Merge branch 'main' into feat/sops-nix

machines/jupiter/configuration.nix

@@ -49,11 +49,22 @@
   # Try fix wifi disconnect
   networking.networkmanager.wifi.powersave = false;
 
-  # Disable hibernate completely
+  # Disable hibernate and suspend completely - this is a headless server.
+  # The board exposes a phantom ACPI lid switch (PNP0C0D) that fires a
+  # "closed" event when the HDMI cable is unplugged, which used to trigger
+  # a real suspend via logind's default HandleLidSwitch=suspend.
   powerManagement.enable = true;
   systemd.targets."hibernate".enable = false;
   systemd.targets."hybrid-sleep".enable = false;
   systemd.targets."suspend-then-hibernate".enable = false;
+  systemd.targets."suspend".enable = false;
+  systemd.targets."sleep".enable = false;
+
+  services.logind.settings.Login = {
+    HandleLidSwitch = "ignore";
+    HandleLidSwitchExternalPower = "ignore";
+    HandleLidSwitchDocked = "ignore";
+  };
 
   # Optional: kernel parameter to fully disable hibernation
   boot.kernelParams = [ "nohibernate" ];

machines/jupiter/environments.nix

@@ -10,6 +10,7 @@ _: {
     };
     actual.enable = false;
     audiobookshelf.enable = true;
+    claude-code.enable = true;
     kde-desktop.enable = false;
     radarr.enable = true;
     docker.enable = true;

machines/jupiter/network.nix

@@ -4,7 +4,7 @@ _: {
   ];
 
   networking = {
-    domain = "jupiter.solar.internal";
+    domain = "jupiter";
     search = [ "jupiter.solar.internal" ];
   };
 }

modules/environments/homepage/default.nix

@@ -91,10 +91,12 @@ in
   };
 
   config = lib.mkIf cfg.enable {
+    networking.firewall.allowedTCPPorts = [ dashboardPort ];
+
     services.homepage-dashboard = {
       enable = true;
       listenPort = dashboardPort;
-      allowedHosts = "${dashboardHost}:${toString dashboardPort},localhost:${toString dashboardPort},127.0.0.1:${toString dashboardPort},jupiter.solar.internal:${toString dashboardPort}";
+      allowedHosts = "${dashboardHost}:${toString dashboardPort},192.168.178.65:${toString dashboardPort},localhost:${toString dashboardPort},127.0.0.1:${toString dashboardPort},jupiter:${toString dashboardPort},jupiter.solar.internal:${toString dashboardPort}";
       bookmarks = import ./bookmarks.nix;
       services = homepageServices ++ manualServices;
       widgets = config.my.homepage.widgets ++ manualWidgets;