nixos-config/common/core.nix, branch mainmy nixos setuphttps://git.hwebs.info/nixos-config/atom?h=main2026-08-04T22:14:09Znetworking: expose Ollama and mDNS on Wi-Fi LAN2026-08-04T22:14:09ZHenry J. Websterhwebs@hwebs.info2026-08-04T22:10:10Zurn:sha1:a4c50351f5d55438a102d48c63dcbb62f9ef5e8d
Serve Ollama on kusanagi's Wi-Fi LAN while removing the blanket tailscale0 firewall trust so tailnet traffic follows explicit host firewall rules instead of inheriting every listening service.
Add shared LAN networking for both hosts: allow ping, publish and resolve .local names with Avahi, and scope mDNS to each machine's declared Wi-Fi interface.
Assisted-by: OpenAI:gpt-5
Restructure into a multi-machine flake and add the enzo laptop2026-07-30T15:38:54ZHenry J. Websterhwebs@hwebs.info2026-07-30T15:38:54Zurn:sha1:11ba75e40728e8b5735c9c7cefc7af1631c942af
Split the single-host config into a shared minimal base plus opt-in
profiles, and add a second machine (enzo laptop) alongside kusanagi.
- flake: add mkMachine helper; declare nixosConfigurations.kusanagi and
.enzo; add the disko input; move overlays per-machine.
- common/: minimal base only (boot, networking, tailscale, locale, nix
settings, neovim editor). Old configuration.nix/programs.nix removed.
- profiles/: coarse opt-in bundles (desktop, dev, apps). kusanagi imports
all three and stays byte-for-byte identical to the running system.
- machines/kusanagi/: all workstation-only config (ROCm, Scarlett audio,
optical-disc archiving, NAS mounts, kavita/immich/ollama); hardware
config moved here unchanged. User stays 'henz'.
- machines/enzo/: new laptop. Declarative LUKS+btrfs via disko
(LVM-on-LUKS, TPM2+PIN unlock, zram + encrypted swap for
suspend-then-hibernate); its own minimal niri desktop with
playback-only audio (no rtkit/jack); user 'hwebs'.
Assisted-by: Claude:claude-opus-4-8