develop #33

Merged

Daholli merged 50 commits from develop into main 2026-09-11 15:07:51 +02:00

Conversation 0 Commits 50 Files changed 29 +1240 -595

Daholli commented 2026-09-11 15:06:40 +02:00

Owner

Copy link

No description provided.

Daholli added 50 commits 2026-09-11 15:06:41 +02:00

chore: update flake dfe7052707

chore: update flake a5b8e85d88

chore: update flake f6ef91bd8b

chore: update flake 8bc85c531a

yggdrasil: more small changes af08e28e33

chore: update flake 7f3fd071c4

llm: add ponytail Claude Code plugin without global node ... d9fbb65e1a

Pins DietrichGebert/ponytail v4.9.0 as a non-flake input and registers it
through programs.claude-code.plugins, so Claude Code (2.1.228 >= 2.1.157)
loads it as a personal plugin with its skills and hooks.

The shipped hook manifest invokes a bare `node`, which would mean putting
nodejs on $PATH system-wide. Instead the manifest is rewritten at build
time to call node by absolute store path, so only ponytail's three hooks
can reach it. Also mirrors the plugin into the claude-work config dir,
matching how the home-manager skill is linked there.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

llm: declare Claude Code statusline in nix ... 0a556bf61b

Moves the hand-written ~/.claude/statusline-command.sh into the flake as
modules/dev/claude-statusline.sh, wrapped in a writeShellScriptBin with
jq/git/gawk/coreutils on PATH and wired up as
programs.claude-code.settings.statusLine.

Shows repo, forge icon (github/gitlab/bitbucket/forgejo/generic, derived
from the origin remote), branch, tide-style git status counts, a
catppuccin-mocha context-window gradient bar, session cost, lines
added/removed, and the model.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

chore: disable local dev setup, bump jbcontext d471c1eb85

chore: remove shell I was not using 712e85e5e5

chore: add git information to statusline 17ae1e0b82

fix: use remote repo 06c8ff9cb9

chore: remove local dev setup 9812c472ea

style: reformat 6d47a8b7a9

chore: update flake 53da04c3be

chore: update flake 52bb5ca259

chore: update flake bd93e18933

games: add beyond-all-reason 4b67ec449f

chore: update flake 3bb7e1cccb

chore: update flake 6f4e045ee5

chore: update flake 76d7df8a36

chore: update flake dd56004c6c

ci: remove aarch64 because it is bugged 7e9d8baa4e

chore: update flake 912cc31f85

chore: update flake fa97e8f358

chore: update flake abaef5f1ec

security: rotate mcp token and add attic token d1e0d5217d

feat: self-host attic binary cache at attic.christophhollizeck.dev ... feee910c2c

Serve atticd on loptland behind nginx on the existing wildcard cert, with
the RS256 signing key rendered from sops. Storage, database and chunking
stay at the NixOS module defaults.

All hosts get the cache as a substituter. Pulling is anonymous, so no
credential is needed for it; pushing uses a token kept in sops. `attic`
only ever reads $XDG_CONFIG_HOME/attic/config.toml, so wrap it with a
generated config whose token-file points at the secret -- that way no
user and no CI runner ever has to run `attic login`.

Attic signs a NAR only when it arrives unsigned, so closures built here
keep their cholli-local-1 signature and no extra trusted-public-key is
needed.

CI pushes to it instead of cachix, and needs no workflow secret at all:
the runner lives on loptland and reads the same sops token, so
CACHIX_AUTH_TOKEN can be dropped from Forgejo.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

llm: remove auto remote and for write the config file 45f587895d

yggdrasil: disable minecraft and obs 09d1dd10c0

feat: reconcile attic cache config on boot ... d145b61931

Create the cache if absent, then apply visibility and the upstream key
list on every start. `attic cache configure` is a PATCH, so re-applying
is a no-op; `attic cache create` is on-conflict-do-nothing and cannot
touch an existing keypair.

Talks to 127.0.0.1 rather than the public endpoint so it does not depend
on DNS, nginx and ACME being up at boot on the host serving them.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

loptland: a bit of hardening 5979ad3397

chore: update flake 630ac58126

chore: update flake f3ffa263da

chore: update flake dac67940b6

chore: update flake 4a70764fb2

chore: update flake 60e4af9c22

chore: update flake 0ecd361b57

chore: update flake 606410999e

chore: update flake 31eb8f65b8

chore: update flake 93f37231af

chore: update flake b0c168757e

venoom: init c04b5468be

hey: init c778b5428a

matrix: migrate to MAS e838106a14

venoom: remove unused finalAttrs 21ba63460a

junie: remove 9717c879fc

attic: add cache 08618cf290

chore: update flake ac9cf272bd

jbcontext: 0.9.9.592 -> 0.9.12.803, add update script b50493e3d3

Daholli force-pushed develop from b50493e3d3 to 0857f6dc65 2026-09-11 15:07:09 +02:00 Compare

Daholli merged commit c6076f525f into main 2026-09-11 15:07:51 +02:00

Daholli referenced this pull request from a commit 2026-09-11 15:07:53 +02:00

Merge pull request 'develop' (#33) from develop into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

Daholli/nixos-config!33

No description provided.