Fast forward main #32

Merged

Daholli merged 23 commits from develop into main 2026-08-12 18:55:39 +02:00

Conversation 0 Commits 23 Files changed 24 +1981 -658

Daholli commented 2026-08-12 18:55:12 +02:00

Owner

Copy link

No description provided.

Daholli added 23 commits 2026-08-12 18:55:12 +02:00

chore: cleanup AI stuff 3307e811f8

loptland: add container runner b008870e9b

loptland: add access to modern-recorder 0eb6c1fa6d

forgejo: set up SSH-format instance commit signing ... 2f8c742510

Generates a dedicated ed25519 keypair so forgejo's own commits (web
merges, wiki edits, CRUD actions) sign as Verified. The private key is
read directly off disk as the forgejo user rather than through the
LoadCredential-based secrets mechanism, so its sops secret is owned by
forgejo with the public key co-located at the same path plus ".pub" as
Forgejo's SSH signing requires.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

feat(recorder-mtls): add localhost/127.0.0.1 SANs to ingress leaf ... 5c8bcef059

Regenerated the internal CA and all leaves so the ingress cert also covers
localhost + 127.0.0.1, letting a verifying client reach the dev NodePort at
https://localhost:30443 without disabling TLS verification.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

fix(forgejo-runner): allow ssh for flake update job ... bf5f273c01

- Add openssh to forgejo-runner native hostPackages so nix's git+ssh
  fetcher can exec ssh when updating the modern-recorder flake input.
- Make the modern-recorder deploy key group-readable by
  secrets-access so the DynamicUser gitea-runner service can read it.
- Add a temporary debug step to nightly-update.yaml to print PATH and
  ssh availability inside the actual job step environment, since it
  may differ from the systemd unit's own environment.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: update flake f31770c8ad

chore: update flake 9442a59d03

chore: update flake 6490b439f4

chore: update flake 81aef543be

chore: update flake 8d21068066

chore: update flake 4de290ed92

chore(nightly-update): remove temporary debug step ... 6f16258a8c

The ssh/PATH fix (openssh in forgejo-runner hostPackages + group-
readable deploy key) is confirmed working; drop the diagnostic step
added while troubleshooting.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: fix build errors bc7277bba3

chore: update flake 226d3c0269

chore: update flake b31f906887

chore: update flake 6840b1c7cb

chore: cleanup config 2af7e13b30

chore: update flake 99a0da43cf

Update flake.nix a336458e9b

Update modules/desktop/addons/dms/default.nix 4b3bc6e233

chore: update flake da0e479d43

Update flake.nix 8e7a1f7869

Daholli merged commit 333d706a57 into main 2026-08-12 18:55:39 +02:00

Daholli referenced this pull request from a commit 2026-08-12 18:55:40 +02:00

Merge pull request 'Fast forward main' (#32) from develop into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

Daholli/nixos-config!32

No description provided.