finn.markwitz/nixos
1
1
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Merge pull request 'Feat/hermes webpage port' (#17) from feat/hermes-webpage-port into main

Browse Source 
Reviewed-on: #17
This commit was merged in pull request #17.
This commit is contained in:
finn.markwitz
2026-10-04 18:37:36 +02:00
parent c1fc8e2a05 eecb7fa2b2
commit 20c2b43ae5
10 changed files with 62 additions and 66 deletions
Download Patch File Download Diff File Expand all files Collapse all files
flake.lock
Generated
+34 -34
View File
@@ -63,11 +63,11 @@
]
},
"locked": {
"lastModified": 1785627969,
"narHash": "sha256-4dtXQk/NMePegK/nWp5NSeuZKLATItOq61lpEvmXqGw=",
"lastModified": 1788450739,
"narHash": "sha256-glZLQlzIn1fXH6PazR2iUmTo7kzzyYSshrWhLS9TqCU=",
"owner": "hercules-ci",
"repo": "flake-parts",
"rev": "427bf4bd9435fdf21321c8cc628c24efc14c0f7a",
"rev": "31729ca8cbdb4fa927b34e5f4353e6a83f39e993",
"type": "github"
},
"original": {
@@ -87,11 +87,11 @@
]
},
"locked": {
"lastModified": 1784288435,
"narHash": "sha256-ReRHaLgr/uVqdD8afFSn+myXIfpHeOhP0yYe0TJqAA8=",
"lastModified": 1788267358,
"narHash": "sha256-nt+lUqYVpc9Y6JeMd2WmXzCDojasdadKo0mWcluvY2Y=",
"owner": "cachix",
"repo": "git-hooks.nix",
"rev": "43b3c1ab9d40fb1dbb008f451988a91e375825e9",
"rev": "27555e2624241fb116b49095df4caaee85a25691",
"type": "github"
},
"original": {
@@ -113,11 +113,11 @@
"uv2nix": "uv2nix"
},
"locked": {
"lastModified": 1789361774,
"narHash": "sha256-ashkMxyQelHq7T4AcJ0Zwuzm9/jMR3hTCWW+2FPwlDg=",
"lastModified": 1789999030,
"narHash": "sha256-oqEWD3Ih/CDejvfWNXFhbwUxvU4RwQZQ9DrI5dD+P10=",
"owner": "NousResearch",
"repo": "hermes-agent",
"rev": "5eb99eb2844b22ebb723711b8e6a0bbb80bb5f04",
"rev": "8f7b3b48fc61dc411cac6ebcb0aaaf451ba9c1cb",
"type": "github"
},
"original": {
@@ -157,11 +157,11 @@
"nixpkgs-regression": "nixpkgs-regression"
},
"locked": {
"lastModified": 1789352761,
"narHash": "sha256-jAcDj4iXkbxa5AlooMRZj7H3E81Cz/q7yN/bX7GPFSU=",
"lastModified": 1789933661,
"narHash": "sha256-GtfSaYgUPu91AafiBAQIVEwQiPfIOrgqwmxGtMNDtMI=",
"owner": "NixOS",
"repo": "nix",
"rev": "920f6956361496578b8a97ae04ec5f400d729ab4",
"rev": "5711f8fed2fcff91a52646e2e856648eca86c331",
"type": "github"
},
"original": {
@@ -211,11 +211,11 @@
"nixpkgs": "nixpkgs_2"
},
"locked": {
"lastModified": 1789127271,
"narHash": "sha256-vL/Fpo7Zxa7wvO8V5FAToUBvP+K3XsMB1wUglTtd/J0=",
"lastModified": 1789978172,
"narHash": "sha256-FIRXajv1pPZ+l6On6ekkmcQ6le0Zi0ncRUoR3nB0vKA=",
"owner": "NixOS",
"repo": "nixos-hardware",
"rev": "24cfdc1f9344b90a1eee329a3906e2f39f4d0f1e",
"rev": "9ebcb7766700d7e006d9505247bd7ce0426f4232",
"type": "github"
},
"original": {
@@ -226,11 +226,11 @@
},
"nixpkgs": {
"locked": {
"lastModified": 1788921488,
"narHash": "sha256-JLopN/XSodSsJIZ7v7tEjpPZ+QXc883s3HoUIxHD8Io=",
"rev": "6aefcda9401be8acc2b74244fb3b37520ea1f0a8",
"lastModified": 1789344334,
"narHash": "sha256-it+7kNGnOOHBCEnl4SfZ7QtfGziH3EryzHqwvJpjAfg=",
"rev": "c3eea5b2156db11c7eeeada3dc737711255b253e",
"type": "tarball",
"url": "https://releases.nixos.org/nixos/26.05/nixos-26.05.9440.6aefcda9401b/nixexprs.tar.xz"
"url": "https://releases.nixos.org/nixos/26.05/nixos-26.05.9729.c3eea5b2156d/nixexprs.tar.xz"
},
"original": {
"type": "tarball",
@@ -286,11 +286,11 @@
},
"nixpkgs-unstable": {
"locked": {
"lastModified": 1789286504,
"narHash": "sha256-3i80JnZ9pZ7tWReb/Sqpc32cfzffCu8TWLnbnH0hN9c=",
"rev": "ef34387ddd751e1ab8857adf4676492d32eb24ec",
"lastModified": 1789921291,
"narHash": "sha256-uLLUj+TLUmBc6KrUzx76KZdPi5ZkI1ORR9A6lJUIZlo=",
"rev": "44a91898084f46797b5fac650c7e8c9ac38c43d4",
"type": "tarball",
"url": "https://releases.nixos.org/nixos/unstable/nixos-26.11pre1073009.ef34387ddd75/nixexprs.tar.xz"
"url": "https://releases.nixos.org/nixos/unstable/nixos-26.11pre1077143.44a91898084f/nixexprs.tar.zst"
},
"original": {
"id": "nixpkgs",
@@ -300,11 +300,11 @@
},
"nixpkgs_2": {
"locked": {
"lastModified": 1767892417,
"narHash": "sha256-8bW3q88CEg2u4hSP66Vf4lpbLonHz7hqDNBMcCY7E9U=",
"rev": "3497aa5c9457a9d88d71fa93a4a8368816fbeeba",
"lastModified": 1789546076,
"narHash": "sha256-vWkSk5bbfTqdtMoSgD9FshACO8JCvXTFi+3cqEp0mH0=",
"rev": "b1b875982b17dabde9b4a37f3e229e74913e6db3",
"type": "tarball",
"url": "https://releases.nixos.org/nixos/unstable/nixos-26.05pre924538.3497aa5c9457/nixexprs.tar.xz"
"url": "https://releases.nixos.org/nixos/unstable/nixos-26.11pre1074753.b1b875982b17/nixexprs.tar.xz"
},
"original": {
"type": "tarball",
@@ -313,11 +313,11 @@
},
"nixpkgs_3": {
"locked": {
"lastModified": 1789114715,
"narHash": "sha256-eeH+/1GxEjw8NCObjaHVIy3YvCQ4Qckrx4LZj5xBaU4=",
"rev": "21a67dc470149f337cecafbe965d8d252a390518",
"lastModified": 1789885152,
"narHash": "sha256-lIL3uDaS4Q9Ks6klLrBlDr+XS71sbjMJFSipIp2yPjs=",
"rev": "6d663c0533ff269008fb84e45930151e37c99db9",
"type": "tarball",
"url": "https://releases.nixos.org/nixos/26.05/nixos-26.05.9592.21a67dc47014/nixexprs.tar.xz"
"url": "https://releases.nixos.org/nixos/26.05/nixos-26.05.10304.6d663c0533ff/nixexprs.tar.zst"
},
"original": {
"id": "nixpkgs",
@@ -415,11 +415,11 @@
]
},
"locked": {
"lastModified": 1788914643,
"narHash": "sha256-4GuMPW90JSxXWDPUB9M+1m7fYbe3H0apOd86/zBQ2Kw=",
"lastModified": 1789890976,
"narHash": "sha256-GKwH3zpy7tartuJMG0Rv/xUsdetG1QLmTVv8UKgJLmA=",
"owner": "Mic92",
"repo": "sops-nix",
"rev": "13616fff713a9f94055c66f15687ebdc17a335df",
"rev": "7214124c20c1542c90deb54af50e2f53ae02711f",
"type": "github"
},
"original": {
machines/jupiter/environments.nix
+1 -1
View File
@@ -17,7 +17,7 @@ _: {
readarr.enable = true;
sonarr.enable = true;
jellyfin.enable = true;
jellyseerr.enable = true;
seerr.enable = true;
immich.enable = true;
development.enable = true;
home-assistant.enable = true;
machines/mibook/network.nix
+1
View File
@@ -4,5 +4,6 @@ _: {
# firewall otherwise blocks inbound connections from other devices.
networking.firewall.allowedTCPPorts = [
9119 # athena hermes dashboard
47823 # hermes agent ad-hoc webpage server
];
}
modules/environments/default.nix
+1 -1
View File
@@ -18,7 +18,7 @@
./readarr
./sonarr
./jellyfin
./jellyseerr
./seerr
./immich
./hermes-agent
];
modules/environments/hermes-agent/default.nix
+3
View File
@@ -20,6 +20,9 @@ in
enable = true;
# Deliberate pin, matches the approved design — bump on purpose, not by drift.
settings.model.default = "anthropic/claude-sonnet-4-5";
# The Nix flake input is the source of truth for hermes's version here; its
# built-in self-updater polling GitHub independently just burns API quota.
settings.updates.check = false;
environmentFiles = [ config.sops.secrets."hermes-env".path ];
addToSystemPackages = true;
modules/environments/home-assistant/default.nix
+10 -8
View File
@@ -54,14 +54,16 @@ in
"f /var/lib/hass/scenes.yaml 0644 hass hass - []"
];
services.openthread-border-router = {
enable = true;
package = pkgs.unstable.openthread-border-router;
openFirewall = true;
backboneInterfaces = [ "enp3s0" ];
radio.device = "/dev/serial/by-id/usb-Nabu_Casa_ZBT-2_DCB4D9149C7C-if00";
radio.baudRate = 460800;
};
# Disabled: ZBT-2 antenna isn't connected, so otbr-agent can't reach the
# radio and just crash-loops on every switch.
# services.openthread-border-router = {
# enable = true;
# package = pkgs.unstable.openthread-border-router;
# openFirewall = true;
# backboneInterfaces = [ "enp3s0" ];
# radio.device = "/dev/serial/by-id/usb-Nabu_Casa_ZBT-2_DCB4D9149C7C-if00";
# radio.baudRate = 460800;
# };
my.homepage.services = [
{
modules/environments/homepage/bookmarks.nix
-12
View File
@@ -1,16 +1,4 @@
[
{
Developer = [
{
Github = [
{
abbr = "GitLab - Smoothcloud";
href = "https://gitlab.smoothcloud.de/";
}
];
}
];
}
{
Social = [
{
modules/environments/homepage/manual-services.nix
+4 -4
View File
@@ -17,10 +17,10 @@
};
}
{
"GitLab" = {
href = "https://gitlab.smoothcloud.de";
description = "Selfhosted GitLab";
icon = "gitlab.png";
"Gitea" = {
href = "https://git.rechberg.online";
description = "Selfhosted Gitea";
icon = "gitea.png";
};
}
{
modules/environments/immich/default.nix
+2
View File
@@ -18,6 +18,8 @@ in
config = lib.mkIf cfg.enable {
services.immich = {
enable = true;
# nixos-26.05 pins immich 2.7.5; pull 3.x from the unstable overlay instead.
package = pkgs.unstable.immich;
host = "0.0.0.0";
inherit port;
openFirewall = true;
modules/environments/jellyseerr/default.nix → modules/environments/seerr/default.nix
+6 -6
View File
@@ -1,17 +1,17 @@
# manages and downloads films
{ config, lib, ... }:
let
cfg = config.my.profiles.jellyseerr;
cfg = config.my.profiles.seerr;
hostName = config.networking.hostName;
port = 5055;
in
{
options.my.profiles.jellyseerr = with lib; {
enable = mkEnableOption "JellySeerr Media Service";
options.my.profiles.seerr = with lib; {
enable = mkEnableOption "Seerr Media Service";
};
config = lib.mkIf cfg.enable {
services.jellyseerr = {
services.seerr = {
enable = true;
openFirewall = true;
};
@@ -19,14 +19,14 @@ in
my.homepage.services = [
{
group = "Media";
name = "Jellyseerr";
name = "Seerr";
description = "Media requests";
href = "http://${hostName}:${toString port}";
icon = "mdi-television-guide";
}
];
systemd.services.jellyseerr = {
systemd.services.seerr = {
after = [ "network-online.target" ];
};
};