22 00:21:35 +00:00
• 4a1d92f653 feat(kafka): add search2 domain to nginx ashisgreat22 2026-03-22 00:19:28 +00:00
• f3cf8a831f feat(kafka): add SOPS config template ashisgreat22 2026-03-22 00:09:53 +00:00
• efe230ba65 feat(kafka): import kafka module and configure basic service ashisgreat22 2026-03-22 00:03:13 +00:00
• 8cc2154b18 feat(gosearch): rename gosearch input to kafka and update URL ashisgreat22 2026-03-21 23:00:43 +00:00
• 46a6aeeed0 flake.lock: Update ashisgreat22 2026-03-21 23:00:36 +00:00
• 22d4c7f37c feat(gosearch): add gosearch flake input ashisgreat22 2026-03-21 22:15:16 +00:00
• 0beb1b874d flake.lock: Update ashisgreat22 2026-03-21 22:15:03 +00:00
• 616079fc90 fix(gosearch): address plan review feedback ashisgreat22 2026-03-21 22:10:27 +00:00
• e39c2a3c7a docs: add gosearch implementation plan ashisgreat22 2026-03-21 21:51:06 +00:00
• ea372d056e docs: add gosearch integration design spec ashisgreat22 2026-03-21 21:42:54 +00:00
• bd3295e918 fix(forgejo): add Docker socket symlink for Podman compatibility ashisgreat22 2026-03-21 20:42:42 +00:00
• 8f6f196aeb fix(adguard): bind to 0.0.0.0 for direct Tailscale access ashisgreat22 2026-03-21 20:33:10 +00:00
• aa18a6f494 feat(security): restrict AdGuard Home to Tailscale network ashisgreat22 2026-03-21 20:25:22 +00:00
• 6b64254eab . ashisgreat22 2026-03-21 20:23:32 +00:00
• ad55793d41 fix(netdata): add firewall rule for direct Tailscale access ashisgreat22 2026-03-21 19:52:13 +00:00
• a47e29ff70 feat(config): enable Netdata monitoring ashisgreat22 2026-03-21 17:42:23 +00:00
• 0e79934ac6 feat(modules): register netdata module in default imports ashisgreat22 2026-03-21 17:40:41 +00:00
• 6cd9c91c38 fix: add nginx dependency and documentation to Netdata module ashisgreat22 2026-03-21 16:54:07 +00:00
• da7a45c1c0 feat(modules): add Netdata monitoring module ashisgreat22 2026-03-21 16:15:44 +00:00
• bb7f24ac4b docs: add Netdata module implementation plan ashisgreat22 2026-03-21 16:11:32 +00:00
• d6a4dbeb45 docs: add Netdata module design spec ashisgreat22 2026-03-21 16:01:57 +00:00
• abd0aaa6f2 Revert "feat: add LM Studio headless LMS server module" Franz Kafka 2026-03-21 20:26:41 +00:00
• 9f82a7b00e feat: add LM Studio headless LMS server module Franz Kafka 2026-03-21 20:25:13 +00:00
• 10d8924106 reapply Harrow branding + customDir via copyPathToStore Franz Kafka 2026-03-20 22:18:45 +00:00
• 3598d5f2bf fix(nginx): add ACME webroot + fix multi-line CSP headers ashisgreat22 2026-03-20 22:16:51 +00:00
• e36a67b7a0 chore: update secrets ashisgreat22 2026-03-20 21:55:39 +00:00
• 3ecdafadf7 fix forgejo customDir: correct path + coerce to string Franz Kafka 2026-03-20 21:53:37 +00:00
• 053a783772 brand forgejo as The Harrow Franz Kafka 2026-03-20 21:52:48 +00:00
• c671e97a85 Merge pull request 'feat: add openwebui' (#8) from feat/openwebui into main ashie 2026-03-20 21:48:16 +00:00
• 68da82c26b feat(open-webui): add OpenWeb UI module for LLM interface feat/openwebui ashisgreat22 2026-03-20 22:47:05 +01:00
• be7c2404c3 docs: add OpenWeb UI module design spec ashisgreat22 2026-03-20 22:42:57 +01:00
• 631a874c75 fix(openclaw): add token binding to gateway auth config ashisgreat22 2026-03-20 22:35:27 +01:00
• 262887e5ea fix(openclaw): bypass device pairing requirement ashisgreat22 2026-03-20 21:49:17 +01:00
• 9222d3e746 feat: Replace SearXNG with Websurfx feature/websurfx franz-kafka 2026-03-20 19:17:49 +00:00
• 562ec5526c feat(openclaw): add openclaw-superpowers extension ashisgreat22 2026-03-20 15:20:51 +01:00
• aa670604b5 fix(openclaw): recursively fix permissions on data directory ashisgreat22 2026-03-19 23:13:41 +01:00
• 49ffe471a3 fix(openclaw): remove invalid self-improvement hook ashisgreat22 2026-03-19 23:10:31 +01:00
• b505d2a327 fix(openclaw): fix ebusy on config file write ashisgreat22 2026-03-19 23:04:50 +01:00
• 43bc670bf4 feat(openclaw): enable self-improvement hook ashisgreat22 2026-03-19 23:02:28 +01:00
• adb8ddb611 feat(security): expose internal services and DoH to public ashisgreat22 2026-03-19 22:48:14 +01:00
• 5d177a0d5c feat(network): rewrite internal dns and expose adguard ui ashisgreat22 2026-03-19 22:43:45 +01:00
• f31ec2ce65 feat(security): restrict internal services to tailscale ashisgreat22 2026-03-19 22:35:33 +01:00
• b0b0989d36 fix(openclaw): revert invalid github tools/mcp config ashisgreat22 2026-03-19 22:26:07 +01:00
• 6155b36279 . ashisgreat22 2026-03-19 22:17:54 +01:00
• 1c76661538 feat(network): route tailscale dns through adguard ashisgreat22 2026-03-19 22:14:18 +01:00
• 4925420fdc feat(openclaw): enable github tool in config ashisgreat22 2026-03-19 22:11:47 +01:00
• 93d43e480b . ashisgreat22 2026-03-19 21:01:10 +00:00
• 9e206f08bd Cleanup ashisgreat22 2026-03-19 21:59:38 +01:00
• 577dd607b7 feat(openclaw): add github_token to sops secrets and template ashisgreat22 2026-03-19 21:40:57 +01:00
• 17553dc5ee Merge pull request 'fix(openclaw): remove --network=host, use bridge network' (#4) from franz-kafka/nixos-vps:fix/openclaw-network-isolation into main ashie 2026-03-19 20:19:49 +00:00
• b7ccb0a07e Merge branch 'main' into fix/openclaw-network-isolation ashie 2026-03-19 20:19:05 +00:00
• d104b0e83c Merge pull request 'feat(headscale): add self-hosted Tailscale control server' (#5) from franz-kafka/nixos-vps:feat/headscale into main ashie 2026-03-19 20:18:58 +00:00
• 9803eebb1d Merge branch 'main' into feat/headscale ashie 2026-03-19 20:18:10 +00:00
• 96a86db323 Merge branch 'main' into fix/openclaw-network-isolation ashie 2026-03-19 20:17:50 +00:00
• ec5ba0f6e9 Merge pull request 'feat(nginx): add rate limiting with per-domain overrides' (#3) from franz-kafka/nixos-vps:feat/nginx-rate-limiting into main ashie 2026-03-19 20:17:21 +00:00
• 1c28db5f8e feat(headscale): add self-hosted Tailscale control server Franz Kafka 2026-03-19 15:39:56 +00:00
• 9092d6ec58 fix(openclaw): remove --network=host, use bridge network Franz Kafka 2026-03-19 15:09:05 +00:00
• 790501d290 feat(nginx): add rate limiting with per-domain overrides Franz Kafka 2026-03-19 15:08:34 +00:00
• 2bc375ab86 Merge pull request 'fix(backup): correct backup paths and add missing services' (#2) from franz-kafka/nixos-vps:fix/backup-paths into main ashie 2026-03-19 14:52:00 +00:00
• 9a0900c81a fix(backup): correct backup paths and add missing services Franz Kafka 2026-03-19 14:50:24 +00:00
• 88905eb4e4 Merge pull request 'feat(nginx): add security headers with per-domain CSP' (#1) from franz-kafka/nixos-vps:feat/security-headers into main ashie 2026-03-19 14:04:45 +00:00
• fbea02867e feat(nginx): add security headers with per-domain CSP Franz Kafka 2026-03-19 13:42:41 +00:00
• 6354a030f0 feat(openclaw): add Forgejo integration secrets to SOPS template ashisgreat22 2026-03-19 14:32:05 +01:00
• 837e71b69d Add Forgejo Actions Runner with sops secrets ashisgreat22 2026-03-19 14:05:51 +01:00
• b6abc4a1cf Configure zram swap with zstd and 50% memory limit ashisgreat22 2026-03-19 00:22:48 +01:00
• f646c091cc Harden SSH and enable post-quantum key exchange (sntrup761x25519-sha512) for system and Forgejo ashisgreat22 2026-03-19 00:05:12 +01:00
• abf2080f91 Add auto-update and maintenance options to system module ashisgreat22 2026-03-19 00:03:54 +01:00
• 99c23a1aa5 chore: update flake.lock ashisgreat22 2026-03-18 22:52:33 +00:00
• 748ccc6fc8 Enable Forgejo built-in SSH server on port 2222 ashisgreat22 2026-03-18 23:49:02 +01:00
• 6e9de4c189 Add Forgejo self-hosted Git service with Nginx, PostgreSQL, and Restic backups ashisgreat22 2026-03-18 23:32:01 +01:00
• c51c7183c1 Allow AdGuard Home to read ACME certificates via ReadOnlyPaths ashisgreat22 2026-03-18 22:12:28 +01:00
• deedd00762 Automate certificate path injection in AdGuard Home config ashisgreat22 2026-03-18 22:11:08 +01:00
• 223f716b85 Remove explicit filter IDs from AdGuard config to avoid unmarshalling errors ashisgreat22 2026-03-18 22:06:47 +01:00
• 8a9c513fde Fix AdGuard filter ID type (string to integer) ashisgreat22 2026-03-18 22:02:44 +01:00
• 7ea9246d74 Manage AdGuard Home blocklists via NixOS using yq-go injection ashisgreat22 2026-03-18 22:01:38 +01:00
• 4790078ff9 Fix CrowdSec GeoIP filter syntax ashisgreat22 2026-03-18 21:54:34 +01:00
• c3adfa7e25 Restrict incoming connections to DE via CrowdSec GeoIP ashisgreat22 2026-03-18 21:53:05 +01:00
• 8f44273faf Cleanup ashisgreat22 2026-03-18 21:33:42 +01:00
• 01b19c9fa0 Cleanup ashisgreat22 2026-03-18 21:31:19 +01:00
• ecf4fe59af Cleanup ashisgreat22 2026-03-18 21:29:58 +01:00
• e9652aaaa6 Cleanup ashisgreat22 2026-03-18 21:27:41 +01:00
• ac36befbd7 Cleanup ashisgreat22 2026-03-18 21:26:19 +01:00
• e82bbec626 Cleanup ashisgreat22 2026-03-18 21:23:53 +01:00
• 1c56d477fa Cleanup ashisgreat22 2026-03-18 21:23:37 +01:00
• e1d18c18be Cleanup ashisgreat22 2026-03-18 21:22:19 +01:00
• 1792180144 Cleanup ashisgreat22 2026-03-18 21:20:42 +01:00
• 1942425605 feat(adguard): enable DoT and fix ClientID injection ashisgreat22 2026-03-18 21:12:31 +01:00
• 5dd91f74b1 fix(adguard): resolve port 53 conflict ashisgreat22 2026-03-18 20:58:07 +01:00
• 219391bc85 refactor(adguard): migrate to native nixos service ashisgreat22 2026-03-18 20:56:30 +01:00
• 7a505055f8 fix(adguard): fix string interpolation syntax error ashisgreat22 2026-03-18 20:49:31 +01:00
• 93bef3b301 fix(adguard): rewrite with correct lib.length syntax ashisgreat22 2026-03-18 19:51:53 +01:00
• 7bdbe767b6 fix(adguard): use lib.length instead of == for empty check ashisgreat22 2026-03-18 19:27:47 +01:00
• 51e937c02f fix(adguard): add empty clients list when no clients configured ashisgreat22 2026-03-18 19:27:21 +01:00
• 7b9b1e1909 fix(adguard): add newline before filtering section ashisgreat22 2026-03-18 19:26:40 +01:00